last executing test programs: 7m52.992760754s ago: executing program 3 (id=4303): mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 7m50.740069174s ago: executing program 3 (id=4308): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fstat(r0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="146f449cfc", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="040e8f45fffff50e4c7910c171b127963769ef24d84f082556fd1b43f878a65dcc23ad409d4ef51c3fa8622a5a36900c6a5ab314bb2a406d10a6a499793d7a2e03661510116d87dc79356005e01c7474b76cacaf8136be8cda811a39567f643c0612dc5d7cf19330c281bb05c1f040dd51aea0dc4d2afa3e4aaa6c3abce4cfaeb2ba130000000000000000", 0x8b}, {&(0x7f0000000b80)="6f0070751b7d82b11bf815a5a39052adc265313a00e70250de1cf2af793b6fa1f5c5d603cf3fc8a89b0bebd59dc535fe23b45ea92cc77c6bd1b9e06eeb847e70cf231771050820bdc0521f72ba507ad7241fe7e91a1575c01cb37892c93cf0ea46dfb147f330534806ab5374870e0762ef26", 0x72}, {&(0x7f0000000500)="38ebeb016e356fee4cda85d0cd971519cbb747f2f5dc8aa685667417945724349c2e53956a81cc01b96257be6cf756ee9a1dbdb4805abaadcdb07fb7fda5", 0x3e}, {0x0}, {&(0x7f0000000a80)="7827d3e65741740426d89147d59fd333d253aded53fa8a969a0f05177236c017d4a616e2c81a", 0x26}], 0x5}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000d80)="c8c9bb0395733c925946bc562a54294b423cabffedb1436e2eeafec0dd5c365ee1453384a53151ac4520d0219b79105da2854cf859b2c67258d1b6e49b896188564a215ed2d8e36b81b1752c752f2ac52c559f562459a8b2f1f3da79b25b40062732bca7bf5b651c411cec17ef07fab31d5762eaaea7eaf30a5f52423d6c923b2125809279561c8000dad1c6fd86f3a4439a72d085fee666a9e251a92bde44605d4bca2dcc5a9ed5b751ee3c30646752fbbc797f2b4d593ec4ca4f898eb6c60c3fac", 0xc2}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000002c0)="f9fa9f46c18a7c3fd84dce2caa7eac0d80210d015e0b07fb38b8da833e19b1f561447d751ad93ebcadd6ccb2d18692c3acfb3e5659fee30d915909a62d34c16eab35e16aaa3624317cb158ceb1e8dde674d08145c7ff4a9d62778014a7b1be90f4b4111f48ad6db13a7b82cae450f8a5118696f722f7cefaa58b92285ebbcd642ecb772f182d187ae474ac1c69b005b420cabbd2de2dc8b2b7bd3047c6c669eebbc42ad0892f", 0xa6}, {&(0x7f0000000380)="75387a4232c36bcfb6f443207298fdceac063df6f2f1a2dc3aa56ff6372002534cadc47175c19765be00eabc407d7e7913cfe334c0b52bd987e4adffd4476cf813df6a8e7d281ad07ed4a2df5697b1312e29cbbe5e8077ba0b892609b3fae2630b335173179e19a9828f03d3bfa6060aedc9f4e8d8f87fdd55a59b4c7eb8c99747afa8e25f4d037c34fca3003561f2195dce855f800a3b193b1f5312", 0x9c}, {&(0x7f0000000540)="800581c6453ecd68d46d59586e11daceca3a8fdda1e7f8d93ed4d4840c35d12637ddeb9da23737107dc477947a1bf4562594e950c366ae78a3c24308cb8450a88f6eb6ec", 0x44}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)="c6244ada3d891d1aef4576b7e9", 0xd}, {&(0x7f0000000440)="e9794e997fecb13f1bad061b28c6f79e6b98ce49ae06fd171167155b6501d90d6e0e5d07e25af7f7be8ac10bc94af61d3f102abf40dd142a5eea9830bce0067849e79c5dc3f4fa3849dccfbdc50f5464518ee1ffe7b5ad2a5603334150e7a627ab26acfdbea504d1a1a5", 0x6a}], 0x2}}, {{&(0x7f0000000680)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000006c0)="609ee12104653ef41adda6f0bac6631ce9b81de8eb79ae4e58e9d9b65c303413bdfab9118785daf93b15cdd319956f0e8c0d5aa4483451b50147e5fb", 0x3c}, {&(0x7f0000000700)="9da3b4dd712f72564c0617765519", 0xe}, {&(0x7f00000013c0)="00db3cf18c0c68018480ac7f553bf299c264ad70cbb0dca56f9765430fed104ee8af5d1e3a04c4597495ec1a814d8720dad709fa16f7637e84d2b9f1bdac0d972f02d82c6cdd7e9c65801ec83ebbee2c55296fb228c8d8ea5fa42d31aa3f36c7cdcf6c31bf95dda049a0d3965a87875d57040d33ee2e0264e9a9cd57399434694475ac0ba7b739d8e12324b3de1b2fda0efc588a75626607f737bb919de6fbf46badacf906bb3393d8bc0e67ebd51d1be72701892ebfbd49b92516759b1f599519aec6f7b42175dbbfabfb25b370ca57ddc79fc61f9e8fec16c79d5e86cf2a462cc30394bc3138e1f2200f4321786ac0efce3e767f298f6bd156070835a0c250a2fe2d2c329e725bac5b6674aa8d05b847e8d33e5a28994a8d7c8c4de5a25a9eb690c922141e6a0bd24b2ee1d694a6916d7ac0f070add6ef0659ed11a130df671cedbdc654cd82e3daec30f5201700e2952b9df2f3912759daef9d39b78431a515547f5ef768797064e6739dc47f131641b749bbcb3f828ee0644edab1834e7efcc29ddb7c9d34007bfb11e3b29e960d76b3830a12891131d09faee6bfa76625f84e0c8249b6407b31552254c159c7016db5944857caaf2ecc2298dd25b0e4728039b6e38915746b74102849b6ec0600bcc4d572f572c779ac60504cbed8fec12da1f7c45fbdc2594e4ff6727fac719d634828d7cf76cb201bd5feb08f1528b5d6da5ac6fcb865ef0ab2780b6e7494dc2d49efe8f295ba5b13c94451ed59db5ea2219e2f6f8e3c5744478e13d3bf9b96b48463e2b8842cf7182def76152749a7d85276be3e864a7aa3e4ca1c84f87de67e9342d6461a55c5587a7402cb4e4001bdd21c2afe5c92abd9866ef374aa1df30ac3c54a0ed40de807c929838ad4cefcc69fd584bf8f98f624cc7fd02739a4295605bcb3d2e01bb9d235ecce90bf36c6104edff0e7912677b1ee67eca2add4bc4e6700344a22a09f1f5f87cd94f82194d1dae753de346bf9ce9fb9f265ac0e3c768d6da5118c7a5e15426761deeb554b7569cf7c2a2f4ba89dd1142f68eeb20dbd852b6d27c6c5b99009e094597ba1dc4a0f412e920209a3dc293dea85ad3110ddd8648986b9011f142027132bc809ae8bf441a30a67717a060feef7c1b7b0b82542e7bdcefe7b531ee2a514e3fd05c759b7182014f0651f17287111ef80e7387617c9f6e7cef21bd1aaec00bd464820e4acbf7575b9760121beee1e8fd00787ea9110775398a6202866d45395cf49d483d3e5d96878e0e03435aa00", 0x38c}], 0x3}}], 0x6, 0x40) 7m50.539948678s ago: executing program 3 (id=4310): r0 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) timer_delete(r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xb, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x4, 0xfcc0, 0x41, 0x0, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 7m49.51516248s ago: executing program 3 (id=4312): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x2000400c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xfa) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getdents(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x103, 0x1) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 7m48.500907345s ago: executing program 3 (id=4314): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket(0x10, 0x3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x3, &(0x7f0000000200)=0x6) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 7m47.947572315s ago: executing program 3 (id=4319): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x800}, [@map_fd]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xea, &(0x7f0000000340)=""/234}, 0x94) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000180)=r4, 0x12) r5 = openat$cgroup(r1, 0x0, 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000100)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000002740), 0x242080, 0x0) 7m47.493968466s ago: executing program 32 (id=4319): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x800}, [@map_fd]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xea, &(0x7f0000000340)=""/234}, 0x94) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000180)=r4, 0x12) r5 = openat$cgroup(r1, 0x0, 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000100)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000002740), 0x242080, 0x0) 4m57.214982598s ago: executing program 1 (id=4859): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) 4m57.16391642s ago: executing program 1 (id=4860): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000000, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x200, 0x0, r1, 0x6, '\x00', 0x0, r0, 0x8, 0x2, 0x3}, 0x50) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x80100, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x0, 0x106) socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xa927, 0x2, 0x4}, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000039000103", @ANYRES64, @ANYRES8=r5], 0x14}, 0x1, 0x0, 0x0, 0x400c092}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf}}, './file0\x00'}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r7, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x39, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe84, 0x0, 0x0, 0x0, 0x8ef}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x3dbaab449ac8d7cf, 0x1, 0x0, r3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @jmp={0x5, 0x1, 0x9, 0x0, 0x5, 0x18, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0xca}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @generic={0x7, 0x2, 0x9, 0x0, 0x5}, @generic={0x2, 0x5, 0x5, 0x7fff, 0x10000}, @map_fd={0x18, 0x3, 0x1, 0x0, r7}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4m57.06209916s ago: executing program 1 (id=4861): socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000d10ffc), 0x3) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000003c0)="253f7d61aa078101ad2cab39c4f022b3a18a5bbf6b03bf953110f24865066d75686a1f4acec389c5e3ffbd43df7bd54eb7ee17857cd8eb4ee4520170e92f3508bff178fe0512c87b7e4313db93ade04975aee9d4802fc43f0b58200d1a719d933b095a396a150b47ef015a7e0ed90f68ee1d59d6ff6e00856afa2fdc52ba98cc09ea8c75cb7cffe26e4ff5bef544495f34b5264219fbb8c93956465a345bd06200ec649507996986e9d7e5f1209980e26a80c4216f57aa605ba925a56d1c69e8de64ea3bb21e51a1d46107f6bb5a93f2f119d7b6e834") socket$kcm(0x10, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xa}, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x10, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m57.033366757s