last executing test programs: 6m0.186389282s ago: executing program 3 (id=654): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xce) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r2, 0x5601, 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @multicast2}, &(0x7f0000000140)=0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="410000000150010018001280a80a0000000000000280080000", @ANYRES32, @ANYBLOB="0000d477de4ab66a8d58713d628cc9d8f8ee63081e2bbd3c7aaf1337e9bdcff7495b629694a77f4e86a6c251039fe792a5a98aa4cd914a53f53902976eec3b291dab6bab0c1500000000000000000000000000000000000000000000000043ba57c46ba0c8ec00bb84d740e98b0b825c8b95968292e9cb8a9d2f0e5f4e99c8ab79b2122cd414ce7721108a084bbdbb4b8e3cbb710656f673455ca9898893eecf5cb9a4c3dd0ff055f05b9f4b5b523b9cf7567448c83a854356", @ANYRES32, @ANYBLOB], 0x40}}, 0x2400c080) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/211, 0xd3, 0xea6) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000000)={0x2a, 0xffffffff, 0x3fff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x7ff, 0x89}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000050000000000000000", @ANYBLOB="590fbfb5e88f85225eb89207b76632a42c89a957a3c3227c274d503fdb00b380448561b2ffc56b545fdfc0337f32c8cf5190590481a48bed01313f272b38ee60d280e63513b7901aea03491c558841c5a03cf030142f2f9279ab994e2bf99d15f2bfc021d88dc827063e44deb32364d53299d8ff565b55f2d80a159b68797e4572f9d5a437988d58658232f6403b225d9e5ca158b99d73ab9357db", @ANYRES32=r1], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20018}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 5m55.538972681s ago: executing program 3 (id=667): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x6) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000140)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000180)={'\x00', 0x7, 0x7ff, 0xfc8b, 0x7f, 0x2, 0xffffffffffffffff}) r5 = syz_open_procfs(r4, &(0x7f0000000200)='cpuset\x00') write$cgroup_freezer_state(r5, &(0x7f0000000240)='THAWED\x00', 0x7) r6 = open_tree(r5, &(0x7f0000000280)='./file0\x00', 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000a80)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000b80)=0xe8) r8 = getegid() getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000e40)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000f40)=0xe8) fstat(r6, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001000), 0x400580, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) r13 = syz_open_dev$tty20(0xc, 0x4, 0x0) fstat(r3, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0, 0x0}, &(0x7f0000001100)=0xc) r16 = getgid() r17 = syz_clone(0x8012800, &(0x7f0000001580)="569c883b21b9fa9b31e56fee83bc1cda8f2ee8accad24736126a58c0556b7d3203670668b0a9920fbf26939938b18f98291f95c019a2e01506a1aa97d942163680254b2cfaf2841228b870526f9124252db309ab3613b4d74c9095e5ac217824afbf327c3696ae80ae4983f9d0b37b046b4a771cc9f008f659264098d9d702c2cae2cd3244c5ceb74b8623ad6df7eb2dd173ff5ccfc1c1c2709d3e743c3b3cba315ccb53638b4d13ecef920865274d3bfe3ba0a0", 0xb4, &(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0)="a39a046642c26c694039e8632da58fd3854a977ac0061bc8de5ee9639d8177e6a348cc173d909e314f684a382fdf206293a32fcf48e686c82d7192aec340d4031dfc05f227987642f7d9b5e55dee9c85a7259b2c6ad0e65062304f50d91272e48e801ede8046cf4a151a52d8b6818a958ede36386ba0bf94891bb4b4350dcc38ea765014f92cfeb5cb4d501958c4") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001780)={0x0, 0x0}, &(0x7f00000017c0)=0xc) fcntl$getownex(r5, 0x10, &(0x7f0000001800)={0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000001840)='./file0\x00', &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000001900)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r22 = getuid() sendmmsg$unix(r6, &(0x7f0000007dc0)=[{{&(0x7f00000002c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000340)="fd9bbe69a90457edd00cef1877042d5d4f00fb0c3c1a79718a3fa540b9d3524865d0752346efe2d48af199acef97adf685db9b8bae05b9e90cac05fa746b82dc438e6d17ebefb7aac4b61e504d73e82c5a1cb66eda9c27c06837156af66182994394958eb02307a568c0517cb43fa3e7657dd4571d2238807e3a0bbac13e7ae760ed9066b42f71f010ab1cfc40418d7c7177fc62c1ee7c0cc2938401d59a0a2bb9aa43d1d43b91e1c7b22041af4cf146ba6815778ca094c03146893a2605ea33113b4457911ecf8bd6e83b1a42d6392192819da72709", 0xd6}, {&(0x7f0000000440)="3300037b3f1903fcedf51e05c927de991b7ace3c9a22c1da27472e4be7c59cb30e20ee4f9a4a284ee47ea6c4e06e8d46c0b777947d8d658dc1448acfac654b21c88cc75e62098b60688d83efe9ac1ced25335873864d2ced405d58dc5b6e107db743f39c144034066f4f331a78074e0cae463c859c1093da0670", 0x7a}, {&(0x7f00000004c0)="ef66c7400dcdc920d06a38a5e480725c74d429611c71d8b64d6c7becb80d03bbe64bd6eb9f32b3e378b6b3f889784f5cf33eb13dfd8a86e1c74631d3eb75d77e6bd330f3fd2e7942b6090af5cb8c68f65363", 0x52}, {&(0x7f0000000540)="62360cd5bf71b25e9c1238db3d1495ea19d1f7fc3945a5903696d3bf3ef7fe0c01894e2fd56c8da0411aa2dd3c4c05dafd6e7638e9f554b4d99b3b143ef31cfea7d0a282ba3b0310fa379ade7ce73073b6befd81dded193c51d0e5de9567dd2e68126979ce7937e000d30d4d962e52a2da85a096582fff31451eee7c6dffe69063d9d37219d402ff38ee9ce59535d33bede232255d8e5549798e5b52f4fe54a6ba103795fd9c75b135b9d8e94eb31e6857abc9730e2e997019cf9b40c072b65984d1f77e1f6b34b1209aecceff14cfa1d5442afeb33cf00ffefce690713d6f988fca61d9", 0xe4}, {&(0x7f0000000640)="83377e0845ffebb73871f609bd0ad49febd7658e282f894f444ba2616e1025c164a6298fb7bc9a8c67dbc3b9a6195406410ebf1add43fd66119f5974de62b619fcad59ce543e7903b8cd40043690", 0x4e}, {&(0x7f00000006c0)="55718b92ede869011a3efbf3a961f2b675c71747d7d2781ed342dacd3c647ed5e536c97ca52e07712203b0443c460390c8f165a610dbf117546efc9c8b09bd8f711fa298237f6a6de5b1bec128d9cca6584e4e7bf7a100ea0ca3f3d76e07ca200401167b7eb1afa2778805f4ff85d683946053f705031e43f6545b60e4e11b1b75162766300e6b95fcd5392f00cf72233fc534e66188ff7eb8e6db83df87f8b7a0094608bb244728155b9156ebf39a49ec596bf70d29806335a30a95e06de1819eb0855752ad32f3bd0e069d981045692f2a55f5ef70971c0e6c72cca6b50a41d7029d64e11db7fd3f91112522050c1345caa6", 0xf3}, {&(0x7f00000007c0)="9d98c582d22b915b3f914b0a4c0d067b768d3fae074a6764ae73cbd3dc5fc3e1e6987a5cf405fd9f2c7f1e6c1b7abe", 0x2f}, {&(0x7f0000000800)="54e018993eefc21be81d1206913a1921431affe989e2d63a279cb0a49e0ee8f2a0a29dd10818aaffa914fcdfe5285967db5be9a8b77c8ea54293638d6e149fa7baae25ae137217c5589fe09262af246561750ae2e219c127547a3ee95ee33187555fce29d91cc11bee8263bd9582b1451a9d6b915eff01b8412d42a1e6481862588c59f558e18731a53deedc3d8f5f350a4881efe4413c13d847ac60f561d03a746d390832551e163a769ad30a70168a9f878114cb31805f38ca6a1567a6c91bee06ea9237da662bdcc3d19c78b0bf8c426a8fc46113140a102b", 0xda}, {&(0x7f0000000900)="23c82c63265cd1bddfde770f54504cf8bdb4e784496c111f065085d85afc0be81225313adccb052bbf04d2a8ae23d7154a3b939e0d8631ee4431d1db02fa5604f74cb97bb7f962a0a2de8393f5f0ee1da1c7b632a4d82e94050b007035a6eac74f2974a6d74e9309aa33036d59db3a5fe63272ea947b62129247fdfb221b85c06a21476911b94628e6aa8a19ba214fc450fb86f551fc593397ab333b911b863dfff096", 0xa3}], 0x9, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {r4, r7, r8}}}], 0x20, 0x40}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000c80)="c91a3091073423cb8cc1bfd8d4e8d4c07bb7fc5c01647c2368402487fdd06ebc3c3e9e617d2895aba2f92bb172f58be6052164707faf2d4fec7c802f349dada871ba3501dbd5461204f5cc487b24af32a837fb58769b8269ae85a290113c4ee38abde0342a8edf02f66a942f076539ee40924278d7d44d946accaee7a4d09adc4c323629526f88d499", 0x89}, {&(0x7f0000000d40)="8752022eb952d5ad2f1a0d28adc0da8c646269fa4329fe20d126ca5fbf5ead439b2893230571dd965548387101af9667ccf1e0811610f8cfe8ed6a1c174fe28eedd32bf9773a14e7592b134d1b1cb252924cc7f21e9a36e2194bb2159d95959bfa265df9a63aab6960179020734d93bb21b0ca6a1481e5f697ed680f9814b7c97c0e5bbfe1aaa161374423ff091b21f4e31c69c3a5bcf40f354811dc19ca115ffb6a0976ee925db59cf3c369b61310b550f977a0b237a2c3a94a1a43b692469b", 0xc0}], 0x2, &(0x7f0000001140)=[@cred={{0x1c, 0x1, 0x2, {r4, r9, r10}}}, @rights={{0x18, 0x1, 0x1, [r3, r11]}}, @rights={{0x18, 0x1, 0x1, [r12, r13]}}, @cred={{0x1c, 0x1, 0x2, {r4, r14, r15}}}], 0x70, 0x40000}}, {{&(0x7f00000011c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001240)="3e2ab2fa0f5ed43f283ffd2796a2527f47dccec87223bc04ac2d94f2fd918df64cf8b2f359ea386081c5836186c3402d6fd7eeca3827603c03f2e3fed18e4b2c1a231529b0f885f08d62e816fce6e11db7c89ee8c4515910de2895016b33a44a8e89415fa6302b91184d6ae5c65fda31584b", 0x72}, {&(0x7f00000012c0)="d55e3ecc1980d92b8126266590723f36d76c72b763777f80bdd5fdad267dcf290d5b3d0e12de17139855b72dc6cf0ec8816b1756fa420b9bc2e9d0351dcf56ffe5887a1a321093c90e2311902cc9af2f4254fa8454b2541e59eee7377ddba8808ca6c1ea956cc51662b494be09a87cb008e0e1b7b12cf0a4f458e912a25c249d4937192516e7c6332c6087302c44246f29280ad53c27dd6334c6f3da0a1b927c266ecd0f112d6744aef1350d35aff9c2e95ed1eb0658a74018ae4048df4579e577856e439a1135762459d6c969fe4cc3df620ba66309741e44dbdfe83bd3df93c47a6ae72450502594fb98e634d6faa8a6fcfa72", 0xf4}, {&(0x7f00000013c0)="01744fc53f71a6ab234cec1fa04d957cc1df29eb9053b6a9d8e367bbf4680d4342e29536dcb68ae9dfe90f0f3661ad92c237501b99cb61050f09597c9decb285fb9e4d0a10b8ac84825d3db71dbf9d39a5a894379f295568759f5024d25eb2efbfc4c2428e447d9afa3d8937c2d58583ad9bd6e0c659fd77488798ddcbbc9600260147fe3e1e9e81b1cd07648840e44054d298657d1abeb8ef382f409bd9dcfe7fb08d85eba66d46e62734a6e8dcc616ff9c849ffee7ad5b06", 0xb9}, {&(0x7f0000001480)="ca4c53f60cc1ac738a87b7fd87cef2e0e3ce829f404f9fec3b04824b88ff7cca2e3f6e7d375111e9f15bb52203f01d48ea4b553c8b7cb71a099a36e33d6804a2aae54ce6f377134375b5fd491d65aaa82806086a4a8f6a9cbef164ff965bad6de524af1c3f020d98c37e1eeed0381f6aaed767ded18e0faf59f1df3ae264d99c721f77aa79a45407e437b32557681938a532ed1db99fe8db94521853b4adee550488a4639980d9ec833f8a4a3dd3de1c3d", 0xb1}], 0x4, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r16}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r19, 0x0, r20}}}, @rights={{0x2c, 0x1, 0x1, [r21, r5, r0, r6, r2, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, r22, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r6, r5, r0, r5, r2, r6, r0]}}], 0xf8, 0x40}}, {{&(0x7f0000001a40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003f80)=[{&(0x7f0000001ac0)="ba50e6e4c2b889540d1ee3865e6219cad68e3e41d77b7a287a3f6288cfb3231485a2b582b7d11a6c2a0437f554539cfb81023b0cee910b0d7360e76322291355d07a3f1f05a16e39cd7e00309816d7b10e48080069e085c3a5377173261aa7acd66aac98289f3ecfee292457b487d1d474a4e11de5b46396c70d36181e2850949801b2dd30facddd004139db6429726cec9cc0d51aba1216b452f39e3e49c27331d69ff836cbf80cab0c409f012f4fb1202884fbb3b05f3e16a90d79f7dc42265df2b340f4ebdf12def5f6734d1777c7a2a38b3098289738dfac75b731baf8cdd43d9b5f59f504d465d9817053f1d4580f55198065e82940", 0xf8}, {&(0x7f0000001bc0)="29a260df6bc53269e5509848109025715ac3142e1ed6183a4a81442f6ff756eafbc3ee004b1a3ed87671b79cddbc1d6e31d0b53aec42f7356345f8a51e8927092a1decc9def25bb82169dc2e91b498fc14cef21064b800c990f9171452c84d9cdfb1dfe621c6299be0b6eb6a1a51836eaadec7da3c35f21e61cd366b76ba647a3951e186879fc2f4fa75a9b417128522bc", 0x91}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000002c80)="0efec1dae5897f0eaa990e3c26c852b8548c8078357a68aa44dcb8a5d189dc66e84d84662b169777bc232dd590fc42dda485947426f5893a177c3f44637ef52496c3b50f2138389171f234510583ade567670170a0812410ec4644152e18cad53fadbb43148698d63749219f3c4112584967de5e887ac11b5679419e3bdf8e4acc59abdfb406aed6646bf5f92937ee1035e9775778d05e30a59cae08a03b685ffb2e2c42a4f7af7bb1107760b7ffb35eb54d2396c494f976ebc8", 0xba}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)="f6fe9cb717680dfe119b2a2e863e530fde480c5938feac9728f47662edc634618308f0c3c133d51cd86f7bdab5aef8d65a1356ef9949af1904233e86a4fdf893f95dd8d315cee973176721bf9c966230bee66954ce4c1266d7bd49544155e0c1ae584cc10633a0f24eac59447da816528e340f09f67557dc42d2126e12828600cb00fdfb7ab40761ab29d17d86b408a11baf7ec83b5db8f7e3e5da48088eab0e902e1a2850763d553c76dbd0f5771d87cf38f20b766fbc97dea5b7ef444c75d4e147341d324c1918ccb8a2a75442f5ac32f3bf2f4e616a0fa2d15a3813449041d28bb63f0d018e42295fa45db9", 0xed}, {&(0x7f0000002e80)="77998d617bbf10870b2a470683d8fe0818ebda59f264caa20da8ea9ade8f23", 0x1f}, {&(0x7f0000002ec0)="5ac8bc7002566b0866fbdcd8ba5776336b114a0e302fca94b5a0b73d43062f6c361c3b9182f19a22a3e712d878c7b9fbaeead8d57ec460abbcee9876ac8138eb07f64339f2a336ad9f2d97826eaa38aa392cdf2b9189473d6bd4d0e7af670ae902b2a1e3715b3956373df6b6d0a69df3", 0x70}, {&(0x7f0000002f40)="84092d3e3ce0cf3c611ffce13cd28d2e07c1d36436f8659b906e16a0dd896352ba6c6390f22100115a47ff9b10a74fa3b8218231f41cac5ad2dd05d5549f1d210ee778bb0c7a47ec8729195a76bb5b12bb8730950bfd06254a678b70e803e16787f3db02d7225fbbc129f8a8d3fb56c031127a886d75d37583f578cc33dca2e7139547d02cca834896314770f74962d3b47f201c4e47267a6ddaf064aa500fce6a4766c261028f33cbe9f041ed8ae4e2a83fd6cc799d55dc1f9d3f355caedb13eb0c330211825be6c6372d15dc92727ed24c698db30074323b63a280d4a21f5e5038043e60dc266beb924cf24404722a8bc3ba7ebda0589a0449336ffaadc3e677ff4acbb431ecebee8c2ab9f4e34044d19d0e507dc285cc35f51959ba10e75b187ad83b86f594fbfec02dfd093157af64214420d9476255f21cf558e7d2ae8343aa702e8b399a5470246b39e45d959379eb294acd7a8dca7287f51a5772360f1a1c3359678983bb2deb833aeeb03e3e207ed7c0dc202bee66cfb926c2fc4bcdfe864ff1633e6a4a920bc5b1bf3e5312a4aa73ed871c0fcfbd6a128fa5147bafedcc4cd9bff69c696f1a0de323da9f70397ae9371c9916d3c40dbb7bf82c98e670ea683671d65775153e15d8c2bd299a2372175e49170634e4ce4f19ef3685d749745912774edf0456466213da9d5f9060a7a40da45cb9ff264308805e564f815bbb8e4e335e5896dd0b789fa517e95468689a6c6e9b43c564b6452668debc15c296feb90d6b5bfb79b72d0461b053214ebbb086dab38c166aa9f8d83635118341ee68818cad174a055926df5a9a7391f59fe4c666c92f502417c25fdfdf7f199da629652b9cb7efea6f6932ece5a03dd0ed806951cd241329448b60c45103f9aa840fc9e2dc318535666acace129f04ef80b8430d10983c2898e01951dd6061f91c667f67cf0896f8d7c5884a002737361d6257d6c51be6d0fb8af5e604422663157cc15a7c55d7fcbcb58f774fedcaf8eb73d6ab444cda6b8e0b48b565a53d2f6b434428cc5f9c652c3f4763520a39576991a85a9ec84dde46aa0d63e96cc9d7c769050f338f85e81685f50b4338f8c0318707ec893a77331c41d54e812bd4619c6aabefca820afc92cb22b8db5d8e612c23b2ba819d965f1b3702a7810fa45a53fa1162011e77a9b69c3ddca9609d47fb6c2622e5471c9338c9218c1d80ea913f6a98f852b51ddd4fd1b6421f2451b7abf7a628b169ede404c92342d441b9b7a928065ee6c823d4574194911c01681beea5e811453223a12bbf519c7c96e2ae5faf447ca764096093d1c576e670da4c226733f9f5997b1eeef11cfa811041536977c9e0598149d2543678a6254362a53bd659e1856abca6b6e3788bc21ceb5048dcd714158fdfe63140ca87097749e8a258ca60389b1d0777bbe45bde02f706a342509ef7073767eb2acee7025aa543c1fe859e25065392a3927d22a329a9e32967f8de43ff50b649f50393781b4f4778fab3c3f6fe67d84cacbb583db3a603bb3e9b009a85f3dcc22e129f06116f4bfe609e6d1b0144bab137fa932c2abb58d54aa0847a7b25280cd76f387672e9532bacd9343c1719d422753994fe35e7e7b565041283ace2a412082ad496f59074683003b9ebfd33cccd2f78caa39f425684703296288f377dc80a1aeb100e8b829326150dabf8892023f3b1a4f6000e80768892d0b1e484eb8720dd029bbee02ed4d3c997056dab8d5db4facaa91eeee7b405b835120b9f221180b18b2ac60b6b098beae7ad51b777c64a92a7e76b71664e22c09a69cf94f4cc0006e58216381568fb1916baddd833f1e111d32929bebac0825901f3fc0310473209cc0f6d229456ff133d2b1e6bdfc291ab6938b54aba8abd23802392639318930f0e63760b0f94639939c8e7643a87cf92fb0bd0e936b4036fd2fda0e95b3fa6423ecc24ebece0dd362abff1af4269e126f0634bd386bed79ca3b74613aca0452d14f18d97130b671f85b01a0cfddb15b0abe33a50e36f799305d862a6ea680a0c212a40e63ec3aa9317de44236f47e997376cfba0cbec2c1e67c2c9d5d8f1da35d1c947b7b9781db044399ec988b4ab62b14354768a57da31b060284202cff24616cb1139dd8d9d16fe6736adcae2631d2e210d756b1b4d08924cb6b24b498cc07818c1b894ce811bb634e5ed83e5e9fa87f5c469a28d32db729703b02c696a8736168ccef9901964df6bafa3b9f3c0becce9fabe6a712e1428cd0b049c208d18b4e0829ded13551d5c1c4099db4ffdefee105a7cae52e5029041004e506555b79556b114ab353aa295d951338deebdc8e66775071454d9bc792910a8f8376d749e0bb2924c80729a92a21e1f5f585c9e6bc798905252a668b90ba3f7ce2cedb4b7bd52864e430de7af061d1d5721639d384ce699bc89632e0d92036d2f47b6220daa564fcc77c5605b7fdb9ef84d2b6e3406b02f6d1f7c2f34f01b42dc91de7ff9a7d3c9dfba5a941dae93f50f3147bde9b60e67bd4ebf333e8d9eb475d4fc4f2d3dac8f0891305ab48ad5d7d63efa31b77826422e1c6152cd9ab8d074a3c3eb9546d6f33d7557c9e1e042900de164343055057483fe494f77ea0bd2b53aa54be893f465c7f55c15c17a8583cbe6b234001f52e9ec0fd4ef862bb03566db55e27204496fe5aa6bfcbc6e1a3340317628e1be146bd42d8f3b9692dd617ac0f789d853890a5e146717e79795ef6a8ae3d6ad54566d1c09a4f2be2405b137f3676a01e2d2a725b6ebe030a170de7e9ebfe9c087a6893a51b3e0e450ef785dfe63a16a5c37d27999bf8eeeff4245d6116da785587ddc0da3146918a192883e3e7b3f60c19ec33ad53e02df4efd191ef1428a6233f7b738584d606d7f547d5d1a3d68e7299c4d2a68e1d61283b10efb5f6c34bb29dd787b34b0981d7d60adc8b074ccfafe30e0ba4ccda58b6b6441841f06752feabd604a18a707290922455f00277bff428ee201201447b7ad98d5b41857d36df6085f8115feee61772dd0cc57a72b4dc1d7e6b76e2b8a246c18331a4fd5ddd7366decfd1885de94bf1e469daab8ac3f6d8d0dfbee916ea7463597543a7ec472d212f47c8c2890e4f29c3110f7a397b730f244807127010efebee00034e2557b5c5f81fa0ab97b2231efc043d3555440719c51bf75f348ba36837c661bc74909df644b27535539b7fea73a7d43860bb338ebca5d7f3ea60b36c0f2e09adce607f852f016e03df80e8346cb460ca5f947b5b946fa4640fd668a9dac9ec1b876b4cdc359d68e97ee6915f0e055b28179de1178a9ef41950b17f91c59fbf31fa8d3aa2d9dff377c0195a7ad41d3639eff1d02b39c1ba5adc4b5bcff3276a7bd11310ea94c30c05452d456620daab16785111a8611f1b16fb279364e030fc7885ea47403060318c0f825dc3c8dd7dd3a6b24ad29ab6254e166bfd7502c2802dee90145e2100c443e0959b218ead1fa8667576738d9ead8a2e90a69756718c32ca3b70919de535561ae2cbf3325bc5616555ac5cc442c660775e93c652ff1b9fc361254dc707f4fb189da9797fe3c5ea49f9d92eac2608e6a3cd14dee12c5611a34600aa507d30272fccb10e8f8e64705dec8daa077a701c16d997e62c46905f66681ee3ff497ad27254d5603fbab026322d2eba03df2961c85edab5bc7f2c25907d25bee854d04aaaeadaa815a977633806a716d68723e395b5093c1cc3215ed013315b9ecf569051a440a3a5c4cb40fa53bce5bd4b4129666d686645d6d16e523aeee920146a2498c30dae417b48393825dd455be52d0bd4c638a1ec1addd536a56e10e74c30a5c0b70e21cb02c4f7ddd2b9027e331208bf5b6f188cd0329cef35d60c7b9efe8c70361383a42bebfee7a658ef0d14c7edf851a45f34e749133ee8bc7b1c95cb1449b35078302d9aa663ca49f62d85f11bd58cf102eec39bb221772af86664f881f4f2f6d7efe0a68f8d164524e2679fa0381fb8af1e92dc99d803a275c9b82607de39f893ea598bf5936d71d3ffe6a8bf6e15bd0d36a16734c6c013637c89047cfd48395e5d90b78ce0d40be254b058caab5e46e9d61f4745c3b78bc628448b03748df965e07d8d80e35b6ec5bb43235666ba5e2b7d91e042ac473fe2731634b00ff7cc766ba0fef90c33426988243dcad61864c33df0bd32c672c8b7254f5ced253f311cbf1254bdd706d0a7e291970ce12c86f159357e960afebd5dd58a38573604b18ff327e6aaedf0ee371b96a5f9a413ab03b4909471e92ee6895f3e90c77056257d2cb2caffd589cb572131e3e1804728634ab05b793688186b06e1d9d1a170be8fb00e6bf22797faa89713ff1722ab8a5d496c1360cafdb7d30a17bdaa82f412fafad3f441ef745066c880189d6671f04b8305f95f56c8ab48ebf4d1b15d179f3ce10c8bb13eaffecf99757fb84a02171a7ab3a25ac2e17e5c5f94d788976c6cd6683a8f952251619340a85091ed1c6415bc70dce3e9023f5e1f362595bb3c2a8dd62db8127fdb0133b1ac780d0eeabd88e597c69f6631f22ace686ee8a5b0b07a6ca553f5396d89af3e4932f2a22e6b5defd06134c108527f674931e8a131c02cc6147678f9b7e47aa916b3aec4ae6b0766d49648d5ccea0e5b85bb4eccb1b1ec8f0cc9dc97b664327e7c4a659db8f80187fa97f19533aaa29361e7a4a89e68e3660fb8395bff9a969e18fa993d10993b6fe29b4b37fd94763795907f4d462f2e79356b0b1713ecb4f7c205b60c374347e233f7332a9bff7cfc93a46240c6fa30792dbc6d19a0bed8cedd00b74e5e1a7e007cbebd3859a86524820764ab40da070b11333f61080650c3ff350f98400b8b6944c457a8c4d73b4b66a03edbd5a05e7f386660415ad63f44b7e583bb6839512f4d528ed2834e8dbcc629654548390b199d14b763621446eb27231a36fc9a8689b3eb27acc533b1e3c94cb770ab944bcb6d6154803fde0db29a9f98a2ff6d3dbeb66722b029aa6780ddd6b3a69114d6a855cd927c28366222895091572174ffed3c3f904f606d8981db696fa4ded5a723ecb86ef865db8d442a6ed8c12f8fc218e4a5b328194d6010d67030adeea09c63569d894c1634b00ced8f4482f849e3cf1da74429fdad3be38899860c21a47ffaad23dcccf5e320bed07534a9792a34e0c4a6f2e5220bc5ca98beb2380cedda8c6c7ed65523024f7923993a00359e23631e820e3d18eb10787199c803ab4af66f6d86a3dc093b9fbb640416a0cc1133547887cd38fca3b224167942ab4aa52a5dbafe912ec142d8033c7e63776c52b3becbf7e7a8d1ce73ebb2afba76a3c302b109591d890e68745a446b29c3e4c140cc98514a56cf8dfd43e8205ac4dd8d336b76c8e70dc15d5c0408dae5ae5419fa6e7ef523d46e52f4da9161f642079be1a5412178fdd91f9bd2c4ce0b9e002cb587851189675ad532c67613100a915c55e69f5d9f7b1c83e686c48534df08e60760f99f734626248045b83c4bf644e4d8e098fa4efa9e301bb83dfe273ef4332c6a92aec90067a8768296852dc3125c903498fdf2e27fb8a9dec521ebc2c1484dcd17b7a6d3f99949d50992e6702f541758ce19991229ddd2d27e3795ff56f32d3a6690b14fcb7638236fc654dd9afc9a5110d5a17df7d5629f34ddb790c5c8a5971c6826eac726776a0a9129b451635dd4f1fb68ffbf22826310b2380a723f2c478560f1e25039b3eb0a73370f743330893308a2a53cfec2b5397bebb30e2eac70cdf5ab7a4c4f1a222", 0x1000}, {&(0x7f0000003f40)="dd76", 0x2}], 0xa, &(0x7f00000061c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r6, r5, r3, r6]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r2, r3, r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xee00}}}], 0xa8}}, {{&(0x7f0000006280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006500)=[{&(0x7f0000006300)="f5f247cbd2442469090e59c809b2e0f8f7acf2a546c90f0bbb8125cb5ef5f2eeeadf1eca6a5e547b059302368732880743330613732ac7ffdb0e3939cab3a91c534cfdf1671880daf33268fefee5e0d52426079fe7162e88b9c9b9af95cea0336991712bf03fa76b51d3ba322ba22dc2aac68f2041ecb6", 0x77}, {&(0x7f0000006380)="9e7a9a8bb04d279d732902666ae0573c4d8c06abea543c", 0x17}, {&(0x7f00000063c0)="188ef6e6390346ab392e3ac2f4f0cd1c6db1dff59a32337fac03180792733c54fa96ecb9dc657821a9804866cfaf63a8c338c653d49a9c6fcdc5d6cd9bcb6b6f336dba92dd9b4c0b369cda495f012525fcda2194b92e81ce66293053a8f790871462354de43feceffbb08a87eb27e2974bb8e57c6e61cdcef0ddf98cf9649eba3348e5ce7ca55370fee601ffae86a7e5ce6cfb1b2f3b2848be236d49fe08", 0x9e}, {&(0x7f0000006480)="a80ffcaf758a466a90c6b8916e87d6009e7d5ebe973e1c2392bf89770af0c1e3093b57bcf510def1375e123aae8592f3c9d6084248f78391ef27a7c04d748bdb25929f2f3c46e0f0add1bc5cc55ae5a9bec21818a00e1b6c4a508d6f032ecb6a4eab436314", 0x65}], 0x4, &(0x7f0000006540)=[@rights={{0x20, 0x1, 0x1, [r2, r5, 0xffffffffffffffff, r3]}}], 0x20, 0x20008000}}, {{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f0000006580)="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", 0xfb}, {&(0x7f0000006680)="bad78e40f874cc8afcbe2062df400eb025a3e75af1e41a4dbcd432194ef68a9c5974c8113c94f2fe5e477d35db485e4f76b484ff7b1d02bbe6c11c772be1cc3ab6dbcc60082c140a7554c0564b6286c5d76455371fc9240d02c8e936386fb9274022b6379e415e8939767ca90f9923233e35dddec0d6b4649dd01798af0c72285ca02e011366f8285cd7a902fa68486d55cf4857040b40fbdfa3454a6c0dfd9f43aeceaeaa9fc6ecffee9f9d7603181979090bebd6efeaba86bb0092d1dfdb67132338571d05cdb3", 0xc8}, {&(0x7f0000006780)="e6cddc1a8d007e87f82d510dbd78dd5ed83246837739d96c8dce7c36656dfd6b8e9fdeaeca2ed8a01f42e59487aa05d1d178fc5180af8948275a54291cbbb15ff1404e37435396fd21df28b1126aed6bf11e3c056995cf62aa7209852968291f83a7bef9b967c3c37455a0a98d8ae334fb09f03ef58a993eac", 0x79}, {&(0x7f0000006800)="ddb6de1c9cb48170b38a4e68ef59d8f6a788a972569e6c67e8c07b2afa3ace0b5eb46bc9b823619f2c89e77ef2ed4f139f5b84fe8829ec71bf1948cbc0dd34113c52d93904741ca6e043ddb3bfe2eb5ca0e59a1b781583ebb22ca035351699ec5f64cd76e55430a55d1db5fa3c71976970a3d2309df52ed31b899d360304ef8184344421ac04d41680bbf2a3e4", 0x8d}, {&(0x7f00000068c0)="3d32837a3a37aaaad5722235aef93c40b55238c280afeef2e68d02079df2eead342712e675431a9d848d35e01364a9fc52a13bd70126372aa54c0c8b1eb9e5bd3d7234353d03c82c50213cc79eb8125a24e07d6620060e9fde37a53f2049985b5e01383f8627812bee504baeec13cb6bbc27fd49f69d040dd474dbeb508e7f33ad4d8077aa86834a2b8a198e60642562f265a80b", 0x94}], 0x5, &(0x7f0000007d00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r2, r0, 0xffffffffffffffff, r2, r0, r5, r5]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r3, r2, r2]}}], 0x90, 0x4000}}], 0x6, 0x4885) 5m54.988193761s ago: executing program 3 (id=670): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = socket(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x80041285, &(0x7f0000001080)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0x3, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}}, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 5m53.566504777s ago: executing program 3 (id=677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x0, {0x3, 0x38, 0x7, 0xa, 0x2, 0x64}}) syz_pidfd_open(0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4d29, 0x0, 0x400c139, 0x4, 0x2d95, 0xafa4, 0x0, 0x4, 0x54c6cff3, 0x200000fd, 0x2, 0x1, 0x2, 0x9, 0x206, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x88, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x64a0, 0x400000, 0x4086, 0x80000001, 