last executing test programs: 2m37.873823013s ago: executing program 4 (id=1262): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x404, @loopback}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x9ab46000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2008, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003c7e732e7a0018110000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x9, 0x803, 0x0) r6 = socket(0x200000100000011, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000010) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003cc0)=[{{&(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000680)="3e8de4c71179aafe81307f03763fe7a989fe99a1d4af35a8b59d4b5f43c8afc8a72b28a113ed4cbb8b5f3f2ac167c431cdfcb7416e345ffa03101f4640592483b9b3b8868923e70f4f2eef37d5401b7e14ba659d08a7ec9b3a8d81d4d1b1c1d6f59426fd8c75dbc4a5f032538139e6e8e564ab3892280898f955c278c58d43a1e4dd80bba1d2a63bd2b66c0d3c29f2955f9bd9171723c8522b92a03fd0f0d78b4e6a3d6fbf59e3e8", 0xa8}, {&(0x7f0000000740)="d34128238b301e6f7fbe3873ce6795057de40c88b8180004818df381bb11b8bfca000748b8c8e6279528f189ae7a7aa07c97237ba5b1e23485c2d941eaf7705462d0aa724061c10ae331032a410e6479f854218f0ed2240f11ee05b7ed6b83b4646ae4d019e9ba3306579374619c78ef9a4cbcbdcd6c67395b3aad99a61534832a0c37a91cb53c39062e79584eaa8193be", 0x91}, {&(0x7f0000000500)="da94e4a1a00dee173ca61f22e5f632d3bdd83b09d08a369a356d4ffa7e04e4b33ad42a503149", 0x26}], 0x3, &(0x7f0000000840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x48}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000900)="4819ecb3dcb8d4b7ee54b9dda61530bed058ee7f2378f9b02e11b3d27efcf444191c1868d6f9177998a2147eee0f1348cf5132ebdd189339ef6870878c453ec858d1b7ff58ecb28e8c1071d6c1a6922e2c49efc06de4b73b08318fc815e35ad572f45eb2d8ffa3c127ef77e09af05f67cbd1619cbbd2e34422dcae89ec798e7badfd5931cf8a8ab82c8ba5feae5965744f2a2c12508a06221f045b4ba1b41c807133ab1992ff7edd", 0xa8}, {&(0x7f0000000a00)="872b50669f76478ce088c5872bf2e2dbe169269f817dd805239a77210b25fbaadb114bbc021a4934341c66ec5370beeb", 0x30}, {&(0x7f0000000a40)="6ecb25e07f74ccef0b3dd4ab0df89cb6e5f2452de26d4d28df92e3c77a073121e0a6c72d5342ddca8cf4fa95ffc48a845764316c01fc020b", 0x38}, {&(0x7f0000000a80)="2e6f38f2607bcec7784589bab1f9ce81e0d289c81322f1d18ff7dd0ec62c6afbd189fc6352ba4cdbf759cbe532db0bff7cab116b6ac6fa6a2b77f2d20f58c0cbb50307365d80aa464f1141ecff84f70cf9081b178021c994cbd747e30891770250120311b95fdf2604452f0350d861282f6466a1ec7d1008a17e1443874954b833d35dc79481fb9c41b4da8c", 0x8c}], 0x4, &(0x7f0000000b80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @end, @generic={0x82, 0xb, "3f7f801472e9b38d36"}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xad, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x17, 0xa3, [@dev={0xac, 0x14, 0x14, 0x3e}, @broadcast, @local, @multicast2, @rand_addr=0x64010102]}, @generic={0x89, 0x7, "c380b3b645"}, @generic={0x82, 0xd, "bc9cc58d27ee6807376951"}, @lsrr={0x83, 0x17, 0xb8, [@private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x36}, @empty, @multicast1]}, @rr={0x7, 0x7, 0xc7, [@empty]}, @timestamp={0x44, 0x4, 0x88, 0x0, 0x9}]}}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)="d701f516d6642a0a95045ac3ad448c0121bf440533b4490c95e457585b96a1fc4d95b4c47cd02501ee614955261b33172da1d331625c2e9d5e624209e4aec9b55f7e19d657111b08791d2a40ceed87c00e20d7b7758bfb791c6d1625e3fdb1ec0c2508dee8177a92807a13786733ad9e0ff69ffaae7f8200577c3b974059b8d9df070a08126d95087b0859c8a871239d239d56a476e5fbff1fe27ae8d68d9707", 0xa0}, {&(0x7f0000000d80)="d4178739aa70142b0b8a9169f19dea5b07cc549bd867ce066f74e09465afddc587e6ade504d80008ae447b1552e16054b2527583bd85099835e3c947be88e7b3b43094db48939a39fd95c9dd8a42746d647cfaa2", 0x54}, {&(0x7f0000000e00)="cd71dd268a23d55524a2894474ab225b72da1f0159b273e65ab5e28c673240f2840409fc56cdee20443c112cbc6423150520ed276ee9e056272bc7cde32912a8c1287b2b61631a7d7a355a91c1953e4be05211", 0x53}], 0x3, &(0x7f0000000ec0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001040)="c2770e448a91d2e57fb3645bf44117198cd94dbab8692def0ab68862c02a4f2025981f406b74614665a87c21f128ea6ece6bf0641bb3fc03c8c20fb2ccff164d25a41ae7ddf29f4ffd54733a89018c211a8bdeb52d7009e4259f90983f544be8f3cf390aa98716e4f7f2dad1549186739e6b0eb3f920b88e8499eb39a3e02a39ecd66d022fdb48c03700e464cdf0abcb1fe8b7e7efe7d9bcf30b1604dd9bc49cdb1c020fed3e28d9e11351979688293c3d9e9caf49001cc9af712f", 0xbb}, {&(0x7f0000001100)="12f5bf141c6565ac0c641624a1e022743c951f77c85365b4e893235c83c6e80c8431cab4c80c4df0567524c7c9e117699da17f209d1d97c9866c025eea33f9dd60e8da31168a8bd079b85ddeee1b81c271bc3d6288793adaa1100e5ce51364f27de42251d1e5b1458a14222e5b6f1791119916b1c78d9e876ab4554658643c01106e097e95b860", 0x87}, {&(0x7f00000011c0)="f5752d8fc36e79ee46d52c2b69f72d04749eca6ae4f45aa937bd52b28922822c57ee92c5a17c382dcb3a8b5b870e82535b1c0ddd5b1964fbd87d35e796993ce3b397db6d47494a3c7e7cd73619144cbed5b55c13c1a30f9b189127f68235d91de6ee54237961811754adfe4711445e8ec559d9957c71ef7ebd9d657ed142ce8e5f2d90", 0x83}, {&(0x7f0000001280)="02901f906086cf76702cf5f5a3b09be7161d631929175d9075c545f7543c78f266d2f78cb1418b46c374d7525f448976b96c986db639ee1011b0edd6e88ccd1e8ed6df62861f35a20e53ffcd47575b9f4093cc289aca1ad0ee84ab483c86ab194f5b4fe4bd1cbf986d1cbe8983d2a0042b7f492b84a768a28c960e0a24fc6c58", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000002680)="855b3d15820f107c48a5addff2988d5232f7df5eeb2fe46a3ff39a0a8163b1d601a1aa58e512d57ee97cf0b4e7cbac572f4b46a161302789a6dabe78139adf072abb08d86bb50725ff1ef5806e4c9443d9570be0146b7685d378153c6d112f49973c4fac2ccd0608aa08790d57ae6ea5e4e64129995a7ab33efbd84f4d608ad4482c6f3a3af7c411b06f84a025baf0c98e5705bdfb5afd94fed7a8287228715caddc0cb443f0607aabac571c1e623f01968e594ff7111d9fa6c89a96d11f09686cf45018e89d9cd82129b74be22cde745c828af99e0dd62fef2d50d97358a3e769a2052c491e82f82b", 0xe9}, {&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000003780)="138b3db781d266bb3039cc1401af0393a5a0b75a565537e5be7adade38c88aa2cb5b3f41b17d0849cc383be5a55b91ed5679d2189cfa6ea1a793ad3b943a77349fd74b7900deab765c9e40e84df402c9a38af749ad29da2f79689b788966a3f09ead921d5a72472ee5c4f02cc37b6f27ce8980bb2a44d2a2eb31b5c532ecdbfb135a135a6c19dda876fde816a58727ce92912d5582eadc", 0x97}, {&(0x7f0000003840)="f9f23bac760e4a263a229e3179b10bc4bde9e9f2dd1e8609243ba2cd7a37e2721e3d25a9ce6c6a34882f1d584c3fc01ffa548e3204226b365b95b0b37cb66b8124edcfb378646707116fc0d083e14a62024c65e3074b491366596796d4", 0x5d}, {&(0x7f00000038c0)="0dd881491455aeca14013503cd4da079e7c264a5d41f34f3be52026e56ab8ffdbeeaaf2b2f979dbf2b0060cdbef8df2bff74d05033825efc296a83fded407b4425e8adc624f155fac523723662a8621dd1e9d8f463ba98", 0x57}], 0x5, &(0x7f0000003e80)=ANY=[@ANYRES32=r8, @ANYBLOB], 0x128}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003ac0)="36836dd69f1aa3a7e54f01728bdfb39fc93289f82bc9c3feb859f7b278e460f55b2ad308cd3d9919177900820f55332cb367775db7ceb8a37c13d6ef9f0931f1cece8c8d4f2d0af07fb9498b486a989a4a2c14", 0x53}], 0x1, &(0x7f0000003b80)=ANY=[@ANYBLOB="11000000000000000000000001000000090000000000000014000000000000000000000007000000940400000000000014000000000000000000000002000000000000000000000014000000000000000000000002000000040000000000010400000000000000000000000001000000000000000000000014000000000000000000000001000000020000000000000050000000000000000000000007000000441c9e0000000f247fffffff000000000000000700000000000000000001071fcc7f0000017f000001e00000017f0000017f000001e0000001e0000002000000140000000000000000000000010000000400000000000000"], 0xf8}}], 0x6, 0x0) 2m36.760344243s ago: executing program 4 (id=1264): socket$isdn_base(0x22, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x6, 0x0, 0x86, 0x7fff0002}, {0xdd, 0xc, 0xf7, 0x2}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getrandom(0x0, 0x0, 0x3) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f7a7e40720c8600972201020101"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0xb00000000000000}}]}, 0x28}}, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa"], 0x0) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000480)="660f3808d066b99e0a00000f32b807008ec00f01d10f28870090263e0f01ca0f01df66b98e0200000f32f30f09b8630e8ee0", 0x32}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) gettid() 2m32.536926406s ago: executing program 4 (id=1297): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0xf997, 0x800, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0xf00) r5 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r5, r1) 2m32.309944617s ago: executing program 4 (id=1299): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_pidfd_open(r3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4800) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000340)=0xfffffffc) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="58b6e071026006426dec2bacb918d88844dd506fdfbd962392eb78ac66dd1e925e644e83c29d31a088c8f535e84a362d27aa7d58f7fadcb195a880ac8820ef5f0f3f5460d48314e00839e6d23f4e8fb2a2cf166767325f685d87f3693a48d0ba372fd017f466f84812ef918fffe78cbf240044ad3b34c67ba5b997ff5fcb0300d9aad8ba4077a2f4ccd80724d3a7aeefd9343103154457953f47a2ac96f8bb5eb0c01c5195287aac2a09915eca3fa5e365b444d7202314429b36e0347199bf549ff1a2bad0d46a96bf38063ba6fb0391543eabc35614af53f86c5a525dd0b7828b2b583d4c244c9bf25b2587756538cf8aafafd24e1a8a7fd635360c7aa0e929c1d84dda772480276dafacd7d4c66e5942947d06ec4142e02f47b965465dbd288606ae6c01cca5ee4a17575c5d4a853a11092be6c583ee5ce50cfc77ad9df35b59267c90803fc57ea38a16dadb72e5c175261d89f41eeeb37b66379e06bc796e266a4e0d8e63b143a64edbf18e9d8d1202d1ecb286954e2940a34d4365c4421021931a191f17828a46ed38c7ca5512c9e3604fd14524f0af8855d60b850c3b513254ee958c9c4a8b5e37fbd2e734d46d192aee5302d564a3852e0e6a1b079b0d97a4e72fb27dbf36851b2410008fe50fd68f0c02274a1270615af1ac238ade20a17cda51e3061e2bfa741a4e1b5f9516e4bd5fe4b02e564682d0127e963f97c5f2f1f8e12d7e3e958f19ae16395576f6fb43e4d757c562240a9468ec6cb363b11fae6cb4cb04c2ca9a0806e38f6a40fc60fc432816efdaf169d4044012120cc37569efa0b0c0a4c1f9613a64329009530e6fef0fdd124e36841c40e2778c5f3d7755981feafa605b9fa612f1b6de45bd4c77d92dcb2587442f1efa41cead2fec765054ae50b736d7f235d9368e9cf269ba9feb1213fcc81833c79ac0e8bab4220938c024545904f8e86f27155914bedd2049bc56c8eb04a81252a0351bb8ee0c9de941e3bafb1e769217be0e51a8c7bf0ddb52226478f865ef1d1a84db048fbebaaf4a4c7aca3fde48697ec553d17ab854d37ff0963a9b5e729d20b047d7be45d6010ff40d2bda804f142fdcbe3c23fc7936c9190441c1dacc704d20aff8a915e89dfdb4abc15b215c11cf0ee87044b8f0cb72c3c87a58ba37f55a64b347eccc27b839904c628bcd4c8e5c79a54be19673253b3dbb3b407af62f6eb4041bb9ca2b5c4a66335e39bbe630f314a8e5e6a2d2f55c85612cdb90a3590c594e7406cbc3fae4dbfa7013d15b877b588c54e741f5a23719313e141be4eead86d381f74b90372f6c51d97b6ba34aa27633ce7b2a4826c2b542430d7f5f200d2dd2d283e5476e564ab9792fabf6ee432ed3a9caf1dd899cc77809255e1ae05a23d293b8e85228f4713ae7033f5328e4e5d9eece731f09808f716a7ac8331f7404d28e23ad0c43690c8ce0c5f9956d7007e41b44d76fc55412c971ce60af5d7e4ae45a4abaa060667b96c47847f5f0804eb0940880a5f4a025ffbd32bd7c4ebdf298c690e635cb1c55c9e7a5532f514376c3495dd089869deabea2a80d9e5f0df2b83c11d4876c0668bcfad0d093a545a8097b12b40d0f33a12c9682444f4e1d60c70c9706513ea9278923f77599a93c9cc38e7067c80722facad5627ca660c78e6a98185daae542e7dad6000d7c1e52df16dcd505ba7f460d7e9f10ff88e32c1902930bf27fe146acafa39fad267111c40b178fcf5c219c217041bd5fcaf13012db039541413237ec7faee01794f417e8c0c4fd73873e3a086d02003606eee9cd9f8e10d7ace02dd5e9766363375a35ce19906c43f6c89931f89189d84b36a38bc0d328e1c1b1a80e0ee7e861776d6bd0f2ab195796f283cbf48f29686410745c523f53c22fef411af03e9c7a27fa1411c4127fe5b9b4bbb38f654518f04f028a4d828e33d1997baa169923f822cd3ccb2fdb398a0a50850aaa7ed49c40e1c5f4a1b390fa510bc4de6387b7de551e5c05d00bc587d1c30272a2e1de2e6af30df0e3b05a982002976f5d56a2af0b02da6dda4c2f8b82e623fd221b51f63cebd257fbd0a7016205e67a6bb85bf6307cf7d5ffe936dde8db66a7d88a34420633cb5f3812e253ca40fc9792831319e6464abc67c3448be3794c692b93c9c405417aea6ab70f8eaab7aa8ce1e86ea480a8641d9b1ab859fe6e957019f6f6c283458807a19c76b4b24c1353aa273d7fc78f6476348ac5056a5d79201833460342d1913e64ab946c808b64bdb3f7ce7d9049f54e4a21b372ccb07eb2856b06cf999bffe69fe7bf8c2922c14893555eda866057e7a6915afef826ac441be5f9d256a11820257996daea71cc1ccf22c5c98dc02f7589aa3336eff131c39c9545332d1211f5cc61f2fa53ee19cc5948340d80ad6ad1394081e41fbded56110664410e18f492aaeb20b7f7894ee0f7f3ebe59c8293dcd20e84b41195a61210edfcaa454edcbfe197ef871c9203f0cbd000cdeb43d08feea97aab5aed3bc66cf500b97aaed5b4557f20ee712660273f2ba046e2582191c73fbdca0df1c4292cf2e8f687adc267b0a70d383a441a4514b8a31c349509941e306cd2d54f6e839468870871f7a24079cacb0638a24af8cff84adbf759ba5102611f1caaba93d2bfb32ed56b791695dc5bf95f52fa866828e8ce3e2ace6a18770c2bb655c353b9da1d2daa102aec17bbce731bafa134ba2c0447713fc2710acc3fd12dcc6d3cc0abf98a2ada021d82b5dc6d6325300c2101380f6c2e4124d6084c47acaf0fa1a9319e60255c8238b753c774527e9a6703f034fe860f4be4246ee4762b087d94f95ecc902cc66177348f6308d6c0d574099ac8cc52c9a253adcba71fc14b1f04a5d2a9ff6bc1f933b33f48429aadf15c981d0fa40bbb541baf01840ba3d4952483429122dd32b5af1c616f4020d0f46c30e187e819727f82c150e685f614a1ebf3cf49fba95000f441a601843613d1e60007a7826d4ebbb30904be56af80840b758b99bd501c7244240912efcad4554775bb2e57ae7dd097b1af95b4f7cee76ba05e1eab5283b3d60bb4edc0de036917fee1189cf43a75a020a180d3de7928c14ced73078a42d000d5b661ac51b8312befb77a761b74cf5067a4694e3914a4e2918c0808a9082d27c3bec8d870ce705735fe9078e786b36ade49adc66c782adf83e9ea075427276c0a9d05be619cd499631c24951dedf6d700dec399f8c8f198119fdffcf965db97200fbda172af65ec5ded07b67f192bca6df4c02d61579a486e9e8150b324b0e6c69b213c032c23751c772e76be5fc591812be62351b576067c1dde322e674f3e6458406ea2881792b7c3d017e7ec208fe2eb20acde244e9852f50760fc1b2370088825adc7d5e0ab4ba12bdfa0a83e030c64c7ddfdbb987e7367a424df5c3f374759bdceef3ce82d7f59013bdfe78d47f43c21c0952d71ecab6768200eecdcb61aeb6d870c80c3219045384effe3fd220337d57d570c4c03eba3e54fe2958a652dc39dc9a1349b0c0a7a5b46337872469ed0e97e2e34222a32522c3a891172cb25acbcc8750eade40c87305b4617983138496e328bcfd895455ca64f701f0a798ddc4b27bf28d4129a4aaf4b2b3b89b19f6c56695181500e1dfb4d2c130251e31d346813acfcbe9e38a39d075ffe08d455ab114c4480c01dd3e8075a3d20d7fa20e534bde3262a80a145ea30fbd0bbfd090b7701bac18cbc6460c33bd8e020d4cf2b2dbb59d080e7b5619a131c5037d3718d94c8825cf964eedcc3091255575b657ba4e7adf127c95ffa50bd975ede01882edeb3e29028dcfcc854ab8bdfdcceedf5c058d3671372f353ead56fc9a0e5bbd9411d07908b38ac2903886b7128222b16279f51ac53c2bf19fa94ccb22c3c14c3779597899f3b6b2925adc9e64e7efa8c90c781974b210b4aee2174ffb1936da5809b429ecffad1808fba9e17176ee799f6bfeabcfac84dbfd2c2c34070721df72b853b640a669fa353585358624d6f6745c738c1d9850cad7435b2c76c2f2ccbfbd58cd6dc418822aaf22f876a12715a6972e8191a2439f87e254833f8d7d9e37e2c85d4bf3b208041e495d768dc0cc7adeab01fade9aa6b16425404ab8dc890598e12f418ef8636b24d37cc37fe6e93c997f5a5d116dc1c528269d8e6d9864c9ff59c24f8a4e73d2c7f24e79d435ac99d803bfa22dfa0cddf3c98ac6fbfba0ea19f7c22ff6668fbb4e6f1933aa96ee08609f2e83cd6dad809a331a9753586f2f3245bea2ac72a633edaf10cea7495d29167d180b61f946c640594572d43ba1c4c26f5f384f688736bfd0d50b6cc7eda2c8c1b05c060400ace8f9e9b391aa5bd164dcc37c0e56b320eb4584ea59e35bac0ccb9d67015e0fae986d1c69f011d59e673fb5beb0bd739e8fe46259292dbe99370e33abae9c9b87df009c8b9a35ce08cf441c1ae5f80e047ee4453ac85b4250a3d5459e75a85cfcc6c1f1e8907486330fe6b012ecbe5f8982a45a5e7c8c230a3058bd1925092233e114c3fa08da980e00e18b6c2a5fee3778fa340d207bfba09831cc7a599ead16e284fe0e5a74fd1cb5842c7b6873f6308b81db8803feae7cafb6ffd09b5c8020ed0372867ac3602a90866ec4c2bb39de21bf88904dbb02bdaa11683b38ac17b20d638d00d72a2748573f7f95cb3e8e918f0e571251b387b74208d0965784a7249dbc7ad3671a5c0f7331ca73e6d8a43923900c7be6530cc5c68f91ff980ff66c7db67848bb961ad4f57555912db3f06a8b36d20449a8dad21670b467cf756c65a5cfef8b8ff375b84d60fb2358c6959731b082136a03c529f77b13b89fb1e53a20a2eb5c5c97cdfab46a15fbf86fdd9281fc5826bf96f8e2a69c045863a79592d4bf1b1d41393bd0530db68121b723c156d98b65211e712f2c92733dafc9d7c08c0c39b17aceb3de68f57dc02c51a2bb60300b8bcf16efcbc7b77efb161f356a55dbcc84648cf4476dcef87ec90eb7a50469c6f27d53f009a9fae3802294705204bf4df628b27502076c60e289ac8eefa45bed613673c40f4c16e1ad8fc80c825b09d5530df2ada1af1438d6fcd73ff593b6e0156a5512bcaea1c597d184594e6c3e376fc445824f1b85224e624e33d40b8e751f8218bf21420d70b78a648a30b3c0a9b63ffb6dad4165a8f3d056bc1c368adb4c537da64e79fdccf13759737e812b7423cdb5e539f6caf7221f52e2d07fa59d353fb843dab651d1274a081e75ff9e564838952550225c4ac505e74615873708343b0fd272ee86a9651dcd4ef2d1f36515aaef27407338ad5925bdce56a4d137021cbd2f67b3ae83f378894e698d52289bf05549ffb287ca5bb96598b80ea02a4910878734901ad82d77fb32a8c9c863dfcd055200eb25571de010cbf95c38bc7e6214531d33d3e6ba8126c37174a26a37d62390798368925a2175f898042691d941bc7f4d689ee4c4238d082d09063d5ad8da7fb3431d7698431b627b0df4ce751ad6f32c6073b06afa89f04147988f5c49b9511660c1934be608f6194f1ae30b69b7a2afa6120c0078777b49c8a16e4266af7d19804461a3c9db82971e9da75a76da8bbbc998ba9f2205bf6086e7fe48db5a9d49500be2feeb3a6299acd192afe103674bd0d6b41a3a724cfbe566b29827b0c81fe3e9ba023bb35470b35406cf2960091ecb96f14d1b1ae7ef09903d93a9eab7e3c1d99a8c63461bc055e578e822f937f08bc6d03e034f086d7719cd7b825c67ea3256ac09d4abbc9982553d84fe4e348e935e6306d7c7d157f595fa373d25f2cc02b194030c23d223b1702e295eb5ff68310263a86956e05e63d0aaf66635f3dd1c510dbdc2db221c86dff8babed8d429ae269d992cc37d773a4beaf7379fd90a98c1664a17897994ad24f9c5c00dc8ad2d427f2303e28b4123246de10e176941c3dee908e7b87d1ef0b8c6c897896c2bcb45ec43382319fed5460d7ba009199730ebd72cdd65e9caef0c0780619a8bef46d0b37d53757b266a5687c29b5ea0b8b179da8460e68e8376c0b30605de0f421da0eae15baf31e5ac3777c4751ea9ffd9c2b9109ffdeb579496c57d5bedb56e35a2f0e48471cc1b6ebc2da17d58596a4cd68be61559649f948f5e088b54df4660ebcbc9c713ae9e9ce77ad874158ea7c740b788b4961e86293c9806f46c8da67a96a50c9c5a8d6f85da0c2e7ea8b5b1e00b6e2d1df21eef0e9e19bb8dfd6a93f7f48e85a90583ebe4faafc5b010d9cf5ef5347db9e8bcc9afe6ba5d1b9abd0cee7f7be760dafaee37075cdff960774c05bf9c90a90c7a9f77b4fdaf9d7d64c1e0a8a30c85efd576253e13afa3173caf3931de2f5eaaae17e3a3cb2842a3357a0af156d1b6cdb721537e584139b2a0ecb0ea1ca976598eca314d61e18a3dfe56cabd8a430bec305734e50319b582e78f867f54a4ccee4650834381fe9f00ca63989451eb265f5e724f82ef90c7e927056a2891ec2ef71b78ed015c1eb4e4942a40f0e0c658624549f6571785c94374b3201aee077d2b9451e293a6a4487d345a3ec88dc2a39c85181666c031f1ac405f8015230852b82ad344fec22f17b6994178b039616c265f8608dc09ac07e5d7acfa93fe632165af0631127f9e03e49f6d2db1fc0c358b40b26faa2de7731e56bfce7282880b430eac5e6530ab95e8c8a84e7967f5f7895aee7012bb63e5814a7122ee6675e7b80c6c462de8d2787730dad5c6db0af2cc11d853deab02b82bbdce4b613b6e5b206264465d44284f025fde3f201d209c01aab1eeaf3e6008e38fc225b3b661fb78fb310ffbbdaa9321aeb2d572c28cd7d6ed2b9680bf31f7b8980b5f7fc12f41001a4d7e4703413b43c87de62d95f5519a1d85cf64c3f76d659d45a41b8551acd6e5cc0ab96d1d53c88582540afc49b6bf1140896a682bb2f27d1e1cf7d92dc09ef429beebd41c2fa70a75f28109a78a1ed3899f72a04f877120d61804a65ecac0b5f41556e494f0d73c3898b65dc586dff43bedbbfae3a3829c66add53ab0a2541179fef7a1125400c4d156638f2ee288a284866a83af444baab8a3bc9675f80668697c99de495150253265a1741f7b6b93e156e5e3a8e352468fd00a4484f3bf95c1cf1e3bc69d65389c4dc7489c49560ea96b933d3d88c64e658ddbc0b62d16a11276ec4ecbed6da5607ad8c04c51d0ef106f239b50b1dfd0d7e4a3a2213785fed0df61a901e53d3292fcb64177fd08217dcbc6884cf3dc307967f2d71c5ee0645ec321565e256bcc68032e6e813ded3e1aa11dc322904b581c01a8bfc937fd0fa4941b58f72c7d6605b27ed2ff8d1f0133bc9e8c9c0556bc749e946d28aea587c08afb9165341b9b61d708cafeb1001aac5b2cdcadd8659a6c4386bddaf12b21e6cf94504360e7ecdb2f3ba7ee4d276c37d0bf3992be945044e6797be1e70d6bf7835899ab65ed9d1368ed1e029c479c61358635e63f28fd1fd66414a5751a71d503d683e78d82cf6441dc068a103461f56bed05bee4e424f71ed05f43ef47f25d0e9c4ec326516e9cdef5d1b83f87f511352240345d27eec85ed14eb7f45e3d254e57f613d7e2aaa6aecfae94ed496e52af7a64612d92fb7e043814ac985f6c77db0ffed74f53ba7fa97513631df992430df1916f31b52de22bc98069fa391e4e165eb866443efe2d9ec43597a01528a635435d50bfc488c575739e240fa76c8f8abfdfb7efcdc4a2a23499cec2cc2b57355ee2fedad1614f8d6c5a77d5a6cc1555b84a20766df7ee774fd0749a126bbb4127c00345edf609c30869687d31411b13a4db6949c91a52c5e0210600ba96fb6a2398111c86b3a5281f3bd8c3424ba1c81a1b36cd6b5195c634399b7579466f90feca377a29f97d498c8cb8ee21ae50fd1d0f59bfa9b58b5aae0f31dc81dc88b7824b931ec10a1249656bc9cea7e171ab037ba184726a5479d2e0ca23983f941b21f0e9661e727ab0f3449244831b2d60eb40f1d6663f49354cd46df296f8d81b183d779d9db9484b6a2b4079bf0c093f5ccd7ecce72598bafc05d23ae9598d61b1bf6a362516d2c130e56d2d9ee5f817de55328de257857bc6eb9b3c21252856130cd39410473c957940e8af272afe888bad186a9749646dfbed885503c17d2328eada6bce89f9972709086199b6ffd6aa2efc80abf3a878a5f7e6878e74fdb9a030d0b0064db8f73308cfab887b21f70b98cc2cb7f89abde30dfce8ddfe96ce94b7f3ac57c7a51c840f2ab6a75015f3e1423b1f56f518a8e16ac9d04a697f1036bfcdfe1ffeabf4d68fe64f38895fd1412da170abe472ff676808115b0916f7d0e9aaca819240c88e7865e4957d337a9f098e7c2572b446c78d64d6b678771a769a25e60b5d4e298490b3a5f4f3f76459db53d90c3a983e2d225ac87ec0313b8f811aa6bbbf747a09a40a20781e97e567c5875ce0dbb5a27fc5d2a68bf195627c4f82d589605bbd906383fa98a9002844ea5c374e8ff0a1b8ec5ed2417a28e029eaeedd9879652dfe55e7c17351d7dbdb9f3f1969ec18bdcccea91d8a4fec43240aeeb10971791c16c9f79de40e0fbd995820ae84a8ffed80f1db9bd6efa070da0a63ad8df775f7185ae393b4f3545f18c53e5194363ef4fcf8993d2262914dc3f488191560b8111259e80b21657d23fb9009870872b48c15dc80a0d633f38379623a3834510c823b403b5a5d0cd1310307a7162c176874f229fddf3af50e3234d673b86592bc30c3706b867517759429c049cfab86b7fc28c67d45727dbb89bffcfa24d31e83fda9f6f102a9e06b44a721059d110039476ac3c792601c29b9d6413ba5df5b8cb8e7121a55b1b96270b37e25e904d2a5a891fe662ae360b41865cc87f9e086db6accf9661dee4ab975bd98b7c5f331345133d090d11af0b3898b45c554303cbd49a329ec48037257ca986698c1188eed3007a20628b31c5412ca6cec30f5b14e793e6990f2b6c5783c2df264fae6e26571e490bfe75522267d39e330fceb8ddd660df56a32e412394b7cb075240cbdd96e18f8e166702f1f2d64cc500fd4c169e794e588192c082aff1c458ee220cf1eef8028391948e3db65f8f6b3feddd133ec741ce0952f40f8ef746fe5daad8e4badab9d50a5fff437ac43e7be69be477b8e7c0f05a5cec25f0ca7616da609561dfb65a2085c1bc0d84c2e51eb872f51c8b7cfc0a85d0f9386c8c364cd512883a244364bf8c0de38d3d90ad964214652fc2a4945a46b1eead51df3b995843478b5088d27c1d4ee1f8638f6d84f637567ab3e053df118efa2d62b5f0292a62ff5ef3d1f85d0684998e4d40a2b3c1221644c8da38b9c9ec1b334a90d26942ac0e662f7558d3bd27cdfb592270ccffd744c1053c7dc5223492cfe020c690c9ad8f44b9a34b702f472c0656d465b618e9575d9e0381096c5748feca875857ad4b8c4beead960715f08cc8904f98fe31ce9a6c6274a63bbee1c9d32e43b275848351cc620e51d5a0307c09ebcd3fc88fb3b65af5e0783a8721b7d18233c4d7ec6dc72d3916b0cbfebe9b245c86ee199a1f705d8494ba0fc6558ecf1eb53c56817ae87c6cae1bdafd3520dc5bb9f371d32f3d4c475b491d26dd853dcfda954a90fb7fe4f14f0b69b16e8da64850aedde7892b8765eff8e2a6bc549542d59fc655073bebf0601ccc06125195cbc7c8ab86201acaec65f29eb9221bc199842201440f4c71cde8c19a68fff85cbaa65851084a19c413ff0bbab2a2d2645632aeed2b32eb8ad442468ad7d13fcb67947d1cd4cd7964dfeb4110f0676ca9afdd3df2c7a1d82b5e1923e3949e1c892a71551b66095f73ded547a6338147108a7075e8aca0f4f18bac7fa5b0110330a7cd76c1433d60282d4165f404e15410c1b7d592085b904c3b856e8ea28a12a9a7cff8c5d4398466a7876f315dbe414b1620dfdd3ca7115f5686174ca45592452eae207c445e8d2744ad7c252cf244afd3a2b8511cac14f8260030547c2621ff010d567be5757238ccb23f66c69e937d71bf67883e7ceb0a3ec0107da463c9d95828f458394a24c768ec6aa29dff4bbd2102139ebd0f5b3f0d51247fac9daf5851471a6515aa3e0f166242074c57ad4a3cf63fb19550d6694de67b2908939a35f4c3b7a52582ad9f6a27225819d1ffa18058bea87ed32b6c35d74948948af6b9e95291ff15dee5a10697d3ecd0b0d1661afddb98c774708fe837a905ce007ca033fb3c75c0f161fa2e0872a1d943e1e4516d5e406fd38119cb78b2943c31e7aae5266eed7b60b92f4fbd8edae5ea88dd30ff26a611608472143e8f8521ea86d29aae1e10abd61473d4fdc2d62e6d29c088e023a400952af03695831c55a9fb307c136a4804d2060ad89e3bb87533f7a333c6e443e9ada2ac4f7c7d3d2462c3ef045fd902a8afda6f9ff9cfd7d23232e88e957e75d222c7907583c668d7bedca7771573e7cdfb5ba29b576f4a5d31da7e33e791ab60958e305f21ccf475d9fdf69aead3273bc0d73b5945c922e55d29dd0b938a0cac606e9d0086f4286a6a67cb69480344c8999d18d12875026aaf4b903e0c53d50f6250b389c7323cecc90c8c0d734fe3e3e138838ef4f15ba8a065d3d3e1e868a8ac7b363d75934973190e4978ce89320de83761050c88a3fca8da97882318358f548b174972a023780274b34e861b8db070d463485ce5c20668fa11421097cbb0a0c89f1f53a372e7319ed08effa267e160be57329b8a87fea9b9bce752a573a3951e428f462ddd4288dc9e722b8cb97c6d134a34bfaddafc65adda10e33d15a9b90e30f6b645732c65776196ae11c2d3604a0b3ef1a8f35a1c6db04930668f93e2f382a3cbabec707e30dc8c89637720d3ce5ae29e88929208576fb5027312a426cb16fb69c26d85af368205ffecc457d127d68a6a299228b62889cd7ce7c05423d9ab6af5a8229f19089dd75972697f4d726616cbce7f93991348824c24e434b94b8669091ef9ef43d659968a860deb554be65e5fcdac1a73bb8fa13776080538556d394f551d2df262c4ea19222e1474f692af1d5f71d34a698eb1291ee30120ffbd9af161b3c383092e0c7f8557bc129af6a791f57db5c816ef3eec3f113a637a89d0e430c6b8e6549fe3553f21d35dc56eff1e2113c7cb650d9e99d29d1901e02788c344cfc4833747892ff3e9ecbd2de22eb88c73e156260041ba531158fe5080a0c10efe9c564ceac3b4786b6299eccc21de842120682163a370cc4c24c37f1ed660dcacf456f85bcf8e041cc17e956a0fcb41949fb798c4178474bee61e629c5951d30050055da09e4164b4bcb0c67402d940055379983c846805d2fe0e7ed188e2bf4458918fae3356745fa40bf5a5cb322b04561921e1ed2096336d59f24c6d52883816813e24d7a57b3fa2a3512696ae51bfcd7882a1d03def329065287f59e1594b3be0d77601000d02c53aa38eb28c4c0a532857dc0ff5e82e033848d86b3ada6896c4118fbec81e4cfa72c4809659872d6f927ddcc2fc8bce765f750ee1a0419a163b7fb493b926830eee6528836d864b37bf947a5820faa489b55d4c36d12a", 