ago: executing program 4 (id=4862): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m55.892884099s ago: executing program 4 (id=4865): unshare(0x22020400) gettid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x7c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x8, 0x7, 0x8001, 0x1, 0x10001, 0xee6, 0x9}}, {0x16, 0x2, [0xf5ab, 0x200, 0x800, 0x4, 0x1, 0x5, 0xd, 0x1000, 0xff]}}, {{0x1c, 0x1, {0x9, 0x8, 0x1ff, 0x10001, 0x1, 0x806, 0xd}}, {0x4}}]}]}, 0x7c}}, 0x40880) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB='\"']) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000022c0)=[{&(0x7f0000002300)="00cec696c729913c6c9eba2ae0d1a496903d30efb02d8efe5608131b9dd58b1a3d8df5e8f1b7a4d13ad44a22ebfc0d384b9b4a437f727a3b04a7fc22c73898c0de6890", 0x43}], 0x1, 0x1) r5 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000140)=0x9) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18) sendmmsg(r7, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000300)={0x1fa, 0x1, 0x2000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x100000000}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000002) dup2(r6, r6) 4m55.765023504s ago: executing program 1 (id=4867): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000008500190002000000950000000000000000000000c6d4285ed4139b368ee8f30ef5ecfa9dcd8e03a76035b9d832110a42873983d6fef787c7dc20f3d9bd263de262d29ad0af6e03c7432867e9e7f6431df46c9a30fdcebd092c8858f2c5e299153dde164dee78db"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x400000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3bac9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000330, 0x4000008) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x3, 0x5002) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x400000000000, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r6, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) 4m53.898472056s ago: executing program 4 (id=4870): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) 4m53.8077585s ago: executing program 4 (id=4871): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000001, 0x0, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x40000009, 0x8, 0x0, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x40000009, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, @hci, @qipcrtr={0x2a, 0x4, 0x7fff}, @l2={0x1f, 0xb6b, @none, 0x8, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)='wg2\x00', 0x8, 0x5, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="d22ef13d4f15762ec181ca71352d363441fcaae9801bf0a8807507000000abf2410d96c90ae3ff854d8017b533b840c03ecb96c861c048db4d815be1b7f1fcd82da7c2531a8d5e8f5fb6e67f364c5fb21dc1c776560f7b15b6a3c7cd0e00000000000016c4e12686be1576eee350f4e66f3c9d9a678513a5f6"]) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="d22ef13d4f15762ec181ca71352d363441fcaae9801bf0a8807507000000abf2410d96c90ae3ff854d8017b533b840c03ecb96c861c048db4d815be1b7f1fcd82da7c2531a8d5e8f5fb6e67f364c5fb21dc1c776560f7b15b6a3c7cd0e00000000000016c4e12686be1576eee350f4e66f3c9d9a678513a5f6"]) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @loopback}, 0x4, 0x0, 0x0, 0x1}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380860aa7681d7cc8f54d147440000a462ab981245cc510fb5f14686fdbd33bf7c3b946db12fa451afa85a7eccbe356bbba027521699558662a577fc8df1565fe6ccaa1ac1c9b946420b898d71a9", @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000140008000000000000000000000000000000000005001300810000000500120004000000"], 0x38}}, 0x2) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x5f, 0x4020804, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}}, 0x50) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000305000000000000000054000000", @ANYRES32=0x0, @ANYBLOB="15460100000000001c0012800b00010067656e65766500000c000280060005004e210000"], 0x3c}}, 0x4000) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x8240, 0x140) (async) r10 = openat(0xffffffffffffff9c, 0x0, 0x8240, 0x140) getdents64(r10, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000140)=ANY=[@ANYRES8=r2, @ANYRESDEC=r10], 0x2a) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="b0000000000000000000000000000000000000000020000000000000000000000000000000000000020000000000000000002000000000000000000000000000000000000000000000000000000000000200"/109, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\x00!\x00\x00\x00\x00\x00\x00Fw\x00'/28, @ANYRES32], 0x0, 0x0, 0x0}) 4m48.855964499s ago: executing program 1 (id=4882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 4m48.855607672s ago: executing program 4 (id=4883): socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x50) 4m48.415786428s ago: executing program 4 (id=4886): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m47.485507007s ago: executing program 33 (id=4886): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m47.477734717s ago: executing program 1 (id=4888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f00008bf000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) (async) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) (async) creat(&(0x7f0000000400)='./bus\x00', 0x0) (async) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) (async) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000013c0)=ANY=[], 0x2, 0x0) (async) finit_module(0xffffffffffffffff, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)={0x2, 0x0, @d}, 0x18, r3) 4m47.353310077s ago: executing program 34 (id=4888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f00008bf000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) (async) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) (async) creat(&(0x7f0000000400)='./bus\x00', 0x0) (async) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) (async) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000013c0)=ANY=[], 0x2, 0x0) (async) finit_module(0xffffffffffffffff, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)={0x2, 0x0, @d}, 0x18, r3) 2m27.285291585s ago: executing program 0 (id=5323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x2, 0x2, 0x1) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000051}, 0x4c000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'gre0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x1, 0x700, 0x6, 0x7, {{0xc, 0x4, 0x0, 0x1d, 0x30, 0x65, 0x0, 0x7f, 0x29, 0x0, @empty, @local, {[@noop, @lsrr={0x83, 0x1b, 0x6c, [@multicast2, @local, @rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) sendmsg$nl_route(r6, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv6_newaddr={0x20, 0x14, 0x20, 0x70bd25, 0x25dfdbfd, {0xa, 0x10, 0x50, 0x0, r7}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x40006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x8, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x0, 0x5, 0x1, 0xc}, 0x10, 0x1, 0x5, 0x5, 0x9, 0x7, 0x89, 0xd, 0x2, 0x1, {0xffff1c72, 0x3, 0x1000, 0xebcb, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r10, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaada86dd60f900f500140600070700000000000000000000000000bbfe8000000000000000000000000000aa00024e224f70fe409ae8b780048dc4652f2afeb7dbca5322fc3d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) 2m26.548769771s ago: executing program 0 (id=5326): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x20000b, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open(0x0, 0x40, 0x22, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) close(r1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socket(0x400000000010, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000300)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, &(0x7f00000001c0)="17651307a43abe2d388a6b15d48f058a6599e534498eaee1a1d3fea4052e63f2ab16fbf3a5d6dc7768c8827aa83614997da5d9422bb320abf0a7d4e51b082b730e06f12bf6178954c550f0bad81171e4cd2701e8b9d88b2a119b", &(0x7f0000000240)=""/244}, 0x20) 2m25.607020947s ago: executing program 0 (id=5331): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fstat(r0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="146f449cfc", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="040e8f45fffff50e4c7910c171b127963769ef24d84f082556fd1b43f878a65dcc23ad409d4ef51c3fa8622a5a36900c6a5ab314bb2a406d10a6a499793d7a2e03661510116d87dc79356005e01c7474b76cacaf8136be8cda811a39567f643c0612dc5d7cf19330c281bb05c1f040dd51aea0dc4d2afa3e4aaa", 