0xfffffffd]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000723f7bb243d62ae43b2af16af34c3137009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001000000", @ANYRESOCT=r1, @ANYRESOCT=r5], 0x20}}, 0x0) 5m53.45547881s ago: executing program 3 (id=679): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x1c000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) (async) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x2, 0x4}) (async) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x2, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x81, 0x0, 0x1a3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_usb_connect(0x5, 0x35, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003be004209904a2a9e8c4011903010902230001046b40090904e44401ffe7bf0408240201bb03b6100905072a"], 0x0) (async) syz_usb_connect(0x5, 0x35, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003be004209904a2a9e8c4011903010902230001046b40090904e44401ffe7bf0408240201bb03b6100905072a"], 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0, 0x40010041}) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0, 0x40010041}) mkdir(&(0x7f0000000000)='./file0\x00', 0x182) io_uring_enter(r4, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000ac0)=[{0xffffffff, 0x2, 0x2000002, 0x1}, {0x4, 0x3, 0x5, 0x8}, {0x1, 0x3, 0xf, 0x4}, {0x4, 0x4, 0xb, 0x8}, {0x3, 0x4, 0xc, 0x1}], 0x10, 0x8a2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000ac0)=[{0xffffffff, 0x2, 0x2000002, 0x1}, {0x4, 0x3, 0x5, 0x8}, {0x1, 0x3, 0xf, 0x4}, {0x4, 0x4, 0xb, 0x8}, {0x3, 0x4, 0xc, 0x1}], 0x10, 0x8a2}, 0x94) socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) r7 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r7, 0x409, 0x3f) (async) fcntl$addseals(r7, 0x409, 0x3f) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)=@fragment={0xb6, 0x0, 0x92, 0x0, 0x0, 0x1b, 0x65}, 0x8) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x24, &(0x7f0000000580)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x1, 0x1, 0x3, 0x7, 0x40, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xe8}], &(0x7f00000001c0)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xa, 0x9d, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, r4, r1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) 5m53.055708686s ago: executing program 3 (id=681): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0xfffffffffffffffd, 0x70d400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x40000004}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) fcntl$setstatus(r6, 0x4, 0x2800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x5452, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2000000000) listen(0xffffffffffffffff, 0x0) setresuid(0xee01, 0xee01, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x4c000000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m52.950063674s ago: executing program 32 (id=681): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0xfffffffffffffffd, 0x70d400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x40000004}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) fcntl$setstatus(r6, 0x4, 0x2800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x5452, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2000000000) listen(0xffffffffffffffff, 0x0) setresuid(0xee01, 0xee01, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x4c000000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 55.640253335s ago: executing program 4 (id=2211): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) creat(&(0x7f0000000180)='./file0\x00', 0x2e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000005000)='./file0\x00', 0x0, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000005140)='./file0\x00', 0x0, 0x1000) pwritev2(r3, &(0x7f0000000900)=[{&(0x7f0000000500)='\'', 0x1}], 0x1, 0x7, 0x5, 0x16) 55.549833498s ago: executing program 4 (id=2213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x7) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x2, 0x5001) listen(r2, 0xa) socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c000000030000000a0000000000001002000000030000000000000e0100000000001d0002000000000000070000000004000000000000010000000011ef6d020b22a1f7fd1db60000de0363614e00000000000012010000000500000000000008050000000500"], &(0x7f0000000000)=""/25, 0x77, 0x19, 0x0, 0x200}, 0x28) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000f3000040"]) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRESDEC=r6, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x392b8a4ff77e3f7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) stat(0x0, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'bond0\x00', &(0x7f0000000700)=@ethtool_rxnfc={0x30, 0x2, 0xfffffffffffffffc, {0xc, @sctp_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x4e21, 0x4e23, 0x40}, {0x0, @empty, 0x8, 0x6, [0x4, 0x9]}, @esp_ip6_spec={@loopback, @loopback, 0x3, 0x80}, {0x0, @local, 0x0, 0x82a6, [0x200, 0x3]}, 0x1a9, 0x547}, 0xa, [0x5, 0x9, 0x0, 0x10001, 0x3, 0x7fffffff, 0x10000, 0x6, 0xbb, 0x44]}}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002cc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r13, {0x5, 0xffe0}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000400)={'veth1_to_bridge\x00'}) 55.32680973s ago: executing program 4 (id=2216): socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000003001128009000100766c616e000000002001028006000100000000001c0004800c00010032d10000ffff00000c000100ae0200009e000000700004800c00010009000000010000e29b5d2a0008000000010100000c000100f8ffffff080000000c00010006000000040000000c00010007000000010000800c00010005000000060000000c00010001000000000000000c000100910a00000d0000000c0001000e00000032000000880003800c002100060000000c0000000c00010003000000400000000c00010004000000ffffffff0c00010002000000110000000c00010001000000020000000c0001000b000000270000000c000100ffff00005f0200000c000100ffffffff030000000c00010001000000030000000c00010000000000018000000c000100090000000900000008000500", @ANYRES8=r0], 0x158}, 0x1, 0xba01}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x9001) syz_usb_disconnect(r1) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth1\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x12042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000100001080000000000000069f9000000402f30836b90892d792a7a940a444f1209889623ccdfd27b94195172f8e7e883255d929e429029744da94d3a4903d671273f56831893a77efb919761a16375830c1dbe9bee25d5ebb1db295576a2c9b5cf7d2298007bb644f1c95ee6d29cd71680018332e26a78172913ece9693126ae646b009951ee", @ANYRES32=0x0, @ANYBLOB='1 \x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, 0x0, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r7, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 53.132120476s ago: executing program 4 (id=2228): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 53.040607117s ago: executing program 4 (id=2229): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x2, 0x0, 0x7, 0x100000000009, 0x101, 0x0, 0x4}, 0x0) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$FUSE_BMAP(r4, 0x0, 0x0) write$FUSE_DIRENT(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416", @ANYRES32], 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000002340), 0x2800040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x189800, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file2\x00'}) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) 51.658372025s ago: executing program 4 (id=2243): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000002280)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecaf5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43f0300000000000000fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb3504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c6538f6755e6fde6d88cccf8096da7393bf8ad821a0d4da18549a973668b6f93069fb70c0475078813ca5311ce746985a646d84268c4da993d91963c55dbc5478623ab11da9a76227a96cc95b85af0b1c0510f52ba8e4f65dd9176fc4f521e338ce8765b9de2b648fbb91ba87cb6ebae446654180857f26c8806aa1fb1fb8baf9d0600728257a304c32c7b23feb1b0a9251bef36ae5b6a058adcb11082ec688cbcb1c08a80ea33dae2107afd2865143b0cac13e0f77a88a446f768d65e94259f4a18e63c83b1c18df19c194edd6f00"/2166, 0x876}, {&(0x7f0000001080)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187a196d53939db62b2b37c0cd0de32a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f784e39e7418d880db03cef8f623e3c96ec93866edcd68980361c223741d0d86c71f446ca4552af8bfa0cb811a3188e70f8180b8d45b829e467d3c43b504d8a5c44cf6c280040422b5fc7b16a6b173d43bd65a47f0c28f57e1d131f4a34c164e6d2cc6322db1e7e51de31a9dce389efc3cc9274cb81451aae089617cebfbfe826942ae01b81c8b03784b", 0x13b}, {&(0x7f00000013c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7b6f150495862f5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b782ad229baa9d0000", 0x67}, {&(0x7f00000011c0)="a1e8cbbe297b35daa1e148d124b95ecddeef3d14c4d86bd450fdd57028c72e195aaab5fd72c9ba08bdd14fce84d86b9bbdb5888024a0c5a5318009db45e6d2ec73864d4477bb464e87488a09de503c9b30e3ed220546d18fd44bac520dc3e05f6b7f633f65afeaa86acb32d4191a024dfda5d7100115dc65dba7242fee6290d09811cd2aa37cd37bd6388b4222a55fa55aa47a498486c988be1449485f61f9da6153479cb51e8bfafa6fe4eb4fb14bc0353b39b811363df67ec659af80a633", 0xbf}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27", 0x16}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000002240)=[{&(0x7f00000001c0)="fd", 0x4}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x21200400}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x28, r6, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x28}, @void, @val={0xc, 0x99, {0x5, 0x28}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040851}, 0x4040000) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="628220777136010041731000b68dd3e83600002b141dbba63d9cb0122966d6f6279b56057f4d612aa4e57d30561732f47677fc50b637a98e5779e8e420"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) r7 = gettid() tkill(r7, 0xb) getpgid(r7) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) 36.32643827s ago: executing program 33 (id=2243): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000002280)="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"/2166, 0x876}, {&(0x7f0000001080)="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", 0x13b}, {&(0x7f00000013c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7b6f150495862f5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b782ad229baa9d0000", 0x67}, {&(0x7f00000011c0)="a1e8cbbe297b35daa1e148d124b95ecddeef3d14c4d86bd450fdd57028c72e195aaab5fd72c9ba08bdd14fce84d86b9bbdb5888024a0c5a5318009db45e6d2ec73864d4477bb464e87488a09de503c9b30e3ed220546d18fd44bac520dc3e05f6b7f633f65afeaa86acb32d4191a024dfda5d7100115dc65dba7242fee6290d09811cd2aa37cd37bd6388b4222a55fa55aa47a498486c988be1449485f61f9da6153479cb51e8bfafa6fe4eb4fb14bc0353b39b811363df67ec659af80a633", 0xbf}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27", 0x16}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000002240)=[{&(0x7f00000001c0)="fd", 0x4}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x21200400}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x28, r6, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x28}, @void, @val={0xc, 0x99, {0x5, 0x28}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040851}, 0x4040000) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="628220777136010041731000b68dd3e83600002b141dbba63d9cb0122966d6f6279b56057f4d612aa4e57d30561732f47677fc50b637a98e5779e8e420"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) r7 = gettid() tkill(r7, 0xb) getpgid(r7) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) 9.827198001s ago: executing program 5 (id=2402): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4850}, 0x8000) 9.610343759s ago: executing program 5 (id=2404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f000000a7c0)={0x20, r1, 0x201, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x400, 0xa88, 0xe691, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x453, 0x3, 0x3, 0x6, 0x3], 0x0, 0x34240}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8.02637604s ago: executing program 6 (id=2408): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) 7.233232981s ago: executing program 1 (id=2409): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fsopen(&(0x7f00000003c0)='9p\x00', 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7fffffff, 0x0, 0xb49, 0x9, 0x8, 0x1000, 0x3}, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000002d80)={0x0, 0x1, 0x9, 0x9}, &(0x7f0000002dc0)=0x10) sendmmsg$inet_sctp(r2, &(0x7f0000003c80)=[{&(0x7f0000000440)=@in6={0xa, 0x200, 0x85, @private1, 0x3ff}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f00000005c0)="829558c61209feaae4e90587f4f32bde42fc8bb7b9b586b2ec94139b953b3f40aaf73f901be09698be246695a24fb794a448d810667651061671957de4bf212b1945925ff1587e9d505f0aefc565f8a78d98a6a5748d496bf2d8d7b2c51bf7090f91a7e78405b40b403fca9027a834eadc8066c08bb2d577605a7c6755a470e23831eaac8e40dcc880ee797fca376ab73d83231b49cf29c6072a77b595871a2cb2e19259beded86ab0316b1771cc6c940a80f43566197c8429531fc05b10e559584a46", 0xc3}, {&(0x7f0000000480)="e514e3238ed69e17160afe554fce42bf9aaf692846", 0x15}, {&(0x7f0000002800)="3df7bfa9c198ab78d0ef64476577af43303d34caaff0c49836214d77011515bb78b1a7484f94d1d6f7759a02d1603ab91d768fec39759faabf6014dd71e8f8c30ce4e237486429f055ed74d7af3b057e0f5e4e1f0f91da2eac60be49b53018a451c6672d30e14b8cf8a6ac4a0dca77d35740e8dc333f32e84f40df1d0475b9ade0573a38d89d43ca14ff5ca48f70408f39c1e35c49f40ef27ddadc6aff4e2411fde0137a517fb1a8c22781f441fcae185032c21a11a1dadaf7f8079de476cfb561d1d59de0eb589f5a9b6d08eaaf2e7e60730a33678b803aa599c85163fc4fda75", 0xe1}, {&(0x7f0000002900)="73a6d23930307da840eb9d0462aa3822857c5fb836054d92a2ceac09a779be30dc657bb0ec7a6aa8112a2ada7441c4e27e755b27c4daa2241c78c340628ac51bffbe6ccc336332dfcfd10782e55eec18323a5eb75b4edf58f59f00591e018c128f36564e9281a696f3843755d3725755d875a77ebe7bcac9c472718b663888ca83441538ff5e1f3b0af7ed15d7c8dc1e51e44b6247987524f0be0ba796d9d640a2454830933329e5a4f968e48b2253c6ef9152c97d00936f4024ac80d0e3b823ed65d5a48a3cff4300a29ddba6a129ec8ab8f502afd898", 0xd7}, {&(0x7f00000006c0)="bbd0436a78547902f958784757128caadcc85cee6a7b435579a10a4c7444bbb0cb26876f05b2", 0x26}, {&(0x7f0000002a00)="3445e6d892e18ba483c552773397fe59a8b1918af90f968f0ee79adc23cf14bd3b81b6f4c7116c0616c1e4fde24c2535a476f3a4e15da7b145072623573c3d543392750b0d3b8d4430d56d0bb95066d7e9515db751a02be1ecdc3ea83300395043cb3f716e2f94b717641d57dce0d2f5f0fdfcaaecb76265744d931b19ed84ed776e22c3304074b6a1c89a0237ba48dc4b", 0x91}], 0x6, &(0x7f0000002b40)=[@authinfo={0x18, 0x84, 0x6, {0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010100}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @authinfo={0x18, 0x84, 0x6, {0x5}}], 0x60, 0x405}, {&(0x7f0000000700)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002d40)=[{&(0x7f0000002bc0)="c79381054985b4731847efa10dce59cdd644eda85b22a6e1e9f912102c46ab94aceb499958645c874557bc1f9627421886208da167f103b5fc4005e76bcc4fa628dd0f0f2251d8e0059da163d8ccc8b349a71bcf3285ccf5beaee041a9b4edc4a9efb5348953d93de12167e89682ddcda4c48f40e3fc8f918c2511b811598ae3bc77facd5bc66f098b68ba27a3457e5f23a0071acf05f83d3d30449714612db060f2864918d1143cdb9d5e90224d33415b82e16b", 0xb4}, {&(0x7f0000002c80)="17e13dd9b512759a8f48acb2511047dfa804b5192c8db502f6271510af8b2ca5f258a198c3b397446511d91791b73a90e68683972aaa3856460c8f838a373e051f05f290e620c33211d2983f2381bb9bb61cd109f367e9870bca0093df24848fac602d1eb87e2b203d19388b851e801265ec9090ece76ce9f1dddd7f7dc33d0955f02ae3de725d16d36b509d8d34d63128617c11e89f8eb9b57ccc684b0e65517b7ee143438dc55681a84b57f36849f7f2b18ef24ab9fe2ef0be0267", 0xbc}], 0x2, &(0x7f0000002e00)=[@dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}, @init={0x18, 0x84, 0x0, {0xb, 0x4738, 0x2, 0x6770}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x2, 0x8001, 0xe5b4, 0x7ff, 0x1fb, 0x40, 0xc, r3}}], 0x60, 0x4}, {&(0x7f0000002e80)=@in6={0xa, 0x4e24, 0xe84, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000003400)=[{&(0x7f0000002ec0)="c9a9de43f85c106d2065063ddd14aeb6b2f7222be2e56e268f5e0ba61264f351380f88305413079065788277cb1d5b30ec67438149fdd2b1d0c3d96ac26d835112e6922cc596f4b3160f2ae1ecc49f1f906593dadc089bbf61e82326dbd6c8147d942a4b53d5e736ccb8ddb3816299184d0d6a9c538301df327ecead97507206d9678a2624d49b841e70bed33dad8cc19362fcd93122d0fd91171dc3a2", 0x9d}, {&(0x7f0000002f80)}, {&(0x7f0000002fc0)="3e1d0640dcd29fda8e89dadf5559634c6e4edd489aedcc270dd5a85c2ecbb5a62909d52b36735f1b0a0119dd91379a96f86f3c9dbd27176245c3fd2d0a02b5c973aa1d68f525f03bd7a55f2f51999cc9f963b09b16a9c65a01c686ea2659f995cbe5f9c4e50c5a382d50f78aa7350d0fef1c0fedc7a7b14c8cc0743f59ee083e2fbb656fa665947e1098a34b14146a205bc89437894b002e9e48d511c31973730d81dcddf635606f3a98e126017d3224ac65511c1333297416717cb0868b7a5670b75b865ffc6b3e1351bfb43b729468969c", 0xd2}, {&(0x7f00000030c0)="0dfee03f30924b39a707c2e669bbce0f4584f94c8fdb93ffcc2fe833", 0x1c}, {&(0x7f0000003100)="04cd1662706230f745bfc153badc981f5c99719b376d20002d078b9d1a84ede1f40489df3740375b9d19cdd9c15f0cbeee8896c6d51c03b4fb05a83260f65a6ecffe88ede85518f851c967dc0494e279db9d0a98a5382240bb0f9c0e3f73a3f3783e275404fdea5f08bb4a73ac74a2d8f9342b344836510c216e606262dd4c662bc3d92b0d72cecdf68ecd8ac544c266f0ed11d6ea29a828c0e00630792c48e6a4ca5afc048ad7c64d4ec5211fa5cef61e3b48119b5ce2790762bd435c23dbbc923c0a0fce008c7f", 0xc8}, {&(0x7f0000003200)="751d0875bf3c793966522b2032627daea53955268215be081150784510ed4afbc4bdaaa380c8948f76ac5c8cc237a1eb880ce43b6d9fd31eeebcba122ca5e65e5caec9662edf13f7f74e34014f88ab529c2fc377588045bc98770d35", 0x5c}, {&(0x7f0000003300)="32d7f0f06b23aeace23d6099da50a9ab836a2c4460ecf16d56435e258f0a8e6290cf573491de8c40bd5c2a95e2d98bb4c5410d2664e00af3bbce3b4f13170625e2da2c46b37fc51718b5dedfdd3fb86c08b9c28abd3cc6c55b3909f09280d8d7158a6b370882da8adfe32c264f60049024c6fa02e2808e074f5799e757b32b75a97ada97953d0b940631a263ba2960ea18be84d041e59fe59649d7214608d301f7892955e8c0c8ed75385fc58b34b4fdba4c922df63c66eec5c627c76a7a216abbdd", 0xc2}], 0x7, &(0x7f0000003480)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x2}}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @sndrcv={0x30, 0x84, 0x1, {0x9d3e, 0x4, 0x61e, 0x10, 0x401, 0x8000, 0x0, 0x0, r3}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x596, 0x9, 0x9, 0x2, r3}}], 0xe0, 0x41}, {&(0x7f0000003280)=@in6={0xa, 0x4e23, 0xfffffffc, @mcast2, 0x7}, 0x1c, &(0x7f0000003ac0)=[{&(0x7f0000003580)="ee7d8b0e7c32e90a2f8cc2c3e4ab5ec43326a93a19cb19de80282e687633645a6675bc1384a21983aa2e9381c2828780905493e62a78c5b0efd0ef2b5a279b350aa985699742a641a381ba11a8ea798bfc5b48006715db5f8aa0fa75b198ef701ce5a4536eae0e1259131cd0bf054d271337be22f39c6fda3889fe470589a83b187a0d5f955dfdd4492e47b0bca3d6e87316621c1cc0233a7dfab51cb5e3397a4e0e55b2445064235de5665f75351af98ca801dbaaa399f262c0aa15d2ecea374495fec607351405007191cd035269b4edca3dd655668d58ead165e426ddf0710e78bb3b191ba0ea56", 0xe9}, {&(0x7f0000003680)}, {&(0x7f0000003d80)="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", 0x1c4}, {&(0x7f00000037c0)="3fcba2", 0x3}, {&(0x7f0000003800)="f3c1fca300c9574a81a01de5dfdd2587250175b67cf0999d28cb8ca55b3074a02e884a003e96374778f9162bbe8bc99ab7047e0fa35ffe30f2ba8d6e5f1bc15947e225ee90f458ae63c3e7a9a3d467218fc55a85dc24057759b3ffdddfdbb0392001db02888d82172a0f5a67909c6b66095355fae234e8f09e9ed669526791ce5e474df672b25f47df37af141928831f305781b3f6bf8255ab45c1407982b561fa29b73af8280763afa7c09903fedd0eb91684a75414b7951500530de98cbb8d4d0fc010c8b9d1ec02b0af5f4f2c84739eddb7178ef3f85e6f2fa61d05f500eb9b40cf", 0xe3}, {&(0x7f0000003900)="b0d32d3d16a31c588b6fe9250c346639358152f46eaece3ea7ff15a5e395b4611f5b886c1745cc13c862e6452ab090cb072e9fe72e75cfb04309ae02f1e7c4f5acd4b6446c77fb4149a89044d9abaa503b6960b7b9b987d9ab74f0a7b3f95e631c84e0cb2168b301eef092ed84d51e32f1a9d4f8abaf93afa1e2517c297bd4cd887577cdb822acf284b779acbfab94f78518b68e95a0118a2b0378ef9cd77d540909de176e350199eaac6f63e9c3c41299f0467daaf8b878d39e1bf1007f1033ff6a3aa9a474c1492c83d8a34bcffffcce75", 0xd2}, {&(0x7f0000003a00)="2f71e745aedb346864fc5d88dda6ce62eaaf8c8fda3f0e76c9eaa600c6f5d52656285db4f07bc6d71b51e33628444f1e88d8f03f91b2651d1272a613a985b5e601645b529ca66966e92dd85c996685a4716c15862d17ea54215841cd720e137315828ff5034315600746d21e75b2826e2ac19e96a09f434ab541e5de99853703df9b0bb5389acc1e6bdf50f98c3e", 0x8e}], 0x7, &(0x7f0000003b40)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010101}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x918}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x40}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x4, 0x9, r3}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x8}}, @init={0x18, 0x84, 0x0, {0x1f, 0x1000, 0x7, 0x7}}], 0xe8, 0x804}], 0x4, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="615d21d9e030654d3e496eb7a85c254f688a0c0dc2a0b9c135a259d164c7322279416375ca5ac3da6cacf9a495da53a6ad73714665f6dfe0711d849ea880ba5acd626dc277b00f6ae1f659463baa91a9f7802af30a439977aac5598f1d5a20418d899e567c9b603bc14e3fcac3f36489f71d066b3ccdcfd3b6a231ff6733c5e0aec0b3e4c873b8c1b4528c4dd4bdfd6c276832280d04513a179d1119b8de1addf5a91dc17d1d649e3eacd65693d3da03b5db908cd4c9075d8c352ca4fe22ed67a9d4d5ec9049f7", 0xc7}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="30000000000000008400000001000000010000000c0000000000000000000000000000000001000000000000a95fcc303bd9851d8939d6f4fe37ee58b4f94582125a272cb4696d214fff79f7455141b5ecb07da092b61bb67a2c8d103c60434307246dac91d3d715e01923b6c09453a31f3a91503b7343c32e2e97eea42b"], 0x30}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = dup(0xffffffffffffffff) r5 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x200, 0x2, 0x313}, &(0x7f0000000500), &(0x7f00000001c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x800000000d2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, 0x0, 0x917, 0xa7, 0x1000000}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) setuid(0xee00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89b1, &(0x7f0000000040)={'macvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x44e3763ac5239ba7}}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r9, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 7.018331076s ago: executing program 5 (id=2413): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000002280)="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"/2166, 0x876}, {&(0x7f0000001080)="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", 0x13b}, {&(0x7f00000013c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7b6f150495862f5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b782ad229baa9d0000", 0x67}, {&(0x7f00000011c0)="a1e8cbbe297b35daa1e148d124b95ecddeef3d14c4d86bd450fdd57028c72e195aaab5fd72c9ba08bdd14fce84d86b9bbdb5888024a0c5a5318009db45e6d2ec73864d4477bb464e87488a09de503c9b30e3ed220546d18fd44bac520dc3e05f6b7f633f65afeaa86acb32d4191a024dfda5d7100115dc65dba7242fee6290d09811cd2aa37cd37bd6388b4222a55fa55aa47a498486c988be1449485f61f9da6153479cb51e8bfafa6fe4eb4fb14bc0353b39b811363df67ec659af80a633", 0xbf}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27", 0x16}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000002240)=[{&(0x7f00000001c0)="fd", 0x4}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x21200400}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x28, r6, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x28}, @void, @val={0xc, 0x99, {0x5, 0x28}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040851}, 0x4040000) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="628220777136010041731000b68dd3e83600002b141dbba63d9cb0122966d6f6279b56057f4d612aa4e57d30561732f47677fc50b637a98e5779e8e420"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) r7 = gettid() tkill(r7, 0xb) getpgid(r7) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) 6.005219512s ago: executing program 0 (id=2415): syz_open_dev$sndmidi(0x0, 0xba9f, 0x200000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x9, 0x0, 0x0, 0x17, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4b69d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "3bc529791f04004dc252840b0000000000f2fffff2845d9ee84ef80b7407cfbe", [0xfffffffffeff7ff9]}}) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 5.953932905s ago: executing program 2 (id=2416): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}, {@directio}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0x22) 