0x2000, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x28, 0x0, 0x73d4, {{0x1, 0x1, 0x1, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 2m31.274013292s ago: executing program 4 (id=1302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="ffea0000000000e56200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) clock_adjtime(0x1, &(0x7f0000000000)={0x3fd, 0x6, 0x24, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffffffffffffff7f, 0x1003, 0x3, 0x0, 0x0, 0xd, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x83}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x700, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) r6 = socket(0x2, 0x3, 0x67) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000000d001c000000000000000000000008"], 0x38}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 2m30.957840355s ago: executing program 4 (id=1309): socket$xdp(0x2c, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60010020, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xc, 0x0, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x29, 0xa, 0xffffffc0) r2 = syz_open_dev$cec(0x0, 0x0, 0x400) ioctl$CEC_ADAP_G_LOG_ADDRS(r2, 0x805c6103, &(0x7f0000000540)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x1, 0x100) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="06000080b4000000080000000000000021f2e0cb8a8e5daf344bea12c4d64186c8c771ea21b060baeb091475ffdb3643ad1e94c3224ba5c8952a3d97b32e9c0208d6d79dfdedb86a24075f5e03", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="02000000010000000000002003010000931c"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4004814) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x18, 0x3d, 0x701, 0x0, 0x0, {0x3}, [@nested={0x4, 0x34}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 2m30.218756464s ago: executing program 32 (id=1309): socket$xdp(0x2c, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60010020, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xc, 0x0, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x29, 0xa, 0xffffffc0) r2 = syz_open_dev$cec(0x0, 0x0, 0x400) ioctl$CEC_ADAP_G_LOG_ADDRS(r2, 0x805c6103, &(0x7f0000000540)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x1, 0x100) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="06000080b4000000080000000000000021f2e0cb8a8e5daf344bea12c4d64186c8c771ea21b060baeb091475ffdb3643ad1e94c3224ba5c8952a3d97b32e9c0208d6d79dfdedb86a24075f5e03", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="02000000010000000000002003010000931c"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4004814) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x18, 0x3d, 0x701, 0x0, 0x0, {0x3}, [@nested={0x4, 0x34}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 32.428891418s ago: executing program 1 (id=2197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000040)={0x0, 0x6}, 0x2) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) (async, rerun: 32) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 32) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 31.97387587s ago: executing program 1 (id=2204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc048aeca, &(0x7f0000000200)) 31.714701814s ago: executing program 1 (id=2215): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xe00000000000000) 31.616036723s ago: executing program 1 (id=2218): socket$inet6(0xa, 0x3, 0x5) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x121090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x5a) r0 = getpid() syz_pidfd_open(r0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000100)=""/20, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 31.520139618s ago: executing program 1 (id=2222): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="6d797d42fb74562ec642068eb410c60f8cdc42cf09864b1dd1d244ec3ecfb9103306a02bd120cd2c684eee7cd734914ad7ec2bdd4402eeab7a2972f1672f126c4b5f6c5ff748548170bdf1020c2c3d09186940feb185436981cd578c3a2bdc19c16209468100cc1d67247885420cbc0ea004f07283bc4a5cf8499ad5ef4df93b2fa2eb26895ed9260cc61afbc766adadf7809b3a8f76d9f835acae2dac8abc42896374a6a82a8894552441bd0202daa10048b49d3bc74bba1e5258ab8ac5169facb96d9f68705a7709f6d9a66a9988c13d13a2b8b34d9f234e1c5fae79e4cb76ff3102184ed9032d2402087dcb3eff6bfac7bc4d2fdc9ea25f5289d52ed75ffcd83a2781eb4a23fdd078d1e53495305e3ed5bb4e060e89d6eb2b13586f7f5df32e34390d70f074b4f92c4624312698d86578f3d951021db151806fc314c98d819604d8d9572efc7dd71c0d1a9176ffbd48361908e927e03caa4c1ccc805fe755e616d983442660299e9dd34e5612eff964a45d613a832a0ef8e4410fcdb0313712795b369c08f907c91a4f20e5c18ff903e0ee410d77bc076f49debfd6e411104cace38e0318023527d1c54cec66790638c9ee70c29de0406b3483ca1663245edcda56dc9612e93f40f19cbde5cabb8816d7b75a266e404a8e5364d43c08cf5cc645b533c4b6fe349819c5374fac7a923a7a803ab138c873aee3718921043a60a0ce84df8b991dfa525f0955acbc866182f2409d032981ad824f037ef068501f955898c4500049f0b30014832e3b668f5873305ebd1e094f244caa90610be83a5f674decf451a82d9edca6664da89cad8dc212943828570fb365b41993f89c6d36c579157c4055a77eb1dad1dc466e743129e5e3098f4432fbe289111e102223ff04d02e8108b0925ce76118445efa09233e579f398ab373303c0bb64ff82ddb597040e58a61f82cc5614beaec13ed297a8daa9514468283037e5d0077c9803b69421070718fba4865e4b9c6d7d272c562cc4dd998e16fe288dac68b0bdf05eb2a02fd40b900944d10a94f2b3be9b6c6dc628044aa9eaf34e0474771c10bef03f6af2029643acc1e97efa0748cfca63aa9546bbfa6d7533c4dab0b931ac35b331aef91a80d5ea08ba35cf66e1779298d3338114c12f024970d12af8d67f9b165c15a8b7e37c14c2d512dca76cf6077e2011bb47cc993f3088027b2d53daca574e8b443fddf5c252788854be8aec357db43f2147f23061641d2910a4a503a3a9ca86b3656d37d443e5e4207bb38b6e8879bf3de21309eb90113ccaa75e1d1e0900efc17aecd35078b8f3d579d2d4fb576127278290d6a9ea379e22dcc4ad369d3405311efbc74702020d6cdb31267c2e4dfc6a34bf39c9db32da7f387760909843fbd02e9e291e838fcd8faac4c9ad909cc19440bb775070496ef69250f4cf90372c0f1835dacd4d605a69334d73b1228cce41fe3c6457a37531bbab6d8b15a8214ff3002d29016932de969f05ed64b720ad249b8164ea82fde08303277e7d5f0d3e86bd6021024bdb1d24afe3ae28cece041943db60034fa11c3b6ec7b09c117b086fa4016e68e46678a7c5e91c40d2866295247276109a8778b043b51ffe3ec33dbb665806cf6ca41e7143885b6ca920fd8caf475ddcc698a09d368c721f048efe9e0d372d9cc58deba32f81e7e7f6d53209050d72545bbf04356ea95c9bcec3b8b87f56963111c5454b30a12b8479afc26361a7e00a66c03aae8ebc3348ac2e9b0f52453a32efa9b8ec038e671122dc2965d3b7395051974088f4aa47a76327a0dffce6db0a2cd65e2da5539fd7673911d5605cadf30d85563a60afd58767b6adc549173818de01b0de192894a76bc4e62d8c9e341729e6ef37574cf63c27674081202b8ab9cb9d92d346b1c2dadb253532c1674b2440504f8430c0a2ae5829b016af877831ecce9b13743e821436a6c1c46a1176922dbf2721d9722edf72817f8d15fa5c7ecad046df91bb57b8d16244527c855a40403ddf1757c31361c8bec9b5701b5c10a1e96547fa2c93e03f264a366a96666e24d7f908f6fa4c3f26722961e70adfc4ccd413c2c05adeda400de500babfb80a4e4ae5e9e04444c55f006337c0a98c33f04ae0a6620a1acbc26b5c7d125c30ca542c64604a109c6022029da452a717b219456cca6bc9959f088a5f2360c390b531baf92ae2429a2d0b6c7a20c137a3a0050ae2216b871c03c56410d28472d1035bb870f94589b93ceb57a504bba5acb7a6f77699fc10ea96d8e8fb913ca78c0af33a8435344b71531207344d78ac349894aab972c1b471d52b266bbe4313ef2ba71e7a4680ff442a358699c1e18322dfd50c55b637b6e6d5f02fa61b0e8ae4ef7cbb6359f70028a6b60fe901b2ad97a62b5d527efaf5ebe23fccd80d80e02eabb1be14d40faac8a56b4785fe47c8ff4ac4ad7fcef2134b1ec599074dd45d2b7a5c45845787e0490d9d7db95b58b18f14ae6ccc39623ba0fdf64c8d027f1e7652cc90e82732d4292f4ab0f959a44ff906484fcf83e222088345541ba2b1c50b63711d8adb63c8556452c142de8a06f4b28a86f629cc1dc713dcddcfebc8b1420a603fb970ddaedfc82250637327beb5c0ad04947477bc9aec0914cd78cbf5060e4ef7806b3443c85dbe79b8e87807b1a8d141583998c412d89c23dca4aa16af321dead51a12a73be98bd8ebb4d58b3ccd2d67ec936f2596afff2ba4166015aa4cc6c433acf33df30e3d40a0d6468944a07d1f9eba1bb9eb03dbfb42ba790dc1e7f66ad1834fad94440bffe3879509120b6a5cd1890281bf0f4c2d1be00fbe6b2d09ebdf594110f2bda035262d4830dbe64aa3152612df991a6fe1d035e0b301cf527d74140c85ad79acc001fd2ddb3f283c21e8d253c6c4685584f753e01aae2dee4158c68e2e612f056eb602ad8199d84784e05b363292956247d1fd8e4201330d6060d66e10e316143015908554e5325550d61b8af87a92237edd75cf687919ed0164de95042cbcfe96b9102fe3b71f43bbb1fc24d9d2d0d81dad29ac18cce353ca7c4a7c32e12e451654addc5dc6a44d001c40913eaaf14dacab7037a68e9875ae51321d1852820794206fcc1cdd51443d5e3fcd1dc4dbf728d1ed8dc29437db0154c2f59d1d0d0b0048cb56ad965682afeda337b172cf6a77be36ab8424b919e493628846bbf485d5fefd73228e40295fa2070027f6f2ed565024b82d1058a1be0d0c364b765f2a58f382e378692d1ca4fc7f09f867ed4684dd82dd4c76e0e640f5f87d1c6c2fafdb733f1cef6572cb5e104ae9c94d26c81cbc9a5fd8fbe61ddbdc683b7f4030132b932abf0d66afafc9a9d3121f0ed962a14294bf0ba7b1d33d7808efa427b5531cd881b5c87ec159bc9557009d9762010a497ad52b57283cde9715b48a3e35a22aec3730a0cb476a59f438684346ce0c14f22d5f1e5826d3f670e9ef60f6dd51a11fd32eed673b9d0a12d8eeb8046b96c51cfc54c21b2c48c4a89273963b8345b01159f53f6b6589333afd871875b930d7a4e2e1f5dfb44157ca004a739b0e98562c83b1d8414220f677f2882ef6ab1039fc5f132d7f55046d0c9545033624338e2ca6bdfcdd9d78306818c6214f524a7d036c80b5506f97fe383c1cae3c73dd2a0c628bff47d13dc7d9f88a3c1bb84ccbcb82fd881c6f5e9aa7516bec86fd6bee49f4db3bbf468922f1ef37c499b011e36173edc0ccb92d13dda668cf88bb99649e606fee23d3d3bc1fcbdfb40c7d4a4a60b89c63e65d02a283137561ccacd0c71cf70c6f039ebd1d29cd58571fa07d74187a7931d3d8b7db3062594b696b0e11a587724440bd77aa01fbe26a031a4c3f16ef3ba7f7544d01e8b7dd0b74f3025fe54cd01be16ee80ab0cd7c56671390f2e9bd62b212cf3ff58da7207846bacf85858130a89a2cb45da85b3ee574e8bb43c6642a3060b6f07228951aeab0fe4f4099b86bf07ec39262acca7319df3d5d057baa794234b89eccf36da5d32e4a5283386a0a271be30f75917ffd9f6d96eb8b50a7f6a0b861c5d12a624f3630a18e3bc94eb58bc835cef0a1b77952df6443cc12f221fb8460f4862f382abe13b409056644ec46fde96e1992e79ec0acdf3066f77bbcd6cf1a24d9b49ce84bd3bc58cd898da801d6b1ab12fd7cecc29894b98d616ccff855116a8985653ca88722dc00aed777dfe1839251be42716824dc0c40b6548319f613faffb2f1900a1f563724b0dcb7aa694110d268e945747d860d4bcaba7837342e3d7f207547ba8c093e8d2a1a5e3e098d19343de5fa773642cfb1a2e49f98df7e13254787cc35b2d689db16e551917c0db1034b175d1f4647c35c4cfe8a871cc7983b052050be9d24ed6e6f70d9d4b7cdebc9ba7a761b8c5f2207761a6fe9db5d4ac975dbe398ae05ed180f028037f2d9684dd3b28135e150db8a8adc6c34d0cca2cb95e6babf8702f26062d0ff0f88fc915caee5597a006e211c61f6fa4ca685e79655af85cb3489f94cd9836af4b80cd20ed23ed8f3f4107814407715b471354c5274595963b00482f3723ca88f4eee346c78bd29d65899163d848c9844991e976ff817120a13ce40aab11632b6fdd9d00acb82a5ac7769a0a7ed5d30ae077bf393f5de5b12114e4d1a32c7297bc5e14b673c78cc675b097d56f7a35c3206b1584996972153e2446465492528e0565718252139e1cf500f05a0ca529d58f5b91fa9bb2822c21248a7a8a92d0a7be5f4d249087176c7c23e27d72bd232fca3f7b36970daf2ccd64be4a798a6c30a068fbae324b4c158715949b37c3942f0eee35b90d2fe9d322420917532f6dceaf8633f4f9618f099ece4186e1adc1323b827c984ba54c887b462e169867c2e063fb60b7906434ef362200559e4d02413667dde0c6111750995824c316305f2ddfa3035ee09fdbc28c7f3c095f5a4382ce033746394a37b4d8a61ae8c7270d3863df7382a4786d7bed9543538166dfd01d122a384a7a3de7958c0272a35856f175fa29ee100d2a0f3a6dacbbe8702cf7e8d307ac0cc7921539a371a1c2e7f834db5a903069c07ff562fee851ac9cc3f2f045146db26b13401258733c67d820d06aa068b789300ac90481f84725311544e9a2363f2ce502c02c100bb41e18a103c79bd2bf14f6b52290fa60d978c284f927829b5027ae0ea842efb3450a8ddcabf0eaff6a6a8300de389e78cee73bd8de9a2809e346ff6c79dceca4277eee4b0dae1a3e1740f306044d6e67a5783e665f9637a8f8154f9ebecf95f48146c750826fccebbb1bef247666a710cd71dcf3ac3aa9d0bcbd4c4ad432bba642366e4a3b12981901358ee1d7babbb7e10737cbd8a1c159d8dd9dd521c48d2911ebb8162b51ea32185c37097c299c0e477914b49d04cabf5033a5a3660f829ce4dfb2f821e6cb19ce37df64f79eca0649ea8c6b41c6c5d08fb1dae021314609946310c833d08d46c026ddc5dbb7ac62f1123be2004729daa8156ee12bdde9529c7498c8d1a3fd59aa07b9ab7870c4e57b2f54dcc26edd206b28870cf346d741b46bcb508a5f9805ed63c6cb03a9334abfea33626b0681e59b1cecb02202c3190260b8e2963ee84d9a6b5e6be99cbf6a17e4a11e154c2a50d625ef1fd4690cb8e030e46e07c891e6db43626525d464302c44dbf65f71a485f9ea05c347b870bf63fddeaaa2336d9eca1d4c56e8a2734287f0f8a185bd8e3165a681175d1ee9d24f48c9182fd40179ea3d128c0b43c4e2c85eeefa4c932fcaf9297488a3d44e602477d94193410728a0ef0f6730e64b8cfb3e2235c6241d1252196f943d9eb9b2ce70f8c5cf21394875081f56ceb6749a8bfa43e0e545fbc6903b63c55b67ba1e064a682d58fb7117eab5407d1c998aa53a0ca190b0a4aaaa657299cee41be166a7622789b81cff0e892ba87c6ff22f29ed512ebe40cf7306b7597607de5c1c6fb2980a03cc0c6f396ecc27b6b5a3fb0a3f3375fccc397527797f6d1e98f9a873882f85a4e5b11eea65cddb12b0cec9e531a3b5de958963e20d8a520aa71588aa3ab92186e64a710ef07debe3fce6313ea69fd5bd45ca3d50e5c98ac632d5479bc0763b05509ffca67158ad8665cb858e4a8eae29ae667cfa8e39dbd15ca03846298faf7169187feae6e84deaee4ae51cd2016a867b3d11c4e6ec3ae39aeb8c8ec36a885e475f3e1e47e1fa464ef9569aba053cd066907a112612de411a5be0868543116f32d0781323c744dfeef87601981afe063122bac14b9059a68d9f356e85ec04c2767cbe79e245d7916daf222b5134ce684f7dec8fc0630cc9aeb5fbc38dfd19628ece15342c941e52be8abf0d82ed7b0b4bf5e6184edcae53949ef5987fd7fc479fc9921f2f332ae68f5dde23a3dd0b4713c3d18913edd9ce59870f7d50fdf33f3d2e8e5045d35555b4db5f48946e1b8d8d682f0c2bdd2d0de6bfff349e5e826cfb2d18d7bb43347362f13f5e80619451527bf0d3cc617881ef718466bf2efcb5f1404c573df09e00a5c0d1648b04860ee20d9e79d4ebac94a35e0a4919b1ab0db9e9dbdce1324223850e2e137ebb0c0e1cd690a3c5c9f8576538cba5e3831e6ba56809644e389ee984df3ea8e4743d5d03619b713c984fe8b43c589b78715b9147384b5bb15af8898cd82b31aca722cbe7938f119251d9142f2661f09b49f99d8988c66198dfb9db7f225086bed1deffa78995a56f905a7ab978a9c557ea1ad306bc0cd1cd8e5acaec1e4430a42068adec4a73f891c8010f0271c38685ca66c36313d15ab5bb6948c089b1fccf7fbb340eb03446a9bcda34b2d14a11e09f71e799fda19dd85293e2b0e2ca3e68145b4ea5705592562962cc6c0b65c88d06067903716656a0a7742850b956b609740c913f54225ae18ffb46162d6a0c1dac8b6c59541c8ef6bfcfa87ad59cb0e8ef6ef1d7f739c0a56cf975f9cca9ee89bac15cae197d02fc72505d23ebc6153491adccd22262979d2909fb8abd25683894e5a776824b81598a833e339a582b9ce3f8d7ce59fc3147eb3e92751867ee9c3506692b25b2d7f38d97280e85c01bf6d71a602d039aec747620d33660a9d5c9cf4010d01f9cb86db4704872307942df56f04cf6c17e57612635e769218cc91da9e2de29aac4563d695a6ebe249c14ba5332b54150a291bec28417febc4c3efae9e14a0323e561dbc80e98bf71deccff5babbcdc8015ef7a86a52781a67a4915645cfb18379084c58110f1294b2e08a6994d1a3dd4fb79437a75cdb05f36a7b3fdb449c0cea5682d37e5b0217676ff7a383a19d48860476b23ccb66779093b0f6b5b6a1ff0cef503dadf5b67382b2a501d0c13d89eec496374f43fcfa751864330479e0d1f7aa0883c2aafbb5c21b06cbea3c8b515fb1f6d061e269c3de372dc48f0b1c0a935de648a0fc4a1a32ce6aaa8432240bbc977a0ece5fd60d92ba49f1443bfc83668e8251260a5b275098e4a072d44726b91d850bd9c2485cacbf2b33be73785421c2fb259b0c1c0955339713f75ca72b9bc56a7167d8a942015385eb4f1bc3e07b23a71779d043a4f420b0fd9e889d398c955f13542c811683636b71a2fb178e951e37ed5519146c5d61e697d1148458c2f224dc6911363edd1b4d30c5cb12d0e2fb035adc33656615c05266f32c2faf5144e24086c97816c87569feb1fd41775263999ff057d9832b872506aba01db7482251f65a74c66cc01b83056970f843ef58df0d89c44f9265d5bfb50c287f330795b30848341dd26683e5df82bfc1cd1a3f2df3dae99fc38edcc614b39c8a8fa6ada4b5dff08914a92b6a16b05f13bbdbdc5e9f14a08e827ee5f364ce115e12bce05122f0dea62d8dd41222fafa3c6bdecea63d3fbd0bfdef667d6ac12b6918273631bf0ec25da2783f06f77a9a0ef2490afe43f3e8b0f553c0c1078141ec0d8f426b1924bd464e4240cda50e9b8a97050360a617eb4f88baa158da8672572f641b20ab3bcbab3d38ff3c84c5c3bf309e26c8ba735503700028c0806c29e02d0a0ed73b9c5c2f2a39f57ee08b935e6e056f01733a12b08603987b14aa7fc542c65a0c03e278723127bced6ac65d2386cf847a73057d19795d5a7517e71d5e480b7380866a64da32fcd1158af9a82559898a7931535a4b75326e2769711ff857d180f16acf316130574fd37bdb658b877f06db42ab96641bc75e3d4ad7fdd9028072139dd3019b03aad32907debef345bcc57423ddfc94683884a00c5f864b8c2dd5af081fa970da251d3afc65dd360c661d8ee2ab58dc9060e2d98b39ae95bb89c319cc93c9e653bf9db205338dc5528c11a391137fe496d726f1407945b243a49a1f3a786047fc47d5e5074e0ec678f26f30cba747d50070c00323d16cff4b06089830931ca704d386140f9c201a5b50a116410be001135aeaf30d7918ccdaf35482659fbb2933e97f1a2e0fc20e6a610e37511d06d4cf931e54ce8f5ab5f688e460e3943bbbe6949a8b4ae309ee31330ece6cb9dfcae0035f3808b7295776ae7bdafffadb6113faac5cd966c2875abb7b20f1b298b48cb78c467f1be92cd3a9d0fd35b7720334274a53a6cbd041b85b6f8f9d622293f0e95a8835204de1faeb7fcdcc57fbdf0afc2e6422bc114355cb5bc979f1bf6d0fb6eb31ee98e06cdcaa1ac36ed3246d85cbdaf999da5d6a7187e8622e6d224c5549a2f2802691a08242ed44a47fc9ad627af949ec3ab5b191025ac75ee7746e2762b530a622a716edbf341e4f9e04fa5d3f77c78dcde06f3845f45c8c1954120ac5949da541882d99adbbca4b0e422e4364289ff1a903bfd1ee63faaa40ef43d3e54249909066e1727591a9632cc8440dcedf931a823e9b542d51aee43897bbbc1f652ae774c326e8400a3a6ab8d90a04e5724fb39c05875ce5afff0502bb6164bc65c107593c155da4b77f136a34c9ec39a4e70cdc4f7fec68245402b2c0fb508eac623ab41a184d3bebe5e9f24c6590c1fee571ed55a76b8554b12116a36101691397d532b46924e6ccb688ab52ffc44f8a670d542477ebd3756d6ef5373024d3f915c187a35feaf39b76453ff835f73862bad13f19e76d47c70122911431e5f71b05a9728631df66b162e708584e83349db1a68368a37cfb4e16c9987a956b3018f2f12c639bf90b5fb0f0560fa7c19887a9d12316dab9bb515cddbae2e9056a556919476b47546c0dae631a88eb8bb9da49879f56efd3d1b65d50bb01c8b4ddc20374877189915cc5824200dfac8f422364b7178f2e7799665b464ac9ec54ffd87fc8dc68e08ab178059ec02bff4ae3c683d0c96796765bdc188c1a4ef46cfa9e6376678245f8d0c907e83e6eb78ffb19e75534925b5b5bfa489fb9cd2c68f00a079c9b34dc45e76044bbfc87c75bbdc5ed0ea7ca0f249007be79116fefa74085f982f670f821ccd0bb14e1086b677f379fd1a1c96bbb4a7338e867d3f91f41b0a7eb2f1104c2ed1593691e601f2e045b3db1cac5dc0d3b302b54967558057e767c4a96f0355d97beace9fe05f0513629b2dd4e86e523d16d7e2e129264e1749b07c062d3a92d96fff5cc976855540eb441a3cef8fc59bf236c85e778b04e30fa807c3ea634af17f005fb55b55f082ca54fc154e6b9df95b951ab9612da7223efc8b63f4528dc3353a15988790d507d9fda18dc8c4adefebc12567e040fd49d2d571437bada1c08054f45545e5cb33c8db8e5b4f2d6735a7fad407fea2ac6e516016c186b7a9b5586650178b3c201eb4fcda3a22291c1f5d66557675dfc73b17edd463abd17a3ec0f1b28adeb4c294c3792c5d2665d504610d37de5dc68fa03e16243ebca169797205d2b24cd64cb1e37328530d68c9a279e36aa0c7f718831ac30607633eab2c9e1b8d6b78649a78fd573d07f0edc18d2f52da2213e2ad44a4bfb3a80ae71d8cf57a2ae2658999d542f7c46da5a30f0f4a82296d0c95e4c6f046db42a00d8631b120a64ee260bf4dbf29103d4e2233fed2ec9ae65fb109f212f967c34e0efb52f56a9a7ab4de472f9cdb0fbcd19fed42d80216c4c717e77a5e6a9118423e0a6dc9d2f3cef598fb9bed6b4e66b279ebbc265560a471d132a854ff230673e843338dcb1ae202c797cfa59dd18eb46e313f1b0dcafdb6518c1da6b08aa1c92bd433a0b65358356a8d03a454f96add1237380049b2567a24836b7bfbdfa58186f2e295e0911dcad6c5413fb36a6e637156291efc016e8513664d515d3ddba1d2c63fa6c5a3331c3cb2f5e2eaad83a75588aca785ada46973d8a2d89686a416720a8f98e1a1eaa8c95aa0bea1dad03ec69bc4bf8300a821f67db4e0c1aab57ef1d1e06880130f6ffe76297acc62879f60e03933666a0da462b7a6b584d28041a3fbafe9a08b7a4664c46b8d40ce4f31a14b122ad74cc4a003f591e019e23cf764795d4235cc8d491c58d3be78a781a708d9fda492306a5afa7c0a43f52f39cafc6a6abc850bbbfa6254fdfd5115727210e19ec8a8857c10a9e9d5cb3001c6e04132667a30a6528e8b59661b483e5365761ac0f5c61e339833b35fd8159875177ed2b78df49ef83b45584c4609562ed2e8bb9add69e88fc0774517a15575f0250d26ae8f6f138daba5311b492c986005bef123a6fc3c1912e378cae2b64e58542293489d5a0f8b582b089c1b05f3ad0aec776b9dcfc0feb1386a98b7e2e09671a73f0eca92364d7f6da861280815b71e48934bc3d321da07878290ec81d3c5c64b8d7f55c1d2e2713edbb5fef28bc36d02302b01c4c29e5df4a9692b41e8d9364e2e408c55b9b14d3ad93889a48787df0673c3df6ba3d9222ee348199aba478e2d398b1e4ae012ca19473b3454327e5bfefb3c56576b6a6c035466f7641464806e63d7086223395a58d886b0dbedd365ce840a6990f56d697605b7d0ac60809270e4e392e89413cc94cea1cb277c4aee023bf90ded9910c96eeead4c6a10ca17151c4966f84bea565746eab573e4295e564d41bc5a6cc9df38c3d7cbd4cd618bd9f292daf95472839fe71c1edc202b6b8b5b939250b089b0dc978397fbaa7533fcce0c4b2eed8ad47779aa4b21504307c7d15e0bcb01bb60e5bafabe66e4b689e4873a1067063e17ba7d647a9a047b1b4ef7350402653b564ae1b34b8597a2357891c90ca2af6b68b794680a0511279fd213eec48dfddba7cbeeb9f9335a0679b1e6db44f27b12d898575d157c2159a86f676df18858857582bffdc006d4732257ade5dde2d1b2cf316fe2a7c5b44505cc808eae5427c43d50e9b99f9317e437df2bc640351e3e8ac249c42f782d07886b6d8875c253ee0e489f1196fa604747586df87e18a893721e6cecfe61dd82daf9b3e4f1eb745c93402c121bb639c56b91bdc77262acfa55389ede1f092733d8a69ae759f82ceda537ffbf32b65138aa3e43e8883048eccf0929de8dee297c5eee97ac7633beae01198e1b00c11276502e7660cd1f59ac619200042656c6e9757b082d374c80182290845f1bc8f2589eaf96948f148ebe675ee7fdb83e32a18eade32f99cca160a4d3504c4bea9c82cfdfe1dd80fbda7c484f2c17c20eea", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x4000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44010}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x2000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000140)={0x0, 