0x7a}, {&(0x7f0000000b80)="6f0070751b7d82b11bf815a5a39052adc265313a00e70250de1cf2af793b6fa1f5c5d603cf3fc8a89b0bebd59dc535fe23b45ea92cc77c6bd1b9e06eeb847e70cf231771050820bdc0521f72ba507ad7241fe7e91a1575c01cb37892c93cf0ea46dfb147f330534806ab5374870e0762ef26", 0x72}, {&(0x7f0000000500)="38ebeb016e356fee4cda85d0cd971519cbb747f2f5dc8aa685667417945724349c2e53956a81cc01b96257be6cf756ee9a1dbdb4805abaadcdb07fb7fda5", 0x3e}, {&(0x7f00000012c0)="ab07cb5269eaac6a6d8297a151f6ff8a153e45bf2a870dfe905021cdda98e2d6477ec965f23931447052dc921b69a55a12335828601119c981897e5f9d23246304c348b44d28b95fe7fb2e3464e8cbca139ef88350e5009432e741b1e76efaf855", 0x61}, {&(0x7f0000000a80)="7827d3e65741740426d89147d59fd333d253aded53fa8a969a0f05177236c017d4a616e2c81a", 0x26}], 0x5}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000d80)="c8c9bb0395733c925946bc562a54294b423cabffedb1436e2eeafec0dd5c365ee1453384a53151ac4520d0219b79105da2854cf859b2c67258d1b6e49b896188564a215ed2d8e36b81b1752c752f2ac52c559f562459a8b2f1f3da79b25b40062732bca7bf5b651c411cec17ef07fab31d5762eaaea7eaf30a5f52423d6c923b2125809279561c8000dad1c6fd86f3a4439a72d085fee666a9e251a92bde44605d4bca2dcc5a9ed5b751ee3c30646752fbbc797f2b4d593ec4ca4f898eb6c60c3fac", 0xc2}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000002c0)="f9fa9f46c18a7c3fd84dce2caa7eac0d80210d015e0b07fb38b8da833e19b1f561447d751ad93ebcadd6ccb2d18692c3acfb3e5659fee30d915909a62d34c16eab35e16aaa3624317cb158ceb1e8dde674d08145c7ff4a9d62778014a7b1be90f4b4111f48ad6db13a7b82cae450f8a5118696f722f7cefaa58b92285ebbcd642ecb772f182d187ae474ac1c69b005b420cabbd2de2dc8b2b7bd3047c6c669eebbc42ad0892f", 0xa6}, {&(0x7f0000000380)="75387a4232c36bcfb6f443207298fdceac063df6f2f1a2dc3aa56ff6372002534cadc47175c19765be00eabc407d7e7913cfe334c0b52bd987e4adffd4476cf813df6a8e7d281ad07ed4a2df5697b1312e29cbbe5e8077ba0b892609b3fae2630b335173179e19a9828f03d3bfa6060aedc9f4e8d8f87fdd55a59b4c7eb8c99747afa8e25f4d037c34fca3003561f2195dce855f800a3b193b1f5312", 0x9c}, {&(0x7f0000000540)="800581c6453ecd68d46d59586e11daceca3a8fdda1e7f8d93ed4d4840c35d12637ddeb9da23737107dc477947a1bf4562594e950c366ae78a3c24308cb8450a88f6eb6ec", 0x44}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)="c6244ada3d891d1aef4576b7e9", 0xd}, {&(0x7f0000000440)="e9794e997fecb13f1bad061b28c6f79e6b98ce49ae06fd171167155b6501d90d6e0e5d07e25af7f7be8ac10bc94af61d3f102abf40dd142a5eea9830bce0067849e79c5dc3f4fa3849dccfbdc50f5464518ee1ffe7b5ad2a5603334150e7a627ab26acfdbea504d1a1a5", 0x6a}], 0x2}}, {{&(0x7f0000000680)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000006c0)="609ee12104653ef41adda6f0bac6631ce9b81de8eb79ae4e58e9d9b65c303413bdfab9118785daf93b15cdd319956f0e8c0d5aa4483451b50147e5fb", 0x3c}, {&(0x7f0000000700)="9da3b4dd712f72564c0617765519", 0xe}, {&(0x7f00000013c0)="00db3cf18c0c68018480ac7f553bf299c264ad70cbb0dca56f9765430fed104ee8af5d1e3a04c4597495ec1a814d8720dad709fa16f7637e84d2b9f1bdac0d972f02d82c6cdd7e9c65801ec83ebbee2c55296fb228c8d8ea5fa42d31aa3f36c7cdcf6c31bf95dda049a0d3965a87875d57040d33ee2e0264e9a9cd57399434694475ac0ba7b739d8e12324b3de1b2fda0efc588a75626607f737bb919de6fbf46badacf906bb3393d8bc0e67ebd51d1be72701892ebfbd49b92516759b1f599519aec6f7b42175dbbfabfb25b370ca57ddc79fc61f9e8fec16c79d5e86cf2a462cc30394bc3138e1f2200f4321786ac0efce3e767f298f6bd156070835a0c250a2fe2d2c329e725bac5b6674aa8d05b847e8d33e5a28994a8d7c8c4de5a25a9eb690c922141e6a0bd24b2ee1d694a6916d7ac0f070add6ef0659ed11a130df671cedbdc654cd82e3daec30f5201700e2952b9df2f3912759daef9d39b78431a515547f5ef768797064e6739dc47f131641b749bbcb3f828ee0644edab1834e7efcc29ddb7c9d34007bfb11e3b29e960d76b3830a12891131d09faee6bfa76625f84e0c8249b6407b31552254c159c7016db5944857caaf2ecc2298dd25b0e4728039b6e38915746b74102849b6ec0600bcc4d572f572c779ac60504cbed8fec12da1f7c45fbdc2594e4ff6727fac719d634828d7cf76cb201bd5feb08f1528b5d6da5ac6fcb865ef0ab2780b6e7494dc2d49efe8f295ba5b13c94451ed59db5ea2219e2f6f8e3c5744478e13d3bf9b96b48463e2b8842cf7182def76152749a7d85276be3e864a7aa3e4ca1c84f87de67e9342d6461a55c5587a7402cb4e4001bdd21c2afe5c92abd9866ef374aa1df30ac3c54a0ed40de807c929838ad4cefcc69fd584bf8f98f624cc7fd02739a4295605bcb3d2e01bb9d235ecce90bf36c6104edff0e7912677b1ee67eca2add4bc4e6700344a22a09f1f5f87cd94f82194d1dae753de346bf9ce9fb9f265ac0e3c768d6da5118c7a5e15426761deeb554b7569cf7c2a2f4ba89dd1142f68eeb20dbd852b6d27c6c5b99009e094597ba1dc4a0f412e920209a3dc293dea85ad3110ddd8648986b9011f142027132bc809ae8bf441a30a67717a060feef7c1b7b0b82542e7bdcefe7b531ee2a514e3fd05c759b7182014f0651f17287111ef80e7387617c9f6e7cef21bd1aaec00bd464820e4acbf7575b9760121beee1e8fd00787ea9110775398a6202866d45395cf49d483d3e5d96878e0e03435aa00", 0x38c}], 0x3}}], 0x6, 0x40) 2m25.527267368s ago: executing program 0 (id=5332): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x398, 0x128, 0x0, 0x148, 0x128, 0x148, 0x300, 0x240, 0x240, 0x300, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x9e4b, 0x8000, 0x0, 0x0, 0xed, 0x7}, {0x4}}}, @common=@unspec=@connmark={{0x30}, {0xfffffffc, 0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x3, 0x8, 0x1}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'veth0_virt_wifi\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) setpgid(0x0, r0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) listxattr(&(0x7f00000000c0)='./file1/file0\x00', 0x0, 0x0) chmod(&(0x7f00000002c0)='./file1/file0\x00', 0x7) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 2m25.303528166s ago: executing program 0 (id=5334): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xa0001, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r2, 0x0, 0x30, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000440)={0x3}) write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120) write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$packet(r9, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffcf6, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x2, "44d16a4c6d65370837b5cc68696e64726db96c5914da2847153152a2d149141e", 0x38414762}) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r11, 0x8936, &(0x7f0000000200)={@empty, 0x6b, r4}) 2m23.619898443s ago: executing program 0 (id=5337): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000240)={0x0, 0x6109, 0x20, 0x0, 0xa1}, &(0x7f0000000100), &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a30000000000900"], 0xbc}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000004c0)={'\x00', 0xf, 0xf3a, 0x4, 0x0, 0x40, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000080), &(0x7f0000000380)=r6}, 0x20) close(0x3) recvmsg(r6, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000003c0)=""/105, 0x69}], 0x1}, 0x40000060) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000340)=r5) bind$alg(r3, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 2m23.304151337s ago: executing program 35 (id=5337): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000240)={0x0, 0x6109, 0x20, 0x0, 0xa1}, &(0x7f0000000100), &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a30000000000900"], 0xbc}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000004c0)={'\x00', 0xf, 0xf3a, 0x4, 0x0, 0x40, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000080), &(0x7f0000000380)=r6}, 0x20) close(0x3) recvmsg(r6, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000003c0)=""/105, 0x69}], 0x1}, 0x40000060) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000340)=r5) bind$alg(r3, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 8.638935197s ago: executing program 8 (id=5671): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x55, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b6090092aa722681a1ee3f88792f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24d796682495d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffc92915ff6e000000abf60400", [0xc]}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000800800000000000000000009500006de292c93078653ad19a9a0e00000000005e47ef5966d0c662d1a54b1806213064db4de74e9ec052ff955f50b6317ac9242b2b855a5e3cfcab48e5780cc889e9a97e4e386869c040dbf0fe760dcd86fc1c40a5cf2865785c68823696d182a06de5b9ba0f177333d0deec2b080f7e99e2919f4ce7af42e6cb724d97327be963bb229d657cfae758101d1ed244ef03ffffea7192fb3ef46f9fe2747045001eb070154e69c078e14677aed81a963b8bf2e90b2a824d76554ff65fcf3c15a3557b679c1f404a6eb15109c1805310fe8767b442828a8fa96a3e783fefcb10cef4533cdad6f06d"], &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x9}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x5, &(0x7f0000000380)={0x1, 0x1, 0x9, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x1000000000000}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}, 0x1}) r9 = semget$private(0x0, 0x7, 0x0) semtimedop(r9, &(0x7f0000000140)=[{0x1, 0xffff, 0x3000}], 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000140)=0x5) semctl$SETVAL(r9, 0x1, 