5.825691701s ago: executing program 2 (id=2417): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='zonefs\x00', 0x2200002, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xfc787e279d056788) getdents(r0, &(0x7f0000000700)=""/90, 0x5a) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket(0xa, 0x3, 0x3a) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r6, 0x8008551c, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ppoll(&(0x7f0000000340)=[{r5, 0x1200}, {r1, 0x4000}, {r5, 0x2105}, {r4, 0x488}], 0x4, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000300)={[0x10001]}, 0x8) 5.232060558s ago: executing program 1 (id=2418): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f0009"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x9b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000480)) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000040)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000640)='./file0\x00') link(&(0x7f0000000380)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/19, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x200) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8001) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 5.163187491s ago: executing program 6 (id=2419): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd"], 0x14}}, 0x0) connect$unix(r2, &(0x7f0000001240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00'}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x993568c40857f797, &(0x7f00000011c0)=""/57, &(0x7f0000001200)=0x39) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x2, 0xb}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0xf8}}, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x8228, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 5.035678693s ago: executing program 0 (id=2420): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000b83000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000043c0)=ANY=[@ANYBLOB="bc1300001f0000042cbd7000fbdbdf2520010000000000000000000000000000000004d60a006c00fe8000000000000000000000000000aaf9ffffff04350000af00120067636d5f626173652865737369762863626328616573292c736861323536292c726d643235362900000000000000000000000000000000000000000000000000180300000001000028e5c9802d55224b6350ea6d0869c5e92df681a35906dca7d0f9c99535cb8033e3c2796f4e488c3e4d0d3759a6a0ced35310d6bf11ca416320d8fdd8a43c3ea4dcfb6cfc9bf32336d3b51b8f50d83b13a98f81adc7e70ae0cffc101a6b9f425e1ab705004c10120061656769733235362d6165736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000600000009d1c1a21f5660b0872a785da56640a26c2c600dee57db35426dcb5f7a0908cc6c39add779c937e4b5861db6d596600c4d193a2d4674291e2a20dbbb7e89af4ff1817fbb670917ca781fd0e24a8d72d3b53fb156b80b53d761c988284918a2b788301812695dfa8d89f2ada6856e75519f4548011ab9cdf31e970b8c195abbe8fc69f204d359a96dbb34d660bfe7266fa79d7319a9073018b5344bd6dfbe27f28b25d8e0f8c0d06888084d677b23fae7878d36dda14b692d6f61a61ca7ff42d0b371729cf81a3baadfd6c7be01a6f9e2c5a7a635269d44c06a8d216f3e532390e87628961873290984060cb0d8e7301312e9444d08b3e16c006b1116fe2e297a6dcd2da05e998f11ccb352e1173d94b7aca6232409fbe375eb709f059e75dedd11199d8b64bff42b106103b4135d954c7b4ecd8497817874d44c398aadab251c60bafa4c2d89a160a5d879d8baec2a7593d12862598eebf6775659e52f790f5f474370233f2ad140efd3f554798ec592182aee82bfc30af2d17dd55587cfcabe69ae6d6f42a648601552186fdc10b145f4f972211bc30238717f1b30d517f68fedfd5cd6ada5dc282f249cdadbdbb432ae4d47cc0a5aa524e559952d69bca2a309833ef9770fce227287e1f39da577a90c03ae5eb50842c8398235c20ec8f63eef292440496fe5a661cb74d4352495b1ed70790df83d296e183ad6835d378a1f8b2d1ee4bac320e0f899be6ddef16c65a1f4b20239228e6fe5425dbcfdf462c5b518973fc8103df105c90ae2d978c39e83d0d35cbd982d3f7cc9661137d4983e34862b4c05358e7835e5f2e37ed38cc08cb2c13070d186c44dfe3b3f543d223447558347c8ca3f7320efa40f4b702b7b8ba7416e7b0a5013aeab336f6d724b21dbb602584be7b7b078ff24bafbe7dc07d7a3cba3e37bb47290e10d96e98b50a2c764a4d92a238d7a48426165be47ebbbbfaf4414e2018d4df1a75ce5e37e834c72c65fb12a04e83f2782f01a9bdf0e31e8519459a344f2ecc97e140b5e599e7412fe0881b85e65fe0d0fe2f5a925289ddc5232dd577988aaeaada254926d1710d7c66161cec895a176659251a7481f01acb20ab02013f090529eb6666d11c22fd71491aa2c64cd6e36acf06f63f7d7386d6b5dcddd1ce0a87e27384945fd19ac14bc66fbcfe6a1a135798a3ef877e7ab2788d333ffe6919ed346fce111a84dea8daa632fd9ffe3437790ef427cf8e4deea6a798d33bc402ae3cff532752a4d3c852922b61e7f257084b25f46ccf2cec670994a99e9c46c8bfcb289d26610f43cb2c1efe92d84ec6a4b0ac9c87303f0e473ffc70e680629f4c0a23790debda732ff3fc2733fb3427d11e70bd664b9109b7751491f7424f7b9acfce877da569d77e045c0e6fffbb5083ee1dde01c0f9f836d852f2444ba96d77d1840b80dafb5069b2938d07323a1b7df77788e2046afc56e2f927bcc63fd8afb0b82fc0e59fb2894dbab81cffe4673184492441bd4bade23856356a26f3d06e07c7f0f286a26c65181aba73dc2b34273f30b6d6ddbaf071c8dba6f28e944c9dc0c0ce766728762d8366d8df710d79a2891b4dbe27e0dffef3fbc9c42585fc895d55ddd46efbea9f781aa41ad71ad45f3fea2cebb38c8d11d6875e05e3bae9249eac3971b5530f34c9bd55fdf783ca271ef9608b5e2d180ff840250cab4492a58864a2e05a5383849f7379fd8a7795ae474a173010a3922ea409e4d8d9fd6e11845566948bfdaec5179b994f73be570b8d1b7d46fb66e651babf9a452b46e45f94c88b76b7ca266e8126e4947d234df29de8dff0fe95b64b5df3e1ad20061936f3c5d6c0ca393128bcdd0bc70a4a3150deb161edb1c8bd37a39254ec6c2db1fe12c4fe0adaa48cddc2c072ba5186d3a06c36228344107f318946f0320b67d9df01657adda84fc86cd8dff7927ce9abb2f7e5db43f85842424d2f69da1f7a12a38eef811edb49de50480e9e8f11fb696758634c1d52e181c05454f775e8e1a2b6d2c37f8cbc4d4dd8d845445c70fecd41bd429cc1f0300588c2fcfd53671071fe97ed0b7a103dd6f2b52b3dc50adf7c0cb37d8b716ea842292b3847b4c18d26d1ad9a716ad5e46be4c1cf6bcbca3005b93779c236c07765b859c03a35963c7e22342b41df563f321370b9517393f1eb950b3050bbb6c512656bf10c65f71d6f581616f6cbca72c5a9478527dce247d838a6b02c2151d4f0a73c4dd54e1686e5011e662f07568847c194b20254a8bcb19f1cf1c6be03d3db652fb404bd64bffea52577b7fd7e957932c4174e226c26e4d15789477e47a4a6ab65ff9cbed254985b6a27a5c0e2aae290fc054b69be86ab96ecb3313f69882c16a77d78c483e169712f4956d2c0be479adb0ec8d4a11d08e2e788995c47acbf15b37e38d2f1bc9b8e028bb904ea675e88ee9adc6e61e0b3fb1ae4ac335bef3ccaee7ff0634b0769da629151fa6c5847ba43d0521ecf95ec65bcda8525f662f5416c1fd54e86b455a46671ea7889d0ac2e76aebd32b960639d1c94b6a00d6e4f2b5396c6fcb8269673f9ae10aa0f3949b2d8e4ef97dd8ccbb6a22e47066f5da169b32b5e00d950595d8e0d45b71f00990743d59d480c6d92721c9cad2a6d3dda02812ff82e9a8c1c4568a8687d8929425d8b134981e0b2b19b8d0567b59234e0d725a6c56e29865dd8972d4a12b879cc628971c6a60804a5770dcc1457899fe2862351f2b8976f85be5bebbd0be4f666eed71938c94b5682d6a851cc9be340f0d0e0cb41d33b7bfc0a47616642ac101897f5ab11b4bc9c6e9373ddcfb15d2da9acb85874fce9748341ea9c02877d393f84d88c0e015eb56ec13dafaea4dbee199c0e3b463a00724cbe283b664173443ace87b07c454d54f512e60232dba88f586e2b730225422b5ffb8a270ec6dde3600556905bd0dc34334af1851f7f52516375ea2099b025035e795114981ceada4162391ef72931df0a91d75043062f84b8f3c87d0b34848a8fc69d5e7b036a9f504abcd2a28b1f86212876b8641e429b8fad4f9878419f500ac8b283d0322858de285c4c82a7b602be0388c34e9be7a82009b05ebfdd2dee06c3de3cd36be0d161773826a59a74480fa1b021aac1dfc05b95a3dbd69c8849fca74d5f4e4a305c72b5e72eedadfa204d54948fe0ade652bb7e979169e40954f8d9ba199eb15c40bda5b204c13382950b70f41cdc6c10a950e602505192e2c8279d0a94826f622289f4abd70fe75708543347c297aeee325aed4cbf836d02e9e2f79da0071d420618470808e26405f6267adf365b69b51aad4e8446f3a7d7460f95db437f8cd89a0ca6453c3e684511691a53d63a8f7ee01cae820e6d7ddd86837002c2c8cdd6dbb32fa286afc594e827ac5b54fe8871b9cba4e082cf5ab2b6fa1bd6876373588c4e67923e3055ce6a06adf6f98a408fc9c29253bb4d5cf70f5f4d10cd7b6e9c80b063de4ea7cc4ac06022608b6741a9bad3e2a630544027918e7749189f33ea211de7a8ed5db74e3ae589acb515e17f1133975bac9d173357f8e482dea29827b3b544ef5d3872e8aecc06a5cf7128513ec6e1f6a4bc58a30753665bb127c163769727003a1a9ce8649ecfefd72f65af53f369bfecaa4b6354139c95ae0444be06ca4f995d743f0a707c56d56d51644aebb2d09f7d04cbd889371116e2bed8a3f59f85db9348525c46074d458ae75b7bf2371be18b763fda91d09155ba18add4b9aea35efe54bad1d3986a73359d715c2f49dea3a5abf2f0f3e3b2d3691adb6cd2bf21353c52ac8fe601eba1f607b6c5bb0138882cee55592ce358c28e16741ad12cfbb14be47e3b01a0379d53d3aaf2557479e1ea822c56da87fe80dc8ed2e1f9058fb548bc73c649b90430ad37e2cf7acf6c7f212efc075902970d7de83e3a5d3990e4de545319f25b81a8d07a894147bc65a3ae3b6560ee72aa42793a51f9b2b6fe079c3f31a1b2a8038806720782bf0b3b03d7d7a3e6e50bec2f3e2160c12109da98ad9aa56bb0a8a72c755cea96798561e102417d93024a3670741eada4089165d561b18660e4f92c2df34ecf81f3dca1d62c252a1b83e312e1c7fa4a7d04e6e2f2f173ce482fc41854ed6806df2ea7fa63e16b56a4b4cb360a7a53df78747652e68509b1e8166dc2e92ed3d0f61a21436828e32af29e7bdd2e2183df51d1614774c6943366c246372efc1e9455377fae0a1ec8c105bf72a3f96621aa85a58416ff90af16157e86e2537f64ff8cac9ee51185a26f2ac065908c94218f6e1de262aaaf77fc670e06f99197bd7707fcf08d4b323a4c63793f6b4e233e1609f1ab9bb44b7a8525c111d236aabbe40ccc955c2f5bdc66c22f2af21c283a5d299fa6b428618e26ddcc6eb8a24420a071f4b9648736c5cdfd64952a85ce0e839e4bbe74bf19752a2b6009f006e19c6fec6be9870991ba548eb34b55de55b5b245191adcdbf1c80e8fba53d3e9102ca99d716ea5cf9d3cd7225bcc5ac65831260daa7e4058d72075c7200aa0a35cdf9dcb2b4416d0ea50e23a202784a5a70777c595a0fcd7b07b4070faebc067157cfed288ec43d3eb066fc437549bf147a9f24e03dadeac5ed99a949e29e5d996d77ddacf8427bcab839f0af8305a4c6d5bd1d24bced322643232552bab0686934ae64a6f566a8e9905d1284b66c988a70cd74933f7a1d82fb0764e04b0ddbf22cd316b7e6a8c863677d160acc092aec47c9dde115c4ba4eccfa2af7c345b9f530a09d7f80c26d6565d957fe0647c358a825afeab849e43dc89debf58e53dfbff574fca5ab16123fa7fd6199e0b4b6a41329522a26af02349c35b0736b7d45b515c377151541db3b294aff39ba782110b70edcaa64b07536942a887cb02f8d02243c7a0920c5f439a55b47811577a14c20984a55c9019788171b0c6334c5477f376886aa2367628fcdb97c3540dcc886160fa03b86ade3546b94e9f894fa8895a4d8921f5fe3ebf18b57d4f5fd434602c7650f150216bacc65c6bb677bb19891f3e51ebf38f36fc058e25d0d108da270a739bb8acb7ca3123cc6c946f8295c5a63c620ec9e202bfa0f0b535c0a8aa43e0cd53d7f0956a1d354d8d4fe78f131113c408497cf76dd0475bf963150cc0efc1e27827b95bb7d54d52c5a486d9f514f2028a56ee38d0d07e28ec58ffc434613a15614175f665ac9e80a5982a7041f525253e61b8ff994b00af858a3129d4fc95af85d717057c7e42d9727b625349c732abe2e2830bd33d18363f0d1df688c7dea5e1135e07cb79b8c5811581015d5cb132f6ef8ee499ab32d5ff6412882ba92ca5bca1857e1268f10b6a511727f7ddb40bfd6b715e397b721ddca96be31500ba815b33a0355716e08d7c9e5a0078903fca417b3667f156fca8968cddfc60c1909704e68bef66e77746fe20bb9270f0a4084524a5f08ab6379291a3e80b74dd6e998a65e9a88f60993b85535fa581401b5da7225b175115a0d558858041db816ce49653174f19d20379b1250e1b93543aa72de87d23e950db1f7b100b4f629d21ca4cbe4e8f10ff80f476f109dc83572f6c81dfab027c9c246fe15259bd1f0671c20350bd03a3861aa25f02bf8dc927069f867ee33ddcd3dcd75853dfde88d34a8ca98d67224eafc6f7f698f35bf1881e2e6f3cc4c02ac6f88fde1f20cd6b9e8e465599597e07e26e8ddc361be6e37c0664170df6a332c5fca0fe05f89939024da2d5a4b778b1a3be1ba5a7ac64b437438121ed3fff78f26b95068df6d5153b9ac46f9e0b50df7a000100736861332d3232340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900100007454371801a61d021863c20e0a532d881ad2509e0cfe8e8325d16f85321bf29194ce2bf7ba7f642868a715178ae5289306ae000028001a00ff010000000000000000000000000001fe8800000000000000000000000000010200005d14000d00fe80000000000000000000000000002be4000600fe8000000000000000000000000000bb200100000000000000000000000000004e20fff84e2000000200202006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d56c000000fe88000000000000000000000000000105000000000000000800000000000000ff0f000000000000390d000000000000040000000000000009000000000000000300000000000000ff01000000000000080000000000000004000000000000000400000000000000010000000000000007d1ffff01000000001c000026bd700002350000020002024100000000000000e4000600fe8000000000000000000000000000aaac14141c0000000000000000000000004e2402004e2300000a0000802f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141441000000000000000000000000000004d333000000e000000200000000000000000000000001000080000000000200005cc1000000000006000000000000004000000000000000f7ffffffffffffff02b1000000000000010000000000000008000000000000000600000000000000070000000000000000000000000000000a0000000000000001000000d216ffffff0100de2bbd7000000000000a0003791700000000000000"], 0x13bc}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000012c0)=ANY=[], 0x64}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="2004000000000000ff7f1b0000000000f30d"], 0x28}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 4.402702762s ago: executing program 2 (id=2421): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800", 0x2}], 0x1}, 0x4008040) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab597233001000006db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) 3.928941032s ago: executing program 2 (id=2422): syz_open_dev$MSR(&(0x7f0000000000), 0xec37, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x22000, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000440)={0x80000001, 0x1, &(0x7f0000000340)=[0x3], &(0x7f0000000380), &(0x7f00000003c0), 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000406010400000000e9ffffff0e0000010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x120, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x328, 0x20a, 0x278, 0x328, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {0xff}, 0x3c, 0x0, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x8638, [0x6, 0x4], 0x4, 0x0, 0xa, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0xfe}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @private0, @remote, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0x8}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5, 0x4}, {0xfffd, 0x2, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004f1ffff030000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/28, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r6], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000008af8ff00004000000008684c5e5a0000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r8, &(0x7f0000000380), 0x8) syz_fuse_handle_req(r2, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x1000000000000, 0x0, 0x3, 0x4000, 0x0, {0x200000000000001, 0x0, 0x6, 0x20000000000, 0x0, 0x0, 0x1, 0x1, 0x3ff, 0x6000, 0x4, r5, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000001240)={0x50, 0x0, r4, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x39, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r13, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d03}]}) 3.736787808s ago: executing program 6 (id=2423): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x6, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x4, 0xa, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000001c0)={0x0, 0x4, [{0xffffffffffffffff, 0x0, 0x10000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x1000, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000, 0x1000000000000}]}) dup(r0) close_range(r1, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) 3.434717872s ago: executing program 1 (id=2424): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) creat(0x0, 0x2e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000005000)='./file0\x00', 0x0, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000005140)='./file0\x00', 0x0, 0x1000) pwritev2(r3, &(0x7f0000000900)=[{&(0x7f0000000500)='\'', 0x1}], 0x1, 0x7, 0x5, 0x16) 3.287702169s ago: executing program 1 (id=2425): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x2e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000005000)='./file0\x00', 0x0, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000005140)='./file0\x00', 0x0, 0x1000) pwritev2(r3, &(0x7f0000000900)=[{&(0x7f0000000500)='\'', 0x1}], 0x1, 0x7, 0x5, 0x16) 3.179839234s ago: executing program 0 (id=2426): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) 3.070512326s ago: executing program 6 (id=2427): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x84) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) clock_gettime(0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) waitid(0x0, r3, 0x0, 0x8, &(0x7f0000000400)) r4 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000000000001d00000008000300", @ANYRES32=r8, @ANYBLOB="44002f7c2c00038020000380060001000300000008f37dc1253391ed77d1dda2000200030000000c0004000201aaaaaaaaaaaa080001000000000008000100060000000c60f412026cb699a6174cf8b156"], 0x60}}, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000200)) syz_open_dev$dri(0x0, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) 2.980991182s ago: executing program 1 (id=2428): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) readv(r1, &(0x7f0000001bc0)=[{&(0x7f0000000800)=""/106, 0x6a}], 0x1) r2 = socket(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x4) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x2000}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000003050005000a00000009003f7d7e058f2999b05ed5d83476d014520200"], 0x30}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0x10000000005, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x10) io_submit(r6, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x8, 0x1f0e, r7, &(0x7f0000000140)='i', 0x1, 0x24}]) r8 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001c00)=@deltfilter={0xb10, 0x2d, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x4}, {0xe, 0x1ffe4}, {0x2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4a8, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x9}}, @TCA_MATCHALL_ACT={0x16e, 0x2, [@m_mpls={0x118, 0x7, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x886c}]}, {0xe2, 0x6, "d1fb12c5b7958331f3a59b56854459f67dac0422ed09e1cd5353769fcb987b3f89fddd71b568bdb41212a24066d9c4eccff9d25883ea608ceb971820c63b05cc368db666fe002cb27b947f1aa22f139d9bbdd57804b056d67e2bce1eaf86254d5f6da8d5d6f3b58b67802b65653ebfb81a77bc9add64f8a615e6c44a7e5c85f11a6a2e14bef54af072aad4ae921c4b2ade5d1b6f012390281b12ec21d2b7b51be6dc9d77f652ab65e7d06434acf40d2c8d6f6032a194adeaf75785e2a2e055069c499524aedf969b07ac9acfc8f6b4cf776e0a9545c130b3eda1141b7942"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x358, 0x2, [@m_nat={0x228, 0x1f, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x200, 0x4, 0x8e8, 0x7}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1c, 0x800, 0x3, 0x100, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x4, 0x5, 0x1ff}, @empty, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400002, 0x3b, 0x4, 0x5, 0x5}, @empty, @private=0xa010101, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x401, 0x2, 0x0, 0x4, 0x7}, @private=0xa010100, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x4, 0x5, 0x0, 0xa00}, @local, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x9, 0x2, 0xe810, 0x19a}, @local, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x4, 0x8, 0x1000, 0x2}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xa56, 0x6, 0x2, 0x6}, @multicast1, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xb, 0x2, 0x7fff, 0x7}, @multicast2, @loopback, 0xff000000, 0x1}}]}, {0x70, 0x6, "1244954f5cbf8df2720c4172efee9bee29f08ed464982d301f79456a4bd8e892b49e7763bad7345294eb178de9117f8202928dd0a4370730e47aa8e960ee69d665f458b1ba17adfc443aa872aa36cc25cb06ea7832f5620d052675e8898ab0c8b2fa27d013a6ebd632aaae6f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x12c, 0x5, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xc45ac}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x7b}, @TCA_MPLS_LABEL={0x8, 0x5, 0x2791}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8863}]}, {0xaf, 0x6, "4ea773bedef21d449ab025c23ed43f994a27f7c6ed5d4c310ac55ff1ad0299929fa9c529f58894bfe0863090779bd3d8afa9ac1f5827ab958eae589396387019946520842a3b3a408db8fdee980a0ff171a9e536297669f58548d4b1d2048d0b7b88cdaefa592c8c2a984172a36bdb95057f30d0f3135e10d58218cefd0eeae945fab99a8e6ac679a865a233a22a776772fd951a38682b8820496fe442cf4a3f5d30bce2168910798b0400"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x800}, @filter_kind_options=@f_bpf={{0x8}, {0x5e0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xff, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_BPF_FD={0x8, 0x6, r7}, @TCA_BPF_OPS={{0x6, 0x4, 0x9}, {0x4c, 0x5, [{0xcb, 0x6, 0x4, 0x6}, {0x8, 0x6, 0x6, 0x7}, {0x9, 0x9, 0xd, 0xe8b7}, {0x1, 0xdf, 0x5, 0x96db}, {0x400, 0x7, 0x77, 0x4b3}, {0xd, 0x8, 0xa, 0xfffffff0}, {0x6, 0x5, 0x4, 0x5}, {0xa, 0x73, 0x84, 0x100000}, {0x1, 0x6, 0x8, 0x40}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0x468, 0x1, [@m_nat={0x214, 0x1a, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x9, 0x6, 0x6, 0x1}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x6, 0x1, 0x4, 0x787d}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x2, 0x101, 0x2}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xf0, 0x4, 0x3}, @private=0xa010102, @rand_addr=0x64010101, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3fe, 0x5, 0xe}, @dev={0xac, 0x14, 0x14, 0x11}, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xe99, 0x10000000, 0xb70, 0x20000}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x1}}]}, {0xfa, 0x6, "f1325651a34bdf864b195cad4fe25db2ff1ac74d8bc0a0fdf1d45cc125f3a92229b8c6e5a0ee2df6a32630b90f1e30cab05d4a99eff66272d21bad7135f94a012b18b17a6e9f3873c15c251c464c2258bd5db64e357ced3e5a94fe8f8048ced9378b43c1b238298bbbab0a76635e27b7b3f1a22421c4ea0f4bba873690dce27d7e95fbf17c868d49ffca52ed9ace5ac4b7c39f94a5bcdc69032773cc43efae79722b85235def3ff6d3b1940fe9a2f9c5544f9a826cf6880be697862789e93035862b655d30872f563f1b7572f88544ed0e0e1c98813de6971981355b7e0a5ba3f081b140965d393f8cd9291aedac853fda3c99bea699"}, {0xc}, {0xc}}}, @m_bpf={0xfc, 0x3, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x5, 0x5, 0x8, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x9, 0x20000000, 0x6, 0x9}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x2, 0x80, 0x10, 0x8}]}]}, {0x77, 0x6, "d3b4bcdda20ab5ed90d1f7fc08d6379581fc9d54a77668dff1a69400839c0f6b5db34ccdaf4ddaa69e27d00010b9d40d7722de26290a71106e075b951ba2dd05ae4904d846d79cc9ddc1af7ffca45a4adc0123112696e31a431e83a68ee606d2e83ad8316c976f327a61b2ff70fccd3f230644"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0x154, 0xb, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x4, 0x80000001, 0x1}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @random="199eb38eea58"}, @TCA_IFE_DMAC={0xa}]}, {0xf6, 0x6, "25c0303047c3988837846b8281a54e960baa5093046bddf07bf80bdec8cc1259bb3683c28ab30800b9a4dfb98c3a21aa82c8b73a1cf8f7c2bba6ccbd3ce3d8f6286872c97146bfc8f3bff81baa96392bd65afec7535c833992d9438a7a7315d4e3f417aa6b17ed3582460edc33ecc6fa82b8d55735a0dceedb0ee8fcf016c2f738f3a6ab2ee58ef944af7885e642205930b5c6b91a3d6de6bb93e83ca8f2c99a2bff58d48f25c36c03af77947aba941a66b32453e2c2d62ea23ca78a164a65b5cc5a20c112975360f32eb89f61687160faf7eb61c2e7bb4c295383a384a33474e7edede71a835b5001fe167b31b085cd9917"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x43}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x8}}]}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0xb10}, 0x1, 0x0, 0x0, 0x44}, 0x28008804) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8, 0x8007, 0x3, 0xa72, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x65, 0x0, 0xf1, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x65, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xb, 0x86, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newqdisc={0x184, 0x24, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xffe0, 0xf}, {0x0, 0xfff3}, {0x17, 0xffff}}, [@TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x7, 0x101, 0x0, 0x2, 0x0, 0x4, 0x7}}, {0x12, 0x2, [0x2, 0xe38, 0x5, 0x7f, 0x1ff, 0x4, 0x6]}}, {{0x1c, 0x1, {0xd, 0x8, 0xff5e, 0x5b0, 0x0, 0x1000, 0xffff, 0x6}}, {0x10, 0x2, [0x4, 0x5, 0x3, 0x3, 0x13, 0x99b]}}, {{0x1c, 0x1, {0x8, 0xb3, 0x0, 0x0, 0x2, 0x9, 0x9, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x4, 0x1, 0x0, 0x9, 0x557a, 0x1}}, {0x6, 0x2, [0x101]}}, {{0x1c, 0x1, {0x0, 0x95, 0x80, 0xa, 0x0, 0x7fff, 0x6, 0x2}}, {0x8, 0x2, [0x101, 0x7ff]}}, {{0x1c, 0x1, {0x7, 0x1, 0x9, 0x8, 0x1, 0x3, 0xff, 0x4}}, {0xc, 0x2, [0xfc2, 0x73, 0x5, 0x5]}}, {{0x1c, 0x1, {0x81, 0x2, 0x5, 0xf, 0x2, 0x6, 0x0, 0x3}}, {0xa, 0x2, [0xe, 0xffff, 0x3]}}]}, @qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8001}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x40}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x7fff}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0xff, 0x1}}]}, 0x184}, 0x1, 0x0, 0x0, 0x40081}, 0x240000c4) 2.112937411s ago: executing program 5 (id=2429): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) write$nbd(0xffffffffffffffff, &(0x7f0000000300)={0x67446698, 0x0, 0x3, 0x4, 0x4, "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"}, 0x10b) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1fffffd, {0x0, 0x0, 0x0, r2, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c) setsockopt$inet6_buf(r3, 0x29, 0x15, &(0x7f0000000440)="ff4b0b44247121e5789c58daedcf57276348d724cdaea658e9b7bdb94aae8e85e2d406e0544d8c1d39782a027231a787b096a825afa2391c97c1d86c178fc0dc191ba0bb6a332152429a94880c17f2b118b2c40ef5c11ab468fdd58f2fbf614c71d4fd4ac4e9504bdbb2a7c0ac420df4ac9ac4b85ba54da46e8e38ae0ee9fe46b07bd286c41ba33875", 0x89) (async) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='pimreg1\x00'}) 2.097563235s ago: executing program 0 (id=2430): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x180) chdir(0x0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 981.061843ms ago: executing program 2 (id=2431): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x2, 0x40, 0x4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x34, 0x1, [@m_sample={0x30, 0xc, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='defcontext']) 918.595317ms ago: executing program 6 (id=2432): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800", 0x2}], 0x1}, 0x4008040) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab597233001000006db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) 917.797452ms ago: executing program 2 (id=2433): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000200)='0', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x86c80) sendfile(r4, r3, &(0x7f0000000340)=0xf4d1, 0x1ff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x7, 0x1, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffd, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000004, 0x3, 0x42, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0x0, 0x3, 0x59, 0x7, 0x9, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x400, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd7d, 0x0, 0x2c5, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000003, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0xee00], 0x8b, 0x1) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) pread64(r7, 0x0, 0x0, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, 0x0, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000000000008520000001000000"], &(0x7f00000003c0)='GPL\x00', 0x6, 0x52, &(0x7f0000000400)=""/82, 0x40f00, 0x23, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000480)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{0x3, 0x2, 0x10, 0x2}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061551000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140), 0x10}, 0x94) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000240), &(0x7f0000000280)='%pB \x00'}, 0x20) fsetxattr$trusted_overlay_nlink(r8, &(0x7f00000000c0), &(0x7f0000000100)={'L+', 0x1000000000000000}, 0x16, 0x0) 842.353094ms ago: executing program 1 (id=2434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000000080)=0x7) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 802.533161ms ago: executing program 0 (id=2435): r0 = syz_io_uring_setup(0x4356, &(0x7f0000000180)={0x0, 0x3c37, 0x200, 0x3, 0x2ee}, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x31) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480)}, 0x68) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000cc0)=@ieee802154={0x24, @short={0x2, 0x2, 0x1555d}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000d40)="27031c00160014000200", 0xa}, {&(0x7f0000000380)}], 0x2}, 0x2400080c) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}}, 0x14}}, 0x8000) 122.731486ms ago: executing program 5 (id=2436): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) creat(0x0, 0x2e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000005000)='./file0\x00', 0x0, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000005140)='./file0\x00', 0x0, 0x1000) pwritev2(r3, &(0x7f0000000900)=[{&(0x7f0000000500)='\'', 0x1}], 0x1, 0x7, 0x5, 0x16) 110.164132ms ago: executing program 0 (id=2437): clock_adjtime(0x0, &(0x7f00000000c0)={0x742e4e88, 0x5, 0x9ef, 0x0, 0x4, 0x4, 0x1003, 0x3, 0x9, 0x7, 0x93a8, 0x4, 0x9, 0x10000, 0xfffffffffffff8cf, 0x110, 0x3, 0x4, 0x510d, 0x9, 0x7, 0x2, 0xd18, 0x4, 0x18000000, 0x1}) creat(&(0x7f0000000040)='./file0\x00', 0x34) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 47.083366ms ago: executing program 5 (id=2438): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x58488add990b66f1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x20, 0xe, 0x1a, "0c780ccaf393ff8c00cca98583f28c2c30c2044c660585cdb3e6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x8000000000000001, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, 0x0, r2, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x2b, 0x3, 0x12008010}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x641, 0x96) 0s ago: executing program 6 (id=2439): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x9, 0x9, 0x14, @empty, @empty, 0x8006, 0x7800, 0x5f1, 0x7fff}}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0xa4ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_setup(0x3009, &(0x7f0000000080)={0x0, 0xbbf9, 0x400, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x1000)=nil) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0), 0x0, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300), 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) kernel console output (not intermixed with test programs): [ 458.002818][ T5887] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 458.054440][ T1207] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 458.065585][ T1207] usb 6-1: USB disconnect, device number 20 [ 458.323937][T11428] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 458.684949][T11456] bad cache= option: none [ 458.684949][T11456] [ 458.691946][T11456] CIFS: VFS: bad cache= option: none [ 458.887160][T11468] zonefs (nullb0) ERROR: Not a zoned block device [ 459.059802][ T1207] usb 1-1: USB disconnect, device number 56 [ 459.104283][ T52] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 459.114282][ T52] Bluetooth: hci3: Injecting HCI hardware error event [ 459.122875][T10417] Bluetooth: hci3: hardware error 0x00 [ 459.255822][ T5867] usb 2-1: USB disconnect, device number 47 [ 459.454323][T11504] block nbd4: shutting down sockets [ 459.779968][T11516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1449'. [ 460.611172][ T5940] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 460.783726][ T5940] usb 6-1: not running at top speed; connect to a high speed hub [ 460.795716][ T5940] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 460.814379][ T5940] usb 6-1: config 95 has no interface number 0 [ 460.832303][ T5940] usb 6-1: config 95 interface 1 has no altsetting 0 [ 460.856516][ T5940] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 460.868008][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.881381][ T5940] usb 6-1: Product: syz [ 460.885563][ T5940] usb 6-1: Manufacturer: syz [ 460.894842][ T5940] usb 6-1: SerialNumber: syz [ 461.181605][T10417] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 461.203396][ T5940] usb 6-1: USB disconnect, device number 21 [ 461.647605][T11606] binder: 11605:11606 ioctl c0306201 200000000540 returned -22 [ 461.707365][T11609] binder: 11605:11609 ioctl c0306201 200000000640 returned -22 [ 461.982968][ T30] audit: type=1400 audit(2000000020.140:953): avc: denied { mounton } for pid=11628 comm="syz.4.1498" path="/343/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 462.090871][T11638] [U] _Lϟ]M [ 462.094838][T11638] [U] F DFθ`ӫ1EJߑT1[I;W [ 462.481127][ T1207] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 462.651775][ T1207] usb 1-1: Using ep0 maxpacket: 32 [ 462.659732][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.673470][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.685383][ T1207] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 462.697819][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.710762][ T1207] usb 1-1: config 0 descriptor?? [ 462.719522][ T1207] hub 1-1:0.0: USB hub found [ 462.781715][ T5887] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 462.923066][ T1207] hub 1-1:0.0: 1 port detected [ 462.951933][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 462.962714][ T5887] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.975848][ T5887] usb 6-1: config 0 interface 0 has no altsetting 0 [ 462.983688][ T5887] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 462.992891][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.007194][ T5887] usb 6-1: config 0 descriptor?? [ 463.037320][ T30] audit: type=1400 audit(2000000021.190:954): avc: denied { read } for pid=11678 comm="syz.1.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 463.428885][ T5887] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 463.582647][ T1207] hub 1-1:0.0: activate --> -90 [ 463.834407][ T5887] usb 6-1: USB disconnect, device number 22 [ 463.857009][ T30] audit: type=1326 audit(2000000022.010:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11691 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575cf8eec9 code=0x7ffc0000 [ 463.920281][ T30] audit: type=1326 audit(2000000022.010:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11691 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575cf8eec9 code=0x7ffc0000 [ 463.947000][ T30] audit: type=1326 audit(2000000022.010:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11691 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f575cf8d710 code=0x7ffc0000 [ 463.974179][ T30] audit: type=1326 audit(2000000022.010:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11691 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f575cf8d710 code=0x7ffc0000 [ 463.978293][T11697] netlink: 'syz.1.1526': attribute type 4 has an invalid length. [ 464.008539][ T30] audit: type=1326 audit(2000000022.010:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11691 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575cf8eec9 code=0x7ffc0000 [ 464.008962][ T1223] usb 1-1: USB disconnect, device number 57 [ 464.039088][ T30] audit: type=1326 audit(2000000022.010:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11691 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f575cf8eec9 code=0x7ffc0000 [ 464.069057][ T30] audit: type=1326 audit(2000000022.010:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11691 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575cf8eec9 code=0x7ffc0000 [ 464.251196][ T1207] usb 1-1-port1: config error [ 464.471607][ T30] audit: type=1400 audit(2000000022.630:962): avc: denied { connect } for pid=11716 comm="syz.5.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 464.526090][T11719] netlink: 'syz.2.1536': attribute type 2 has an invalid length. [ 464.959295][T11746] batman_adv: batadv0: Adding interface: dummy0 [ 464.967208][T11746] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.995345][T11746] batman_adv: batadv0: Interface activated: dummy0 [ 465.016902][T11746] batadv0: mtu less than device minimum [ 465.024401][T11746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 465.035822][T11746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 465.047086][T11746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 465.058787][T11746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 465.059212][T11747] netlink: 'syz.0.1549': attribute type 10 has an invalid length. [ 465.070728][T11746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 465.092992][T11746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 465.101246][ T1223] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 465.104756][T11746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 465.123858][T11746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 465.136474][T11746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 465.177157][T11747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.187537][T11747] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 465.261406][ T1223] usb 6-1: device descriptor read/64, error -71 [ 465.272305][ T1207] kernel write not supported for file bpf-prog (pid: 1207 comm: kworker/0:2) [ 465.511266][ T1223] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 465.551347][ T1207] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 465.641240][ T1223] usb 6-1: device descriptor read/64, error -71 [ 465.722981][ T1207] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.733909][ T1207] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 465.744058][ T1207] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 465.753883][ T1223] usb usb6-port1: attempt power cycle [ 465.759626][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.780489][ T1207] usb 1-1: config 0 descriptor?? [ 466.007504][T11766] sd 0:0:1:0: PR command failed: 1026 [ 466.013822][T11766] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 466.021885][T11766] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 466.121359][ T1223] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 466.143425][ T1223] usb 6-1: device descriptor read/8, error -71 [ 466.160639][T11771] netlink: 'syz.1.1559': attribute type 6 has an invalid length. [ 466.173817][T11771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1559'. [ 466.273759][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1561'. [ 466.288502][T11776] veth0_macvtap: left promiscuous mode [ 466.357568][ T30] audit: type=1326 audit(2000000024.510:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.2.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575cf8eec9 code=0x7ffc0000 [ 466.391358][ T1223] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 466.400034][ T1207] Bluetooth: Can't get version to change to load ram patch err [ 466.412501][ T1207] Bluetooth: Loading sysconfig file failed [ 466.419046][ T1207] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 466.431607][ T1223] usb 6-1: device descriptor read/8, error -71 [ 466.440527][ T1207] usb 1-1: USB disconnect, device number 58 [ 466.553270][ T1223] usb usb6-port1: unable to enumerate USB device [ 466.831333][ T5867] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 466.981274][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 466.989248][ T5867] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.012900][ T5867] usb 2-1: config 0 interface 0 has no altsetting 0 [ 467.019831][ T5867] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 467.029534][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.040104][ T5867] usb 2-1: config 0 descriptor?? [ 467.458733][ T5867] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 467.869597][ T5867] usb 2-1: USB disconnect, device number 48 [ 467.958012][T11824] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 467.966534][T11824] overlayfs: failed to set xattr on upper [ 467.974953][T11824] overlayfs: ...falling back to redirect_dir=nofollow. [ 467.982785][T11824] overlayfs: ...falling back to index=off. [ 467.990294][T11824] overlayfs: ...falling back to uuid=null. [ 467.998021][T11824] overlayfs: failed to clone lowerpath [ 468.391126][ T5867] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 468.540275][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 468.540292][ T30] audit: type=1400 audit(2000000026.690:992): avc: denied { listen } for pid=11855 comm="syz.0.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 468.570145][ T5867] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 468.570913][ T30] audit: type=1400 audit(2000000026.690:993): avc: denied { read } for pid=11855 comm="syz.0.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 468.611205][ T5867] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 468.642842][ T5867] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 468.686492][ T5867] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 468.702542][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.713179][ T5867] usb 6-1: Product: syz [ 468.717374][ T5867] usb 6-1: Manufacturer: syz [ 468.725888][ T5867] usb 6-1: SerialNumber: syz [ 468.737363][ T5867] usb 6-1: config 0 descriptor?? [ 468.746940][T11839] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 468.746988][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1600'. [ 468.755669][T11839] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 468.779155][ T5867] usb 6-1: ucan: probing device on interface #0 [ 468.824396][T11862] veth0_macvtap: left promiscuous mode [ 469.412392][ T5867] ucan 6-1:0.0 can0: registered device [ 469.611702][ T5867] ucan 6-1:0.0 can0: firmware string: [ 469.822527][ T5940] usb 6-1: USB disconnect, device number 27 [ 469.853224][ T1223] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 469.890549][ T30] audit: type=1326 audit(2000000028.040:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11915 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575cf8eec9 code=0x7ffc0000 [ 469.916241][ T30] audit: type=1326 audit(2000000028.040:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11915 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575cf8eec9 code=0x7ffc0000 [ 469.961142][ T30] audit: type=1326 audit(2000000028.070:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11915 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f575cf8eec9 code=0x7ffc0000 [ 470.010897][ T30] audit: type=1326 audit(2000000028.100:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11915 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575cf8eec9 code=0x7ffc0000 [ 470.035829][ T30] audit: type=1326 audit(2000000028.100:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11915 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575cf8eec9 code=0x7ffc0000 [ 470.061334][ T1223] usb 2-1: Using ep0 maxpacket: 8 [ 470.076362][ T1223] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.087557][ T1223] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 470.099451][ T1223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 470.110348][ T1223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 470.120160][ T1223] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 470.135294][ T1223] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 470.148817][ T1223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 470.175127][ T1223] usb 2-1: Product: syz [ 470.179309][ T1223] usb 2-1: Manufacturer: syz [ 470.191460][ T1223] usb 2-1: SerialNumber: syz [ 470.211759][ T1223] usb 2-1: config 0 descriptor?? [ 470.262927][T11929] Bluetooth: MGMT ver 1.23 [ 470.422033][ T1223] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 470.435402][ T1223] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 470.535286][ T30] audit: type=1326 audit(2000000028.690:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.5.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d4d8eec9 code=0x7ffc0000 [ 470.562682][ T30] audit: type=1326 audit(2000000028.690:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.5.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d4d8eec9 code=0x7ffc0000 [ 470.586695][ T30] audit: type=1326 audit(2000000028.690:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.5.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d4d8eec9 code=0x7ffc0000 [ 470.626246][ T1223] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 470.634820][ T1223] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 470.643570][ T1223] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 470.655857][ T1223] usb 2-1: USB disconnect, device number 49 [ 470.991925][ T5887] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 471.151093][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 471.166380][ T5887] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 471.185295][ T5887] usb 6-1: config 179 has no interface number 0 [ 471.211220][ T5887] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 471.238857][ T5887] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 471.269803][ T5887] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 471.292701][ T5887] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 471.320166][ T5887] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 471.350184][ T5887] usb 6-1: config 179 interface 65 has no altsetting 0 [ 471.358719][ T5887] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 471.367802][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.408697][ T5887] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input25 [ 471.465803][ T5169] input input25: unable to receive magic message: -110 [ 471.516361][ T5169] input input25: unable to receive magic message: -32 [ 471.562130][ T5169] input input25: unable to receive magic message: -32 [ 471.575256][ T5169] input input25: unable to receive magic message: -32 [ 471.820002][ T5940] usb 6-1: USB disconnect, device number 28 [ 471.820028][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 472.973384][T12082] binder: 12081:12082 ioctl c0306201 200000000540 returned -22 [ 474.171161][T10417] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 474.266572][T12104] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 474.277129][T12104] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 474.286139][T12104] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 475.052914][T12120] binder: 12119:12120 ioctl c0306201 200000000540 returned -22 [ 475.153001][T12123] binder: 12119:12123 ioctl c0306201 200000000640 returned -22 [ 477.498280][T10417] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 480.239503][T12207] binder_alloc: 12205: binder_alloc_buf, no vma [ 480.871586][T12222] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 480.879792][T12222] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 480.888261][T12222] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 480.911907][ T1223] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 481.071543][ T1223] usb 6-1: Using ep0 maxpacket: 16 [ 481.088946][ T1223] usb 6-1: config 0 has no interfaces? [ 481.096074][ T1223] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 481.118804][ T1223] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 481.142497][ T1223] usb 6-1: Manufacturer: syz [ 481.156907][ T1223] usb 6-1: config 0 descriptor?? [ 481.596449][ T5925] usb 6-1: USB disconnect, device number 29 [ 484.199982][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 484.200086][ T30] audit: type=1400 audit(2000000042.350:1040): avc: denied { append } for pid=12266 comm="syz.4.1752" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 484.237055][T12270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1752'. [ 486.128938][T12308] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1764'. [ 486.391127][ T5940] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 486.748595][T12329] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1770'. [ 486.759034][T12329] delete_channel: no stack [ 486.767246][ T30] audit: type=1400 audit(2000000044.920:1041): avc: denied { write } for pid=12324 comm="syz.1.1770" path="socket:[41734]" dev="sockfs" ino=41734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 486.880509][T12328] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 487.103077][ T5940] usb 6-1: Using ep0 maxpacket: 8 [ 487.177737][ T5940] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 487.192861][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 487.211816][ T5940] usb 6-1: Product: syz [ 487.216012][ T5940] usb 6-1: Manufacturer: syz [ 487.220614][ T5940] usb 6-1: SerialNumber: syz [ 487.235030][ T5940] usb 6-1: config 0 descriptor?? [ 487.254800][ T5940] gspca_main: sq905-2.14.0 probing 2770:9120 [ 487.364269][ T30] audit: type=1400 audit(2000000045.520:1042): avc: denied { shutdown } for pid=12332 comm="syz.2.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 487.401183][ T5874] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 487.581500][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 487.588443][ T5874] usb 2-1: config 0 has no interfaces? [ 487.594321][ T5874] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 487.603684][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.615828][ T5874] usb 2-1: config 0 descriptor?? [ 487.774865][T12349] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1774'. [ 487.784950][ T30] audit: type=1400 audit(2000000045.930:1043): avc: denied { nlmsg_read } for pid=12337 comm="syz.0.