0xd8, 0x7d, 0x80000000, 0x18, 0x19, 0x3}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000be14100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 31.27517164s ago: executing program 1 (id=2231): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0) 31.15375786s ago: executing program 33 (id=2231): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0) 3.896449896s ago: executing program 6 (id=2521): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local, 0x0, 0x1, [@empty]}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x7f000001}}}}}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r2, &(0x7f00000004c0)=[{&(0x7f00000002c0)="9bd255abe499de3c", 0x8}], 0x1) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000040)={0x2, "984c323de8fed63723b821c9a59a4006f7fe408ee3314cad6c8ad393b58ba111", 0x2}) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) waitid(0x1, 0x0, 0x0, 0x20000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES32, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 3.819999234s ago: executing program 6 (id=2524): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) syz_clone(0xa088b100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') (async) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180004000000000000000000050000009500000000000000"], 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) close(r0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000000), 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x1, &(0x7f00000002c0)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) (async) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) (async) r6 = socket$kcm(0x10, 0x2, 0x0) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000540)='./file1\x00', r8, &(0x7f0000000100)='./file2\x00') (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001) (async) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r9, 0x40a85321, &(0x7f0000000140)={{0x80, 0xfd}, 'port1\x00', 0x28, 0x120000, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4, 0x4}) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xff70, &(0x7f0000001480), 0xd}, 0x0) 3.614318463s ago: executing program 3 (id=2529): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x438, 0x3f3, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x1, 0xe, [0x9, 0x3, 0x6, 0x7, 0xecab, 0x7, 0x1, 0x8, 0x2, 0x0, 0xfffffff9, 0x71, 0xffffffff, 0x9, 0x9c, 0x7, 0xfff, 0x8, 0x63521d4b, 0x1, 0x6, 0x80000000, 0xfff, 0x1, 0xb277, 0x401, 0x3, 0x5, 0x3, 0x6, 0xbd, 0xf71, 0x8, 0x4, 0x8, 0x2, 0x9, 0x6, 0xa6, 0x7, 0x8, 0x6, 0x1, 0x332b, 0xfffeffff, 0xfe, 0x0, 0x1, 0xffff, 0x1000000, 0x6, 0x8, 0x3, 0xaf, 0x81, 0x6, 0x7fffffff, 0x7, 0x1ff, 0x400, 0x1, 0x2, 0x19fd, 0x20], [0xffffffff, 0x5, 0x4, 0x5, 0x80, 0x6, 0x5, 0x7, 0x1, 0x1, 0x0, 0xe, 0xc1, 0x5, 0x18f, 0x9, 0x8, 0x47, 0xde, 0x6, 0x7, 0x1, 0x80000000, 0x3, 0xbc, 0x6, 0x9, 0x5, 0x2, 0x4, 0x1, 0x6, 0x195, 0xd87, 0xfffffff1, 0x1, 0x7, 0x9, 0x9, 0x3, 0x1, 0x5, 0x1, 0x8, 0x7, 0x1, 0x5, 0x3, 0x4, 0x81, 0x8, 0x8001, 0x6, 0x8, 0x62, 0x7, 0x382, 0x7, 0x7da6f816, 0xfff, 0x9, 0x9, 0xfffffffc, 0x3], [0x4, 0x101, 0xf3, 0xfffff0c3, 0xa, 0xfffffffd, 0xffff0000, 0x5, 0x2, 0xebc, 0x4, 0xb, 0x385d, 0xffffff7f, 0xffffffff, 0xba24, 0x1, 0x7fff, 0x8, 0x5, 0x9, 0x5, 0x4, 0x5, 0x0, 0x2, 0x200, 0x1, 0x9, 0x9, 0x7, 0x80, 0x80000001, 0x8, 0x9, 0x7f, 0x9, 0x400, 0x5, 0x8000, 0xfffffffa, 0x7, 0x9, 0x1, 0x6, 0x8, 0x2, 0x3, 0x5, 0x1e227a53, 0x3, 0x9, 0x9, 0x3, 0x0, 0x8, 0x2c2, 0x5, 0x3, 0xfffffffe, 0x101, 0x5, 0x2, 0x5], [0x60107400, 0x6, 0x800, 0xbdde, 0x8, 0x1, 0xfffffffc, 0x9, 0xe1, 0xb, 0xfffffff1, 0xfffffffb, 0x7, 0x30, 0x21, 0x4, 0x7, 0x7, 0x7, 0xe5, 0xfffffffd, 0x4, 0x0, 0x80000000, 0x400, 0x2, 0xb2d, 0x2, 0x5, 0x5, 0x9, 0x8, 0x81, 0xfffffffa, 0x5, 0x5, 0x5, 0xfff, 0x6, 0x0, 0x202d, 0xfffffffc, 0x4, 0x4, 0xfffffffb, 0x7, 0x69, 0x7, 0x7, 0xffffffc0, 0x0, 0xffff, 0x9, 0x8, 0x6, 0x6, 0x80000001, 0x8, 0x401, 0xfffff50c, 0xf, 0x6, 0x1, 0xf1f], 0x17, ['/dev/kvm\x00', '*\x00', '/dev/kvm\x00', ')&\x00']}, ["", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x4000}, 0x40000d5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) utimes(&(0x7f0000000340)='./bus\x00', &(0x7f0000000180)={{0x0, 0xea60}}) sendfile(r4, r4, 0x0, 0x800000009) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000040)="260fb153380f0f4be597c4c17a7f6a0a670f01ca0f0f5c3606b4640fc71d006000000f20810f01cab9221001c00f32c4c2858e20", 0x34}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='contention_end\x00'}, 0x18) r5 = userfaultfd(0x801) userfaultfd(0x80801) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000000c0)={0x2000, 0x1000, 0xc, 0x0, 0xffffffff}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x3a2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, 0x2000}) 3.613988458s ago: executing program 6 (id=2531): pipe2$9p(&(0x7f0000000240), 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='tranu=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESOCT=r1]) 3.537172377s ago: executing program 3 (id=2532): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6eff, &(0x7f0000000740)={0x0, 0xeab5, 0x4000, 0x3, 0x3e8}, &(0x7f0000000700)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) recvmsg$unix(r1, &(0x7f0000000680)={&(0x7f0000000100), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000200)=""/222, 0xde}, {&(0x7f0000000080)=""/56, 0x38}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f00000005c0)=""/183, 0xb7}, {&(0x7f00000007c0)=""/247, 0xf7}], 0x8}, 0x60000110) socket$kcm(0x29, 0x5, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x700, 0x1, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) writev(r6, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) 3.476216783s ago: executing program 5 (id=2533): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80341, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.410415365s ago: executing program 6 (id=2534): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200001f, 0x12, r1, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 2.83694305s ago: executing program 5 (id=2536): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000280)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0xe, 0xc9, "d9e030", "9dda1f", "eca0ec", "d054cc", 0x4, 0x80, 0x4, 0x7, 0x3c, 0x7, 0xff, 0xfffb, 0x80, 0xfc}}}}, 0x20) 2.750390516s ago: executing program 6 (id=2537): syz_emit_ethernet(0x52, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000019140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x10001}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0xfffffc00, 0x81, &(0x7f0000000340)="00b305cf07b2d96077b75da5ad00", 0xe) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e", 0xd, 0xfffffffffffffffe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2.644147679s ago: executing program 2 (id=2539): io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mknod$loop(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0xff, 0x8000000000000001, 0x5) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe30}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0xff0f}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) 2.590528787s ago: executing program 5 (id=2540): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x2}, 0x50) 2.590126452s ago: executing program 3 (id=2541): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, 0x0, 0x69) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8}, 0x10) fchdir(r0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0xa0201, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103001) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x402, '\x00', 0x600}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0xf, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x482, 0xc0010, 0x9, 0x1, 0x3ff, 0x7ff, 0x5, 0x80, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff6, 0x2, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x9, 0x1fd, 0x3, 0x2, 0xc9a8, 0xffffffff, 0x3, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0x8, 0x8, 0x1, 0x2, 0x4, 0xbf, 0xe70, 0xfffffffffffffff7, 0xb, 0x8000000000000000, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x7, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x1b485fe1, 0x7, 0x7, 0xfffffffffffffff7, 0x9]}) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = syz_io_uring_setup(0x400041e5, &(0x7f0000000740)={0x0, 0x1c2a, 0x1, 0x4, 0xc5, 0x0, r0}, 0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r7, 0x48212b8952c3affd}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000200)=@req={0xc, 0x1, 0xa7e, 0x200}, 0x10) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000340)=[{r3, 0x18}, {r4, 0x2001}, {r10, 0x200}, {r4, 0x200}, {0xffffffffffffffff, 0x1600}, {r1, 0x4001}, {r2, 0x4000}], 0x7, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000300)={[0x10000]}, 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffe, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x6}]}}}]}, 0x3c}, 0x30a, 0x0, 0x0, 0x900}, 0x0) epoll_create1(0x80000) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000020ef0e010040000102030109022400010108800009040007020301426cd94803acb201c2702e8509211000f10122960509058103ff0308ff81b48b8d81cc6c236d0c2f4f178638b873b7b141550d1bed70d3cd5649b012c8d7e0450919b2f93bbd7c6328ab03f221df521545fb73ce5d25d71abeb994a2c778d24f2b9e2b66a558ee9097e277c5c611d91636e07aa3d7c5dd9cd89cb4cea50ead2906fc9aa1f00c6c979b122ece1bffbdd1bf2c1eddfc4d6d72f089757583684bdb11ba04b9ed10a88afdcde7ae43aefeca6fa60730ed0ba347deeb786ce9bf097c2f167a0d1774d8295ab4a4970f2ddc00ef3f1af3f5716e9e0a9a6f3b644d3893a1a555b23dd59dde44cb13effb85c4828fb1ca9b4c2982b255ee6153aec8546c0c6c4e6b75385a9f24f7dbf6d4cb850531ba61bc469e50e43ba354df63fc0b55aa80f47a3262fccb7d7b3c2f95b021205e64883671c32350e7f1fcec0f1527f6b7a6f992cbb68fe3c14dcbf2afaa13cf12b81b0085a8aa2296d036a89bc7f439c48962e77bd98871ac1a10f5d3048f94a7dd9e0461dadf218aaa84abf65644287fd81dbf92"], 0x0) 2.511613574s ago: executing program 0 (id=2542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) (async) sync() r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x11) (async) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x42, 0x0) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file1', [], 0xa, "6455d828effa4c0c3424baf0d6794fd0781b48181698edab65235ff0507da48343d4974364d8864ce4ae8becb5ef51be56009bd6fb"}, 0x40) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f", 0x10) (async) write$UHID_INPUT(r2, &(0x7f0000001300)={0x8, {"af0014920c989bde943127351c7e048fe805d44569c987d51286ac5e80b0961cfe3629729c82e28c53b31e3ecbb8722bff9c0906027d5cb6fbd929cb4b5e657cc88a443809e6a720828c27b6519e7c18904d67528373733934aa5240afd60544d489e1ec3779ac45095c12c6c5f13c086306dfbbd31926b74150ff2c87db2be1d995e9b3a16fb7360de12618b05d94c291acfcdab84c919de60133f54a0a18d2517c1d0de417ae39fec1c9fa306573205051a9880da1f213b9a27c22b72d42d92b7b260b41bcc1868a0404936774ea5209f02929ec3eef4298818ddb708de6c0e1fda05436037d7d4042d2de3adebc8a62f58ec6ccb4160435c4393ba913250b56ec2fce544a01a5a3ce4363fd497fb256910f31e9416f5b719d64f931bd6d71b54787841b3e49e01fe6ac9598ddb5ef1aeb3d1cabb75845d46806a494b6cf89ec9c8203b92dd0dadc5a3c02545cd005b5f26b7d2b848cb684cb58245d591472d5109e7fbe1175656d729fdd689af57802b33d7d53d427aa57eb0af7a63d9f73be83cd9c12bd06463083b4cc853aad416e9faf484fa069d3b7599b6fc6d94152811403201b91da2547ff6721b0ea237c37464b47b3b4f37384e50ba5773a63356991a5abef659e089cc95e5c3b6d8428115efcf9e89e2743b167d7b9824392d868c159fd1264bea8b9b8b26769d15a27df3af350e2a6e9e37b35c153bf980e8ad15de3b0f3add5f98eb2cbc03eeb2b04e6fb032991d7a88b14c7d2cf2959fc4ed27c4c93c13f5760d0803f10afb91effb45967b4793c58e4bc2e4348c93b4e59f1544a01e89530f6056cda3f972050ae79d9297af71cce0d82c764db2422967f05c9847715c66321e8ab0075a361e8fd78a956074945e687ec1ad01f8dfeb7f3ae2c25daff35617a5d752ad5b019689f10c789d0196f73011f5a4e002aebb676ccb2d8b92ff6c1eb60de10ed0d42f2d19fe96786938eca0fd09a3f16f7b52ef806183282c05ff9fccf96abd096b442c73c494c78c4161ce0599bf6e637664f5dbefa129e69a0d53525d77f871716052385649c1249a402a4a9ecadfd7182a4aba3fc48d76890dfe8a5442ff1b833b95fdb7ae5f052e5c18e9b0ad482ed80c4567f0d0645e6525e3390195b3a4314ab063ffca639d2b181efe15d5bb09e967900fd55ad9db7f6ba99268e0d7e2785c5b14f801b16b6fe9966bb3fa88352bc2ca79aa9a77ec5f9c271dcc62b6124a4d5ed1014fa6eb98521d4be4ca4323311d39e44002e71469326056d98af69fd42eed1dfec48d191587b35e2641abe8c80a2553b92cb43feea49505b5b5ca35dfaf06c693730033ebcad45b6b8026d4722b5c7e13d69269808f438816f77a7b1ed2d31ab44968657e70a51e8d98e520e3628014a09e55f36ca5c4c630d687b20e5a7bdfd6d43613fd3738c8ec1464561586987388885b7a424c949a3110e5de795ffdcf1ef43fb8b5b0364cdb0e9a62c1c6922f08125d456f0ee5d58fa670ff071a8d5b57c06efe30d960f9a67d3dd7dd6ec13c799f9b89d90593ba794c5c582f8bd583af0a59043a1da36cee8e2cc173610960e33300ec48cf7281887ffe66e7ec113a29ed339556d84d638ae9554bb20f2a7695da8bcad10e5f155fe5d54eb511087f7abb4a8ae9e78e233b1e079a44c9cdf2529ed3166c24f80a2bda3b2dfdd2e1c2f650cc35fccf8cb17c03681c6f379f535eeaf46caa1dd95f0b72ea6cf301f2d713844b36c7e90e052528f04a668e1dc5ed11e95bbb86268c712af3f6c77d538c9d3dafeceaacc7ba6b20d9266d75c7470d627725700bfd36a9faf5488532a0871a00e18466f3499e3e3270513168d05f52472045b8558d3fb7880805b6fe3a56b3df9eaea72d147f94ee09e763fcf66d0c71b708fb842bbe619eeeaf483fa717864ab435ca03503285591364727a3615582c80d2023897f7bfdda9b00d095ec11f42482f3851a9232ed09ec6733d54020a9e3b98cb3a014f094e9d968672632a30f967a6d2f00c64fb0aefbeb64510edca5496c9f69379f71412f08fe6afeeb604040a42f00290bc04a40f66f0b84c9c6d7e4d1bc213ed49142215b259be08a0a305c68cbec769ce195ea62b7a2ce632da0a98b469284fd7802bb8c47943ac1c8a7a2b0ee36ed45cde2d13cc00ecc11ca9516d9e917fa28d703566b8d5743c5aba0da662f0446768c6d0df6773d1b0c46dac6a6213aa7b5095a8bd9f34048394a8baac9ec65d740ad8acb8eb683702eaf509c30b547bf355561ca00841efdccd413295a430344d17d2d5f4f435d0a33fafe1b4f6826e9d91436b379cc46039551997e54692487562f65a406b769f2856d37c87a73e2e3738c9afdfa5e0f088bbd2799c7c722c23a7cc37266af557beecb9cc8340bc76ba85a147530f3a9bd8cfe82358c0d799f0687540d463e0f010d1e914f043027284292bf31af75301e27689910393e41f877832797dd7c184249e7b2ec0a79b0decb9a3eead5b3c82ac60fe1485829bf75b8af597b5fd9e47460ebb6d809733eb790027094b019ef2bfb76d75876a5e1e312e80e841c5e074c78b35be6a4070c99372dbb13dc27966a8d448b8e3225b11af907985f3142d41da70a682166814fce9e535cca37058bbb3a02894f6ada82c266e763f431d7e1926da2fc86805b02d6af712c82e7a36e667bd3091661be9cc0cdbd3b3cc690594cf8bac39dd9dac1f883cfb0e500759b0e5dc36721b3ed452addc26d39733a2d76d852d897298009dea9546bae66e9aac7f35277e025d440ca93fdec4bbd58970a130fc79056af96f81b0461ef0e16d4fb12014313438a4bb95b2f9cac98e24a713ed14b539ceddf55e90b6c000044a24be6597e2c5a397a772d7c493ad53a05d6076b584ee7c1615ee7f9de627ac9d7d0d4a12b5a080a9c4977da436704bc9eb9f1d25ba91498e4b575550a69aab83e9157a910c4b2907ea97bcc171dcb7ff6fa982dee16d5c5aaaf93fcc225a6c67c96e54ead190f9c6f949b8025988a46d29c86cf18623882d5aa996a3ece81881ba63e0e7d62b585a179631c7e22f924be7aad5699af389c6651c92848153007d9929683648c8a3fb102a50d9a3e9c83e6cabeae5f97d7faad7a803f8c6dbd9237fa4bec7b33db2cc4db5cd7b3baf1c4f4ddc1f16ec6484cbd1adecab06617045b2d5bac8d1bf97a37ed2780a967a678095a6849cabd87256dbe46f52c960ba8ead52e666a131abfb019d2ac7dd2b055bf91168322b23821a522d241f27a2e7ef892d589a0e55b606167e53b0725a089cae5ef65f02f8a2f32dedb370bf2dc34dac5218be294e755915b399cece7e5c3fa887909961a3d626e4a43bab7edd193a9bc0a7a764640943a635fec7722ff8b3add819b26b78c4e54ff970c15d6b27971cd135d288f081a66e792a8ee5b2d89d5945a99f4216ac21fd9a61e305b4a908f4cbe38e5ccd5eab65f5962877a570524809dffa4ca0ed90d505601d7d244273f20cc47feca7259bd1362e334be459e25a59d4873fc8ede03744c88599a5e5f2a6fb0ca08d085e40c8bd71a0777f7715153e71f4a67f6bb73bbbcd766a9dd4287671dcf6b7daacc4f4b81b32ea0d0381fc32807fe9393249e596d3d5ae4bc5a1cb3e48d63478679eb381fbe8cafd2c6890ba29c1af695f2597c6b472a163b7584dde7327933b9d5e88e0d77e3a3d526a619966dde7f82c7ab7a67a59ded2c880ee0e2f736f054b7d99cc68df48c28d76ab12762c85d07a1f3215d3d4ef2ebd65b0f7eacf62ec12997ccdada731992513263a06e063c27eccfdb3c9d1199136c1a2c3d6b5ea6b2e96c9aa6be3bfbda408b2779ad4eba91809a495c1b872e40d49b0acf4b19b4677e6ea8d07b9a621816c4c5f0e5aa364d4803567da0b2b646604563b31aaa298130576690cbab52bf1ddad7c64a7a416ceb36d6b3202f377ed003e8d74cabd4a6a7be18c95716022cc30c45157d6743785746cf8b0e21ec3208336ab0a43ad9c058fffa3021f84ca8b037dea55254ab944493ca03d025a4b42df3e5b830b81471cddf81fd14aed18e45cfed27b1ef015827942f833a0eee4cc0fcd57f0180f83f32e17d27e4784e42eb1a256404aa6e12f9daabddb907230b20693f3bc74723be6808d95c6463ef7bb6bc4a756fdc805ef4077303e5cd504e6c1754ee8303ee92b94808782984f75c0df49436d3859c092133b0545dac0d8f84fc95a1f0f38e4ecbe3f935d33e86b97bb11ca6f502a602bc7e05b4e6514ddc8ae4d8231874b350b32f96ff6cfbe03f1bf5a0fda73c15eca00afe85c026f5e34e699910ab16502b224b8f383a9a863ca351a1e87c17baadb3f7141aa1295a2a6be4d88d1347da9c356ba9b3bfcc678b58add1b224a0c9b7c3cc4c828abc56acd320e8a8ad22da90a0cf6ae40a471c150581da040297aed0e4889c5963bd8c1415acecbd932f9acda87315e3b2dade276b8324dc7d95141cdd8c4fba82c834a95f9efeb2c74c31e7fd32f96a6a68d9e9942c0bdc55bedd1617e47420877b9f640094a37ceea39656468215ebe789a277f585adc1cc0285b53e33afae1616b0806aeed78b6cc4da54e3bdfa3d49ead4e4fa3623f86a4dfa3042ed403684c62a5d148a30c99c24c3cf9a8858e02800e49e0eed84472a559c9f208f6c3310050e4c5948320b5b4eeefe583bb0bcc0bc01356e76e3465f66a7d0c56ca7abc069db5bd7ad20ec01307f391b5bc890b5034271ee31d5bd374a9422a08ce949667512c8d0bb60eb5d4d22fa0e2a5d172edc7b7386abe63222ef8fc5c676828a1441c5ed19ed5827b0d73d568efc51f46f65ea4f205ac26924d6a7f11477fe23049e0de65bd534c81756556c1cd8bc70b3ce71e4e13d44500773e0767bc735c98f0e1d06dc79e43b946a2faaf698e188cf5909e433edbc546beffcbdea76064ff9d5d56273ca05af42c541b896bc5a942665599c9a8f52db36dbd6d42e8f9bb3446df5f44e3971eb408d0c63381b4aa5997441e01a5eff9fa51d82b7d60d8c3ead784e50b562db074b19e855e8290896b808611c40ed7e0691f758103208900d69cd4c86310318d339eeb473b4bea27be94622560cf35416eea7333bb72110afe202dfcc55c755ed32ea9b4851378b554546b52ebd71b90828733ac3040daf1e3d23bfcadd20bb9248731ab11155aebd259b7e693ebad5d43e6a85f14ea317f31eca905634f9e8d5b1ff73dc5dbd2bbeef6c2965932c885969e00e1939685b472c097b4504c9e6f273e1038045e5ac4010ac232288b77de7d3433a143292f145465b6d1f9020aa4f8405bda4310059b82ad8fd41e698a7824456e11f44e577dc5d5a0eb93b98421a2867c3d40627f9061c1d5689205915c7a91da42348ad3bd12038d84175bddaee423b73c93aebf873c850ef44d66324a80ad0cf268998d71fac6988cb0b1879ebcb6c4c3bce2c45daf73db246bc55fb8221341ef760f5f5264113a437e03cbcf03bb276cdc4100138afc6a1eeb9d90e7f43ce8abbd8be6b9c5b54920f76f07d1557167292feb4c970da3f582d40c0661af8f043e01db8016e2600f655175fa7d705bda3a14d1733ccf6603b7f8709b71f2046211468460791330234fa21f417e6a68cdb1d4496808923a87d02f0ebfb09e102a7c9f7c870c082d6993d10e0de2dbe119ac811848661ab30ab8d7a528acf262bf7d21c2f235e5638be58171b61bed99ac3fef801562aabcf3feff77fe9498d09de3e9c3cf18914392433030595aa31d9c79abc29350a2a2a1d0c2f311246", 0x1000}}, 0x1006) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 2.448511396s ago: executing program 2 (id=2543): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000070ada959bb452fcd00060a0b04000000000000000002000000200004801c00018009"], 0x5c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) 2.406362696s ago: executing program 5 (id=2544): socket(0x200000000000011, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001180)={0x4000000000000fff, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0xfffffffffffffe52, &(0x7f00000011c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$hiddev(0xffffffffffffffff, &(0x7f0000001740)=""/4096, 0x1000) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r4, 0x0) poll(&(0x7f0000000100)=[{r4, 0x404}], 0x1, 0x5) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/684], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900"], 0x110}}, 0x40040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/consoles\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f0000001200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf250c00000014000380080001000400000006000600000000004d653f06202693eefef8b4af3c1e44ac2e28740692979092d4166a58e265149019d1de5cc1d0746127c8aeeb5e47b0d70375c014a1b9542fa6d247534f061f47fe86ee8eb5e7c3da4371964055a372c450cc484a3062499503e219b248de1e28f23f5a490990063ebbcfa875b4a2625ab8cf8857aa2b4706471142313f51340edce892f0328b428659634ac546c0346a5efa079c81435fdb3d743e6eca39cf200e5371f78735ef5192f1c01d399a66f991dcd152af0ac204b3da5a1d16787b0cdd92fbd847d20249b2"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32], 0x40}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d616373656330000000000000000000080002400000000008000140000000001400000011"], 0xa0}}, 0x0) 2.368305303s ago: executing program 2 (id=2545): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000005000000030000000000000000000000000000000000000011b38838907a22e3815af11544560b9259048bdd98b22a3d9f123d23226b08b18a73df95042dc37ea4ee697ca11e557e8eb7b953990a69aced053e60910bb6d2ea649063f758a7f293b54a898cd57fd72f1ce6f446296bda1120782a7ddb5b2688820a970c6aeb750038b964ca107005bcc64919627b84a5eeb601dcec703d6398548a13ec66e6a5d1e8aa"], 0x50) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x40300, 0x28, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000c7ff0000070000000800010000000000", @ANYRES32=r2, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000003000000010000000e00"/28], 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)={0x1, 0x1, [@random="b67adc663f22"]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) chown(0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r9, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d2000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.345544577s ago: executing program 0 (id=2546): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80341, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.23834885s ago: executing program 0 (id=2547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000004009500000000000096e7b800"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x114, 0xe) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x88800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000040), 0x12) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2200, 0x0) preadv(r8, &(0x7f0000000200)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.465998161s ago: executing program 3 (id=2548): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 1.326735136s ago: executing program 0 (id=2549): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.207427925s ago: executing program 2 (id=2550): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) (async) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)='[|', 0x2}], 0x1}, 