0x10, &(0x7f0000000040)=0x3) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0xffef, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 7.890774961s ago: executing program 6 (id=5676): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r0, 0x1, 0x700, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7.763970517s ago: executing program 6 (id=5677): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000340)={0x40, 0xe, 0x9a, "8142a894051105efdb3c1befaadad499e765981542947b62317dea6b6442687a45ac0cc266e2fc390437754294b77f75b0ebe728b50328cb17fc3d85b82b6815a6ee5a63a2f3cc649b8b44100936ea94bcb791f0509c5732df7310a18d4da99aeb7a5b200061fa2383690203e369883ca42d5e33088a5ebba230cfa5bab65150e80c054bb43894e014e2a689991331dbb2ff87638ae549674b26"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x10}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000580)={0x40, 0xb, 0x2, '\n4'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x17, 0x6}, &(0x7f0000000700)={0x40, 0x19, 0x2, "1fe2"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000800)={0x40, 0x21, 0x1}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="40b54d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.355591184s ago: executing program 8 (id=5678): r0 = io_uring_setup(0xfc8, &(0x7f0000000180)) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 6.665016177s ago: executing program 2 (id=5681): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 6.052600106s ago: executing program 8 (id=5682): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x3, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0xa, 0x505, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x800000, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x2000006, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}}}}) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x3ffc, 0x0, 0x1, 0x35, "ffff00"}) r6 = syz_open_pts(0xffffffffffffffff, 0x0) (async) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r3, @ANYRES16=r6, @ANYRES32, @ANYRES16], 0x174}}, 0x20084001) io_setup(0x7, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) (async, rerun: 64) openat$nullb(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async, rerun: 64) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async, rerun: 64) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000180)={{0x21, @empty, 0x4e23, 0x1, 'rr\x00', 0x4, 0xfffffffe, 0x41}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e22, 0x1, 0x4, 0x10000005, 0x8}}, 0x44) (async) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000200)={&(0x7f0000000140)=[{0x63, 0x200, 0x0, 0x0}], 0x1}) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x8001, 0x4}) (async) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 5.90831841s ago: executing program 8 (id=5684): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x20000004, 0x402) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, &(0x7f0000000240)={0x40, 0x3, 0x86, {0x86, 0x0, "54b11476270e040e394c2d1595258795a03f0f4715750a6474c1a3b51f097301d09e33512aaf4df57c902ac5720d4c8123784fabce8c05146cca6b7d3fc16e250100f611146656b4de57929976bc9e91a44a5adc47cee7d723864286b5e7d6383870b5e471ff7bbb4d674d0cd8c5a1c45f604cf80d7eb760caf7128cb0b164a4baee9cc5"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x20, 0x8, 0xfffffffffffffd6e, "3968e257b13e34790ed8d327daf964db59686065a55d23759d6d76cc1396e4ec86aefb1637684d6fba7b2467f2ecba4b53068a7efd3d27d45c27ba492accc3d4514b23d1bf1864aca96f5716c5a7aa947f6d"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x8, 0x6, 0xa, 0x1, 0x6, 0x4, 0x9, 0xc, 0x3, 0x1, 0x1, 0x4}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x10}, &(0x7f0000000600)={0x20, 0x83, 0x2}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0xf6d}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x4fdf02add4ea568e) dup(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) 5.484066249s ago: executing program 2 (id=5685): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000003980)={0x1, [{0x2, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x7fff, 0x0}, {0x1, 0x0, 0x10000, 0x0}, {0x3, 0x0, 0x91, 0x0}, {0x3, 0x0, 0xf, 0x0}, {0x1, 0x0, 0xe7b6, 0x0}, {0x0, 0x0, 0xffff32e3, 0x0}, {0x2, 0x0, 0xfffffff7, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x178, 0x1, &(0x7f0000001840)="8884a000349f6a4935bbd33c0a2554ade5588844db05b4757de1929176980117bd4e6d971b90e109f3527aa6ac2b0e"}, {0x0, 0x0, 0xfffff03a, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x80, 0x0}, {0x1, 0x0, 0x3, 0x0}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRES64=r6, @ANYRES16=r7, @ANYRES16=r0, @ANYRES32=r6, @ANYRESOCT=0x0, @ANYBLOB="cd359ce5758814621627c184e2c254cf78bcf805c73a3418eb46c71a9e3e3570a12df8ee0f9594735e00d9d262aa8aeed1988907619740671427ba585c4830bc0457ed7954d2899e24ec1276f94bd29da2e63b0e09aba6ecd2b50fb42184793d38fb447156b62eb8906a072215a3414a7418cd7bb404e75fd2e14466fab51213ac444591f420c5a08ecd3853005df507d6fa5e82a3b36a359c6de393a303b958a53c56c86818162194bca8df022c9b5e488cbef2d845d256f7a48f4d143521f0f846607a3dca7f5c68c666c413371f2e1486e0ff2f6651962125", @ANYRESHEX=r7, @ANYRESOCT=0x0, @ANYRES32=r2], 0xb8}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r8 = socket(0x28, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r8, 0x0, 0x25, 0x4, @val=@tcx}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = gettid() ptrace$setopts(0x4200, r9, 0x2, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 4.503784655s ago: executing program 6 (id=5688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f00000001c0)=0x304008000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r3, 0x72b}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x20040810) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r10, 0x7a6, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffff0330, 0x1, 0x2, 0x800}) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 4.501362397s ago: executing program 7 (id=5689): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = shmget$private(0x0, 0x2000, 0xbcad5bb38bccba40, &(0x7f0000ffd000/0x2000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 4.455350779s ago: executing program 2 (id=5690): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) tee(r1, r1, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1f, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x80000000, 0x92, &(0x7f0000000180)=""/146, 0x0, 0x72, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_clone(0x10000, &(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000fc0)="43a5252629a98cece3ae87b1dc8b4a59d480fe30620b64a0babd5cb456c87fbe467b155247a9c3589906ea8e775613eb5656f79308fd51c50391dfd05721b61f4f111d15a4bec2dc816077024849321020804e9d4c12b0549915aade03f568041e45958685f90caf2b4f80abbaada4fc19f8dcefbf17470094706c8d4342c8385c033cc66cb6fdb3104de1341514e64842d871b0a8bcdf0fe9b4f61f686a5de294ae435d40c74c3ccd527687c45f8f36308b2cf4a3e99d86fcbcf58565b454157202152165e4c695a7ccbd3ffc") bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xb, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x3a, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x439a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x26511bf8) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f00000007c0)={0x5, 0xaf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x4010, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000800)={'vlan0\x00', 0x2}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40006009078010486ca3e0a030005020000000000000000ff07000038068b91000000"], 0x4e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000054c0)=[{{&(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000480)=[{&(0x7f0000005640)=""/224, 0xe0}], 0x1, &(0x7f0000001280)=""/4096, 0x1000}}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/14, 0xe}, {&(0x7f0000000ac0)=""/198, 0xc6}, {&(0x7f0000000840)=""/193, 0xc1}], 0x3, &(0x7f0000003280)=""/4110, 0x100e}, 0x20083}, {{&(0x7f0000000980)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000780)=[{&(0x7f0000002280)=""/4096, 0x1000}], 0x1}, 0x6}, {{&(0x7f0000000e40)=@nfc, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000a40)=""/111, 0x6f}, {&(0x7f0000000700)=""/16, 0x10}], 0x2}, 0x17}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)=""/156, 0x9c}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/108, 0x6c}, {&(0x7f0000000d00)=""/190, 0xbe}, {&(0x7f00000052c0)=""/202, 0xca}], 0x5, &(0x7f0000000ec0)=""/70, 0x46}, 0x8}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/17, 0x11}], 0x1, &(0x7f00000053c0)=""/226, 0xe2}, 0x4}], 0x6, 0x2102, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x9aec1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="020100117c0a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102bc"], 