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 487.806992][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1777'. [ 487.831938][T12327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.840608][T12327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.861243][ T5874] usb 2-1: USB disconnect, device number 50 [ 488.371712][ T5874] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 488.432618][ T5940] gspca_sq905: bulk read fail (-22) len 0/4 [ 488.438601][ T5940] sq905 6-1:0.0: probe with driver sq905 failed with error -5 [ 488.542742][ T5874] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.553716][ T5874] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 488.566719][ T5874] usb 2-1: config 0 interface 0 has no altsetting 0 [ 488.575515][ T5874] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.00 [ 488.591245][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.612294][ T5874] usb 2-1: config 0 descriptor?? [ 488.623723][ T5874] yurex 2-1:0.0: Could not submitting URB [ 488.629607][ T5874] yurex 2-1:0.0: probe with driver yurex failed with error -5 [ 488.658049][ T5940] usb 6-1: USB disconnect, device number 30 [ 489.523489][T12370] netlink: 'syz.4.1784': attribute type 1 has an invalid length. [ 489.892798][T12381] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 489.901319][T12381] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 489.910103][T12381] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 489.937790][ T3582] Bluetooth: hci5: Frame reassembly failed (-84) [ 489.978492][ T5874] usbhid 2-1:0.0: can't add hid device: -71 [ 489.987945][ T5874] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 489.997923][ T5874] usb 2-1: USB disconnect, device number 51 [ 490.056160][T12385] fuse: Bad value for 'fd' [ 490.100134][T12387] overlayfs: failed to resolve './file0': -40 [ 490.189616][T12395] 9pnet_fd: Insufficient options for proto=fd [ 490.468035][T12401] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 490.482158][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 491.290223][T12419] tipc: New replicast peer: 255.255.255.255 [ 491.301966][T12419] tipc: Enabled bearer , priority 1 [ 491.468529][T12424] overlayfs: failed to resolve './file0': -40 [ 491.704521][T12429] input: syz1 as /devices/virtual/input/input26 [ 491.761420][T12431] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1807'. [ 491.981352][T10417] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 492.501240][T12441] fuse: root generation should be zero [ 492.674003][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1814'. [ 492.692154][T12451] veth0_macvtap: left promiscuous mode [ 492.922900][T12452] program syz.0.1813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.113797][T12460] overlayfs: failed to resolve './file0': -40 [ 494.421132][ T5867] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 495.501266][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 495.527692][ T5867] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 495.554785][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.630274][ T5867] usb 1-1: Product: syz [ 495.679955][ T5867] usb 1-1: Manufacturer: syz [ 495.710801][ T5867] usb 1-1: SerialNumber: syz [ 495.752338][ T5867] usb 1-1: config 0 descriptor?? [ 495.814233][ T5867] gspca_main: sq930x-2.14.0 probing 2770:930c [ 496.320353][ T30] audit: type=1400 audit(2000000054.470:1044): avc: denied { ioctl } for pid=12575 comm="syz.2.1827" path="socket:[42238]" dev="sockfs" ino=42238 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 496.518415][ T5867] gspca_sq930x: ucbus_write failed -110 [ 496.543891][ T5867] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 496.623234][ T5867] usb 1-1: USB disconnect, device number 59 [ 496.726307][T12583] @: renamed from vlan0 (while UP) [ 497.082236][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1836'. [ 497.093226][T12599] No control pipe specified [ 497.302888][ T5887] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 497.381189][ T5940] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 497.622842][ T5887] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 497.650799][ T5887] usb 1-1: config 0 interface 0 has no altsetting 0 [ 497.676007][ T5887] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 497.717187][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 497.756980][ T5887] usb 1-1: Product: syz [ 497.768702][ T5887] usb 1-1: Manufacturer: syz [ 497.773591][ T5887] usb 1-1: SerialNumber: syz [ 497.791465][ T5887] usb 1-1: config 0 descriptor?? [ 497.819987][ T5887] usb 1-1: selecting invalid altsetting 0 [ 497.852222][ T5940] usb 6-1: Using ep0 maxpacket: 32 [ 497.890357][ T5940] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 497.902646][ T5940] usb 6-1: config 0 has no interface number 0 [ 497.960087][ T5940] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 497.976060][ T5940] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 498.108783][ T5940] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 498.154984][ T5940] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 498.166472][ T5940] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 498.178965][ T5940] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 498.193239][ T5940] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 498.206893][ T5940] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 498.575419][ T5940] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.582624][ T1223] usb 1-1: USB disconnect, device number 60 [ 498.598304][ T5940] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 498.621850][T12618] ipt_REJECT: TCP_RESET invalid for non-tcp [ 498.628270][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.658093][ T5940] usb 6-1: Product: syz [ 498.672546][ T5940] usb 6-1: Manufacturer: syz [ 498.687814][ T5940] usb 6-1: SerialNumber: syz [ 498.714569][ T5940] usb 6-1: config 0 descriptor?? [ 498.758008][ T30] audit: type=1400 audit(2000000056.900:1045): avc: denied { write } for pid=12619 comm="syz.4.1841" name="file0" dev="tmpfs" ino=2163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 498.797170][T12603] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 498.822701][ T5940] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 498.843598][ T5940] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 498.921187][ T42] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 498.936688][T12628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1840'. [ 499.038517][ T5940] usb 6-1: USB disconnect, device number 31 [ 499.331626][ T42] usb 2-1: too many configurations: 67, using maximum allowed: 8 [ 499.352820][ T42] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 499.401880][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.430786][ T42] usb 2-1: Product: syz [ 499.461276][ T42] usb 2-1: Manufacturer: syz [ 499.486642][ T42] usb 2-1: SerialNumber: syz [ 499.528157][ T42] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 499.553288][ T5940] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 500.018180][ T30] audit: type=1400 audit(2000000058.170:1046): avc: denied { mounton } for pid=12635 comm="syz.5.1845" path="/183/file0" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 500.046726][T12638] overlayfs: statfs failed on './file0' [ 500.232542][T10451] usb 2-1: USB disconnect, device number 52 [ 500.308575][ T30] audit: type=1400 audit(2000000058.170:1047): avc: denied { getattr } for pid=12635 comm="syz.5.1845" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 500.622308][ T5940] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 500.665039][ T5940] ath9k_htc: Failed to initialize the device [ 500.686856][T12650] No control pipe specified [ 500.702624][T10451] usb 2-1: ath9k_htc: USB layer deinitialized [ 500.917672][T12654] Invalid option length (65058) for dns_resolver key [ 501.189984][T12660] smc: net device bond0 applied user defined pnetid SYZ2 [ 501.671530][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.311723][ T5940] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 502.371350][T12688] Invalid option length (65058) for dns_resolver key [ 502.442545][T10451] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 502.471219][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 502.478373][ T5940] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 502.488252][ T5940] usb 2-1: config 2 has no interface number 0 [ 502.494481][ T5940] usb 2-1: config 2 interface 31 has no altsetting 0 [ 502.504164][ T5940] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 502.513848][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.524756][ T5940] usb 2-1: Product: syz [ 502.529233][ T5940] usb 2-1: Manufacturer: syz [ 502.533987][ T5940] usb 2-1: SerialNumber: syz [ 502.601140][T10451] usb 6-1: Using ep0 maxpacket: 32 [ 502.608749][T10451] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 502.648900][T10451] usb 6-1: config 0 has no interface number 0 [ 502.667274][T10451] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 502.684671][T10451] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 502.698862][T10451] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 502.716094][T10451] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 502.726648][T10451] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 502.738604][T10451] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 502.748965][T10451] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 502.760788][T10451] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 12147, setting to 1024 [ 502.772964][T10451] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 502.790220][T10451] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.807018][T10451] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 502.816403][T10451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.839568][T10451] usb 6-1: Product: syz [ 502.846018][T10451] usb 6-1: Manufacturer: syz [ 502.850672][T10451] usb 6-1: SerialNumber: syz [ 502.864022][T10451] usb 6-1: config 0 descriptor?? [ 502.874080][T12680] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 502.882075][T12680] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 502.901381][T10451] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 502.910064][T10451] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 502.941742][T10451] scsi host1: microtekX6 [ 503.079497][ T5940] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 503.199933][ T5940] usb 2-1: USB disconnect, device number 53 [ 503.973505][ T5874] usb 6-1: USB disconnect, device number 32 [ 504.056650][T12717] Invalid option length (65058) for dns_resolver key [ 504.520939][T12727] overlayfs: failed to clone upperpath [ 504.861787][ T30] audit: type=1400 audit(2000000063.000:1048): avc: denied { setopt } for pid=12724 comm="syz.1.1875" lport=54995 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 505.477175][T12747] Invalid option length (65058) for dns_resolver key [ 505.717742][T12760] FAULT_INJECTION: forcing a failure. [ 505.717742][T12760] name failslab, interval 1, probability 0, space 0, times 1 [ 505.771293][T12760] CPU: 1 UID: 0 PID: 12760 Comm: syz.1.1891 Not tainted syzkaller #0 PREEMPT(full) [ 505.771322][T12760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 505.771333][T12760] Call Trace: [ 505.771340][T12760] [ 505.771348][T12760] dump_stack_lvl+0x16c/0x1f0 [ 505.771389][T12760] should_fail_ex+0x512/0x640 [ 505.771418][T12760] ? fs_reclaim_acquire+0xae/0x150 [ 505.771442][T12760] should_failslab+0xc2/0x120 [ 505.771464][T12760] __kmalloc_noprof+0xdd/0x880 [ 505.771490][T12760] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 505.771516][T12760] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 505.771536][T12760] tomoyo_realpath_from_path+0xc2/0x6e0 [ 505.771558][T12760] ? tomoyo_profile+0x47/0x60 [ 505.771583][T12760] tomoyo_path_number_perm+0x245/0x580 [ 505.771610][T12760] ? tomoyo_path_number_perm+0x237/0x580 [ 505.771640][T12760] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 505.771669][T12760] ? find_held_lock+0x2b/0x80 [ 505.771717][T12760] ? find_held_lock+0x2b/0x80 [ 505.771740][T12760] ? hook_file_ioctl_common+0x145/0x410 [ 505.771769][T12760] ? __fget_files+0x20e/0x3c0 [ 505.771792][T12760] security_file_ioctl+0x9b/0x240 [ 505.771812][T12760] __x64_sys_ioctl+0xb7/0x210 [ 505.771840][T12760] do_syscall_64+0xcd/0xfa0 [ 505.771868][T12760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.771887][T12760] RIP: 0033:0x7f60ad98eec9 [ 505.771902][T12760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.771920][T12760] RSP: 002b:00007f60ae77a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.771958][T12760] RAX: ffffffffffffffda RBX: 00007f60adbe5fa0 RCX: 00007f60ad98eec9 [ 505.771970][T12760] RDX: 00002000000001c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 505.771981][T12760] RBP: 00007f60ae77a090 R08: 0000000000000000 R09: 0000000000000000 [ 505.771991][T12760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.772001][T12760] R13: 00007f60adbe6038 R14: 00007f60adbe5fa0 R15: 00007fff63664978 [ 505.772028][T12760] [ 505.772036][T12760] ERROR: Out of memory at tomoyo_realpath_from_path. [ 506.321245][T10417] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 507.968768][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1902'. [ 508.719545][T10417] Bluetooth: hci2: unexpected event for opcode 0x0c38 [ 509.192948][T12823] netlink: 'syz.4.1909': attribute type 10 has an invalid length. [ 509.203568][T12823] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.211316][T12823] bridge0: port 1() entered disabled state [ 509.372293][T12823] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.379606][T12823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.387020][T12823] bridge0: port 1() entered blocking state [ 509.393653][T12823] bridge0: port 1() entered forwarding state [ 509.921393][T12823] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 510.041644][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1909'. [ 510.050826][T12825] bridge_slave_1: left allmulticast mode [ 510.056666][T12825] bridge_slave_1: left promiscuous mode [ 510.064589][T12825] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.146273][T12825] : left allmulticast mode [ 510.150783][T12825] : left promiscuous mode [ 510.257884][T12825] bridge0: port 1() entered disabled state [ 510.510246][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'. [ 510.531907][T12825] bond0: (slave bridge0): Releasing backup interface [ 511.261189][ T5940] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 511.269277][T12855] SQUASHFS error: Failed to read block 0x0: -5 [ 511.283664][T12855] unable to read squashfs_super_block [ 511.490523][ T5940] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 511.514638][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.523411][ T5940] usb 2-1: Product: syz [ 511.527659][ T5940] usb 2-1: Manufacturer: syz [ 511.532501][ T5940] usb 2-1: SerialNumber: syz [ 511.570053][T12863] netlink: 'syz.2.1924': attribute type 10 has an invalid length. [ 511.625903][ T5940] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 511.643367][ T42] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 511.654986][T12863] vlan0: entered allmulticast mode [ 511.670872][T12863] veth0_vlan: entered allmulticast mode [ 511.713682][T12866] netlink: 'syz.2.1924': attribute type 10 has an invalid length. [ 511.716041][T12863] team0: Port device vlan0 added [ 511.861405][T12866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.095657][T12866] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 512.110290][ T5874] usb 2-1: USB disconnect, device number 54 [ 512.687617][T12890] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 512.925195][ T42] usb 2-1: Service connection timeout for: 256 [ 512.932570][ T42] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 512.952257][ T42] ath9k_htc: Failed to initialize the device [ 512.963192][ T5874] usb 2-1: ath9k_htc: USB layer deinitialized [ 513.930075][T12909] smc: net device bond0 applied user defined pnetid SYZ2 [ 515.093535][T12945] netlink: 'syz.2.1943': attribute type 10 has an invalid length. [ 515.108758][T12945] syz_tun: entered allmulticast mode [ 515.118385][T12945] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 515.721867][T10417] Bluetooth: hci4: unexpected event for opcode 0x0c38 [ 516.164907][T12958] 9pnet_fd: Insufficient options for proto=fd [ 517.359366][ T30] audit: type=1400 audit(2000000075.510:1049): avc: denied { bind } for pid=12985 comm="syz.1.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 517.422478][ T30] audit: type=1400 audit(2000000075.510:1050): avc: denied { name_bind } for pid=12985 comm="syz.1.1956" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 517.590390][ T30] audit: type=1400 audit(2000000075.510:1051): avc: denied { node_bind } for pid=12985 comm="syz.1.1956" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 518.001142][T13004] fuse: Bad value for 'fd' [ 519.610419][ T1223] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 519.660464][T13032] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 519.755481][ T1223] usb 6-1: device descriptor read/64, error -71 [ 519.920032][T10417] Bluetooth: hci2: unexpected event for opcode 0x0c38 [ 520.034791][ T1223] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 520.261129][ T1223] usb 6-1: device descriptor read/64, error -71 [ 520.371395][ T1223] usb usb6-port1: attempt power cycle [ 520.781316][ T1223] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 520.825674][ T1223] usb 6-1: device descriptor read/8, error -71 [ 521.241253][ T1223] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 521.271802][ T1223] usb 6-1: device descriptor read/8, error -71 [ 521.441603][ T1223] usb usb6-port1: unable to enumerate USB device [ 522.046814][T13074] loop6: detected capacity change from 0 to 524287999 [ 522.347430][T13080] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 522.906314][T13085] overlayfs: failed to clone upperpath [ 522.960349][T13089] binder: 13088:13089 ioctl c0306201 200000000540 returned -22 [ 524.469042][T13113] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 524.638063][T13118] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 524.949661][T13131] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.957329][T13131] bridge0: port 1() entered disabled state [ 525.100118][T13131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.112691][T13131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.226282][ T1153] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.245337][ T1153] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.259892][ T1153] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.295858][ T1153] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.362529][ T30] audit: type=1400 audit(2000000083.520:1052): avc: denied { ioctl } for pid=13142 comm="syz.5.2006" path="socket:[44201]" dev="sockfs" ino=44201 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 525.390781][T13143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2006'. [ 526.131043][ T30] audit: type=1400 audit(2000000084.280:1053): avc: denied { execute } for pid=13142 comm="syz.5.2006" dev="hugetlbfs" ino=44207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 526.744246][ T30] audit: type=1400 audit(2000000084.280:1054): avc: denied { execute_no_trans } for pid=13142 comm="syz.5.2006" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=44207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 526.900373][T13153] [U] _Lϟ]M [ 526.964769][T13160] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 527.391079][T10451] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 527.761119][T10451] usb 2-1: Using ep0 maxpacket: 8 [ 527.767563][T10451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.779586][T10451] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 527.864491][T10451] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 527.880246][T10451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.900715][T10451] usb 2-1: config 0 descriptor?? [ 528.349835][T10451] hid-rmi 0003:06CB:81A7.0016: unknown main item tag 0x0 [ 528.357137][T10451] hid-rmi 0003:06CB:81A7.0016: unknown main item tag 0x0 [ 528.364435][T10451] hid-rmi 0003:06CB:81A7.0016: unknown main item tag 0x0 [ 528.371836][T10451] hid-rmi 0003:06CB:81A7.0016: unknown main item tag 0x0 [ 528.385021][T10451] hid-rmi 0003:06CB:81A7.0016: unknown main item tag 0x0 [ 528.393031][T10451] hid-rmi 0003:06CB:81A7.0016: unknown main item tag 0x0 [ 528.401078][T10451] hid-rmi 0003:06CB:81A7.0016: unknown main item tag 0x0 [ 528.408233][T10451] hid-rmi 0003:06CB:81A7.0016: unknown main item tag 0x0 [ 528.417051][T10451] hid-rmi 0003:06CB:81A7.0016: unknown main item tag 0x0 [ 528.426085][T10451] hid-rmi 0003:06CB:81A7.0016: unbalanced collection at end of report description [ 528.436897][T10451] hid-rmi 0003:06CB:81A7.0016: parse failed [ 528.442936][T10451] hid-rmi 0003:06CB:81A7.0016: probe with driver hid-rmi failed with error -22 [ 528.568447][T10451] usb 2-1: USB disconnect, device number 55 [ 528.950314][T13204] [U] _Lϟ]M [ 529.059669][T13208] misc userio: Invalid payload size [ 529.669377][T13217] binder: 13216:13217 ioctl 4018620d 0 returned -22 [ 529.708547][T13217] binder: 13216:13217 ioctl c0306201 200000000540 returned -22 [ 529.928887][T10417] Bluetooth: hci1: unexpected event for opcode 0x0c38 [ 529.951434][T13233] FAULT_INJECTION: forcing a failure. [ 529.951434][T13233] name failslab, interval 1, probability 0, space 0, times 0 [ 529.964834][T13233] CPU: 1 UID: 0 PID: 13233 Comm: syz.5.2036 Not tainted syzkaller #0 PREEMPT(full) [ 529.964857][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 529.964867][T13233] Call Trace: [ 529.964872][T13233] [ 529.964878][T13233] dump_stack_lvl+0x16c/0x1f0 [ 529.964907][T13233] should_fail_ex+0x512/0x640 [ 529.964932][T13233] ? __kmalloc_noprof+0xca/0x880 [ 529.964957][T13233] should_failslab+0xc2/0x120 [ 529.964975][T13233] __kmalloc_noprof+0xdd/0x880 [ 529.964996][T13233] ? lsm_blob_alloc+0x68/0x90 [ 529.965022][T13233] ? lsm_blob_alloc+0x68/0x90 [ 529.965042][T13233] lsm_blob_alloc+0x68/0x90 [ 529.965061][T13233] security_sk_alloc+0x30/0x270 [ 529.965093][T13233] sk_prot_alloc+0xfb/0x2a0 [ 529.965113][T13233] sk_alloc+0x36/0xc20 [ 529.965137][T13233] unix_create1+0xa6/0x700 [ 529.965159][T13233] unix_stream_connect+0x282/0x1a30 [ 529.965183][T13233] ? find_held_lock+0x2b/0x80 [ 529.965207][T13233] ? __local_bh_enable_ip+0xa4/0x120 [ 529.965228][T13233] ? lockdep_hardirqs_on+0x7c/0x110 [ 529.965252][T13233] ? __pfx_unix_stream_connect+0x10/0x10 [ 529.965277][T13233] ? selinux_socket_connect+0x6b/0x80 [ 529.965304][T13233] ? __pfx_unix_stream_connect+0x10/0x10 [ 529.965325][T13233] __sys_connect_file+0x141/0x1a0 [ 529.965349][T13233] __sys_connect+0x13b/0x160 [ 529.965370][T13233] ? __pfx___sys_connect+0x10/0x10 [ 529.965401][T13233] ? __pfx_ksys_write+0x10/0x10 [ 529.965423][T13233] __x64_sys_connect+0x72/0xb0 [ 529.965443][T13233] ? lockdep_hardirqs_on+0x7c/0x110 [ 529.965468][T13233] do_syscall_64+0xcd/0xfa0 [ 529.965494][T13233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.965512][T13233] RIP: 0033:0x7fb7d4d8eec9 [ 529.965526][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.965542][T13233] RSP: 002b:00007fb7d5b91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 529.965559][T13233] RAX: ffffffffffffffda RBX: 00007fb7d4fe5fa0 RCX: 00007fb7d4d8eec9 [ 529.965570][T13233] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000005 [ 529.965581][T13233] RBP: 00007fb7d5b91090 R08: 0000000000000000 R09: 0000000000000000 [ 529.965591][T13233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.965601][T13233] R13: 00007fb7d4fe6038 R14: 00007fb7d4fe5fa0 R15: 00007ffd15c8c7b8 [ 529.965627][T13233] [ 