0x41) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x176, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000064c76220560801bcbfb2010203010902640101000010000904"], 0x0) (async) syz_usb_connect(0x3, 0x176, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000064c76220560801bcbfb2010203010902640101000010000904"], 0x0) 1.140011548s ago: executing program 0 (id=2551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x2f00, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) 1.139406611s ago: executing program 6 (id=2552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=[{0xfffff9, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 190.419389ms ago: executing program 3 (id=2553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 190.229172ms ago: executing program 2 (id=2554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, 0x0}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 146.207874ms ago: executing program 5 (id=2555): io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mknod$loop(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0xff, 0x8000000000000001, 0x5) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe30}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0xff0f}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) 103.909125ms ago: executing program 0 (id=2556): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000001600)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="81a6d30ac78074908815ff089b58cfae0fed890583b8bc29e2bfe17020299e4b258fc5ef8f3d472ac9e8ce0fa13b0d122d2c23f9edf8084ae327838ffc66370dda91358b750a7a"}, {&(0x7f0000000ac0)="327e62d940dcf1565e7543d8a39332bf3541eb7c7aed98117a128c7b3384dc56dc2e72c19604796cd5e85247c0ab7ba4dc18fc7e526828242fd6264c935078e304eab4883f48daef943a45d3f55b821928fd38b859872f7857f6917d877740092d21e490458961c90711db3a8abdcfe4af01f1c7369f34a970efdbe94c3e7fee6ba3eaf8c9e831e823bde820aaa709e44904f70080ac4e8606b42d1c6b497fe750fb54"}, {&(0x7f00000004c0)="cd6135ce5c3b08f4bf8e89ad245c71d9cdfd675f7249fddf3adc4e6abc73e4b7ce589cd64a9e0e54301a159f3c5715d65f1b63f18c4863aae38b5bf0c076273947767b92e97b83762648b55be5b829110192e838ce46c8c82427441d1c697f888a66b299fd7768a6ff1ad21ade22a148658636790979b3231237b7e69760b23d196217e662801a5a3f5d78d392a1"}, {&(0x7f00000001c0)="82d25d52395e7643447e9e92f300f875a024573079b1507571202f3b2892e633f4bbb8a221557528a3520ad004b8a683f74917562dfff8"}], 0x0, 0x0, 0x0, 0x24008005}}, {{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e24}, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000600)="38932740d73c88c3e3ad04a3e2d505c5a1fbe21bae25f84566ac4791c3cd3f519e7a0ea1df92770eb20c80fa20e7b6ef372f2ba2f0e76d94cc205c95c425b31d07f229e7ca851c9782e3140bae353f06cf02eaee449ba894d89ba2"}, {&(0x7f0000000680)="3f6acc42d80c8668185a36e0346e798188f6ffd9e33a8a1de1ea4cd00b0d86a4c4f7dd378830d122797a71f67574bf7f8d32704cf5f69956b88a51893ff2dcd5f1be6284084546e233dcf1de65aff556403266c1276c012e8e5938064f315ae2a6842b9d7f1352adfd8cd2c2254a192ee5faf9085b63884bbc8033931b08c429e2a9327d5d7b0af2b695ab82d7ac0951638033834357b11e5de060272159d10487ba8c10d489dfc2a7ea8ce0591afcfe327ca312829f2c116bd724e1482ca11b8e5e4cd174391240a380bda6b674bba85d85daff44159cbacc01"}, {&(0x7f0000000780)="2ffc11afec8e6cd99c91cbd0b9d34b0fc739af1d7d0538da4d0aef8a993e8b64c159353bf334ec6e336ef8e137623ad170cb2be333295bcb8630e3d9f228334793e0c37e6730db274df7fe0299b9a56ce25824b21828f84c276c283750da8c5a660008e23716fba7e6b6107ef1d1c704d2db585867e4aa3a632bfe0c45de83c69e7e3c1f09578e0545886aad17e49eb9e92ed24b4c84456f99f1744e46f159f99f5493e1090c30c042fae9fef99a96ab016a44443ce890f5300dabd682cd2e5534ff43afd9c47701e1e9a41e5655004c798a4bb5d830fe3003c407548d1e809c11bd1e53a7a547658c7030ca115a1b2b"}, {&(0x7f0000000880)="1b87df7134387de65521ddfedb1a13cd2a6b65b38ede77dd344f3bd40c340b3bf9e2a71bcc48da5433812fe85d5971760a55102d79b28992b26e46432f47975ffaddef16071c59673e48e3a9cc953d0b7c81ae37fcaa19a8f28bfea82d687b97b2b5975c7e18356492ceba153b31070b42ba0b52df17ad88bfba33ef97099c400fb23a00eaec815fa4578d7337f4ac1bc325aabdb6c1cb4459422512f2402006321fe23bc98f626955fae7efac3f8df3c928830c7640bb6befc03d67ceb91fe1c5525602275a99b3734f83da8888d7"}, {&(0x7f0000000980)="c1f0d63c124188c76032de4b8b4076169aebe3021078fe575ca532a65c30d0e175b01282b1c293275044cbb63fa2184db000aaedd82cb1fda47624ef8a65784e043cec3e2a337b00a4b4abe46b764e5deea80b40fcd5bd94765d2edd3993f686f37ba4ab0a823ec06288035a57a3f2ae6893cca6c4f469d74f8f6fd16325be47af64501a5dfce7fcef9a1e883d9b915681f24d9965e5aabe0defd829792b83412170f810e305"}], 0x0, &(0x7f0000000c00)=[@rights={{0x0, 0x1, 0x1, [r2, 0xffffffffffffffff, r3]}}], 0x0, 0x50}}, {{&(0x7f0000000c40)=@file={0x1, './file1\x00'}, 0x0, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x4000005}}, {{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000000400)=[{&(0x7f0000000e40)="8af5e51b2b1395c2d6b829ef6b2684237f69b35f105d40fe9ac079ab4b97f5ce1f3cd78e06c4f37aeff2a07eac9eb8e39ccd01b21dc4facab431556706f6090fd1c5769a35e6921924e365730d2b5deeb9d36417874e4e77234eeaea7b98756d98297cbaa5684275de475139b6235aa6c58dc022ab7ab05ef3220f9c11fd247d205d909631342aa3d5226ab55406bf7922be251f33bd23da85da0fa5fb174400e8e06b29adefb9e4a16a0fd1b554dc38ea6a3d0f6f31b94f7c597fa4556da406bc20469461ac793d67f163baca2b086e2f93d5c2b877d2a2541c5442d100609c25056fe7c045ed4f0303010f730227a5"}, {&(0x7f0000000b80)="4a26a9261cd84fea37756352b536803c71c8167c0d4574eb9e30ebfeb8f29a6de37287b8c76932e8f9d0e0d796a6312c478661a10bb5da6391f9fb989fbcf868888cab3b176a795719cdb1dba521c7007cb2c279a5af20a8"}], 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYBLOB="00000000000000000000000001000000020000004000a0d46a154a55a0c9917115772f90d82b1d5c0686e1", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r2], 0x0, 0x44}}], 0x3fffffffffffe97, 0x80) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000180)={0x73f, 0x2, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000000080)=0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 9.720384ms ago: executing program 3 (id=2557): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) flock(r1, 0x1) 9.568659ms ago: executing program 2 (id=2558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x0) 0s ago: executing program 5 (id=2559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000004009500000000000096e7b800"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x114, 0xe) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x88800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000040), 0x12) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2200, 0x0) preadv(r8, &(0x7f0000000200)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): d=9503 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8dab8e969 code=0x7ffc0000 [ 310.659717][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 310.660199][ T5864] usb 4-1: too many configurations: 249, using maximum allowed: 8 [ 310.685762][ T30] audit: type=1326 audit(1747737832.657:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8dab8e969 code=0x7ffc0000 [ 310.710053][ T5864] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 310.722876][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 310.722887][ T30] audit: type=1326 audit(1747737832.657:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd8dab8e969 code=0x7ffc0000 [ 310.760432][ T5864] usb 4-1: Product: syz [ 310.770361][ T5864] usb 4-1: Manufacturer: syz [ 310.777858][ T5818] usb 2-1: USB disconnect, device number 25 [ 310.793900][ T5864] usb 4-1: SerialNumber: syz [ 310.827783][ T5864] usb 4-1: config 0 descriptor?? [ 310.850421][ T5863] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 311.005126][ T5863] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 311.026204][ T5863] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 311.047607][ T5863] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.076473][ T5863] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.094502][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.095116][ T5864] mdc800 4-1:0.0: probe fails -> wrong Number of Configuration [ 311.127795][ T5864] usb 4-1: USB disconnect, device number 32 [ 311.138664][ T9532] team0: No ports can be present during mode change [ 311.149179][ T5863] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.156076][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 311.237141][ T5863] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 311.257381][ T6302] udevd[6302]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.358702][ T5863] usb 5-1: USB disconnect, device number 21 [ 311.400073][ T9532] team0 (unregistering): Port device team_slave_0 removed [ 311.984777][ T9547] xt_hashlimit: size too large, truncated to 1048576 [ 312.445891][ T9556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1010'. [ 312.949238][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1015'. [ 314.090623][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 314.280464][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 314.409119][ T24] usb 5-1: config 0 has no interfaces? [ 314.609387][ T24] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 314.629675][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.649281][ T24] usb 5-1: Product: syz [ 314.672531][ T24] usb 5-1: Manufacturer: syz [ 314.692893][ T24] usb 5-1: SerialNumber: syz [ 314.715668][ T24] usb 5-1: config 0 descriptor?? [ 315.101698][ T5863] usb 5-1: USB disconnect, device number 22 [ 316.567268][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1031'. [ 316.691660][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.697987][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.205038][ T9635] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.398289][ T9638] binder: BINDER_SET_CONTEXT_MGR already set [ 317.412389][ T9638] binder: 9636:9638 ioctl 4018620d 200000000040 returned -16 [ 317.421155][ T9638] binder: 9636:9638 ioctl c0306201 2000000003c0 returned -14 [ 317.711898][ T9635] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.793321][ T9643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=9643 comm=syz.4.1037 [ 317.896683][ T9635] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.027626][ T9635] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.768429][ T9635] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.452817][ T9635] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.475967][ T9635] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.489890][ T9635] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.180350][ T5863] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 321.048622][ T5863] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 321.135985][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.411155][ T5863] usb 2-1: config 0 descriptor?? [ 321.998539][ T9699] netlink: 'syz.4.1052': attribute type 11 has an invalid length. [ 322.008598][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 322.008732][ T30] audit: type=1400 audit(1747737844.807:994): avc: denied { create } for pid=9698 comm="syz.4.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 322.119238][ T54] Bluetooth: hci1: Unable to find connection with handle 0x00c9 [ 322.147825][ T5863] usb 2-1: Cannot read MAC address [ 322.170116][ T5863] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 322.258185][ T5863] usb 2-1: USB disconnect, device number 26 [ 322.637239][ T30] audit: type=1400 audit(1747737845.327:995): avc: denied { create } for pid=9705 comm="syz.2.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 322.874991][ T30] audit: type=1400 audit(1747737845.337:996): avc: denied { write } for pid=9705 comm="syz.2.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 323.004234][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 323.053984][ T30] audit: type=1400 audit(1747737845.337:997): avc: denied { connect } for pid=9705 comm="syz.2.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 323.180310][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 323.183217][ T30] audit: type=1400 audit(1747737845.447:998): avc: denied { accept } for pid=9705 comm="syz.2.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 323.209980][ T30] audit: type=1400 audit(1747737846.017:999): avc: denied { lock } for pid=9710 comm="syz.4.1055" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 323.233265][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.302160][ T24] usb 4-1: device descriptor read/all, error -71 [ 323.335894][ T30] audit: type=1400 audit(1747737846.137:1000): avc: denied { getopt } for pid=9714 comm="syz.3.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 324.380309][ T911] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 325.142291][ T911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 325.261837][ T9739] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1064'. [ 325.282993][ T9739] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1064'. [ 325.312706][ T9739] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1064'. [ 325.397682][ T9739] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1064'. [ 325.473565][ T9739] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1064'. [ 325.516639][ T9739] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1064'. [ 325.710412][ T911] usb 5-1: not running at top speed; connect to a high speed hub [ 325.789608][ T911] usb 5-1: config 129 has an invalid interface number: 28 but max is 0 [ 325.798345][ T911] usb 5-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 325.820353][ T5818] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 325.974400][ T5818] usb 2-1: Using ep0 maxpacket: 16 [ 326.021288][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.033996][ T5818] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 326.046730][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.065968][ T5818] usb 2-1: config 0 descriptor?? [ 326.162758][ T911] usb 5-1: config 129 has no interface number 0 [ 326.677157][ T911] usb 5-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 326.702834][ T911] usb 5-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid wMaxPacketSize 0 [ 326.763861][ T911] usb 5-1: config 129 interface 28 has no altsetting 0 [ 326.821723][ T911] usb 5-1: string descriptor 0 read error: -71 [ 326.916544][ T5818] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 327.112597][ T9746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.226581][ T911] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 327.235737][ T911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.236144][ T9746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.259518][ T911] usb 5-1: can't set config #129, error -71 [ 327.336551][ T911] usb 5-1: USB disconnect, device number 23 [ 327.347986][ T9746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.400164][ T9746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.444615][ T9762] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 327.462501][ T9764] binder: 9763:9764 ioctl c0306201 2000000001c0 returned -22 [ 327.532661][ T9767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.555151][ T9767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.599625][ T30] audit: type=1400 audit(1747737850.407:1001): avc: denied { accept } for pid=9769 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 327.633466][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'. [ 327.670488][ T911] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 327.678717][ T30] audit: type=1400 audit(1747737850.457:1002): avc: denied { getopt } for pid=9769 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 327.820384][ T5898] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 327.830689][ T911] usb 5-1: Using ep0 maxpacket: 8 [ 327.839339][ T911] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 327.853141][ T911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.870735][ T911] usb 5-1: config 0 descriptor?? [ 327.906637][ T30] audit: type=1400 audit(1747737850.717:1003): avc: denied { remount } for pid=9774 comm="syz.0.1075" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 327.972857][ T5898] usb 3-1: not running at top speed; connect to a high speed hub [ 327.987598][ T5898] usb 3-1: config 0 has no interfaces? [ 327.999244][ T5898] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 328.017245][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.039716][ T5898] usb 3-1: Product: syz [ 328.049568][ T5898] usb 3-1: Manufacturer: syz [ 328.057970][ T5898] usb 3-1: SerialNumber: syz [ 328.066639][ T5898] usb 3-1: config 0 descriptor?? [ 328.086765][ T911] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 328.123356][ T9785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.470286][ T5898] usb 3-1: USB disconnect, device number 23 [ 328.698332][ T5898] usb 2-1: USB disconnect, device number 27 [ 330.014305][ T911] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 330.024985][ T911] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 330.120014][ T911] asix 5-1:0.0: probe with driver asix failed with error -71 [ 330.254894][ T911] usb 5-1: USB disconnect, device number 24 [ 330.504324][ T9814] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1087'. [ 331.503551][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 331.690794][ T9825] netlink: 'syz.0.1091': attribute type 10 has an invalid length. [ 331.700659][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 331.734631][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 331.753410][ T10] usb 2-1: config 0 has no interface number 0 [ 331.779722][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 331.811365][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.835968][ T30] audit: type=1400 audit(1747737854.647:1004): avc: denied { append } for pid=9836 comm="syz.3.1095" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.866552][ T10] usb 2-1: Product: syz [ 331.884103][ T10] usb 2-1: Manufacturer: syz [ 331.897044][ T10] usb 2-1: SerialNumber: syz [ 331.920193][ T10] usb 2-1: config 0 descriptor?? [ 331.939383][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 332.023076][ T9843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1097'. [ 332.958244][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 333.036335][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 333.485737][ T9860] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2064 sclass=netlink_xfrm_socket pid=9860 comm=syz.3.1101 [ 333.545569][ T9804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.573803][ T9804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.611129][ T9863] overlayfs: failed to clone upperpath [ 333.620082][ T9804] netlink: 'syz.1.1085': attribute type 10 has an invalid length. [ 334.639390][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 334.654899][ T10] usb 2-1: USB disconnect, device number 28 [ 334.688093][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 334.733160][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 334.857134][ T10] quatech2 2-1:0.51: device disconnected [ 335.860333][ T30] audit: type=1400 audit(1747737857.847:1005): avc: denied { read } for pid=9880 comm="syz.0.1108" path="socket:[24397]" dev="sockfs" ino=24397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 336.645040][ T9894] tipc: Started in network mode [ 336.650031][ T9894] tipc: Node identity 6, cluster identity 4711 [ 336.656608][ T9894] tipc: Node number set to 6 [ 336.738014][ T30] audit: type=1400 audit(1747737859.547:1006): avc: denied { setopt } for pid=9901 comm="syz.0.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 339.499417][ T9928] tmpfs: Bad value for 'mpol' [ 339.610301][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 339.850378][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 339.931034][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 339.959391][ T10] usb 3-1: config 0 has no interface number 0 [ 340.000584][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 340.034383][ T9934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1122'. [ 340.050020][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.050772][ T9934] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=49 sclass=netlink_xfrm_socket pid=9934 comm=syz.1.1122 [ 340.066735][ T10] usb 3-1: Product: syz [ 340.076314][ T10] usb 3-1: Manufacturer: syz [ 340.082092][ T10] usb 3-1: SerialNumber: syz [ 340.117827][ T10] usb 3-1: config 0 descriptor?? [ 341.576862][ T9934] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9934 comm=syz.1.1122 [ 342.523851][ T10] usb 3-1: can't set config #0, error -71 [ 342.531604][ T10] usb 3-1: USB disconnect, device number 24 [ 343.741814][ T54] Bluetooth: hci1: Unable to find connection with handle 0x00c9 [ 344.177247][ T30] audit: type=1400 audit(1747737866.977:1007): avc: denied { create } for pid=9981 comm="syz.0.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 344.210690][ T30] audit: type=1400 audit(1747737867.017:1008): avc: denied { setopt } for pid=9981 comm="syz.0.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 344.304341][ T30] audit: type=1400 audit(1747737867.087:1009): avc: denied { bind } for pid=9981 comm="syz.0.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 344.323634][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.583409][T10023] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.1149'. [ 348.605575][ T30] audit: type=1400 audit(1747737871.417:1010): avc: denied { map } for pid=10017 comm="syz.0.1148" path="socket:[25438]" dev="sockfs" ino=25438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 348.662699][T10024] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1150'. [ 348.961643][T10037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1152'. [ 349.501256][T10035] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 349.610190][ T30] audit: type=1326 audit(1747737872.397:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.2.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8dab8e969 code=0x7ffc0000 [ 349.663729][ T30] audit: type=1326 audit(1747737872.397:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.2.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fd8dab8e969 code=0x7ffc0000 [ 349.699440][ T30] audit: type=1326 audit(1747737872.397:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.2.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8dab8e969 code=0x7ffc0000 [ 350.102316][ T30] audit: type=1326 audit(1747737872.397:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.2.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8dab8e969 code=0x7ffc0000 [ 350.105936][T10051] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10051 comm=syz.3.1159 [ 350.168581][ T30] audit: type=1326 audit(1747737872.417:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.2.