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000180)={0x18, 0x1, 0x0, 0x0, r7}) pipe(&(0x7f0000000080)) 3.707938486s ago: executing program 2 (id=5691): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20981, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r2, &(0x7f0000001000)=""/4085, 0xff5) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x1, 0x71, 0x200000008}) syz_usb_connect(0x5, 0x36, 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) r3 = eventfd(0xc8c1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x9, 0x1}, {0xf, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x24008014) syz_emit_ethernet(0x86, &(0x7f0000000bc0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "020810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb807f04442be993894b35a336eeca6f"}}}}}}}, 0x0) read$eventfd(r3, &(0x7f0000000000), 0x8) 3.410307854s ago: executing program 6 (id=5692): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4000004}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0xb4, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffc00}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1b1}, @in6={0xa, 0x4e21, 0x3fff80, @private0, 0x3}]}, &(0x7f00000002c0)=0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000dfe6641954df845cd0d00051e8", @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf25030000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 3.321040119s ago: executing program 6 (id=5693): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_usb_connect(0x4, 0x46, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYRES16=0x0, @ANYRES8], 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 2.991986913s ago: executing program 5 (id=5694): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000c80)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x8}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d1558457d0158ba5e51ef879ae5cbd99dc5c6e39ba14313232f7cab952d7c20ceba1a4072fc9c5012e97ea07276153e8e388330c8dc09463f5944007d1de69cab1f27a3b26e004fb59783ae214a5fa113d24a9d5153"]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f00000004c0), &(0x7f0000000400)=r3}, 0x20) ioctl$SNAPSHOT_FREE(r3, 0x3305) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000008400008eed8bcf3d298201d600080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0xe7565f74b9b8dd98, 0x6, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) r11 = socket(0x2, 0x80805, 0x0) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r12, 0x3b82, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x4000, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r14 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r14, 0x400, 0x1000000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000100)={r13, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r13, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xadf, 0x7fffffff, 0x4, 0x84, 0x7b17, 0x3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) 2.89903228s ago: executing program 7 (id=5695): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = shmget$private(0x0, 0x2000, 0xbcad5bb38bccba40, &(0x7f0000ffd000/0x2000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.714997604s ago: executing program 6 (id=5696): syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0xfff, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 2.638793762s ago: executing program 8 (id=5697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a00000011000300686173683a6e65742c6e65740000000014000780050015001100000008001240"], 0x60}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) fcntl$setflags(r1, 0x2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x6eb, 0x801) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000500)={0x7fff, r1, 0x80000}) sendto$inet6(r3, &(0x7f0000000540)="30162ad58e5b", 0x6, 0x20004800, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @private1, 0x8}, 0x1c) writev(r2, &(0x7f0000001e40)=[{&(0x7f0000001d40)='a', 0x1}], 0x1) r4 = accept4(r1, 0x0, 0x0, 0x800) rename(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)='./file0\x00') r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000880), r4) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x50}, 0x1, 0x0, 0x0, 0x200000a0}, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setresuid(0xee00, 0xee00, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_attach_bpf(r6, 0x6, 0x17, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendmsg(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="190940bd38922489a7647eb1a21e03a644cbda349f463b26c3b9f448c960c61f0fc18050544a93963542c463ff127f836b7645e3023f054b53d56f3e684913af30add0b98862c9cd90cd927fadcb1abc1bd942726cf19c38ef3a8b4b45899ecc6240d857e7449b41087e2d511f3716fad95adb697766740736b1921768916aa0c80742090a6463bdcd59292b1e4864876e590e6fc763b28ce8fb826a3389e5bc085a85a7aaa4eb7a3a", 0xa9}], 0x1, &(0x7f0000000700)=[{0xe8, 0x102, 0x800, "72830f0a11314671449cec76384996cc51660319850b546d11c4284dc558ddd8168910c4d3f1fe74d49311fc9d978172e60debcedf25f94a508de98f011704de9684083989610c18cc30dd7a6afec17292622b6dcdb002f8eea463ef5d94ef871002db502751509aeec85d7abe91ba1ab1fb6420ce4f4cd74cf7cc2e9378cb5fd14dc3e0e572ca0bb82f2454e02fbeba56a93f5727c63a2bf13c5b703a7952d8d5fe9df2e37abcf028e2fbc005adce053066356a76e66dc7aa4028da5da6af9df9292472a9e355941c5c2f4dfeb2cd222154df"}], 0xe8}, 0x4000001) setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000000), 0x4) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r9 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r8, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r9, 0x47f5, 0x0, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.20790551s ago: executing program 8 (id=5698): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000340)={0x40, 0xe, 0x9a, "8142a894051105efdb3c1befaadad499e765981542947b62317dea6b6442687a45ac0cc266e2fc390437754294b77f75b0ebe728b50328cb17fc3d85b82b6815a6ee5a63a2f3cc649b8b44100936ea94bcb791f0509c5732df7310a18d4da99aeb7a5b200061fa2383690203e369883ca42d5e33088a5ebba230cfa5bab65150e80c054bb43894e014e2a689991331dbb2ff87638ae549674b26"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x10}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000580)={0x40, 0xb, 0x2, '\n4'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x17, 0x6}, &(0x7f0000000700)={0x40, 0x19, 0x2, "1fe2"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000800)={0x40, 0x21, 0x1}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="40b54d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.326608557s ago: executing program 7 (id=5699): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000002c0), 0x4) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) 1.315468453s ago: executing program 5 (id=5700): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x10001, 0x100, {{0xb, 0x4, 0x1, 0x3c, 0x2c, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0xb, 0x65, [@loopback, @private=0xa010104]}, @timestamp_prespec={0x44, 0xc, 0x50, 0x3, 0x4, [{@private=0xa010101, 0xff}]}]}}}}}) (async, rerun: 32) r0 = socket(0x2, 0x3, 0xff) (rerun: 32) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000380)={@rand_addr, @local, 0x0}, &(0x7f00000003c0)=0xc) sendmmsg$inet(r0, &(0x7f0000001f80)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xa}}}}], 0x20}}], 0x2, 0x4) r2 = socket(0x10, 0x3, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r4, 0x0, 0x0, 0xa3}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000040)={0x8, r5}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000010ac0542024000010203010902240001010008050904007f020301020909250f008101227205090581030006"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, r8, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x54, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "24da38adb7e9cddd05f0b797bde48d19c8f021f4b1c8e6e369c4fd90986b683c"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "536ffbba0cb114fb229ee1deb17ccf07"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d30e2df745003bdc389c5421cb4c2ac7"}]}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7c9488d22dff61f12a7bd82fdcc41bb94168b217a64590298a75de273fe86484"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0xac}, 0x1, 0x0, 0x0, 0x4814}, 0x40810) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) (async) sendto$inet6(r10, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) ioctl$SIOCGSTAMP(r10, 0x8906, 0x0) (async) recvmmsg(r10, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000023, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000a40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x1, 0x8, "387e93966e2f9271"}, 0x0}) (async) syz_usb_control_io$uac1(r6, 