530.373146][T13242] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 530.531263][T10451] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 530.699241][T10451] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 530.716429][T10451] usb 6-1: config 0 has no interface number 0 [ 530.724018][T10451] usb 6-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 530.740096][T10451] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid maxpacket 99, setting to 64 [ 530.755055][T10451] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 530.765881][T10451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.773948][T10451] usb 6-1: Product: syz [ 530.778270][T10451] usb 6-1: Manufacturer: syz [ 530.783143][T10451] usb 6-1: SerialNumber: syz [ 530.790265][T10451] usb 6-1: config 0 descriptor?? [ 530.796030][T13238] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 531.007730][T13251] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 531.008297][T13238] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2039'. [ 531.024981][T13251] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 531.025028][T13251] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 531.059103][T10451] qcserial 6-1:0.49: Qualcomm USB modem converter detected [ 531.069022][T10451] usb 6-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 531.079794][T10451] usb 6-1: USB disconnect, device number 37 [ 531.090245][T10451] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 531.109391][T10451] qcserial 6-1:0.49: device disconnected [ 531.543849][ T5887] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 531.744717][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 531.751703][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 531.772929][ T5887] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 531.821329][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 532.111083][ T5887] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 532.143121][ T5887] usb 1-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 532.177518][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.240116][ T5887] usb 1-1: Product: syz [ 532.254961][ T5887] usb 1-1: Manufacturer: syz [ 532.259594][ T5887] usb 1-1: SerialNumber: syz [ 532.275615][ T5887] usb 1-1: config 0 descriptor?? [ 532.284244][ T5887] omninet 1-1:0.0: ZyXEL - omni.net usb converter detected [ 532.313831][ T5887] usb 1-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 532.534488][ T5925] usb 1-1: USB disconnect, device number 61 [ 532.545689][ T5925] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 532.557803][T13288] 9pnet_fd: Insufficient options for proto=fd [ 532.559338][ T5925] omninet 1-1:0.0: device disconnected [ 532.758563][T10417] Bluetooth: hci1: unexpected event for opcode 0x0c38 [ 533.746036][T13322] 9pnet_fd: Insufficient options for proto=fd [ 534.551074][ T5887] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 534.621105][ T5867] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 534.733556][ T5887] usb 6-1: config 54 has an invalid interface number: 154 but max is 0 [ 534.750556][ T5887] usb 6-1: config 54 has no interface number 0 [ 534.761027][ T5887] usb 6-1: config 54 interface 154 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 534.783346][ T5887] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 534.792889][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.800866][ T5887] usb 6-1: Product: syz [ 534.805162][ T5887] usb 6-1: Manufacturer: syz [ 534.809727][ T5887] usb 6-1: SerialNumber: syz [ 534.812461][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.835468][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.854481][ T5867] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 534.863900][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.881926][ T5867] usb 1-1: config 0 descriptor?? [ 535.088884][ T5887] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 535.091674][ T13] usb 6-1: Failed to submit usb control message: -71 [ 535.100736][ T5887] usb 6-1: USB disconnect, device number 38 [ 535.105893][ T13] usb 6-1: unable to send the bmi data to the device: -71 [ 535.118544][ T13] usb 6-1: unable to get target info from device [ 535.125168][ T13] usb 6-1: could not get target info (-71) [ 535.131253][ T13] usb 6-1: could not probe fw (-71) [ 535.309099][ T5867] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 535.506935][ T5867] pyra 0003:1E7D:2CF6.0017: couldn't init struct pyra_device [ 535.514773][ T5867] pyra 0003:1E7D:2CF6.0017: couldn't install mouse [ 536.000298][ T5867] pyra 0003:1E7D:2CF6.0017: probe with driver pyra failed with error -71 [ 536.019410][ T5867] usb 1-1: USB disconnect, device number 62 [ 536.935164][T13363] 9pnet_fd: Insufficient options for proto=fd [ 537.240607][ T5867] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 537.428486][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 537.605643][ T5867] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 537.673912][ T5867] usb 2-1: config 0 has no interface number 0 [ 537.694892][ T5867] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 537.739601][ T5867] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 537.770682][ T5867] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 537.795628][ T5867] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 537.836304][ T5867] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 537.871113][ T5867] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 537.988819][ T5867] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 538.008300][ T5867] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 12147, setting to 1024 [ 538.020073][ T5867] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 538.370462][ T5867] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.474380][ T5867] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 538.501404][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.547672][T13387] netlink: 'syz.4.2085': attribute type 1 has an invalid length. [ 539.195968][ T5867] usb 2-1: Product: syz [ 539.221101][ T5867] usb 2-1: Manufacturer: syz [ 539.243974][ T5867] usb 2-1: SerialNumber: syz [ 539.251255][ T5867] usb 2-1: config 0 descriptor?? [ 539.271773][T13359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.279268][T13359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.288190][ T5867] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 539.296991][ T5867] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 539.311932][ T5867] scsi host1: microtekX6 [ 539.555377][ T5887] usb 2-1: USB disconnect, device number 56 [ 540.269393][T13403] binder: 13398:13403 ioctl c0306201 200000000640 returned -22 [ 540.408398][T13408] 9pnet_fd: Insufficient options for proto=fd [ 540.480694][T13409] netlink: 'syz.1.2091': attribute type 1 has an invalid length. [ 540.480715][T13409] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2091'. [ 541.772932][ T30] audit: type=1400 audit(2000000099.740:1055): avc: denied { connect } for pid=13420 comm="syz.4.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 543.031965][T13451] 9pnet_fd: Insufficient options for proto=fd [ 543.081068][ T5874] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 543.267521][T13453] netlink: 'syz.5.2104': attribute type 1 has an invalid length. [ 543.311891][T13453] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2104'. [ 543.361071][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 543.368853][ T5874] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 543.377090][ T5874] usb 2-1: config 0 has no interface number 0 [ 543.385737][ T5874] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 543.401166][ T5874] usb 2-1: config 0 interface 85 has no altsetting 0 [ 543.426072][ T5874] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 543.436898][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.446796][ T5874] usb 2-1: Product: syz [ 543.461517][ T5874] usb 2-1: Manufacturer: syz [ 543.471881][ T5874] usb 2-1: SerialNumber: syz [ 543.486670][ T5874] usb 2-1: config 0 descriptor?? [ 543.498696][ T5874] appletouch 2-1:0.85: Could not find int-in endpoint [ 543.514805][ T5874] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 543.540583][ T5874] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 544.011262][ T5867] usb 2-1: USB disconnect, device number 57 [ 545.681117][ T5867] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 545.841171][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 545.847843][ T5867] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 545.873525][ T5867] usb 2-1: config 0 has no interface number 0 [ 545.905632][ T5867] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.939496][ T5867] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 545.982174][ T5867] usb 2-1: config 0 interface 85 has no altsetting 0 [ 545.994517][ T5867] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 546.013078][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.033287][ T5867] usb 2-1: Product: syz [ 546.041796][ T5867] usb 2-1: Manufacturer: syz [ 546.053475][ T5867] usb 2-1: SerialNumber: syz [ 546.091510][ T5867] usb 2-1: config 0 descriptor?? [ 546.315015][ T5867] appletouch 2-1:0.85: Failed to read mode from device. [ 546.329374][ T5867] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 547.689616][ T5867] usb 2-1: USB disconnect, device number 58 [ 547.776448][T13521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2125'. [ 547.785523][T13521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.841113][T13521] net_ratelimit: 11 callbacks suppressed [ 547.841130][T13521] batadv0: mtu less than device minimum [ 547.866480][T13521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.877619][T13521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.888538][T13521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.899394][T13521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.910222][T13521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.921180][T13521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.932011][T13521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.942798][T13521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.953598][T13521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 548.102593][T13528] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2125'. [ 548.177802][T13521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.792643][T13545] overlayfs: failed to resolve './file0': -40 [ 549.102470][T13551] binder: BINDER_SET_CONTEXT_MGR already set [ 549.108503][T13551] binder: 13550:13551 ioctl 4018620d 2000000002c0 returned -16 [ 549.296167][ T30] audit: type=1400 audit(2000000107.400:1056): avc: denied { setopt } for pid=13548 comm="syz.4.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 549.611938][T13565] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 550.715663][T13581] smc: net device bond0 applied user defined pnetid SYZ2 [ 550.841686][T13583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2139'. [ 552.204137][T13599] binder: BINDER_SET_CONTEXT_MGR already set [ 552.210149][T13599] binder: 13598:13599 ioctl 4018620d 2000000002c0 returned -16 [ 553.296014][T13615] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 553.702883][ T5874] hid-generic 0002:0004:0009.0018: unknown main item tag 0x0 [ 553.811228][ T5874] hid-generic 0002:0004:0009.0018: unknown main item tag 0x0 [ 553.821113][ T5874] hid-generic 0002:0004:0009.0018: unknown main item tag 0x0 [ 553.828624][ T5874] hid-generic 0002:0004:0009.0018: unknown main item tag 0x0 [ 553.901131][ T42] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 554.051000][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 554.313753][ T5874] hid-generic 0002:0004:0009.0018: unknown main item tag 0x0 [ 554.321209][ T5874] hid-generic 0002:0004:0009.0018: unknown main item tag 0x0 [ 554.328595][ T5874] hid-generic 0002:0004:0009.0018: unknown main item tag 0x0 [ 554.336053][ T5874] hid-generic 0002:0004:0009.0018: unknown main item tag 0x0 [ 554.350231][ T42] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 554.366771][ T42] usb 1-1: config 0 has no interface number 0 [ 554.380237][ T42] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 554.399629][ T42] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 554.449264][ T5874] hid-generic 0002:0004:0009.0018: unknown main item tag 0x0 [ 554.469467][ T5874] hid-generic 0002:0004:0009.0018: unknown main item tag 0x0 [ 554.470111][ T42] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 554.494191][ T5874] hid-generic 0002:0004:0009.0018: hidraw0: HID v80.01 Device [syz0] on syz1 [ 554.513594][ T42] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 554.533409][ T42] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 554.546283][ T42] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 554.557086][ T42] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 554.578230][ T42] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 12147, setting to 1024 [ 554.625626][ T42] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 554.656150][ T42] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.713701][ T42] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 554.723080][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.731181][ T42] usb 1-1: Product: syz [ 554.745513][ T42] usb 1-1: Manufacturer: syz [ 554.750146][ T42] usb 1-1: SerialNumber: syz [ 554.790645][ T42] usb 1-1: config 0 descriptor?? [ 554.796677][T13624] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 554.854245][T13624] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 554.877801][ T42] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 555.105577][ T42] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 555.125587][ T42] scsi host1: microtekX6 [ 555.317859][T13654] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 555.640108][ T42] usb 1-1: USB disconnect, device number 63 [ 556.349395][T13655] syz.4.2160 (13655): drop_caches: 2 [ 556.766813][T13673] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2164'. [ 556.823126][T13678] binder: 13677:13678 ioctl c0306201 0 returned -14 [ 558.531486][T13697] geneve2: entered promiscuous mode [ 558.537904][T13697] geneve2: entered allmulticast mode [ 561.008348][ T5874] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 561.018319][T10417] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 561.241022][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 561.258067][ T5874] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 561.269334][ T5874] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 561.279763][ T5874] usb 1-1: config 0 interface 0 has no altsetting 0 [ 561.295816][ T5874] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 561.314911][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.323098][ T5874] usb 1-1: Product: syz [ 561.327273][ T5874] usb 1-1: Manufacturer: syz [ 561.335640][ T5874] usb 1-1: SerialNumber: syz [ 561.346182][T13749] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 561.356329][ T5874] usb 1-1: config 0 descriptor?? [ 561.471773][T13755] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2194'. [ 561.792372][ T5874] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 561.799535][ T5874] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 562.401797][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2187'. [ 562.526372][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2187'. [ 562.784499][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.810098][ T1223] usb 1-1: USB disconnect, device number 64 [ 564.056681][T13779] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 564.064971][T13779] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 564.073543][T13779] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 565.423978][T13803] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2209'. [ 565.811738][T13801] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2208'. [ 565.901494][ T5887] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 566.077324][ T5887] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 566.085816][ T5887] usb 6-1: config 0 has no interface number 0 [ 566.355621][ T5887] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 566.364796][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.374292][ T5887] usb 6-1: Product: syz [ 566.378716][ T5887] usb 6-1: Manufacturer: syz [ 566.383377][ T5887] usb 6-1: SerialNumber: syz [ 566.390207][ T5887] usb 6-1: config 0 descriptor?? [ 566.497492][T13825] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2216'. [ 566.510239][T13825] vlan0: entered allmulticast mode [ 566.515503][T13825] gretap0: entered allmulticast mode [ 567.362102][T13832] PKCS8: Unsupported PKCS#8 version [ 568.270057][T13853] fuse: Bad value for 'fd' [ 568.462177][ T5887] asix 6-1:0.251: probe with driver asix failed with error -71 [ 568.489007][ T5887] usb 6-1: USB disconnect, device number 39 [ 568.770878][ T30] audit: type=1400 audit(2000000126.907:1057): avc: denied { mounton } for pid=13861 comm="syz.4.2229" path="/472/file1/file0" dev="autofs" ino=47608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 568.794976][ T30] audit: type=1400 audit(2000000126.917:1058): avc: denied { read } for pid=13861 comm="syz.4.2229" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 568.927071][T13871] FAULT_INJECTION: forcing a failure. [ 568.927071][T13871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.031199][T13871] CPU: 0 UID: 0 PID: 13871 Comm: syz.5.2231 Not tainted syzkaller #0 PREEMPT(full) [ 569.031227][T13871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 569.031238][T13871] Call Trace: [ 569.031244][T13871] [ 569.031251][T13871] dump_stack_lvl+0x16c/0x1f0 [ 569.031283][T13871] should_fail_ex+0x512/0x640 [ 569.031314][T13871] _copy_from_user+0x2e/0xd0 [ 569.031343][T13871] memdup_user+0x6b/0xe0 [ 569.031371][T13871] strndup_user+0x78/0xe0 [ 569.031399][T13871] __do_sys_add_key+0x156/0x470 [ 569.031425][T13871] ? __pfx___do_sys_add_key+0x10/0x10 [ 569.031446][T13871] ? ksys_write+0x1ac/0x250 [ 569.031472][T13871] do_syscall_64+0xcd/0xfa0 [ 569.031500][T13871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.031518][T13871] RIP: 0033:0x7fb7d4d8eec9 [ 569.031533][T13871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.031549][T13871] RSP: 002b:00007fb7d5b91038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 569.031566][T13871] RAX: ffffffffffffffda RBX: 00007fb7d4fe5fa0 RCX: 00007fb7d4d8eec9 [ 569.031578][T13871] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000200000000000 [ 569.031588][T13871] RBP: 00007fb7d5b91090 R08: ffffffffffffffff R09: 0000000000000000 [ 569.031598][T13871] R10: 000000000000feed R11: 0000000000000246 R12: 0000000000000001 [ 569.031608][T13871] R13: 00007fb7d4fe6038 R14: 00007fb7d4fe5fa0 R15: 00007ffd15c8c7b8 [ 569.031633][T13871] [ 569.625001][T13884] binder: 13883:13884 ioctl 4018620d 0 returned -22 [ 569.635160][T13884] binder: 13883:13884 ioctl c0306201 200000000540 returned -22 [ 569.694470][T13891] binder: 13883:13891 ioctl c0306201 200000000640 returned -22 [ 570.533448][T13907] Invalid option length (65058) for dns_resolver key [ 572.206824][T13937] binder: 13936:13937 ioctl 4018620d 0 returned -22 [ 572.221499][T13937] binder: 13936:13937 ioctl c0306201 200000000540 returned -22 [ 572.222033][T13939] batman_adv: batadv0: Adding interface: macvtap0 [ 572.271080][ T42] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 572.439924][ T30] audit: type=1400 audit(2000000130.517:1059): avc: denied { connect } for pid=13925 comm="syz.1.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 572.440392][T13943] binder: 13936:13943 ioctl c0306201 200000000640 returned -22 [ 572.473142][T13939] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.499202][T13939] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 572.611102][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 572.625252][ T42] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 572.640389][ T42] usb 6-1: config 0 has no interface number 0 [ 572.656791][ T42] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 572.676384][ T42] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 572.692779][ T42] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 572.712820][ T42] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 572.723491][ T42] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 572.750214][ T42] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 572.773156][ T42] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 572.788184][ T42] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 12147, setting to 1024 [ 572.800184][ T42] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 572.810895][ T42] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.843101][ T42] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 572.852388][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.882649][ T42] usb 6-1: Product: syz [ 572.886845][ T42] usb 6-1: Manufacturer: syz [ 572.901318][ T42] usb 6-1: SerialNumber: syz [ 572.912356][ T42] usb 6-1: config 0 descriptor?? [ 572.923941][T13930] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 572.931473][T13930] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 572.940655][ T42] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 572.950032][ T42] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 573.000832][ T42] scsi host1: microtekX6 [ 573.009451][ T30] audit: type=1800 audit(2000000131.157:1060): pid=13961 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2264" name="file1" dev="overlay" ino=2203 res=0 errno=0 [ 573.140080][T13930] FAULT_INJECTION: forcing a failure. [ 573.140080][T13930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.141025][ T30] audit: type=1400 audit(2000000131.217:1061): avc: denied { write } for pid=13959 comm="syz.1.2264" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 573.153292][T13930] CPU: 1 UID: 0 PID: 13930 Comm: syz.5.2254 Not tainted syzkaller #0 PREEMPT(full) [ 573.153314][T13930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 573.153324][T13930] Call Trace: [ 573.153329][T13930] [ 573.153336][T13930] dump_stack_lvl+0x16c/0x1f0 [ 573.153366][T13930] should_fail_ex+0x512/0x640 [ 573.153395][T13930] _copy_from_iter+0x29f/0x1720 [ 573.153425][T13930] ? __alloc_skb+0x200/0x380 [ 573.153448][T13930] ? __pfx__copy_from_iter+0x10/0x10 [ 573.153474][T13930] ? netlink_autobind.isra.0+0x158/0x370 [ 573.153508][T13930] netlink_sendmsg+0x820/0xdd0 [ 573.153525][T13930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.153549][T13930] ____sys_sendmsg+0xa95/0xc70 [ 573.153566][T13930] ? copy_msghdr_from_user+0x10a/0x160 [ 573.153589][T13930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.153616][T13930] ___sys_sendmsg+0x134/0x1d0 [ 573.153639][T13930] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.153687][T13930] __sys_sendmsg+0x16d/0x220 [ 573.153709][T13930] ? __pfx___sys_sendmsg+0x10/0x10 [ 573.153746][T13930] do_syscall_64+0xcd/0xfa0 [ 573.153770][T13930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.153785][T13930] RIP: 0033:0x7fb7d4d8eec9 [ 573.153798][T13930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.153819][T13930] RSP: 002b:00007fb7d5b91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.153834][T13930] RAX: ffffffffffffffda RBX: 00007fb7d4fe5fa0 RCX: 00007fb7d4d8eec9 [ 573.153843][T13930] RDX: 0000000000040800 RSI: 00002000000002c0 RDI: 0000000000000006 [ 573.153852][T13930] RBP: 00007fb7d5b91090 R08: 0000000000000000 R09: 0000000000000000 [ 573.153861][T13930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.153870][T13930] R13: 00007fb7d4fe6038 R14: 00007fb7d4fe5fa0 R15: 00007ffd15c8c7b8 [ 573.153892][T13930] [ 573.155198][ T42] usb 6-1: USB disconnect, device number 40 [ 573.179949][T12471] microtek usb (rev 0.4.3): error -19 submitting URB [ 573.189681][T13964] Option 'D' to dns_resolver key: bad/missing value [ 573.261028][ T56] microtek usb (rev 0.4.3): error -19 submitting URB [ 573.986257][T13980] binder: 13979:13980 ioctl 4018620d 0 returned -22 [ 573.997309][T13980] binder: 13979:13980 ioctl c0306201 200000000540 returned -22 [ 574.059256][T13981] binder: 13979:13981 ioctl c0306201 200000000640 returned -22 [ 574.241133][ T42] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 574.424370][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 574.449455][ T42] usb 6-1: config 13 has an invalid interface number: 177 but max is 0 [ 574.464982][ T42] usb 6-1: config 13 has no interface number 0 [ 574.478031][ T42] usb 6-1: config 13 interface 177 has no altsetting 0 [ 574.503985][ T42] usb 6-1: language id specifier not provided by device, defaulting to English [ 574.526036][ T42] usb 6-1: New USB device found, idVendor=0413, idProduct=6f0f, bcdDevice=17.40 [ 574.549474][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.685350][ T42] usb 6-1: Product: syz [ 574.689538][ T42] usb 6-1: Manufacturer: დ⏾삒櫃줴妩ⲻ펱ަ嶪৕⬀뀩슒蹦惢㱒铬穕㖚啣ી靮ᡂ鑌廳ꇗꗄ걝Ჺ䄫졦˅䲨暈嗤ꆫ苞넬牍癢㷭疝嵆᝛橘傡獈쟷뗢汦 [ 574.751607][ T42] usb 6-1: SerialNumber: syz [ 574.989986][T13978] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2269'. [ 575.427384][ T42] usb 6-1: USB disconnect, device number 41 [ 575.713045][T14007] overlayfs: failed to resolve './file0': -2 [ 576.502323][T14019] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 576.510609][T14019] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 576.519107][T14019] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 577.185122][T14022] overlayfs: overlapping lowerdir path [ 577.227773][ T30] audit: type=1400 audit(2000000135.377:1062): avc: denied { connect } for pid=14021 comm="syz.1.