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8dab8e969 code=0x7ffc0000 [ 350.239172][ T30] audit: type=1326 audit(1747737872.417:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.2.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8dab8e969 code=0x7ffc0000 [ 350.274155][T10051] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10051 comm=syz.3.1159 [ 351.576269][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 353.590293][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 353.825381][ T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 353.839419][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.060148][ T10] usb 2-1: config 0 descriptor?? [ 355.016965][ T10] usb 2-1: Cannot read MAC address [ 355.022235][ T10] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 355.037874][ T10] usb 2-1: USB disconnect, device number 29 [ 355.185492][ T30] audit: type=1400 audit(1747737877.997:1017): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=41478 daddr=10.128.10.14 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 355.466934][ T30] audit: type=1400 audit(1747737878.277:1018): avc: denied { watch } for pid=10141 comm="syz.3.1191" path="/227/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 355.648560][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1196'. [ 355.651424][T10156] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 355.667845][T10154] netlink: 'syz.2.1196': attribute type 2 has an invalid length. [ 355.676248][T10154] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1196'. [ 356.550302][ T5898] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 357.740437][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 357.747200][ T5898] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 357.759439][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.769676][ T5898] usb 5-1: config 0 descriptor?? [ 357.778067][ T5898] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 358.223019][ T5864] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 358.258048][ T30] audit: type=1400 audit(1747737881.067:1019): avc: denied { name_connect } for pid=10197 comm="syz.0.1209" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 358.381966][ T5864] usb 2-1: config 97 has an invalid descriptor of length 70, skipping remainder of the config [ 358.392820][ T5864] usb 2-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 358.404059][ T5864] usb 2-1: New USB device found, idVendor=046d, idProduct=00f3, bcdDevice= b.28 [ 358.413212][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=66, SerialNumber=33 [ 358.424881][ T5864] usb 2-1: Product: syz [ 358.429049][ T5864] usb 2-1: Manufacturer: syz [ 358.434662][ T5864] usb 2-1: SerialNumber: syz [ 358.519262][T10203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.648532][ T54] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 358.917839][ T5898] gspca_vc032x: reg_r err -32 [ 359.018204][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.310929][ T5818] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 359.348878][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.365886][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.381784][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.387077][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.402033][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.407335][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.422577][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.427987][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.434041][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.439663][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.492134][ T5818] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 359.559428][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.566912][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.572331][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.577959][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.583297][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.584726][ T30] audit: type=1400 audit(1747737882.367:1020): avc: denied { ioctl } for pid=10214 comm="syz.3.1213" path="socket:[26315]" dev="sockfs" ino=26315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 359.588774][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.619225][ T5898] gspca_vc032x: I2c Bus Busy Wait 00 [ 359.639818][ T5898] gspca_vc032x: Unknown sensor... [ 359.663795][ T5898] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 360.148696][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.167104][ T5818] usb 3-1: config 0 descriptor?? [ 360.200734][ T10] usb 5-1: USB disconnect, device number 25 [ 360.453161][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1216'. [ 360.961526][ T5864] usb 2-1: USB disconnect, device number 30 [ 361.134313][ T30] audit: type=1400 audit(1747737883.947:1021): avc: denied { connect } for pid=10236 comm="syz.3.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 361.291114][T10240] batman_adv: batadv0: Adding interface: dummy0 [ 361.297668][T10240] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.323512][T10240] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 362.706248][ T5818] usb 3-1: Cannot read MAC address [ 362.711585][ T5818] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 362.726294][ T5818] usb 3-1: USB disconnect, device number 25 [ 362.740440][ T30] audit: type=1400 audit(1747737884.087:1022): avc: denied { ioctl } for pid=10236 comm="syz.3.1219" path="socket:[26361]" dev="sockfs" ino=26361 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 363.735556][T10273] netlink: 'syz.1.1229': attribute type 1 has an invalid length. [ 363.839869][ T5864] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 363.848358][T10273] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1229'. [ 364.621081][ T5864] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 364.726159][ T5864] usb 5-1: config 0 has no interface number 0 [ 364.747938][ T5864] usb 5-1: config 0 interface 41 has no altsetting 0 [ 364.764889][ T5864] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 364.782252][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.793894][ T5864] usb 5-1: Product: syz [ 364.798705][ T5864] usb 5-1: Manufacturer: syz [ 364.805470][ T5864] usb 5-1: SerialNumber: syz [ 364.828282][ T5864] usb 5-1: config 0 descriptor?? [ 365.009807][T10292] x_tables: ip_tables: udp match: only valid for protocol 17 [ 366.375410][ T5898] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 366.520617][ T5898] usb 2-1: device descriptor read/64, error -71 [ 366.709893][T10303] tipc: Started in network mode [ 366.714993][T10303] tipc: Node identity 4e8c1c1d9c83, cluster identity 4711 [ 366.727973][T10303] tipc: Enabled bearer , priority 0 [ 366.801041][T10302] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1235'. [ 366.840791][ T5898] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 366.923203][ T30] audit: type=1400 audit(1747737889.727:1023): avc: denied { ioctl } for pid=10305 comm="syz.2.1237" path="socket:[26507]" dev="sockfs" ino=26507 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 366.949042][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.989072][T10268] tipc: Disabling bearer [ 367.015913][ T5898] usb 2-1: device descriptor read/64, error -71 [ 367.100381][ T5864] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 367.137398][ T5864] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 367.146595][ T5898] usb usb2-port1: attempt power cycle [ 367.180559][ T5864] usb 5-1: USB disconnect, device number 26 [ 367.510402][ T5898] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 367.570325][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 367.901087][ T5898] usb 2-1: device descriptor read/8, error -71 [ 368.064314][ T24] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.075473][ T24] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.088559][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 368.107797][ T24] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 368.117459][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.130943][ T24] usb 3-1: config 0 descriptor?? [ 368.180375][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 368.293603][ T30] audit: type=1400 audit(1747737891.107:1024): avc: denied { write } for pid=10324 comm="syz.4.1246" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 368.317506][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.355745][T10317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.370561][T10317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.370587][ T30] audit: type=1400 audit(1747737891.107:1025): avc: denied { ioctl } for pid=10324 comm="syz.4.1246" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 368.430218][ T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 368.449888][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.464486][ T9] usb 4-1: config 0 descriptor?? [ 368.621142][T10317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.689570][T10317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.957670][ T9] usb 4-1: Cannot read MAC address [ 368.967393][T10317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.980458][ T9] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 369.061779][T10317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.426070][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 369.458095][ T9] usb 4-1: USB disconnect, device number 35 [ 369.464769][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 369.483182][ T24] usb 3-1: USB disconnect, device number 26 [ 369.590899][T10346] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1251'. [ 369.660400][T10346] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1251'. [ 369.803972][ T30] audit: type=1400 audit(1747737892.617:1026): avc: denied { bind } for pid=10356 comm="syz.0.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 369.846352][T10346] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1251'. [ 369.855479][ T30] audit: type=1400 audit(1747737892.617:1027): avc: denied { name_bind } for pid=10356 comm="syz.0.1253" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 369.880511][ T5865] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 369.887493][T10346] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1251'. [ 370.080384][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 370.559867][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.610090][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.638985][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 370.669213][T10370] nullb0: AHDI p1 [ 370.704996][ T5865] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 370.734028][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.851860][ T5865] usb 2-1: config 0 descriptor?? [ 372.907683][T10408] bridge0: port 1(vlan1) entered blocking state [ 372.914095][ T5898] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 372.922673][T10408] bridge0: port 1(vlan1) entered disabled state [ 372.929034][T10408] vlan1: entered allmulticast mode [ 372.934939][T10408] bond0: entered allmulticast mode [ 372.942006][T10408] vlan1: entered promiscuous mode [ 372.947144][T10408] bond0: entered promiscuous mode [ 373.070311][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 373.118718][ T5898] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 373.137789][ T5898] usb 5-1: config 0 has no interface number 0 [ 373.276182][ T5898] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 373.285691][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.293804][ T5898] usb 5-1: Product: syz [ 373.298012][ T5898] usb 5-1: Manufacturer: syz [ 373.303689][ T5898] usb 5-1: SerialNumber: syz [ 373.309930][T10421] afs: Unknown parameter '' [ 373.315285][ T5898] usb 5-1: config 0 descriptor?? [ 373.322920][ T5898] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 373.410699][T10422] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 373.422249][T10422] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 373.830503][T10421] netlink: 'syz.3.1277': attribute type 10 has an invalid length. [ 373.838472][ T30] audit: type=1400 audit(1747737896.207:1028): avc: denied { getopt } for pid=10415 comm="syz.2.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 373.866332][T10421] batman_adv: batadv0: Adding interface: macvtap0 [ 373.879114][T10421] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.906896][ T5898] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 373.926234][ T5898] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 373.947087][T10421] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 374.000042][ T5865] usbhid 2-1:0.0: can't add hid device: -71 [ 374.007343][ T5865] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 374.358127][T10390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.408341][T10390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.413983][ T5865] usb 2-1: USB disconnect, device number 35 [ 374.419733][T10390] netlink: 'syz.4.1264': attribute type 10 has an invalid length. [ 374.659029][T10434] CIFS: iocharset name too long [ 375.096247][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 375.106230][ T9] usb 5-1: USB disconnect, device number 27 [ 375.126482][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 375.182960][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 375.243178][ T9] quatech2 5-1:0.51: device disconnected [ 375.383831][T10458] netlink: 'syz.3.1290': attribute type 1 has an invalid length. [ 375.395447][T10458] netlink: 'syz.3.1290': attribute type 2 has an invalid length. [ 375.400852][ T30] audit: type=1400 audit(1747737898.207:1029): avc: denied { create } for pid=10455 comm="syz.0.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 375.610392][ T5898] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 376.181709][ T5898] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 376.194523][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.206190][ T5898] usb 2-1: config 0 descriptor?? [ 376.280397][ T5864] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 376.430954][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 376.505195][ T5864] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 376.530271][ T5864] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 376.575737][ T5864] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 376.610565][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.630078][ T5864] usb 3-1: Product: syz [ 376.642131][ T5898] usb 2-1: Cannot read MAC address [ 376.647411][ T5898] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 376.649163][ T5864] usb 3-1: Manufacturer: syz [ 376.676200][ T5898] usb 2-1: USB disconnect, device number 36 [ 376.752442][T10492] ipt_rpfilter: unknown options [ 376.809791][ T5864] usb 3-1: SerialNumber: syz [ 376.860377][ T911] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 377.431086][ T5864] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 377.466169][ T911] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 377.482140][ T911] usb 4-1: config 0 has no interface number 0 [ 377.488392][ T911] usb 4-1: config 0 interface 41 has no altsetting 0 [ 377.497541][ T911] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 377.503742][ T5864] usb 3-1: USB disconnect, device number 27 [ 377.512447][ T911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.512469][ T911] usb 4-1: Product: syz [ 377.512483][ T911] usb 4-1: Manufacturer: syz [ 377.512498][ T911] usb 4-1: SerialNumber: syz [ 377.514390][ T911] usb 4-1: config 0 descriptor?? [ 377.971559][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.128473][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.135386][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.492966][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.664653][T10511] tipc: Enabled bearer , priority 0 [ 380.528229][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.027722][T10511] tipc: Disabling bearer [ 381.059939][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.072308][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.087178][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.088494][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.111785][ T911] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 381.121641][ T911] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 381.135469][ T911] usb 4-1: USB disconnect, device number 36 [ 381.141781][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.152450][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.459592][ T5864] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 381.568918][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 381.759190][ T36] bridge_slave_1: left allmulticast mode [ 381.765519][ T36] bridge_slave_1: left promiscuous mode [ 381.773364][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.781446][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 381.787287][ T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 381.797088][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.806093][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.817104][ T5864] usb 3-1: config 0 has no interfaces? [ 381.827825][ T36] bridge_slave_0: left allmulticast mode [ 381.838347][ T36] bridge_slave_0: left promiscuous mode [ 381.848246][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.856630][ T5864] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 381.872204][ T9] usb 2-1: config 0 descriptor?? [ 381.877656][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=238, SerialNumber=0 [ 381.886798][ T5864] usb 3-1: Product: syz [ 381.895725][ T5864] usb 3-1: config 0 descriptor?? [ 382.360069][ T36] bond1 (unregistering): (slave geneve2): Releasing active interface [ 382.461715][T10537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.473877][T10537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.630037][ T9] usb 2-1: Cannot read MAC address [ 382.636298][ T9] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 382.651981][T10555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.677287][ T9] usb 2-1: USB disconnect, device number 37 [ 382.680742][T10555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.754845][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.765753][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.775932][ T36] bond0 (unregistering): Released all slaves [ 382.873728][ T36] bond1 (unregistering): Released all slaves [ 382.903263][T10552] batadv_slave_1: entered promiscuous mode [ 382.909722][T10553] batadv_slave_1: left promiscuous mode [ 382.939993][ T5880] usb 3-1: USB disconnect, device number 28 [ 383.071652][ T36] tipc: Left network mode [ 383.246997][ T5824] Bluetooth: hci4: command tx timeout [ 384.280956][T10527] chnl_net:caif_netlink_parms(): no params data found [ 384.620495][ T911] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 384.913815][T10527] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.927056][T10527] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.932112][ T911] usb 4-1: Using ep0 maxpacket: 32 [ 384.950532][ T911] usb 4-1: config 0 has no interfaces? [ 384.953189][T10527] bridge_slave_0: entered allmulticast mode [ 384.957718][ T911] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 384.981090][T10527] bridge_slave_0: entered promiscuous mode [ 385.004873][ T911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.027468][ T36] hsr_slave_0: left promiscuous mode [ 385.031007][ T911] usb 4-1: Product: syz [ 385.040299][ T911] usb 4-1: Manufacturer: syz [ 385.044908][ T911] usb 4-1: SerialNumber: syz [ 385.054281][ T911] usb 4-1: config 0 descriptor?? [ 385.073353][ T36] hsr_slave_1: left promiscuous mode [ 385.079215][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.105012][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.125126][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.140459][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.151331][ T36] batman_adv: batadv0: Removing interface: macvtap0 [ 385.198274][ T36] veth1_macvtap: left promiscuous mode [ 385.210897][ T36] veth1_vlan: left promiscuous mode [ 385.216256][ T36] veth0_vlan: left promiscuous mode [ 385.361754][ T5824] Bluetooth: hci4: command tx timeout [ 385.393951][ T9] usb 4-1: USB disconnect, device number 37 [ 386.601558][ T5863] IPVS: starting estimator thread 0... [ 386.605642][T10599] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 386.710343][T10601] IPVS: using max 40 ests per chain, 96000 per kthread [ 387.070446][ T36] team0 (unregistering): Port device team_slave_1 removed [ 387.167491][ T36] team0 (unregistering): Port device team_slave_0 removed [ 387.401333][ T5824] Bluetooth: hci4: command tx timeout [ 387.588092][T10527] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.595802][T10527] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.603152][T10527] bridge_slave_1: entered allmulticast mode [ 387.609827][T10527] bridge_slave_1: entered promiscuous mode [ 387.620457][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'. [ 388.102935][T10621] 9pnet: Could not find request transport: fdno= [ 388.202519][T10527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.232830][T10527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.328434][T10636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1342'. [ 388.484745][ T30] audit: type=1400 audit(1747737911.297:1030): avc: denied { mount } for pid=10641 comm="syz.3.1343" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 388.611028][ T30] audit: type=1400 audit(1747737911.297:1031): avc: denied { setattr } for pid=10641 comm="syz.3.1343" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 388.614234][T10527] team0: Port device team_slave_0 added [ 388.758939][T10649] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1341'. [ 388.786641][T10527] team0: Port device team_slave_1 added [ 388.906569][T10527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.930285][T10527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.111281][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'. [ 389.141224][T10527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.729862][ T5824] Bluetooth: hci4: command tx timeout [ 389.731416][T10527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.742292][T10527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.776602][T10527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.793538][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 