0x0, 0x0) capset(0xffffffffffffffff, 0x0) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40091}, 0x4000014) (rerun: 64) 1.203916791s ago: executing program 7 (id=5701): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x20000b, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open(0x0, 0x40, 0x22, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) close(r1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000300)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0)="17651307a43abe2d388a6b15d48f058a6599e534498eaee1a1d3fea4052e63f2ab16fbf3a5d6dc7768c8827aa83614997da5d9422bb320abf0a7d4e51b082b730e06f12bf6178954c550f0bad81171e4cd2701e8b9d88b2a119b", &(0x7f0000000240)=""/244}, 0x20) fchdir(0xffffffffffffffff) 1.027192452s ago: executing program 5 (id=5702): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x8000000d, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000040)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) 815.835212ms ago: executing program 2 (id=5703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x44, 0x3, 0x1}, 0x18, 0x2) landlock_restrict_self(r4, 0x6) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x3ff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) 755.845408ms ago: executing program 7 (id=5704): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)={[{}]}) (fail_nth: 2) 667.718864ms ago: executing program 2 (id=5705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() mmap(&(0x7f0000a20000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'ipvlan0\x00', @multicast}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000004a40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000480)="0a8497fda586eb970cad4438b8cb44f5186738e1b4e60cde30e8ebbfd4eb4bcc99adc92591271f4645032a983d47ccc715ba401af4d25baaafb8d9dfc2e5730a8fc269f788d46f0206e39cb4b7e8f75ed1f6a047478417efad565f4193f202bf28fdeff25b299c7bbc084c7e79eb1ec98b12b8ae1aafc4", 0x77}, {&(0x7f0000000500)="3fdc6db27197f8155d90ef2473c69e1dd787f92fc000a553114b44873d88fc313a64ed5376f3322cdbc669fb65ca1560687381b3470124f74bd54799dc904b34da2b8e7db2814c4dd21a53432b48da0fd19c924efa1819018863d2461d0c2f2f65a8e5561d03a7bc7e5e04f55e276258ef3eab9849711f0590a6f89283a00f6062e445e049e0d1fa330bba449d77f4953e33a867fec817ce305983bb13d0bb3d44171b3175f4cd14ed47754ffc2efcc846939093c6e1209a6ad7a92ac3fa0376118cc16a705141e9d0bec0b4e7b378a2e48581ae139f5eaee917cea8c6a40a644f23f5d3046c3b43b9d4ddf752a78876304e", 0xf2}, {&(0x7f0000000600)="5379b94baa49183f697cc10a1e93c1d8ae14de8697497de7e1c42cba0dffcf5e82210c1b80400e0e56125398af399ff394298f2fb06955d50044714ac96ecfc86f35560a5b2ab57efa78b7ecb8f7179c524862b6b9187b18d814c1ed953f856f7256083e830e77f496c4125f3db1b63916cf9dbdfab706b3692eb0816bf0a140bcd1301690cb8690d08918a8a047b610d4a02c52c44febb3edd09347a5bf7ef54b9358db2ec03bcb4e063bb6bbcc951248bb50960e8193f31080", 0xba}, {&(0x7f00000006c0)="20d5b9320d34195f443dca2b56858d08852ffce955640417abbc25ebb5b41890fc0e3978586883fe5c07a3eeaeb03f9bdd8e251d24f6ab8e9dba40d2514e9c08ef39c91dd474246ebae9d5838f73360439b071530142dedcd2695e856da75a47666088ee6854f97b69a427979a9d0b7df273daed458b04a355b0111539ae084f9830fdc58acad7763481458257a4b2ddbb708ef06c25486685c6303b03c53665a415e128640111d168dc964acb549e5b47b01d", 0xb3}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="1fc7bc6152b3a843b094c425a09dcb1fc1fe97614a3a02cdc03940d3db0835ba918e60d903619ef2e0bcc4ddba5a7d226cc53e7f2517e991f85dc454d16030e69f154757b9544d34e05face17e82efab3e23ea4237d58c17eb5357929146e6ab64d8bdddb626c593aed450f4f153eba84027ac6d77cd4043ac0d7429340c5d744d3f16703b3ce9015c976c4040cd6815d83b0629b871f01d2a12688a76825220ed24becf616b193ee13d4a6f626255409348d1b8f16b505e108ec04f441d6325aadc99f5f0342b93f7f07c8c66e96732f41d467953e06b21f4632f77e300a7", 0xdf}, {&(0x7f0000000180)="e642a9bf900939ddaa922f88a621c9cb1f24842536240ff36e4b12cdf0a466414753cf9735f1a15319fa4158d5a4712735e7f869b679a437d734124614", 0x3d}], 0x7, &(0x7f0000001d00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001ce3794b3f9c0c4985a1ba4061910000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r6, @ANYRES32], 0x110, 0x40}}, {{&(0x7f0000002300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004500)=[{&(0x7f0000004380)="806232c3a0d5ec85b1374a0650bc1303f5c58e7696949052954c9c59306d1744f03306af24015bfd54424a2a5df63cf4c10995cb69db6fb2cc1930bd2af66fa1e2747360c41ac9d745c86ed6f38d1fb2207628be1d31dbc34411648846421bcf73480a85cb67e02cf631f181d53f595420260fa208a1b691caa9220666a21993932f05a143ac63885ff40e24dd68db749bc1d19922f3e8bde598a58787111e7be1d9f478e3f56bf1530e79e8", 0xac}, {&(0x7f0000004440)="fbee05596ceb47a22815c0708846866fff73bd0f9c1cb83f122a58a68ce0e89e47aa13dfc84ebaccc5731a65820557a5b3832bcd79b11efc8b909c9f1339d86c30bc4b306eb6ec711af86f9fd48198c144f70c3408b676488cf4c9e77f7e6d9bda962d6c3f6a161af7a696be94c412e999fc107b1e7f08cd18570711abc4f01892f6801ebca3e93b4aaeb09c4a7442a5901d3e96d0aad1", 0x97}], 0x2, &(0x7f0000001900)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014000000000000000168900001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x110, 0x40004}}, {{&(0x7f0000004740)=@abs={0x7ea9a70b58a92a61, 0x0, 0x4e24}, 0x6e, &(0x7f0000004940)=[{&(0x7f00000047c0)="6f4fb0c3b706fbe155248eab72d3bbf699d8696bded0003e723cb08969dcf6d9b5c9e9e312d69a073a2627f06045ffcc39cc215d11cdab70", 0x38}, {&(0x7f0000004800)="f4da2c9749fef551ccbae11c78c1d48114b903f70d2cf021162d36609b68e022bd25d484148a90b8877d3c28c5624379183f9e4d7cd01be0b6d7d86c7b3f40154211b2717f6da8adb0cc86d8802a20fb62d1440ab168b338c78351673d1ff5a88e4cf23d8c2ecb79ed42d4df3c3e80a7b7490a04e9bc5560b210b97c8da3066237b083440f61db2d0b5d1233fd9aabe1bc6cfa28e1a7c11e30786d9947a7aca64712132b9c77655f48640929dc2bce4c33e706b7dc6129c45ae58421cc1294f5890e6aa2", 0xc4}, {&(0x7f0000004900)="a6d61a34bc340e9116b964a355b965f5e0174f26a4d47d", 0x17}], 0x3, &(0x7f00000049c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="10000000180400288fbd00000000000c060000ae", @ANYRES32=r7, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x60, 0x1000}}], 0x3, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, 0x0, 0x0, 0xd, 0xfffffffffffffffc}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000200000000000000000000003fd31340e92c4bb81e106d31892f188e17c774804224dd80634b8395aea18c508395e80a76b8bb14f7f1bfd5bbf1b1f323b06a7b38520547bbe99fcd885a126d819b7261b64fb1080b788a2e0d4c33a9f320692f84e642db391501b387e1fba5ed18d5af4a29d199e64409"], 0x48}, 0x300}, 0x0) 499.267369ms ago: executing program 5 (id=5706): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x20000b, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open(0x0, 0x40, 0x22, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) close(0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000300)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, &(0x7f00000001c0)="17651307a43abe2d388a6b15d48f058a6599e534498eaee1a1d3fea4052e63f2ab16fbf3a5d6dc7768c8827aa83614997da5d9422bb320abf0a7d4e51b082b730e06f12bf6178954c550f0bad81171e4cd2701e8b9d88b2a119b", &(0x7f0000000240)=""/244}, 0x20) fchdir(0xffffffffffffffff) 126.477497ms ago: executing program 5 (id=5707): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) prctl$PR_SVE_SET_VL(0x2, 0x8000000000178b8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000bc0)='io\x00') read$qrtrtun(r2, &(0x7f0000000100)=""/222, 0xde) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000400), &(0x7f0000000540)=""/119}, 0x20) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000001600010a000000000000004000000004"], 0x18}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000440)}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="05", 0x1}], 0x1}}], 0x3, 0x400c0) r5 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=0x12, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r9, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1}, 0xd}], 0x1, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f00000002c0)={0x6e, "028aa42850ad4a9253d64f1adae311c4356a8d3fce6e3b012e861f952b07b92c741a5df6bfd00daab76e97964b784139aed51e371f8ee7654a55f2cc3d50b2e4fd38d4b81e5b0fb8c06c5fbef19d0000e34b1ca5512ee9e65c9d94114d6bfe62ea2fe95316f64b9c77a097142f75a1e351d66ab650d6560978b74d03ded33961"}) 80.644798ms ago: executing program 7 (id=5708): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 0s ago: executing program 5 (id=5709): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x20000004, 0x402) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, &(0x7f0000000240)={0x40, 0x3, 0x86, {0x86, 0x0, "54b11476270e040e394c2d1595258795a03f0f4715750a6474c1a3b51f097301d09e33512aaf4df57c902ac5720d4c8123784fabce8c05146cca6b7d3fc16e250100f611146656b4de57929976bc9e91a44a5adc47cee7d723864286b5e7d6383870b5e471ff7bbb4d674d0cd8c5a1c45f604cf80d7eb760caf7128cb0b164a4baee9cc5"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x20, 