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 578.387448][T14038] overlayfs: failed to clone lowerpath [ 578.934381][T14047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2292'. [ 579.341094][ T1207] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 579.521268][ T1207] usb 2-1: Using ep0 maxpacket: 32 [ 579.535477][ T1207] usb 2-1: too many endpoints for config 64 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 579.547195][ T1207] usb 2-1: config 64 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.558609][ T1207] usb 2-1: config 64 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.568959][ T1207] usb 2-1: config 64 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 579.584149][ T1207] usb 2-1: config 64 interface 0 has no altsetting 0 [ 579.591154][ T1207] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 579.600395][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.181124][ T42] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 580.228619][T14066] netlink: 'syz.1.2294': attribute type 21 has an invalid length. [ 580.514489][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.601258][ T42] usb 1-1: device descriptor read/64, error -71 [ 580.851043][ T42] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 581.001355][ T42] usb 1-1: device descriptor read/64, error -71 [ 581.121384][ T42] usb usb1-port1: attempt power cycle [ 581.473523][ T42] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 581.506770][ T42] usb 1-1: device descriptor read/8, error -71 [ 581.961076][ T5925] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 582.032628][ T42] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 582.061875][ T42] usb 1-1: device descriptor read/8, error -71 [ 582.122543][ T5925] usb 6-1: config 0 has no interfaces? [ 582.130322][ T5925] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 582.140458][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 582.149191][ T5925] usb 6-1: Product: syz [ 582.154498][ T5925] usb 6-1: Manufacturer: syz [ 582.159153][ T5925] usb 6-1: SerialNumber: syz [ 582.169228][ T5925] usb 6-1: config 0 descriptor?? [ 582.175190][ T42] usb usb1-port1: unable to enumerate USB device [ 582.837146][T14091] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2305'. [ 583.347106][T14094] binder: 14093:14094 ioctl 4018620d 0 returned -22 [ 583.517836][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.536150][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.545079][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.707567][ T1207] usbhid 2-1:64.0: can't add hid device: -71 [ 583.784580][ T1207] usbhid 2-1:64.0: probe with driver usbhid failed with error -71 [ 583.810629][ T30] audit: type=1400 audit(2000000141.957:1063): avc: denied { setopt } for pid=14079 comm="syz.5.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 583.837580][ T1207] usb 2-1: USB disconnect, device number 59 [ 585.601890][T14120] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 585.610186][T14120] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 585.618670][T14120] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 586.445047][ T30] audit: type=1400 audit(2000000144.577:1064): avc: denied { module_load } for pid=14124 comm="syz.0.2314" path="/sys/kernel/notes" dev="sysfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 586.468912][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.702499][ T1207] usb 6-1: USB disconnect, device number 42 [ 586.748901][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 586.760485][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 586.768463][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 586.776786][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 586.784799][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 587.083527][ T195] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.212421][ T195] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.254102][T14146] netlink: 'syz.5.2320': attribute type 10 has an invalid length. [ 587.266798][T14146] veth0_vlan: left promiscuous mode [ 587.275098][T14146] veth0_vlan: entered promiscuous mode [ 587.282625][T14146] team0: Device veth0_vlan failed to register rx_handler [ 587.295877][T14148] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2320'. [ 587.305750][T14148] net_ratelimit: 10 callbacks suppressed [ 587.305830][T14148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.331464][T14148] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2320'. [ 587.340463][T14148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.363466][ T195] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.394516][T14148] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2320'. [ 587.412123][T14148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.459976][ T195] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.491805][T14148] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2320'. [ 587.500691][T14148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.560509][T14148] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2320'. [ 587.569667][T14148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.649993][T14148] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2320'. [ 587.663182][T14148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.738538][T14148] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2320'. [ 587.750005][T14148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.779678][T14148] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2320'. [ 587.795970][T14148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.865136][ T52] Bluetooth: hci5: command tx timeout [ 589.432695][ T195] smc: removing net device bond0 with user defined pnetid SYZ2 [ 589.442286][ T195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.453237][ T195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.463306][ T195] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 589.472910][ T195] bond0 (unregistering): Released all slaves [ 589.483860][ T195] bond1 (unregistering): Released all slaves [ 589.495060][ T195] bond2 (unregistering): Released all slaves [ 589.507426][T14148] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2320'. [ 589.516389][T14148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.555333][T14132] chnl_net:caif_netlink_parms(): no params data found [ 589.695736][T14190] binder: 14189:14190 ioctl c0306201 200000000540 returned -22 [ 589.754874][T14132] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.759129][T14193] binder: 14189:14193 ioctl c0306201 200000000640 returned -22 [ 589.768021][T14132] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.777090][T14132] bridge_slave_0: entered allmulticast mode [ 589.784396][T14132] bridge_slave_0: entered promiscuous mode [ 589.809167][T14132] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.817412][T14132] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.827364][T14132] bridge_slave_1: entered allmulticast mode [ 589.836183][T14132] bridge_slave_1: entered promiscuous mode [ 589.861105][ T1207] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 589.910188][T14132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.925763][T14132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.968073][ T195] hsr_slave_0: left promiscuous mode [ 589.976980][ T195] hsr_slave_1: left promiscuous mode [ 589.984270][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.992757][ T195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.001380][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.008904][ T195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.032621][ T1207] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 590.035434][ T195] veth0_to_hsr: left allmulticast mode [ 590.049309][ T1207] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 590.049601][ T195] veth0_to_hsr: left promiscuous mode [ 590.066239][ T195] veth1_macvtap: left promiscuous mode [ 590.077443][ T1207] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 590.081296][ T195] veth1_vlan: left promiscuous mode [ 590.088647][ T1207] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 590.101094][ T195] veth0_vlan: left promiscuous mode [ 590.113350][ T1207] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 590.132149][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.148978][ T1207] usb 2-1: Product: syz [ 590.156135][ T1207] usb 2-1: Manufacturer: syz [ 590.160837][ T1207] usb 2-1: SerialNumber: syz [ 590.170627][T14184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 590.204658][ T1207] cdc_mbim 2-1:1.0: skipping garbage [ 590.296299][ T195] pim6reg (unregistering): left allmulticast mode [ 590.422194][T14184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 590.438194][T14184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 590.532182][ T42] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 590.712651][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 590.761310][ T42] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 590.855746][ T42] usb 1-1: config 0 has no interface number 0 [ 590.923591][ T1207] cdc_mbim 2-1:1.0: bind() failure [ 590.931927][ T1207] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 590.940387][ T1207] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 590.948574][ T52] Bluetooth: hci5: command tx timeout [ 590.955000][ T1207] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 590.960293][ T42] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 590.966282][ T1207] usb 2-1: USB disconnect, device number 60 [ 590.974099][ T42] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 590.993440][ T42] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 591.004817][ T42] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 591.015461][ T42] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 591.027546][ T42] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 591.037589][ T42] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 591.047602][ T42] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 12147, setting to 1024 [ 591.059060][ T42] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 591.226913][ T42] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.247971][ T42] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 591.257500][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.265739][ T42] usb 1-1: Product: syz [ 591.269978][ T42] usb 1-1: Manufacturer: syz [ 591.292864][ T42] usb 1-1: SerialNumber: syz [ 591.622220][ T42] usb 1-1: config 0 descriptor?? [ 591.628015][T14200] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 591.636432][T14200] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 591.656343][ T42] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 591.664979][ T42] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 591.694118][ T42] scsi host1: microtekX6 [ 591.695449][T14214] Context (ID=0x0) not attached to queue pair (handle=0x0:0x9) [ 592.081939][ T195] team0 (unregistering): Port device team_slave_1 removed [ 592.159198][ T195] team0 (unregistering): Port device team_slave_0 removed [ 592.297153][T14225] binder: 14224:14225 ioctl 4018620d 0 returned -22 [ 592.683482][ T5925] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 592.724021][T14200] FAULT_INJECTION: forcing a failure. [ 592.724021][T14200] name failslab, interval 1, probability 0, space 0, times 0 [ 592.748661][T14200] CPU: 1 UID: 0 PID: 14200 Comm: syz.0.2334 Not tainted syzkaller #0 PREEMPT(full) [ 592.748686][T14200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 592.748697][T14200] Call Trace: [ 592.748703][T14200] [ 592.748710][T14200] dump_stack_lvl+0x16c/0x1f0 [ 592.748742][T14200] should_fail_ex+0x512/0x640 [ 592.748767][T14200] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 592.748789][T14200] should_failslab+0xc2/0x120 [ 592.748808][T14200] __kvmalloc_node_noprof+0x141/0x9c0 [ 592.748827][T14200] ? alloc_netdev_mqs+0xd7/0x1550 [ 592.748858][T14200] ? __pfx_geneve_setup+0x10/0x10 [ 592.748884][T14200] ? alloc_netdev_mqs+0xd7/0x1550 [ 592.748907][T14200] alloc_netdev_mqs+0xd7/0x1550 [ 592.748938][T14200] rtnl_create_link+0xc08/0xf90 [ 592.748969][T14200] rtnl_newlink+0xb69/0x2000 [ 592.749003][T14200] ? __pfx_rtnl_newlink+0x10/0x10 [ 592.749027][T14200] ? find_held_lock+0x2b/0x80 [ 592.749050][T14200] ? avc_has_perm_noaudit+0x117/0x3b0 [ 592.749077][T14200] ? avc_has_perm_noaudit+0x149/0x3b0 [ 592.749123][T14200] ? find_held_lock+0x2b/0x80 [ 592.749142][T14200] ? __pfx_rtnl_newlink+0x10/0x10 [ 592.749166][T14200] ? __pfx_rtnl_newlink+0x10/0x10 [ 592.749191][T14200] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 592.749217][T14200] ? __pfx_rtnl_newlink+0x10/0x10 [ 592.749243][T14200] rtnetlink_rcv_msg+0x95e/0xe90 [ 592.749270][T14200] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 592.749305][T14200] ? ref_tracker_free+0x37c/0x830 [ 592.749331][T14200] netlink_rcv_skb+0x155/0x420 [ 592.749348][T14200] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 592.749377][T14200] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 592.749404][T14200] ? netlink_deliver_tap+0x1ae/0xd30 [ 592.749435][T14200] netlink_unicast+0x5aa/0x870 [ 592.749455][T14200] ? __pfx_netlink_unicast+0x10/0x10 [ 592.749482][T14200] netlink_sendmsg+0x8c8/0xdd0 [ 592.749502][T14200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.749529][T14200] ____sys_sendmsg+0xa95/0xc70 [ 592.749550][T14200] ? copy_msghdr_from_user+0x10a/0x160 [ 592.749575][T14200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 592.749606][T14200] ___sys_sendmsg+0x134/0x1d0 [ 592.749633][T14200] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.749696][T14200] __sys_sendmsg+0x16d/0x220 [ 592.749721][T14200] ? __pfx___sys_sendmsg+0x10/0x10 [ 592.749765][T14200] do_syscall_64+0xcd/0xfa0 [ 592.749792][T14200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.749810][T14200] RIP: 0033:0x7f9e4e98eec9 [ 592.749823][T14200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.749840][T14200] RSP: 002b:00007f9e4f8fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.749857][T14200] RAX: ffffffffffffffda RBX: 00007f9e4ebe5fa0 RCX: 00007f9e4e98eec9 [ 592.749868][T14200] RDX: 0000000000040800 RSI: 00002000000002c0 RDI: 0000000000000006 [ 592.749879][T14200] RBP: 00007f9e4f8fd090 R08: 0000000000000000 R09: 0000000000000000 [ 592.749889][T14200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.749899][T14200] R13: 00007f9e4ebe6038 R14: 00007f9e4ebe5fa0 R15: 00007fffe9c890d8 [ 592.749926][T14200] [ 593.051770][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.058448][ T52] Bluetooth: hci5: command tx timeout [ 593.069476][ T1207] usb 1-1: USB disconnect, device number 69 [ 593.098840][T14132] team0: Port device team_slave_0 added [ 593.107695][T14132] team0: Port device team_slave_1 added [ 593.166383][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 593.175940][T14132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.177626][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 593.197261][ T5925] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 593.201664][T14132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.206355][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.240361][T14132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.252166][ T5925] usb 2-1: config 0 descriptor?? [ 593.263657][T14229] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 593.296334][T14132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.303391][T14132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.329507][T14132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.371610][T14132] hsr_slave_0: entered promiscuous mode [ 593.377946][T14132] hsr_slave_1: entered promiscuous mode [ 593.385003][T14132] debugfs: 'hsr0' already exists in 'hsr' [ 593.390765][T14132] Cannot create hsr debugfs directory [ 593.432984][ T195] IPVS: stop unused estimator thread 0... [ 593.494465][ T5925] usbhid 2-1:0.0: can't add hid device: -71 [ 593.500520][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 593.529648][ T5925] usb 2-1: USB disconnect, device number 61 [ 593.681171][T14132] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 593.691186][T14132] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 593.711596][T14132] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 593.727905][T14132] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 593.888161][T14132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.916083][T14132] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.928287][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.935427][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.957028][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.964173][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.011612][ T5925] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 594.158117][T14132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.167183][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 594.179932][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 594.181092][ T5874] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 594.201013][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 594.220999][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 594.250994][ T5925] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 594.270995][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.345208][ T5925] usb 2-1: config 0 descriptor?? [ 594.358748][T14229] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 594.422438][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.441160][ T5874] usb 6-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 594.450335][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.473205][ T5874] usb 6-1: config 0 descriptor?? [ 594.595369][T14132] veth0_vlan: entered promiscuous mode [ 594.620870][T14132] veth1_vlan: entered promiscuous mode [ 594.684783][T14132] veth0_macvtap: entered promiscuous mode [ 594.689538][T14246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.699341][T14246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.743975][T14132] veth1_macvtap: entered promiscuous mode [ 594.784052][T14132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.810888][T14132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.821636][ T5925] corsair-psu 0003:1B1C:1C1F.0019: hidraw0: USB HID v0.00 Device [HID 1b1c:1c1f] on usb-dummy_hcd.1-1/input0 [ 594.911495][ T7587] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.949494][ T3582] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.962940][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.146883][T10417] Bluetooth: hci5: command tx timeout [ 595.163436][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.175322][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.224753][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.281774][ T5925] corsair-psu 0003:1B1C:1C1F.0019: unable to initialize device (-71) [ 595.312810][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.330184][ T5925] corsair-psu 0003:1B1C:1C1F.0019: probe with driver corsair-psu failed with error -71 [ 595.352332][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.369621][ T5925] usb 2-1: USB disconnect, device number 62 [ 595.799162][T14279] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 595.807652][T14279] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 595.816174][T14279] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 596.524309][T14285] netlink: 'syz.2.2353': attribute type 1 has an invalid length. [ 598.321093][ T42] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 598.354435][T14304] FAULT_INJECTION: forcing a failure. [ 598.354435][T14304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.368040][T14304] CPU: 0 UID: 0 PID: 14304 Comm: syz.6.2356 Not tainted syzkaller #0 PREEMPT(full) [ 598.368065][T14304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 598.368076][T14304] Call Trace: [ 598.368082][T14304] [ 598.368092][T14304] dump_stack_lvl+0x16c/0x1f0 [ 598.368122][T14304] should_fail_ex+0x512/0x640 [ 598.368153][T14304] _copy_to_user+0x32/0xd0 [ 598.368182][T14304] simple_read_from_buffer+0xcb/0x170 [ 598.368210][T14304] proc_fail_nth_read+0x197/0x240 [ 598.368232][T14304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.368252][T14304] ? rw_verify_area+0xcf/0x6c0 [ 598.368276][T14304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.368295][T14304] vfs_read+0x1e4/0xcf0 [ 598.368325][T14304] ? __pfx___mutex_lock+0x10/0x10 [ 598.368351][T14304] ? __pfx_vfs_read+0x10/0x10 [ 598.368384][T14304] ? __fget_files+0x20e/0x3c0 [ 598.368399][T14304] ? __kvm_handle_async_pf+0x70/0xb0 [ 598.368431][T14304] ksys_read+0x12a/0x250 [ 598.368446][T14304] ? __pfx_ksys_read+0x10/0x10 [ 598.368476][T14304] do_syscall_64+0xcd/0xfa0 [ 598.368503][T14304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.368520][T14304] RIP: 0033:0x7fd00258d8dc [ 598.368533][T14304] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 598.368550][T14304] RSP: 002b:00007fd0007f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 598.368567][T14304] RAX: ffffffffffffffda RBX: 00007fd0027e6090 RCX: 00007fd00258d8dc [ 598.368578][T14304] RDX: 000000000000000f RSI: 00007fd0007f60a0 RDI: 0000000000000005 [ 598.368587][T14304] RBP: 00007fd0007f6090 R08: 0000000000000000 R09: 0000000000000000 [ 598.368598][T14304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.368608][T14304] R13: 00007fd0027e6128 R14: 00007fd0027e6090 R15: 00007fff2b281798 [ 598.368634][T14304] [ 598.371495][T14285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 599.029930][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 599.221501][T14318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2358'. [ 599.293388][ T5874] usbhid 6-1:0.0: can't add hid device: -71 [ 599.299400][ T5874] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 599.313678][ T5874] usb 6-1: USB disconnect, device number 43 [ 599.512263][ T30] audit: type=1400 audit(2000000157.667:1065): avc: denied { bind } for pid=14314 comm="syz.0.