389.802696][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 390.633905][T10527] hsr_slave_0: entered promiscuous mode [ 390.661074][T10527] hsr_slave_1: entered promiscuous mode [ 390.667162][T10527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.945262][T10527] Cannot create hsr debugfs directory [ 391.173075][T10527] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 391.202439][T10527] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 391.850575][T10687] befs: (nbd3): No write support. Marking filesystem read-only [ 391.863784][T10687] syz.3.1350: attempt to access beyond end of device [ 391.863784][T10687] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 391.877315][T10687] befs: (nbd3): unable to read superblock [ 392.130499][T10527] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 392.237158][T10527] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 392.336055][T10694] : entered promiscuous mode [ 392.484984][T10527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.543340][T10527] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.575716][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.582818][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.628785][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.636818][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.727979][ T30] audit: type=1400 audit(1747737915.537:1032): avc: denied { sendto } for pid=911 comm="kworker/1:2" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 394.588302][T10527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.886549][T10752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1370'. [ 396.878967][T10527] veth0_vlan: entered promiscuous mode [ 396.895082][T10527] veth1_vlan: entered promiscuous mode [ 396.923027][T10779] batman_adv: batadv0: Removing interface: macvtap0 [ 396.932053][T10779] vlan1: left allmulticast mode [ 396.936895][T10779] bond0: left allmulticast mode [ 396.942581][T10779] vlan1: left promiscuous mode [ 396.947866][T10779] bond0: left promiscuous mode [ 396.955903][T10779] bridge0: port 1(vlan1) entered disabled state [ 396.992640][T10527] veth0_macvtap: entered promiscuous mode [ 397.000687][T10527] veth1_macvtap: entered promiscuous mode [ 397.014534][T10527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.028658][T10527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.039039][T10527] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.048603][T10527] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.058359][T10527] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.068991][T10527] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.154032][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.177795][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.399451][ T9188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.417539][ T9188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.564871][ T30] audit: type=1400 audit(1747737920.377:1033): avc: denied { mounton } for pid=10527 comm="syz-executor" path="/root/syzkaller.5Twq4c/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 397.591624][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.681353][ T30] audit: type=1400 audit(1747737920.377:1034): avc: denied { mounton } for pid=10527 comm="syz-executor" path="/root/syzkaller.5Twq4c/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=29642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 397.709000][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.926561][ T30] audit: type=1400 audit(1747737920.417:1035): avc: denied { mounton } for pid=10527 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 397.982031][T10795] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1310'. [ 400.376918][T10829] netlink: 'syz.0.1388': attribute type 12 has an invalid length. [ 401.020983][T10829] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1388'. [ 401.196642][T10837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1389'. [ 401.241331][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1391'. [ 401.350465][T10844] veth0_vlan: entered allmulticast mode [ 402.300560][ T30] audit: type=1400 audit(1747737924.527:1036): avc: denied { ioctl } for pid=10842 comm="syz.2.1390" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 403.739336][ T58] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 404.854392][T10888] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 404.872765][ T58] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 404.884521][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.903921][ T58] usb 3-1: config 0 descriptor?? [ 404.938895][T10890] netlink: 'syz.3.1405': attribute type 2 has an invalid length. [ 404.954949][T10890] : entered promiscuous mode [ 405.290417][ T5880] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 405.947608][T10904] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 406.202354][ T58] usb 3-1: Cannot read MAC address [ 406.207682][ T58] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 406.229195][ T58] usb 3-1: USB disconnect, device number 29 [ 406.292859][ T5880] usb 2-1: device descriptor read/64, error -71 [ 406.530284][ T5880] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 406.581363][ T30] audit: type=1400 audit(1747737929.397:1037): avc: denied { accept } for pid=10926 comm="syz.3.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 407.763872][ T5880] usb 2-1: device descriptor read/64, error -71 [ 407.856189][T10936] ip6erspan0: entered allmulticast mode [ 407.871002][ T5880] usb usb2-port1: attempt power cycle [ 409.019386][T10951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1425'. [ 409.028377][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1425'. [ 409.160312][ T5880] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 409.168042][ T5865] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 409.190701][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 409.198755][ T5880] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 409.207711][ T5880] usb 2-1: config 0 has no interface number 0 [ 409.216023][ T5880] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 409.225621][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.234554][ T5880] usb 2-1: Product: syz [ 409.238876][ T5880] usb 2-1: Manufacturer: syz [ 409.246097][ T5880] usb 2-1: SerialNumber: syz [ 409.811878][ T5865] usb 6-1: Using ep0 maxpacket: 32 [ 409.817653][ T5880] usb 2-1: config 0 descriptor?? [ 409.842115][ T5865] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 409.858440][ T5880] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 409.867261][ T5865] usb 6-1: config 0 has no interface number 0 [ 409.903311][ T5865] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 409.917190][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.928381][ T5865] usb 6-1: Product: syz [ 409.932613][ T5865] usb 6-1: Manufacturer: syz [ 409.937202][ T5865] usb 6-1: SerialNumber: syz [ 409.949947][ T5865] usb 6-1: config 0 descriptor?? [ 409.957600][ T5865] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 410.033584][T10961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1429'. [ 410.064008][ T5880] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 410.098886][ T5880] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 410.316870][T10964] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 410.317599][T10943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.324752][T10964] netlink: 'syz.0.1430': attribute type 4 has an invalid length. [ 410.324768][T10964] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1430'. [ 410.400600][T10943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.417047][T10943] netlink: 'syz.1.1423': attribute type 10 has an invalid length. [ 410.425512][ T5865] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 410.589584][ T5865] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 411.140834][T10937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.193648][T10937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.328581][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 411.336282][ T5865] usb 2-1: USB disconnect, device number 40 [ 411.347090][ T5865] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 411.360567][T10937] netlink: 'syz.5.1420': attribute type 10 has an invalid length. [ 411.368892][ T5865] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 411.403089][ T5865] quatech2 2-1:0.51: device disconnected [ 414.003282][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 414.011096][ T9] usb 6-1: USB disconnect, device number 2 [ 414.022133][ T9] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 414.123745][ T9] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 414.143267][ T9] quatech2 6-1:0.51: device disconnected [ 415.409310][T11008] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1442'. [ 415.418341][T11008] netlink: zone id is out of range [ 415.423493][T11008] netlink: zone id is out of range [ 415.428595][T11008] netlink: zone id is out of range [ 415.433753][T11008] netlink: zone id is out of range [ 415.438845][T11008] netlink: zone id is out of range [ 415.443945][T11008] netlink: zone id is out of range [ 415.449024][T11008] netlink: zone id is out of range [ 415.454137][T11008] netlink: zone id is out of range [ 415.459218][T11008] netlink: zone id is out of range [ 415.464317][T11008] netlink: zone id is out of range [ 415.620405][ T30] audit: type=1400 audit(1747737938.427:1038): avc: denied { execute_no_trans } for pid=11002 comm="syz.2.1441" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=31190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 415.702934][T11013] vivid-007: ================= START STATUS ================= [ 415.711362][T11013] vivid-007: Generate PTS: true [ 415.716404][T11013] vivid-007: Generate SCR: true [ 415.730281][T11013] tpg source WxH: 640x360 (Y'CbCr) [ 415.737586][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 415.746597][T11013] tpg field: 1 [ 415.754160][T11013] tpg crop: (0,0)/640x360 [ 415.759632][ T30] audit: type=1400 audit(1747737938.507:1039): avc: denied { read } for pid=11011 comm="syz.1.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 415.762348][T11013] tpg compose: (0,0)/640x360 [ 415.846510][T11013] tpg colorspace: 8 [ 415.868269][ T30] audit: type=1400 audit(1747737938.677:1040): avc: denied { ioctl } for pid=11009 comm="syz.5.1444" path="socket:[30333]" dev="sockfs" ino=30333 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 415.869392][T11013] tpg transfer function: 0/0 [ 415.904661][T11013] tpg Y'CbCr encoding: 0/0 [ 415.910877][T11013] tpg quantization: 0/0 [ 415.916283][T11013] tpg RGB range: 0/2 [ 415.929654][T11013] vivid-007: ================== END STATUS ================== [ 416.050595][T10857] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 416.259698][T10857] usb 2-1: device descriptor read/64, error -71 [ 416.365535][ T5824] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 416.560285][T10857] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 416.700398][T10857] usb 2-1: device descriptor read/64, error -71 [ 416.811907][T10857] usb usb2-port1: attempt power cycle [ 417.038191][T11016] netlink: 'syz.3.1445': attribute type 10 has an invalid length. [ 417.079314][ T30] audit: type=1400 audit(1747737939.887:1041): avc: denied { create } for pid=11036 comm="syz.2.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 417.200409][T10857] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 417.238892][T10857] usb 2-1: device descriptor read/8, error -71 [ 417.785174][T10857] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 417.831530][T10857] usb 2-1: device descriptor read/8, error -71 [ 417.861355][ T30] audit: type=1400 audit(1747737940.677:1042): avc: denied { read write } for pid=11047 comm="syz.5.1453" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 417.885541][ T30] audit: type=1400 audit(1747737940.677:1043): avc: denied { open } for pid=11047 comm="syz.5.1453" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 417.967993][T10857] usb usb2-port1: unable to enumerate USB device [ 418.581260][T11070] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1458'. [ 419.377164][T11080] tipc: Enabling of bearer rejected, failed to enable media [ 420.591355][T11106] CIFS: iocharset name too long [ 424.727450][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 425.670290][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 425.991445][ T30] audit: type=1400 audit(1747737948.787:1044): avc: denied { listen } for pid=11191 comm="syz.0.1498" laddr=172.20.20.10 lport=60493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 426.247900][ T30] audit: type=1400 audit(1747737948.787:1045): avc: denied { accept } for pid=11191 comm="syz.0.1498" laddr=172.20.20.10 lport=60493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 426.313785][ T9] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 426.323529][ T9] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 426.334236][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.346047][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 426.364859][ T9] usb 6-1: config 1 has no interface number 0 [ 426.371539][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 426.382339][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.398650][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 426.683745][ T9] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 426.748944][T11207] tmpfs: Unknown parameter 'huge9always' [ 426.755630][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'. [ 426.831450][ T9] snd_usb_pod 6-1:1.1: invalid control EP [ 426.837215][ T9] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 426.844282][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 426.852385][ T9] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 427.587220][ T30] audit: type=1400 audit(1747737950.397:1046): avc: denied { audit_write } for pid=11186 comm="syz.5.1497" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 429.831907][ T5880] usb 6-1: USB disconnect, device number 3 [ 429.937980][T11268] FAULT_INJECTION: forcing a failure. [ 429.937980][T11268] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 429.980337][T11268] CPU: 1 UID: 0 PID: 11268 Comm: syz.1.1522 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 429.980362][T11268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.980373][T11268] Call Trace: [ 429.980380][T11268] [ 429.980386][T11268] dump_stack_lvl+0x16c/0x1f0 [ 429.980418][T11268] should_fail_ex+0x512/0x640 [ 429.980446][T11268] _copy_from_user+0x2e/0xd0 [ 429.980474][T11268] copy_msghdr_from_user+0x98/0x160 [ 429.980495][T11268] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 429.980529][T11268] ___sys_sendmsg+0xfe/0x1d0 [ 429.980550][T11268] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.980602][T11268] __sys_sendmsg+0x16d/0x220 [ 429.980623][T11268] ? __pfx___sys_sendmsg+0x10/0x10 [ 429.980651][T11268] ? rcu_is_watching+0x12/0xc0 [ 429.980680][T11268] do_syscall_64+0xcd/0x260 [ 429.980708][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.980726][T11268] RIP: 0033:0x7fba9858e969 [ 429.980741][T11268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.980758][T11268] RSP: 002b:00007fba994a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.980775][T11268] RAX: ffffffffffffffda RBX: 00007fba987b5fa0 RCX: 00007fba9858e969 [ 429.980787][T11268] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000003 [ 429.980798][T11268] RBP: 00007fba994a5090 R08: 0000000000000000 R09: 0000000000000000 [ 429.980808][T11268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.980819][T11268] R13: 0000000000000000 R14: 00007fba987b5fa0 R15: 00007ffdf71ee548 [ 429.980842][T11268] [ 430.157336][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 430.310284][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 430.316886][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 430.325650][ T9] usb 3-1: config 179 has no interface number 0 [ 430.394607][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 430.430328][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 430.505270][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'. [ 430.997406][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 431.273443][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 431.315513][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 431.350299][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 431.360591][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.374242][T11262] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 431.637042][ T9] usb 3-1: USB disconnect, device number 30 [ 431.643096][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 431.643120][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 431.674478][T11288] : left promiscuous mode [ 431.954040][ T30] audit: type=1800 audit(1747737954.707:1047): pid=11291 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1530" name="bus" dev="overlay" ino=1505 res=0 errno=0 [ 432.654233][ T5864] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 432.900500][ T5864] usb 3-1: device descriptor read/64, error -71 [ 433.140411][ T5864] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 433.331192][ T5864] usb 3-1: device descriptor read/64, error -71 [ 434.130042][ T5864] usb usb3-port1: attempt power cycle [ 434.400546][T11328] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1543'. [ 434.424373][T11328] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1543'. [ 434.433828][T11328] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1543'. [ 434.470847][ T5864] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 434.496469][T11328] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1543'. [ 434.512746][ T5864] usb 3-1: device descriptor read/8, error -71 [ 434.521822][T11328] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1543'. [ 434.534059][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 434.543583][T11328] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1543'. [ 434.913314][ T5864] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 434.950852][ T5864] usb 3-1: device descriptor read/8, error -71 [ 434.999916][T11328] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1543'. [ 435.009883][T11328] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1543'. [ 435.060594][ T5864] usb usb3-port1: unable to enumerate USB device [ 435.563246][T11342] syz.0.1546 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 435.575001][T11342] overlayfs: failed to clone upperpath [ 437.283255][T11366] __nla_validate_parse: 1 callbacks suppressed [ 437.283270][T11366] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1555'. [ 437.686304][ T30] audit: type=1400 audit(1747737960.477:1048): avc: denied { map } for pid=11374 comm="syz.2.1559" path="/dev/vcsu1" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 437.709516][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.195848][ T5898] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 439.634472][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 439.655359][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.665466][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.759264][ T5898] usb 3-1: config 158 has an invalid interface number: 73 but max is 0 [ 439.768902][ T5898] usb 3-1: config 158 has no interface number 0 [ 439.775897][ T5898] usb 3-1: config 158 interface 73 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 439.787992][ T5898] usb 3-1: config 158 interface 73 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 439.821204][T11387] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1561'. [ 439.861110][ T5898] usb 3-1: config 158 interface 73 altsetting 248 bulk endpoint 0xD has invalid maxpacket 120 [ 439.921809][ T5898] usb 3-1: config 158 interface 73 altsetting 248 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 439.939586][T11393] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 439.951290][ T5898] usb 3-1: config 158 interface 73 has no altsetting 0 [ 439.979032][ T5898] usb 3-1: New USB device found, idVendor=33f7, idProduct=0004, bcdDevice=60.08 [ 439.988998][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.001977][ T5898] usb 3-1: Product: ѓ酻溇⬒晭r墉鄱鄈艴朹퉏㱽褷䍲᳟恠氏重퍜犻脮腸抗㢞䘍嘢䳔ꫣ畋揽♷뢄됝壶熼굑镄ᖁ㼧㟹묙ꇗ [ 440.017978][ T5898] usb 3-1: Manufacturer: 鈴뢍嬶댮⯸羫莩汙ᕛ®ꍻ짦祝ᾩ핛㢟⽡澿沉꽨蔸唐쌗䴍ઘ叴ꋔ銃鑺笥듁㊬゙ॗ䴅领 [ 440.031941][ T5898] usb 3-1: SerialNumber: syz [ 440.039385][T11376] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 440.047387][T11376] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 440.271680][ T5898] asix 3-1:158.73 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 440.298500][ T5898] asix 3-1:158.73: probe with driver asix failed with error -71 [ 440.329161][ T5898] usb 3-1: USB disconnect, device number 35 [ 440.339885][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1570'. [ 440.500388][ T9] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 440.687675][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 440.736964][ T9] usb 2-1: config 0 has no interfaces? [ 440.767265][ T9] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 440.778063][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.806117][ T9] usb 2-1: Product: syz [ 440.816113][ T9] usb 2-1: Manufacturer: syz [ 440.829897][ T9] usb 2-1: SerialNumber: syz [ 440.897476][ T9] usb 2-1: config 0 descriptor?? [ 441.116095][T11427] team0: No ports can be present during mode change [ 441.125750][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1573'. [ 441.700305][T11427] team0 (unregistering): Port device team_slave_0 removed [ 442.374262][T11427] team0 (unregistering): Port device team_slave_1 removed [ 442.532484][T11452] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1579'. [ 442.688822][T11455] Lens B: ================= START STATUS ================= [ 442.696350][T11455] Lens B: Focus, Absolute: 0 [ 442.702885][T11455] Lens B: ================== END STATUS ================== [ 442.783754][T11456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.577906][ T9] usb 2-1: USB disconnect, device number 45 [ 443.613721][T11460] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 444.160192][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.213862][T11476] input: syz1 as /devices/virtual/input/input15 [ 445.422631][T11473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1589'. [ 445.442418][T11473] futex_wake_op: syz.0.1589 tries to shift op by 144; fix this program [ 445.444159][T11490] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1588'. [ 445.545580][T11490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1588'. [ 445.652061][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 445.659526][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 445.669936][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 445.678450][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 445.762407][T11490] ceph: No mds server is up or the cluster is laggy [ 446.270390][ T5865] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 446.440423][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 446.461963][ T5865] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.475249][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 446.482856][ T5865] usb 2-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 446.493550][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.506538][ T5865] usb 2-1: config 0 descriptor?? [ 446.790300][ T5898] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 446.850492][T11532] bridge0: port 3(vlan2) entered blocking state [ 446.856835][T11532] bridge0: port 3(vlan2) entered disabled state [ 446.867624][T11532] vlan2: entered allmulticast mode [ 446.877652][T11532] bond0: entered allmulticast mode [ 446.882972][T11532] bond_slave_0: entered allmulticast mode [ 446.888924][T11532] bond_slave_1: entered allmulticast mode [ 446.896229][T11532] vlan2: entered promiscuous mode [ 446.901539][T11532] bond0: entered promiscuous mode [ 446.906557][T11532] bond_slave_0: entered promiscuous mode [ 446.912728][T11532] bond_slave_1: entered promiscuous mode [ 446.960262][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 446.983340][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.003469][ T5898] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 447.023002][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.068245][ T5898] usb 3-1: Product: syz [ 447.085053][ T5898] usb 3-1: Manufacturer: syz [ 447.099876][ T5898] usb 3-1: SerialNumber: syz [ 447.126843][ T5898] usb 3-1: config 0 descriptor?? [ 447.149589][ T5898] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 447.175626][ T5865] sony 0003:054C:0374.0007: unknown main item tag 0x0 [ 447.178267][ T5898] usb 3-1: selecting invalid altsetting 1 [ 447.182513][ T5865] sony 0003:054C:0374.0007: unknown main item tag 0x0 [ 447.182538][ T5865] sony 0003:054C:0374.0007: unknown main item tag 0x0 [ 447.182559][ T5865] sony 0003:054C:0374.0007: unknown main item tag 0x0 [ 447.182579][ T5865] sony 0003:054C:0374.0007: unknown main item tag 0x0 [ 447.182598][ T5865] sony 0003:054C:0374.0007: unknown main item tag 0x0 [ 447.223795][ T5865] sony 0003:054C:0374.0007: unknown main item tag 0x0 [ 447.243418][ T5865] sony 0003:054C:0374.