0x8, 0xfffffffffffffd6e, "3968e257b13e34790ed8d327daf964db59686065a55d23759d6d76cc1396e4ec86aefb1637684d6fba7b2467f2ecba4b53068a7efd3d27d45c27ba492accc3d4514b23d1bf1864aca96f5716c5a7aa947f6d"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x8, 0x6, 0xa, 0x1, 0x6, 0x4, 0x9, 0xc, 0x3, 0x1, 0x1, 0x4}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x10}, &(0x7f0000000600)={0x20, 0x83, 0x2}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0xf6d}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x4fdf02add4ea568e) dup(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) kernel console output (not intermixed with test programs): nt with '-o index=off' to override exclusive upperdir protection. [ 1373.063537][T18598] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1373.439328][T18598] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.479349][T18598] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1373.767267][T18598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.856578][T18598] usb 6-1: config 0 descriptor?? [ 1373.908348][T18598] pwc: Askey VC010 type 2 USB webcam detected. [ 1374.034557][T24400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5023'. [ 1374.068881][T24400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5023'. [ 1374.242588][ T30] audit: type=1400 audit(1760619758.248:3243): avc: denied { setopt } for pid=24402 comm="syz.2.5024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1374.429677][T18598] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1374.451126][T18598] pwc: recv_control_msg error -32 req 02 val 2700 [ 1374.468764][ T30] audit: type=1400 audit(1760619758.397:3244): avc: denied { ioctl } for pid=24402 comm="syz.2.5024" path="socket:[78931]" dev="sockfs" ino=78931 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1374.505398][T18598] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1374.658632][T18598] pwc: recv_control_msg error -32 req 04 val 1000 [ 1374.694362][T18598] pwc: recv_control_msg error -32 req 04 val 1300 [ 1374.701565][T18598] pwc: recv_control_msg error -32 req 04 val 1400 [ 1374.715359][T18598] pwc: recv_control_msg error -32 req 02 val 2000 [ 1374.733819][T18598] pwc: recv_control_msg error -32 req 02 val 2100 [ 1374.750297][T18598] pwc: recv_control_msg error -32 req 04 val 1500 [ 1374.975787][T18598] pwc: recv_control_msg error -32 req 02 val 2400 [ 1374.984296][T18598] pwc: recv_control_msg error -32 req 02 val 2600 [ 1375.010069][T18598] pwc: recv_control_msg error -32 req 02 val 2900 [ 1375.262224][T18598] pwc: recv_control_msg error -71 req 04 val 1100 [ 1375.275921][T18598] pwc: recv_control_msg error -71 req 04 val 1200 [ 1375.306274][T18598] pwc: Registered as video103. [ 1375.326665][T18598] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input73 [ 1375.364437][T18598] usb 6-1: USB disconnect, device number 25 [ 1375.591912][T24432] input: syz1 as /devices/virtual/input/input74 [ 1375.857812][T24439] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1376.047471][ T30] audit: type=1400 audit(1760619759.950:3245): avc: denied { listen } for pid=24420 comm="syz.7.5028" path=2F32302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1377.619883][T21653] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1377.799300][T21653] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 1377.824135][T21653] usb 3-1: config 0 has no interface number 0 [ 1377.936457][T21653] usb 3-1: config 0 interface 63 has no altsetting 0 [ 1377.953670][T21653] usb 3-1: New USB device found, idVendor=04dd, idProduct=8001, bcdDevice=c0.12 [ 1379.045041][T21653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.113478][T21653] usb 3-1: config 0 descriptor?? [ 1379.121880][T21653] safe_serial 3-1:0.63: safe_serial converter detected [ 1379.334426][T21653] safe_serial 3-1:0.63: probe with driver safe_serial failed with error -22 [ 1379.483024][T24488] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 1379.490743][T24488] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 1379.685112][T24489] misc userio: The device must be registered before sending interrupts [ 1380.755420][T16216] usb 3-1: USB disconnect, device number 78 [ 1382.228410][T18598] libceph: connect (1)[c::]:6789 error -101 [ 1382.236201][T18598] libceph: mon0 (1)[c::]:6789 connect error [ 1382.526042][T18598] libceph: connect (1)[c::]:6789 error -101 [ 1382.532637][T18598] libceph: mon0 (1)[c::]:6789 connect error [ 1383.589591][ T52] Bluetooth: hci1: unknown advertising packet type: 0x17 [ 1383.589655][ T52] Bluetooth: hci1: Dropping invalid advertising data [ 1383.604104][ T52] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1383.636712][T24509] ceph: No mds server is up or the cluster is laggy [ 1383.659224][T24525] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1383.667699][T21653] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1383.719296][T24528] syz_tun: entered allmulticast mode [ 1384.525096][T24543] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5050'. [ 1385.677866][ T30] audit: type=1800 audit(1760619768.958:3246): pid=24550 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.5054" name="bus" dev="overlay" ino=2092 res=0 errno=0 [ 1386.157749][T24568] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1386.164480][T24568] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1387.153914][T24568] vhci_hcd vhci_hcd.0: Device attached [ 1387.590863][T24569] vhci_hcd: connection closed [ 1387.618753][ T50] vhci_hcd: stop threads [ 1387.644113][ T50] vhci_hcd: release socket [ 1387.651955][ T50] vhci_hcd: disconnect device [ 1387.677193][T21653] usb 48-1: enqueue for inactive port 0 [ 1387.884647][T24583] qrtr: Invalid version 8 [ 1388.562241][T21653] usb usb48-port1: attempt power cycle [ 1388.855071][T16216] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1388.933909][T24592] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5064'. [ 1389.201996][ T5887] IPVS: starting estimator thread 0... [ 1389.207892][T16216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1389.242236][T16216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.252270][T16216] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1389.271193][T21653] usb usb48-port1: unable to enumerate USB device [ 1389.285263][T16216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.303997][T16216] usb 3-1: config 0 descriptor?? [ 1389.355540][T24597] IPVS: using max 45 ests per chain, 108000 per kthread [ 1389.687131][T18598] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1389.695259][T16216] greenasia 0003:0E8F:0012.001C: item fetching failed at offset 3/7 [ 1389.716286][T16216] greenasia 0003:0E8F:0012.001C: parse failed [ 1389.740959][T16216] greenasia 0003:0E8F:0012.001C: probe with driver greenasia failed with error -22 [ 1389.900867][T18598] usb 8-1: Using ep0 maxpacket: 32 [ 1389.907465][T18598] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 1389.924237][T18598] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1389.951321][T18598] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1389.964496][T18598] usb 8-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 1389.979581][T18598] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.997361][T18598] usb 8-1: config 0 descriptor?? [ 1390.448369][T18598] usbhid 8-1:0.0: can't add hid device: -71 [ 1390.456464][T18598] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1390.513530][T18598] usb 8-1: USB disconnect, device number 7 [ 1390.724043][T22626] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1390.886263][T22626] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 1390.898190][T22626] usb 6-1: config 0 has no interface number 0 [ 1390.913596][T22626] usb 6-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1390.939345][T22626] usb 6-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1390.968756][T22626] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 1390.984049][T22626] usb 6-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 1391.001945][T22626] usb 6-1: Product: syz [ 1391.013997][T22626] usb 6-1: config 0 descriptor?? [ 1391.521564][T22626] usbhid 6-1:0.16: can't add hid device: -71 [ 1391.547526][T21653] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1391.565620][T22626] usbhid 6-1:0.16: probe with driver usbhid failed with error -71 [ 1391.601773][ T5886] usb 3-1: USB disconnect, device number 80 [ 1391.604939][T22626] usb 6-1: USB disconnect, device number 26 [ 1391.774736][T21653] usb 8-1: too many configurations: 249, using maximum allowed: 8 [ 1391.853782][T21653] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1392.437048][T21653] usb 