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 599.929269][ T5925] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 600.456477][T14334] tipc: Disabling bearer [ 600.542423][T10417] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 600.771175][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 600.784485][ T5925] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 600.801199][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.814026][ T5925] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=5f.0a [ 600.842023][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.870523][ T5925] usb 1-1: Product: syz [ 600.883673][ T5925] usb 1-1: Manufacturer: syz [ 600.896751][ T5925] usb 1-1: SerialNumber: syz [ 600.914598][ T5925] usb 1-1: config 0 descriptor?? [ 601.075598][T14340] binder: 14338:14340 ioctl c0306201 0 returned -14 [ 601.300744][T14320] bridge2: entered promiscuous mode [ 602.045897][ T30] audit: type=1400 audit(2000000160.197:1066): avc: denied { watch watch_reads } for pid=14351 comm="syz.2.2370" path="/582/file1" dev="tmpfs" ino=3055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 602.069628][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.085622][T14363] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=49 sclass=netlink_xfrm_socket pid=14363 comm=syz.1.2368 [ 602.110854][ T30] audit: type=1400 audit(2000000160.197:1067): avc: denied { write } for pid=14351 comm="syz.2.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 602.521009][ T42] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 602.672000][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 602.735742][ T42] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 602.746362][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 602.754727][ T42] usb 2-1: Product: syz [ 602.778750][ T42] usb 2-1: Manufacturer: syz [ 602.788838][ T42] usb 2-1: SerialNumber: syz [ 602.854059][ T42] usb 2-1: config 0 descriptor?? [ 602.866186][ T42] gspca_main: sq905-2.14.0 probing 2770:9120 [ 603.143564][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2374'. [ 603.190988][T14377] macsec1: entered promiscuous mode [ 603.196306][T14377] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 603.501161][ T5867] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 603.546492][ T5925] usb 1-1: USB disconnect, device number 70 [ 603.742646][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 603.754178][ T5867] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 603.763742][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.235963][ T5867] usb 6-1: Product: syz [ 604.244810][ T5867] usb 6-1: Manufacturer: syz [ 604.251011][ T5867] usb 6-1: SerialNumber: syz [ 604.262525][ T5867] usb 6-1: config 0 descriptor?? [ 604.421068][ T42] gspca_sq905: bulk read fail (-22) len 0/4 [ 604.505786][ T42] sq905 2-1:0.0: probe with driver sq905 failed with error -5 [ 604.665634][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 604.682327][ T1207] usb 2-1: USB disconnect, device number 64 [ 604.830990][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 605.269472][ T10] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 605.277829][ T10] usb 7-1: config 0 has no interface number 0 [ 605.285986][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 605.296907][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.304976][ T10] usb 7-1: Product: syz [ 605.309264][ T10] usb 7-1: Manufacturer: syz [ 605.313951][ T10] usb 7-1: SerialNumber: syz [ 605.321281][ T10] usb 7-1: config 0 descriptor?? [ 605.328347][ T10] smsc95xx v2.0.0 [ 605.621055][ T1207] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 605.736742][ T30] audit: type=1326 audit(2000000163.887:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14396 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e98eec9 code=0x7ffc0000 [ 605.767360][ T30] audit: type=1326 audit(2000000163.917:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14396 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e98eec9 code=0x7ffc0000 [ 605.866986][ T1207] usb 2-1: device descriptor read/64, error -71 [ 606.420799][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 606.427978][ T5867] snd-usb-6fire 6-1:0.0: unable to receive device firmware state. [ 606.432187][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 606.451055][ T5867] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 606.469743][ T5867] usb 6-1: USB disconnect, device number 44 [ 606.571007][ T1207] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 606.763858][ T1207] usb 2-1: device descriptor read/64, error -71 [ 606.946320][ T1207] usb usb2-port1: attempt power cycle [ 606.996495][T14417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.113373][ T5867] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 607.271638][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 607.278475][ T5867] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 607.287067][ T5867] usb 6-1: config 0 has no interface number 0 [ 607.295728][ T5867] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 607.305087][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.313936][ T5867] usb 6-1: Product: syz [ 607.319122][ T5867] usb 6-1: Manufacturer: syz [ 607.325294][ T5867] usb 6-1: SerialNumber: syz [ 607.331171][ T1207] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 607.344570][ T5867] usb 6-1: config 0 descriptor?? [ 607.351933][ T5867] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 607.361452][ T1207] usb 2-1: device descriptor read/8, error -71 [ 607.401084][ T42] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 607.551080][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 607.565907][ T42] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 607.611080][ T1207] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 607.611135][ T42] usb 1-1: config 0 has no interface number 0 [ 607.639522][ T5867] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 607.651978][ T42] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 607.663674][ T1207] usb 2-1: device descriptor read/8, error -71 [ 607.663724][ T5867] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 607.680890][ T42] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 607.696009][ T42] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 607.733768][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 607.769851][ T42] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 607.788766][ T1207] usb usb2-port1: unable to enumerate USB device [ 607.791233][ T42] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 607.810096][ T42] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 607.820239][ T42] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 607.820431][ T10] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 607.830696][ T42] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 12147, setting to 1024 [ 607.958991][ T42] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 607.969511][ T42] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.992571][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 608.000650][ T5867] usb 6-1: USB disconnect, device number 45 [ 608.011547][ T5867] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 608.026181][ T42] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 608.038752][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.041417][ T10] usb 7-1: USB disconnect, device number 2 [ 608.152556][T14429] smc: net device bond0 applied user defined pnetid SYZ2 [ 608.467553][ T42] usb 1-1: Product: syz [ 608.471807][ T42] usb 1-1: Manufacturer: syz [ 608.476402][ T42] usb 1-1: SerialNumber: syz [ 608.487613][ T5867] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 608.509502][ T42] usb 1-1: config 0 descriptor?? [ 608.523123][T14421] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 608.531281][ T5867] quatech2 6-1:0.51: device disconnected [ 608.538193][T14421] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 608.558976][ T42] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 608.571065][ T42] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 608.598999][ T42] scsi host1: microtekX6 [ 608.815329][T14421] geneve3: entered promiscuous mode [ 608.820544][T14421] geneve3: entered allmulticast mode [ 608.906564][T14436] netlink: 'syz.1.2388': attribute type 2 has an invalid length. [ 608.914752][T14436] netlink: 'syz.1.2388': attribute type 1 has an invalid length. [ 608.924336][T14436] netlink: 'syz.1.2388': attribute type 1 has an invalid length. [ 609.332245][T10417] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 609.339859][ T5867] usb 1-1: USB disconnect, device number 71 [ 610.393393][T14460] binder: 14459:14460 ioctl c0306201 200000000540 returned -22 [ 610.454363][T14461] binder: 14459:14461 ioctl c0306201 200000000640 returned -22 [ 610.641014][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 610.801076][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 610.812710][ T10] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 610.824369][ T10] usb 2-1: config 0 has no interface number 0 [ 610.830481][ T10] usb 2-1: config 0 interface 249 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 610.889315][ T10] usb 2-1: config 0 interface 249 has no altsetting 0 [ 610.976085][ T10] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1 [ 610.985619][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.994167][ T10] usb 2-1: Product: syz [ 610.998807][ T10] usb 2-1: Manufacturer: syz [ 611.003998][ T10] usb 2-1: SerialNumber: syz [ 611.012462][ T10] usb 2-1: config 0 descriptor?? [ 611.018992][T14457] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 611.030199][ T10] aircable 2-1:0.249: aircable converter detected [ 611.038949][ T10] usb 2-1: aircable converter now attached to ttyUSB0 [ 611.206492][ T30] audit: type=1400 audit(2000000169.357:1070): avc: denied { setopt } for pid=14456 comm="syz.2.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 611.276095][T14451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.287671][T14451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.388178][T14474] bridge3: entered allmulticast mode [ 611.666794][ T42] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 611.901235][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 611.908125][ T42] usb 7-1: config 0 interface 0 has no altsetting 0 [ 611.916918][ T42] usb 7-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 611.931085][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.417359][ T42] usb 7-1: config 0 descriptor?? [ 612.456323][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2404'. [ 612.466893][T14487] bridge_slave_1: left allmulticast mode [ 612.472902][T14487] bridge_slave_1: left promiscuous mode [ 612.478641][T14487] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.499056][T14487] : left allmulticast mode [ 612.505253][T14487] : left promiscuous mode [ 612.510251][T14487] bridge0: port 1() entered disabled state [ 613.297353][T14490] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 613.310677][T14493] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 613.319155][T14493] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 613.324857][ T42] usbhid 7-1:0.0: can't add hid device: -71 [ 613.327620][T14493] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 613.341673][T10417] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 613.350483][T10417] Bluetooth: hci1: Injecting HCI hardware error event [ 613.359690][T10417] Bluetooth: hci1: hardware error 0x00 [ 613.448073][ T42] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 613.458805][ T42] usb 7-1: USB disconnect, device number 3 [ 613.550789][ T5867] usb 2-1: USB disconnect, device number 69 [ 614.217892][T14498] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 614.226151][T14498] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 614.234593][T14498] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 614.271778][ T5867] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 614.330479][ T5867] aircable 2-1:0.249: device disconnected [ 615.166839][T14523] netlink: 'syz.2.2411': attribute type 3 has an invalid length. [ 615.195487][T14523] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2411'. [ 615.282382][ T5867] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 615.421135][T10417] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 615.431040][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 615.444915][ T5867] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 615.481377][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 615.518161][ T5867] usb 6-1: Product: syz [ 615.554718][ T5867] usb 6-1: Manufacturer: syz [ 615.569511][ T5867] usb 6-1: SerialNumber: syz [ 615.578705][ T5867] usb 6-1: config 0 descriptor?? [ 615.596285][ T5867] gspca_main: sq905-2.14.0 probing 2770:9120 [ 616.215150][T14536] overlayfs: failed to clone lowerpath [ 616.309778][T14536] overlayfs: failed to clone lowerpath [ 617.089900][ T5867] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 617.097544][ T5867] sq905 6-1:0.0: probe with driver sq905 failed with error -110 [ 617.134064][T14541] loop2: detected capacity change from 0 to 7 [ 617.302999][T14549] bridge0: port 3(team0) entered blocking state [ 617.309674][T14549] bridge0: port 3(team0) entered disabled state [ 617.316812][T14549] team0: entered allmulticast mode [ 617.321999][T14549] team_slave_0: entered allmulticast mode [ 617.327751][T14549] team_slave_1: entered allmulticast mode [ 617.344130][T14549] team0: entered promiscuous mode [ 617.349218][T14549] team_slave_0: entered promiscuous mode [ 617.356401][T14549] team_slave_1: entered promiscuous mode [ 617.364808][T14549] bridge0: port 3(team0) entered blocking state [ 617.371162][T14549] bridge0: port 3(team0) entered forwarding state [ 617.456016][T14549] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2419'. [ 617.574757][ T30] audit: type=1400 audit(2000000175.277:1071): avc: denied { getopt } for pid=14540 comm="syz.1.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 617.578881][T14541] Dev loop2: unable to read RDB block 7 [ 617.598777][ T30] audit: type=1400 audit(2000000175.277:1072): avc: denied { link } for pid=14540 comm="syz.1.2418" name="file1" dev="tmpfs" ino=2367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 617.621203][T14541] loop2: unable to read partition table [ 617.624599][ T30] audit: type=1400 audit(2000000175.277:1073): avc: denied { setattr } for pid=14540 comm="syz.1.2418" name="#29" dev="tmpfs" ino=2368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 617.630445][T14541] loop2: partition table beyond EOD, [ 617.651985][ C1] vkms_vblank_simulate: vblank timer overrun [ 617.657580][ T30] audit: type=1400 audit(2000000175.277:1074): avc: denied { rename } for pid=14540 comm="syz.1.2418" name="#29" dev="tmpfs" ino=2368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 617.668198][T14541] truncated [ 617.827160][T14541] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 617.883704][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2420'. [ 619.089188][T14573] netlink: 'syz.6.2427': attribute type 4 has an invalid length. [ 619.097153][T14573] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2427'. [ 619.172991][T14573] : renamed from bond0 (while UP) [ 619.392352][ T10] usb 6-1: USB disconnect, device number 46 [ 619.440665][ T30] audit: type=1400 audit(2000000177.587:1075): avc: denied { getopt } for pid=14574 comm="syz.1.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 620.311489][ T30] audit: type=1400 audit(2000000177.717:1076): avc: denied { ioctl } for pid=14574 comm="syz.1.2428" path="socket:[52299]" dev="sockfs" ino=52299 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 620.632387][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2429'. [ 620.697711][T14592] binder: 14591:14592 ioctl c0306201 200000000540 returned -22 [ 620.871210][T14597] binder: 14591:14597 ioctl c0306201 200000000640 returned -22 [ 621.021099][T14600] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 621.029409][T14600] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 621.038535][T14600] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 621.477088][T14605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2437'. [ 621.495111][T14605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2437'. [ 621.580275][T14605] ------------[ cut here ]------------ [ 621.586121][T14605] WARNING: CPU: 0 PID: 14605 at mm/page_alloc.c:5159 __alloc_frozen_pages_noprof+0x309/0x2470 [ 621.596412][T14605] Modules linked in: [ 621.600461][T14605] CPU: 0 UID: 0 PID: 14605 Comm: syz.0.2437 Not tainted syzkaller #0 PREEMPT(full) [ 621.609844][T14605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 621.619903][T14605] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2470 [ 621.626580][T14605] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d c0 3c 54 0e 00 75 0b c6 05 b7 3c 54 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 621.646410][T14605] RSP: 0018:ffffc900047277c8 EFLAGS: 00010246 [ 621.652784][T14605] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 621.661180][T14605] RDX: 0000000000000000 RSI: 000000000000001c RDI: 0000000000040d40 [ 621.669893][T14605] RBP: 000000000000001c R08: 0000000000000005 R09: 0000000000000009 [ 621.678389][T14605] R10: 000000000000001c R11: ffffffff8b64a12d R12: 0000000000040d40 [ 621.686843][T14605] R13: 1ffff920008e4f0f R14: ffffffff9ab57424 R15: 000000000000001c [ 621.695170][T14605] FS: 00007f9e4f8fd6c0(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 621.704462][T14605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 621.711419][T14605] CR2: 00007fb7d4d72b60 CR3: 00000000493cb000 CR4: 00000000003526f0 [ 621.719394][T14605] Call Trace: [ 621.723026][T14605] [ 621.725956][T14605] ? path_mount+0x7b9/0x23a0 [ 621.730549][T14605] ? __x64_sys_mount+0x293/0x310 [ 621.735666][T14605] ? do_syscall_64+0xcd/0xfa0 [ 621.740348][T14605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.746512][T14605] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 621.752899][T14605] ? kasan_quarantine_put+0x10a/0x240 [ 621.758289][T14605] ? lockdep_hardirqs_on+0x7c/0x110 [ 621.763534][T14605] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 621.769439][T14605] ? policy_nodemask+0xea/0x4e0 [ 621.774357][T14605] alloc_pages_mpol+0x1fb/0x550 [ 621.779222][T14605] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 621.784642][T14605] ___kmalloc_large_node+0xed/0x160 [ 621.789854][T14605] __kmalloc_large_node_noprof+0x1c/0x70 [ 621.795532][T14605] __kmalloc_noprof.cold+0xc/0x62 [ 621.800573][T14605] ? v9fs_fid_get_acl+0x7a/0x120 [ 621.805541][T14605] ? v9fs_fid_get_acl+0x7a/0x120 [ 621.810483][T14605] v9fs_fid_get_acl+0x7a/0x120 [ 621.815328][T14605] v9fs_get_acl+0xee/0x530 [ 621.819753][T14605] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 621.825325][T14605] v9fs_mount+0x4fd/0xa90 [ 621.829661][T14605] ? __pfx_v9fs_mount+0x10/0x10 [ 621.834556][T14605] ? cap_capable+0xb3/0x250 [ 621.839068][T14605] ? __pfx_v9fs_mount+0x10/0x10 [ 621.843945][T14605] legacy_get_tree+0x10c/0x220 [ 621.848693][T14605] vfs_get_tree+0x8e/0x340 [ 621.853141][T14605] path_mount+0x7b9/0x23a0 [ 621.857551][T14605] ? __pfx_path_mount+0x10/0x10 [ 621.862548][T14605] ? kmem_cache_free+0x2d4/0x6c0 [ 621.867481][T14605] ? putname+0x154/0x1a0 [ 621.871722][T14605] ? putname+0x154/0x1a0 [ 621.875954][T14605] ? putname+0x154/0x1a0 [ 621.880192][T14605] ? __x64_sys_mount+0x293/0x310 [ 621.885129][T14605] __x64_sys_mount+0x293/0x310 [ 621.889875][T14605] ? __pfx___x64_sys_mount+0x10/0x10 [ 621.895202][T14605] do_syscall_64+0xcd/0xfa0 [ 621.899692][T14605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.905776][T14605] RIP: 0033:0x7f9e4e98eec9 [ 621.910176][T14605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.929824][T14605] RSP: 002b:00007f9e4f8fd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 621.938247][T14605] RAX: ffffffffffffffda RBX: 00007f9e4ebe5fa0 RCX: 00007f9e4e98eec9 [ 621.946224][T14605] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 621.954217][T14605] RBP: 00007f9e4ea11f91 R08: 0000200000000500 R09: 0000000000000000 [ 621.962193][T14605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.970145][T14605] R13: 00007f9e4ebe6038 R14: 00007f9e4ebe5fa0 R15: 00007fffe9c890d8 [ 621.978150][T14605] [ 621.981188][T14605] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 621.988446][T14605] CPU: 0 UID: 0 PID: 14605 Comm: syz.0.2437 Not tainted syzkaller #0 PREEMPT(full) [ 621.997800][T14605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 622.007831][T14605] Call Trace: [ 622.011089][T14605] [ 622.013997][T14605] dump_stack_lvl+0x3d/0x1f0 [ 622.018571][T14605] vpanic+0x640/0x6f0 [ 622.022548][T14605] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 622.028594][T14605] panic+0xca/0xd0 [ 622.032302][T14605] ? __pfx_panic+0x10/0x10 [ 622.036735][T14605] check_panic_on_warn+0xab/0xb0 [ 622.041673][T14605] __warn+0xf6/0x3c0 [ 622.045569][T14605] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 622.051640][T14605] report_bug+0x3c3/0x580 [ 622.055952][T14605] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 622.062006][T14605] handle_bug+0x184/0x210 [ 622.066330][T14605] exc_invalid_op+0x17/0x50 [ 622.070811][T14605] asm_exc_invalid_op+0x1a/0x20 [ 622.075638][T14605] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2470 [ 622.082296][T14605] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d c0 3c 54 0e 00 75 0b c6 05 b7 3c 54 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 622.101883][T14605] RSP: 0018:ffffc900047277c8 EFLAGS: 00010246 [ 622.107958][T14605] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 622.115907][T14605] RDX: 0000000000000000 RSI: 000000000000001c RDI: 0000000000040d40 [ 622.123860][T14605] RBP: 000000000000001c R08: 0000000000000005 R09: 0000000000000009 [ 622.131816][T14605] R10: 000000000000001c R11: ffffffff8b64a12d R12: 0000000000040d40 [ 622.139776][T14605] R13: 1ffff920008e4f0f R14: ffffffff9ab57424 R15: 000000000000001c [ 622.147731][T14605] ? do_syscall_64+0xcd/0xfa0 [ 622.152399][T14605] ? vfs_get_tree+0x8e/0x340 [ 622.156971][T14605] ? path_mount+0x7b9/0x23a0 [ 622.161546][T14605] ? __x64_sys_mount+0x293/0x310 [ 622.166487][T14605] ? do_syscall_64+0xcd/0xfa0 [ 622.171149][T14605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.177200][T14605] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 622.183523][T14605] ? kasan_quarantine_put+0x10a/0x240 [ 622.188883][T14605] ? lockdep_hardirqs_on+0x7c/0x110 [ 622.194080][T14605] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 622.199954][T14605] ? policy_nodemask+0xea/0x4e0 [ 622.204801][T14605] alloc_pages_mpol+0x1fb/0x550 [ 622.209632][T14605] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 622.215000][T14605] ___kmalloc_large_node+0xed/0x160 [ 622.220179][T14605] __kmalloc_large_node_noprof+0x1c/0x70 [ 622.225793][T14605] __kmalloc_noprof.cold+0xc/0x62 [ 622.230802][T14605] ? v9fs_fid_get_acl+0x7a/0x120 [ 622.235718][T14605] ? v9fs_fid_get_acl+0x7a/0x120 [ 622.240651][T14605] v9fs_fid_get_acl+0x7a/0x120 [ 622.245402][T14605] v9fs_get_acl+0xee/0x530 [ 622.249807][T14605] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 622.255328][T14605] v9fs_mount+0x4fd/0xa90 [ 622.259638][T14605] ? __pfx_v9fs_mount+0x10/0x10 [ 622.264469][T14605] ? cap_capable+0xb3/0x250 [ 622.268974][T14605] ? __pfx_v9fs_mount+0x10/0x10 [ 622.273826][T14605] legacy_get_tree+0x10c/0x220 [ 622.278567][T14605] vfs_get_tree+0x8e/0x340 [ 622.282975][T14605] path_mount+0x7b9/0x23a0 [ 622.287392][T14605] ? __pfx_path_mount+0x10/0x10 [ 622.292238][T14605] ? kmem_cache_free+0x2d4/0x6c0 [ 622.297155][T14605] ? putname+0x154/0x1a0 [ 622.301386][T14605] ? putname+0x154/0x1a0 [ 622.305607][T14605] ? putname+0x154/0x1a0 [ 622.309827][T14605] ? __x64_sys_mount+0x293/0x310 [ 622.314738][T14605] __x64_sys_mount+0x293/0x310 [ 622.319477][T14605] ? __pfx___x64_sys_mount+0x10/0x10 [ 622.324744][T14605] do_syscall_64+0xcd/0xfa0 [ 622.329231][T14605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.335100][T14605] RIP: 0033:0x7f9e4e98eec9 [ 622.339488][T14605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.359071][T14605] RSP: 002b:00007f9e4f8fd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 622.367471][T14605] RAX: ffffffffffffffda RBX: 00007f9e4ebe5fa0 RCX: 00007f9e4e98eec9 [ 622.375417][T14605] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 622.383367][T14605] RBP: 00007f9e4ea11f91 R08: 0000200000000500 R09: 0000000000000000 [ 622.391313][T14605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.399258][T14605] R13: 00007f9e4ebe6038 R14: 00007f9e4ebe5fa0 R15: 00007fffe9c890d8 [ 622.407218][T14605] [ 622.410433][T14605] Kernel Offset: disabled [ 622.414731][T14605] Rebooting in 86400 seconds..