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 054c:0374] on usb-dummy_hcd.1-1/input0 [ 447.258711][ T5865] sony 0003:054C:0374.0007: failed to claim input [ 447.536563][T11541] overlayfs: failed to clone lowerpath [ 447.542557][ T5898] gspca_stk014: init reg: 0x00 [ 447.547339][ T5898] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 447.583290][ T5898] usb 2-1: USB disconnect, device number 46 [ 447.594799][T11544] overlayfs: failed to clone upperpath [ 447.717767][T11550] program syz.5.1609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.410416][T10857] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 449.503917][ T5898] usb 3-1: USB disconnect, device number 36 [ 449.582261][T10857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 449.593893][T11571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1616'. [ 449.604082][T10857] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 449.630267][T10857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 449.883832][T10857] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 449.920989][T10857] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 450.057040][T10857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.599282][T10857] usb 2-1: config 0 descriptor?? [ 450.903008][T10857] hdpvr 2-1:0.0: firmware version 0x0 dated [ 450.909286][T10857] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 452.145292][T10857] hdpvr 2-1:0.0: Could not setup controls [ 452.776924][T10857] hdpvr 2-1:0.0: registering videodev failed [ 453.003943][T10857] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 453.509451][T10857] usb 2-1: USB disconnect, device number 47 [ 454.237158][T11613] pim6reg1: entered promiscuous mode [ 454.242694][T11613] pim6reg1: entered allmulticast mode [ 454.249015][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1627'. [ 454.373923][T11619] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 454.510443][ T5898] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 454.753847][ T5898] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 454.770266][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.778271][ T5898] usb 6-1: Product: syz [ 455.267624][ T5898] usb 6-1: Manufacturer: syz [ 455.274418][ T5898] usb 6-1: SerialNumber: syz [ 455.291225][ T5898] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 455.321930][T10857] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 456.334690][T11626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1631'. [ 456.360681][T10857] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 456.376848][T10857] ath9k_htc: Failed to initialize the device [ 456.391915][T11626] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1631'. [ 456.424893][T10857] usb 6-1: ath9k_htc: USB layer deinitialized [ 456.656561][T10857] usb 6-1: USB disconnect, device number 4 [ 457.050262][ T5864] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 457.069941][T11665] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1646'. [ 457.230338][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 457.234262][ T30] audit: type=1400 audit(1747737980.046:1049): avc: denied { checkpoint_restore } for pid=11666 comm="syz.2.1647" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 457.270951][ T5864] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.288591][ T5864] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.312277][ T5864] usb 2-1: config 0 interface 0 has no altsetting 0 [ 457.402430][ T5864] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 457.468890][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.566482][ T5864] usb 2-1: config 0 descriptor?? [ 458.149209][T11658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.427024][T11658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.506238][ T5824] Bluetooth: hci4: Invalid connection link type handle 0x00c9 [ 459.120838][ T5864] hid (null): unknown global tag 0xe [ 459.126353][ T5864] hid (null): report_id 0 is invalid [ 459.136143][ T5864] hid (null): global environment stack underflow [ 459.152765][ T5864] hid (null): global environment stack underflow [ 459.159262][ T5864] hid (null): invalid report_count 14490 [ 459.191510][ T5864] cougar 0003:060B:500A.0008: unexpected long global item [ 459.200929][ T5864] cougar 0003:060B:500A.0008: parse failed [ 459.206836][ T5864] cougar 0003:060B:500A.0008: probe with driver cougar failed with error -22 [ 459.334828][ T5864] usb 2-1: USB disconnect, device number 48 [ 459.475900][T11702] afs: Unknown parameter '' [ 459.495254][T11702] netlink: 'syz.0.1655': attribute type 10 has an invalid length. [ 459.518049][T11702] veth0_macvtap: left promiscuous mode [ 459.543930][T11702] batman_adv: batadv0: Adding interface: macvtap0 [ 459.558722][T11702] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.587989][T11702] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 459.710410][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 459.862774][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 459.877292][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.906396][ T9] usb 3-1: config 0 descriptor?? [ 460.702854][ T9] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 460.711670][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 460.951492][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 460.986492][ T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 461.010051][ T9] [drm] Initialized udl on minor 2 [ 461.463635][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 461.487071][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 461.504017][ T5864] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 461.514988][ T5864] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 461.528512][ T9] usb 3-1: USB disconnect, device number 37 [ 461.630917][T11730] netlink: 'syz.1.1666': attribute type 1 has an invalid length. [ 461.644352][T11730] netlink: 'syz.1.1666': attribute type 2 has an invalid length. [ 461.838262][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1667'. [ 464.421408][T11780] CIFS: iocharset name too long [ 464.500409][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 464.539422][T11781] veth2: entered promiscuous mode [ 464.544523][T11781] veth2: entered allmulticast mode [ 464.570499][ T30] audit: type=1400 audit(1747737987.306:1050): avc: denied { write } for pid=11775 comm="syz.3.1678" lport=44175 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 464.930151][ T30] audit: type=1400 audit(1747737987.306:1051): avc: denied { setopt } for pid=11775 comm="syz.3.1678" lport=44175 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 465.507776][T11787] tmpfs: Bad value for 'mpol' [ 466.170822][T11805] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1688'. [ 467.747442][ T30] audit: type=1400 audit(1747737990.556:1052): avc: denied { map } for pid=11821 comm="syz.1.1691" path="/dev/vbi5" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 467.808627][ T30] audit: type=1400 audit(1747737990.556:1053): avc: denied { execute } for pid=11821 comm="syz.1.1691" path="/dev/vbi5" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 467.819682][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1691'. [ 468.550356][ T9] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 468.807155][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 469.277805][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 469.285454][ T9] usb 3-1: can't read configurations, error -71 [ 469.389491][ T30] audit: type=1400 audit(1747737992.196:1054): avc: denied { create } for pid=11854 comm="syz.3.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 469.615932][T11859] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 469.645821][ T5824] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 469.650887][ T30] audit: type=1326 audit(1747737992.456:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9858e969 code=0x7ffc0000 [ 469.678371][ T30] audit: type=1326 audit(1747737992.476:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fba9858e969 code=0x7ffc0000 [ 469.704004][ T30] audit: type=1326 audit(1747737992.476:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9858e969 code=0x7ffc0000 [ 469.727925][ T30] audit: type=1326 audit(1747737992.476:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9858e969 code=0x7ffc0000 [ 469.752214][ T30] audit: type=1326 audit(1747737992.476:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba9858e969 code=0x7ffc0000 [ 469.776360][ T30] audit: type=1326 audit(1747737992.476:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9858e969 code=0x7ffc0000 [ 469.808161][ T30] audit: type=1326 audit(1747737992.476:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba9858e969 code=0x7ffc0000 [ 469.877312][ T30] audit: type=1326 audit(1747737992.476:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9858e969 code=0x7ffc0000 [ 469.925200][T11862] 8021q: adding VLAN 0 to HW filter on device  [ 469.934111][T11862] net_ratelimit: 76 callbacks suppressed [ 469.934121][T11862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.957368][ T30] audit: type=1326 audit(1747737992.476:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fba9858e969 code=0x7ffc0000 [ 469.988474][ T30] audit: type=1326 audit(1747737992.476:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9858e969 code=0x7ffc0000 [ 470.072682][T11869] Cannot find del_set index 4 as target [ 470.405889][T11885] netlink: 544 bytes leftover after parsing attributes in process `syz.3.1716'. [ 470.873037][T11897] wg2: entered promiscuous mode [ 470.904515][T11901] netlink: 14212 bytes leftover after parsing attributes in process `syz.0.1721'. [ 471.042783][T11906] x_tables: duplicate underflow at hook 1 [ 471.334367][T11917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1727'. [ 471.357901][T11917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1727'. [ 471.592893][T11931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=11931 comm=syz.3.1733 [ 471.613891][ T5824] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 471.801322][ T5898] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 472.690379][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 472.699394][ T5898] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 472.709304][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.717406][ T5898] usb 6-1: Product: syz [ 473.204427][ T5898] usb 6-1: Manufacturer: syz [ 473.209067][ T5898] usb 6-1: SerialNumber: syz [ 473.219218][ T5898] usb 6-1: config 0 descriptor?? [ 473.255122][ T5898] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 473.459632][T11920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.491267][T11920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.740063][ T5824] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 473.749142][ T5824] Bluetooth: hci1: Injecting HCI hardware error event [ 473.757219][ T5824] Bluetooth: hci1: hardware error 0x00 [ 473.851702][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 474.223472][ T5898] usb 6-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 474.331100][ T5898] usb 6-1: USB disconnect, device number 5 [ 474.376824][ T5898] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 474.415748][ T5898] visor 6-1:0.0: device disconnected [ 475.800657][ T5824] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 476.456203][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 476.456226][ T30] audit: type=1400 audit(1747737999.266:1079): avc: denied { mount } for pid=12055 comm="syz.3.1780" name="/" dev="ramfs" ino=34354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 476.493099][T12056] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 476.505367][T12056] overlayfs: failed to set xattr on upper [ 476.531924][T12056] overlayfs: ...falling back to redirect_dir=nofollow. [ 476.539078][T12056] overlayfs: ...falling back to index=off. [ 476.545710][T12056] overlayfs: ...falling back to uuid=null. [ 476.552260][ T30] audit: type=1400 audit(1747737999.306:1080): avc: denied { mounton } for pid=12055 comm="syz.3.1780" path="/bus" dev="ramfs" ino=34358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 476.588735][T12062] 9pnet_virtio: no channels available for device syz [ 476.597459][ T30] audit: type=1400 audit(1747737999.416:1081): avc: denied { accept } for pid=12061 comm="syz.2.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 476.810834][T12075] binder: BC_ATTEMPT_ACQUIRE not supported [ 476.878257][T12075] binder: 12074:12075 ioctl c0306201 200000000640 returned -22 [ 476.986588][T12081] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 476.990303][ T30] audit: type=1400 audit(1747737999.796:1082): avc: denied { mounton } for pid=12080 comm="syz.5.1790" path="/59/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 476.998493][T12081] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 477.090276][ T30] audit: type=1800 audit(1747737999.896:1083): pid=12088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1793" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 477.167144][ T30] audit: type=1400 audit(1747737999.976:1084): avc: denied { unmount } for pid=10527 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 477.238928][T12099] binder: 12097:12099 ioctl c018620c 200000000640 returned -1 [ 477.475403][T12108] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 477.490589][T10857] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 477.573619][T12117] 9pnet_virtio: no channels available for device syz [ 477.673224][T10857] usb 6-1: Using ep0 maxpacket: 8 [ 477.680074][T12121] 9pnet_virtio: no channels available for device syz [ 477.704391][T10857] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 477.730287][T10857] usb 6-1: config 0 has no interface number 0 [ 477.750524][T10857] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 477.793342][T10857] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 477.829623][T10857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.857351][T10857] usb 6-1: config 0 descriptor?? [ 477.875176][T10857] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 478.050274][ T30] audit: type=1400 audit(1747738000.856:1085): avc: denied { shutdown } for pid=12130 comm="syz.2.1812" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 478.077684][T10857] usb 6-1: USB disconnect, device number 6 [ 478.232937][ T5824] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 478.325994][ T30] audit: type=1804 audit(1747738001.136:1086): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1817" name="/newroot/325/bus/bus" dev="overlay" ino=1734 res=1 errno=0 [ 478.876406][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 479.040454][T12170] 9pnet_virtio: no channels available for device syz [ 481.178584][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'. [ 481.580274][T10857] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 481.740344][T10857] usb 6-1: Using ep0 maxpacket: 8 [ 481.748564][T10857] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 481.756311][T10857] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 481.765136][T12244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.768355][T10857] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.774749][T12244] IPv6: NLM_F_CREATE should be set when creating new route [ 481.774853][T12244] IPv6: NLM_F_CREATE should be set when creating new route [ 481.786751][T10857] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 481.793606][T12244] IPv6: NLM_F_CREATE should be set when creating new route [ 481.814974][T10857] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 481.855759][T10857] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 481.872283][T10857] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 481.898123][T10857] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.925189][T10857] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 481.957958][T10857] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 481.964898][T12255] 9pnet_virtio: no channels available for device syz [ 481.984473][T10857] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 481.992939][T10857] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 482.004357][T10857] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 482.016115][T10857] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 482.032149][T10857] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 482.049637][T10857] usb 6-1: string descriptor 0 read error: -22 [ 482.056510][T10857] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 482.066395][T10857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.092745][T10857] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 482.189958][T12267] overlayfs: failed to clone upperpath [ 482.324516][T10857] usb 6-1: USB disconnect, device number 7 [ 482.334127][T12278] xt_hashlimit: size too large, truncated to 1048576 [ 482.608539][T12294] macsec0: entered promiscuous mode [ 482.613890][T12294] macsec0: entered allmulticast mode [ 482.619181][T12294] veth1_macvtap: entered allmulticast mode [ 482.688478][T12300] 9pnet_virtio: no channels available for device syz [ 482.896334][ T30] audit: type=1400 audit(2000000000.280:1087): avc: denied { mounton } for pid=12313 comm="syz.1.1885" path="/proc/1106/cgroup" dev="proc" ino=36140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 482.919464][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.937503][ T5824] Bluetooth: Frame is too long (len 16, expected len 4) [ 483.008990][T12321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 483.016254][T12321] IPv6: NLM_F_CREATE should be set when creating new route [ 483.078643][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1891'. [ 483.267117][ T30] audit: type=1400 audit(2000000000.650:1088): avc: denied { create } for pid=12339 comm="syz.1.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 483.286662][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.341160][T12342] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 483.628818][T12354] overlayfs: failed to clone upperpath [ 483.940086][T12372] overlayfs: failed to clone upperpath [ 483.953148][T12375] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1912'. [ 484.055456][T12381] 9pnet_virtio: no channels available for device syz [ 484.262983][T12392] @: renamed from vlan0 [ 484.337654][ T5824] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 484.390336][T10857] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 484.574460][T10857] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 484.602261][T10857] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 484.637504][T10857] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 484.656747][T10857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.670868][T12386] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 484.685945][T10857] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 485.040365][ T5865] usb 2-1: USB disconnect, device number 49 [ 485.278635][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'. [ 485.288527][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 485.307282][T12423] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.316698][T12423] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.325482][T12423] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.334231][T12423] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.478033][T12430] syz_tun: entered allmulticast mode [ 485.484450][T12429] syz_tun: left allmulticast mode [ 485.674501][T12443] overlayfs: failed to clone upperpath [ 486.442683][T12481] 9pnet_virtio: no channels available for device syz [ 486.603616][ T30] audit: type=1400 audit(2000000003.980:1089): avc: denied { read write } for pid=12485 comm="syz.2.1963" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 486.675856][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1966'. [ 486.701553][ T30] audit: type=1400 audit(2000000003.980:1090): avc: denied { open } for pid=12485 comm="syz.2.1963" path="/357/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 486.709705][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1966'. [ 487.021248][ T5898] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 487.182747][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 487.194045][ T5898] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 487.225727][ T5898] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 487.246955][ T5898] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 487.266327][T12523] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.287604][ T5898] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.316352][ T5898] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 487.338213][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.571888][ T5898] usb 3-1: GET_CAPABILITIES returned 0 [ 487.583068][ T5898] usbtmc 3-1:16.0: can't read capabilities [ 487.789527][ T5898] usb 3-1: USB disconnect, device number 40 [ 487.855002][ T30] audit: type=1400 audit(2000000005.240:1091): avc: denied { name_bind } for pid=12562 comm="syz.5.1995" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 488.224747][ T30] audit: type=1400 audit(2000000005.610:1092): avc: denied { mount } for pid=12581 comm="syz.0.2003" name="/" dev="configfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 488.249485][ T30] audit: type=1400 audit(2000000005.610:1093): avc: denied { search } for pid=12581 comm="syz.0.2003" name="/" dev="configfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 488.272244][ T30] audit: type=1400 audit(2000000005.610:1094): avc: denied { read } for pid=12581 comm="syz.0.2003" name="/" dev="configfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 488.310684][ T30] audit: type=1400 audit(2000000005.610:1095): avc: denied { open } for pid=12581 comm="syz.0.2003" path="/" dev="configfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 488.423254][ T30] audit: type=1326 audit(2000000005.810:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.0.2003" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff61458e969 code=0x0 [ 489.274751][T12623] overlayfs: failed to clone upperpath [ 489.689644][T12639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2025'. [ 489.817274][ T30] audit: type=1400 audit(2000000007.200:1097): avc: denied { mount } for pid=12642 comm="syz.2.2028" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 489.842522][T12644] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 489.864837][ T30] audit: type=1800 audit(2000000007.230:1098): pid=12645 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2029" name="nullb0" dev="tmpfs" ino=2273 res=0 errno=0 [ 489.905200][ T30] audit: type=1400 audit(2000000007.290:1099): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 490.268007][T12616] 9pnet_virtio: no channels available for device syz [ 490.487566][T12675] 9pnet_virtio: no channels available for device syz [ 490.505208][ T30] audit: type=1400 audit(2000000007.890:1100): avc: denied { write } for pid=12677 comm="syz.1.2044" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 490.652944][ T30] audit: type=1400 audit(2000000008.030:1101): avc: denied { append } for pid=12683 comm="syz.2.2047" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 491.168709][ T5898] IPVS: starting estimator thread 0... [ 491.260332][T12712] IPVS: using max 38 ests per chain, 91200 per kthread [ 491.535329][T12728] overlayfs: failed to clone upperpath [ 492.014258][T12753] ubi: mtd0 is already attached to ubi31 [ 492.803162][T12689] could not allocate digest TFM handle cryptd(blake2b-160) [ 493.617071][T12846] 9pnet_virtio: no channels available for device syz [ 494.067734][T12881] syz_tun: entered allmulticast mode [ 494.267831][T12894] team0: Mode changed to "broadcast" [ 494.354783][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2143'. [ 494.377078][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 494.377093][ T30] audit: type=1400 audit(2000000011.750:1104): avc: denied { read } for pid=12901 comm="syz.2.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 494.432565][T12904] bridge_slave_0: left allmulticast mode [ 494.444134][T12904] bridge_slave_0: left promiscuous mode [ 494.459873][T12904] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.506226][T12904] bridge_slave_1: left allmulticast mode [ 494.520041][T12904] bridge_slave_1: left promiscuous mode [ 494.526417][T12904] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.577050][T12904] bond0: (slave bond_slave_0): Releasing backup interface [ 494.601227][T12904] bond_slave_0: left promiscuous mode [ 494.606772][T12904] bond_slave_0: left allmulticast mode [ 494.621802][T12919] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 494.644304][T12904] bond0: (slave bond_slave_1): Releasing backup interface [ 494.665983][T12904] bond_slave_1: left promiscuous mode [ 494.672128][T12904] bond_slave_1: left allmulticast mode [ 494.709998][T12904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.750349][T12904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.774722][T12904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.800092][T12904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.837323][T12904] batman_adv: batadv0: Removing interface: macvtap0 [ 494.847766][T12904] vlan2: left allmulticast mode [ 494.852780][T12904] bond0: left allmulticast mode [ 494.857775][T12904] vlan2: left promiscuous mode [ 494.864528][T12904] bond0: left promiscuous mode [ 494.870082][T12904] bridge0: port 3(vlan2) entered disabled state [ 494.903973][T12933] : renamed from bond0 (while UP) [ 494.922459][T12931] tipc: Enabling of bearer rejected, failed to enable media [ 495.092246][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2158'. [ 495.216249][T12956] 9pnet_virtio: no channels available for device syz [ 495.291641][T12944] hsr_slave_1 (unregistering): left promiscuous mode [ 495.694220][T12989] overlayfs: failed to clone upperpath [ 495.896826][ T30] audit: type=1800 audit(2000000013.280:1105): pid=12999 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2184" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 496.116747][T13012] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2190'. [ 497.828021][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 497.837831][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 497.849687][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 497.860025][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 497.874863][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 497.979633][T13129] overlayfs: failed to clone upperpath [ 498.118096][T13121] chnl_net:caif_netlink_parms(): no params data found [ 498.379502][T13121] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.423169][T13121] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.487883][T13121] bridge_slave_0: entered allmulticast mode [ 498.495282][T13121] bridge_slave_0: entered promiscuous mode [ 498.506256][T13121] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.515726][T13121] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.525856][T13121] bridge_slave_1: entered allmulticast mode [ 498.814349][T13121] bridge_slave_1: entered promiscuous mode [ 499.087534][T13121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.121356][T13121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.363717][T13121] team0: Port device team_slave_0 added [ 499.391799][T13121] team0: Port device team_slave_1 added [ 499.498667][T13121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.507557][T13121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.543285][T13121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.556574][T13121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.566286][T13121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.592170][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.623397][T13121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.703902][T13121] hsr_slave_0: entered promiscuous mode [ 499.719569][T13121] hsr_slave_1: entered promiscuous mode [ 499.726635][T13121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.735416][T13121] Cannot create hsr debugfs directory [ 499.958725][ T30] audit: type=1400 audit(2000000017.340:1106): avc: denied { ioctl } for pid=13211 comm="syz.2.2275" path="socket:[39808]" dev="sockfs" ino=39808 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 499.984260][ T5824] Bluetooth: hci1: command tx timeout [ 499.984484][T13121] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 499.999239][ T30] audit: type=1400 audit(2000000017.380:1107): avc: denied { write } for pid=13211 comm="syz.2.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 500.023278][ T30] audit: type=1400 audit(2000000017.380:1108): avc: denied { ioctl } for pid=13211 comm="syz.2.2275" path="socket:[39809]" dev="sockfs" ino=39809 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 500.063205][T13121] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 500.085461][T13121] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 500.098533][T13121] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 500.747404][T13121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.783527][T13121] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.806059][ T3458] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.814093][ T3458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.859560][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.866706][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.970458][ T30] audit: type=1400 audit(2000000018.330:1109): avc: denied { accept } for pid=13234 comm="syz.2.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 501.006323][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.016302][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.937905][T13121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.041112][ T5824] Bluetooth: hci1: command tx timeout [ 502.176039][T13280] syz_tun: entered allmulticast mode [ 502.211505][T13277] syz_tun: left allmulticast mode [ 503.349886][T13121] veth0_vlan: entered promiscuous mode [ 503.381901][T13121] veth1_vlan: entered promiscuous mode [ 503.422271][T13318] lo: entered allmulticast mode [ 503.454704][T13317] lo: left allmulticast mode [ 503.509059][T13121] veth0_macvtap: entered promiscuous mode [ 503.522123][T13121] veth1_macvtap: entered promiscuous mode [ 503.544644][T13121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.634215][T13121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.643314][T13121] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.653367][T13121] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.716387][T13327] mmap: syz.3.2314 (13327) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 503.734343][T13327] overlayfs: failed to clone upperpath [ 504.089186][T13121] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.098017][T13121] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.120824][ T5824] Bluetooth: hci1: command tx timeout [ 504.167263][T13329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 504.424172][ T6869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.440427][ T6869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.501991][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.510063][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.823076][T13356] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2327'. [ 505.748282][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 505.838116][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 505.849125][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 505.864635][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 505.876786][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 506.200668][ T5824] Bluetooth: hci1: command tx timeout [ 506.686947][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2337'. [ 506.748338][T13393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2337'. [ 506.790311][T13396] netlink: 'syz.5.2339': attribute type 1 has an invalid length. [ 506.798048][T13396] netlink: 'syz.5.2339': attribute type 2 has an invalid length. [ 506.991082][T13370] chnl_net:caif_netlink_parms(): no params data found [ 507.162505][T13412] bridge2: entered promiscuous mode [ 507.314814][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2346'. [ 507.393821][T13370] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.401618][T13370] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.408796][T13370] bridge_slave_0: entered allmulticast mode [ 507.416365][T13370] bridge_slave_0: entered promiscuous mode [ 507.425098][T13370] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.435444][T13370] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.442950][T13370] bridge_slave_1: entered allmulticast mode [ 507.450642][T13370] bridge_slave_1: entered promiscuous mode [ 507.543055][T13370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.593352][T13370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.677621][T13370] team0: Port device team_slave_0 added [ 507.721966][T13370] team0: Port device team_slave_1 added [ 507.894994][T13370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.925603][T13370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.968230][T13370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.018340][T13370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.034829][T13370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.064363][T13370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.452506][ T54] Bluetooth: hci2: command tx timeout [ 508.517217][T13370] hsr_slave_0: entered promiscuous mode [ 508.527884][T13457] overlayfs: failed to resolve './file0': -2 [ 508.545333][T13370] hsr_slave_1: entered promiscuous mode [ 508.552380][T13370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.560014][T13370] Cannot create hsr debugfs directory [ 508.781414][T13475] ptrace attach of "./syz-executor exec"[10527] was attempted by "./syz-executor exec"[13475] [ 509.143011][T13370] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.781271][T13370] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.410860][T13499] overlayfs: failed to resolve './file0': -2 [ 510.530215][ T54] Bluetooth: hci2: command tx timeout [ 511.565431][T13370] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.616380][T13370] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.783586][T13370] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.808629][T13370] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.910349][ T5898] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 511.945344][T13370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.063870][ T5898] usb 7-1: Using ep0 maxpacket: 16 [ 512.076747][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.105253][T13370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.117474][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.229541][T13532] tmpfs: Bad value for 'nr_blocks' [ 512.411805][ T5898] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 512.611355][ T54] Bluetooth: hci2: command tx timeout [ 512.625116][ T5898] usb 7-1: New USB device found, idVendor=0400, idProduct=07da, bcdDevice= 0.00 [ 512.660722][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.710145][ T5898] usb 7-1: config 0 descriptor?? [ 512.796757][T13370] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 512.813614][T13370] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 512.843763][T13370] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 512.862930][T13370] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 512.967062][T13370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.993492][T13370] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.013890][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.021023][ T6490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.036939][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.044078][ T9188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.213127][ T5898] hid-generic 0003:0400:07DA.0009: unknown main item tag 0x0 [ 513.227621][ T5898] hid-generic 0003:0400:07DA.0009: unknown main item tag 0x0 [ 513.237966][ T5898] hid-generic 0003:0400:07DA.0009: unknown main item tag 0x0 [ 513.255331][ T5898] hid-generic 0003:0400:07DA.0009: item fetching failed at offset 25/34 [ 513.269521][ T5898] hid-generic 0003:0400:07DA.0009: probe with driver hid-generic failed with error -22 [ 513.282794][T13370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 513.296945][T13370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.426549][ T5865] usb 7-1: USB disconnect, device number 2 [ 513.566477][T13370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.633627][T13370] veth0_vlan: entered promiscuous mode [ 513.646848][T13370] veth1_vlan: entered promiscuous mode [ 514.133871][ T30] audit: type=1400 audit(2000000031.100:1110): avc: denied { map } for pid=13552 comm="syz.3.2398" path="socket:[41818]" dev="sockfs" ino=41818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 514.179868][T13370] veth0_macvtap: entered promiscuous mode [ 514.189692][T13370] veth1_macvtap: entered promiscuous mode [ 514.211216][T13370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.225512][T13370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.240092][T13370] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.251600][T13370] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.260747][T13370] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.269464][T13370] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.421728][ T9188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.435224][ T9188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.487593][ T6869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.497677][T13570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2404'. [ 514.523597][ T6869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.652629][T13578] overlayfs: failed to clone upperpath [ 514.680295][ T54] Bluetooth: hci2: command tx timeout [ 515.738659][T13612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.770698][T13612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.847403][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2426'. [ 515.960480][ T5864] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 516.082985][T13635] overlayfs: failed to clone upperpath [ 516.120290][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 516.129624][ T5864] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 516.149919][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.173883][ T5864] usb 1-1: config 0 descriptor?? [ 516.715221][T13644] mmap: syz.3.2436 (13644): VmData 25841664 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 517.481726][T13658] overlayfs: failed to clone upperpath [ 517.618751][T13665] overlayfs: failed to resolve './file1': -2 [ 517.832997][T13666] fuse: Bad value for 'fd' [ 517.851006][T13666] fuse: Bad value for 'fd' [ 518.416914][ T5864] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 518.437889][T13688] overlayfs: failed to clone upperpath [ 518.470459][ T5864] asix 1-1:0.0: probe with driver asix failed with error -71 [ 518.498616][ T5864] usb 1-1: USB disconnect, device number 5 [ 518.569079][T13695] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2455'. [ 520.268884][T13724] overlayfs: failed to clone upperpath [ 520.276240][T13724] overlayfs: failed to clone lowerpath [ 521.575811][T13753] overlayfs: failed to resolve './file1': -2 [ 523.215809][T13782] overlayfs: failed to resolve './file1': -2 [ 524.381187][T13821] overlayfs: failed to resolve './file1': -2 [ 524.806801][T13854] syz_tun: entered allmulticast mode [ 524.826583][T13856] overlayfs: failed to resolve './file0': -2 [ 525.878567][T13895] overlayfs: failed to resolve './file0': -2 [ 526.046109][ T54] Bluetooth: hci4: Invalid connection link type handle 0x00c9 [ 526.133549][T13904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2538'. [ 526.166328][T13904] tipc: Invalid UDP bearer configuration [ 526.166374][T13904] tipc: Enabling of bearer rejected, failed to enable media [ 526.404379][T13922] tipc: Enabling of bearer rejected, failed to enable media [ 527.413708][T13933] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2544'. [ 528.887618][ T36] unregister_netdevice: waiting for lo to become free. Usage count = 1025 [ 528.922105][ T36] ref_tracker: lo@ffff88805dc64610 has 1024/1024 users at [ 528.922105][ T36] dst_init+0xda/0x580 [ 528.922105][ T36] dst_alloc+0xbb/0x1a0 [ 528.922105][ T36] rt_dst_clone+0x5a/0x860 [ 528.922105][ T36] ip_mc_finish_output+0xb0/0x680 [ 528.922105][ T36] ip_mc_output+0x5d5/0x6a0 [ 528.922105][ T36] ip_send_skb+0x32c/0x560 [ 528.922105][ T36] udp_send_skb+0x71d/0x15b0 [ 528.922105][ T36] udp_sendmsg+0x18d6/0x29e0 [ 528.922105][ T36] inet_sendmsg+0x105/0x140 [ 528.922105][ T36] ____sys_sendmsg+0x973/0xc70 [ 528.922105][ T36] ___sys_sendmsg+0x134/0x1d0 [ 528.922105][ T36] __sys_sendmmsg+0x200/0x420 [ 528.922105][ T36] __x64_sys_sendmmsg+0x9c/0x100 [ 528.922105][ T36] do_syscall_64+0xcd/0x260 [ 528.922105][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.922105][ T36] [ 529.010029][T13962] veth0_vlan: entered allmulticast mode [ 529.033672][ T30] audit: type=1400 audit(2000000046.420:1111): avc: denied { read } for pid=5168 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 529.033825][T13962] veth0_vlan: left promiscuous mode [ 529.057257][T13962] veth0_vlan: entered promiscuous mode [ 529.062029][T13963] fuse: Bad value for 'fd' [ 529.133074][ T30] audit: type=1400 audit(2000000046.420:1112): avc: denied { search } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.449031][ T30] audit: type=1400 audit(2000000046.440:1113): avc: denied { write } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.509540][ T30] audit: type=1400 audit(2000000046.440:1114): avc: denied { add_name } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.544918][ T30] audit: type=1400 audit(2000000046.440:1115): avc: denied { create } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 529.645923][ T30] audit: type=1400 audit(2000000046.440:1116): avc: denied { append open } for pid=5168 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 529.670249][ T30] audit: type=1400 audit(2000000046.440:1117): avc: denied { getattr } for pid=5168 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1