8-1: can't read configurations, error -61 [ 1392.617607][T21653] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1392.799388][T21653] usb 8-1: too many configurations: 249, using maximum allowed: 8 [ 1392.808973][T21653] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1392.816529][T21653] usb 8-1: can't read configurations, error -61 [ 1392.823027][T21653] usb usb8-port1: attempt power cycle [ 1393.182872][T21653] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1393.227962][T21653] usb 8-1: too many configurations: 249, using maximum allowed: 8 [ 1393.239120][T21653] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1393.248737][T21653] usb 8-1: can't read configurations, error -61 [ 1393.514881][T21653] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 1393.537395][T21653] usb 8-1: too many configurations: 249, using maximum allowed: 8 [ 1393.558175][T21653] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1393.576474][T21653] usb 8-1: can't read configurations, error -61 [ 1393.587568][T21653] usb usb8-port1: unable to enumerate USB device [ 1393.653471][ T980] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1393.963221][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 1393.978093][ T980] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 1393.999136][ T980] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1394.024627][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1394.038284][ T980] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 1394.055743][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.082160][ T980] usb 3-1: config 0 descriptor?? [ 1394.641669][T24669] tipc: Enabling of bearer rejected, media not registered [ 1394.673641][T24671] overlayfs: failed to resolve 'subj_user=': -2 [ 1394.681878][ T30] audit: type=1400 audit(1760619777.377:3247): avc: denied { mounton } for pid=24670 comm="syz.0.5088" path="/387/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1394.715070][T24671] netlink: 'syz.0.5088': attribute type 3 has an invalid length. [ 1394.723942][T24671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5088'. [ 1394.792726][ T980] usbhid 3-1:0.0: can't add hid device: -71 [ 1394.807862][ T980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1394.820283][ T980] usb 3-1: USB disconnect, device number 81 [ 1394.989573][T18598] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1395.159442][T24676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5089'. [ 1396.058584][T18598] usb 1-1: device descriptor read/64, error -71 [ 1397.053229][T18598] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1397.332004][T18598] usb 1-1: device descriptor read/64, error -71 [ 1397.454384][T18598] usb usb1-port1: attempt power cycle [ 1398.056171][T24686] Invalid source name [ 1398.060717][ T5886] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 1398.235799][ T5886] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1398.244895][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.254389][ T5886] usb 3-1: config 0 descriptor?? [ 1398.317605][T21653] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1398.346470][T16216] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1398.496028][T16216] usb 6-1: device descriptor read/64, error -71 [ 1398.969914][T21653] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1398.988155][T16216] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1398.991505][T21653] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1399.030912][T21653] usb 8-1: can't read configurations, error -71 [ 1399.181987][T16216] usb 6-1: device descriptor read/64, error -71 [ 1399.269536][ T5886] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1399.279687][ T5886] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1399.289353][ T5886] usb 3-1: USB disconnect, device number 82 [ 1399.298024][T16216] usb usb6-port1: attempt power cycle [ 1399.588032][T24730] input: syz1 as /devices/virtual/input/input75 [ 1399.661312][T16216] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1399.683947][T16216] usb 6-1: device descriptor read/8, error -71 [ 1399.696465][T24731] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1399.757545][ T5886] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1399.919249][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.940028][T16216] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1399.959532][ T5886] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1399.991686][ T5887] libceph: connect (1)[c::]:6789 error -13 [ 1400.000675][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 1400.006880][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.015191][T16216] usb 6-1: device descriptor read/8, error -71 [ 1400.128278][ T5886] usb 1-1: config 0 descriptor?? [ 1400.142742][T16216] usb usb6-port1: unable to enumerate USB device [ 1400.358635][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 1400.367826][T16216] libceph: connect (1)[c::]:6789 error -13 [ 1400.373770][T16216] libceph: mon0 (1)[c::]:6789 connect error [ 1400.500867][T24734] ceph: No mds server is up or the cluster is laggy [ 1400.791361][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1400.798467][ T5886] pwc: recv_control_msg error -32 req 02 val 2700 [ 1400.805476][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1400.812320][ T5886] pwc: recv_control_msg error -32 req 04 val 1000 [ 1400.820472][ T5886] pwc: recv_control_msg error -32 req 04 val 1300 [ 1400.829415][ T5886] pwc: recv_control_msg error -32 req 04 val 1400 [ 1400.836300][ T5886] pwc: recv_control_msg error -32 req 02 val 2000 [ 1400.843638][ T5886] pwc: recv_control_msg error -32 req 02 val 2100 [ 1400.850784][ T5886] pwc: recv_control_msg error -32 req 04 val 1500 [ 1400.857646][ T5886] pwc: recv_control_msg error -32 req 02 val 2500 [ 1400.858614][T21653] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1400.869780][ T5886] pwc: recv_control_msg error -32 req 02 val 2400 [ 1400.878436][ T5886] pwc: recv_control_msg error -32 req 02 val 2600 [ 1400.885467][ T5886] pwc: recv_control_msg error -32 req 02 val 2900 [ 1400.901437][T22626] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1401.031078][T21653] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1401.040973][T21653] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1401.050728][T21653] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1401.060505][T21653] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1401.070360][T22626] usb 3-1: Using ep0 maxpacket: 32 [ 1401.078523][T21653] usb 8-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1401.087648][T21653] usb 8-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 1401.095890][T22626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.106820][T21653] usb 8-1: Product: syz [ 1401.110972][T21653] usb 8-1: Manufacturer: syz [ 1401.115772][T21653] usb 8-1: SerialNumber: syz [ 1401.116853][ T5886] pwc: recv_control_msg error -71 req 04 val 1100 [ 1401.121441][T22626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.129788][ T5886] pwc: recv_control_msg error -71 req 04 val 1200 [ 1401.139613][T21653] usb 8-1: config 0 descriptor?? [ 1401.145815][ T5886] pwc: Registered as video103. [ 1401.153383][T22626] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1401.158297][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input76 [ 1401.174442][T21653] kvaser_usb 8-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1401.187912][T22626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.193975][ T5886] usb 1-1: USB disconnect, device number 87 [ 1401.206569][T21653] kvaser_usb 8-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1401.216086][T21653] kvaser_usb 8-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1401.228891][T22626] usb 3-1: config 0 descriptor?? [ 1401.534314][T21653] usb 8-1: USB disconnect, device number 14 [ 1402.084122][T22626] savu 0003:1E7D:2D5A.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1402.397373][T24759] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5112'. [ 1403.670311][ T5886] usb 3-1: reset high-speed USB device number 83 using dummy_hcd [ 1405.338094][ T30] audit: type=1326 audit(1760619787.348:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24787 comm="syz.6.5119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x0 [ 1405.849195][T24800] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5120'. [ 1405.895882][T24800] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5120'. [ 1405.926086][T21653] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1406.088847][T21653] usb 8-1: config 0 has an invalid interface number: 51 but max is 2 [ 1406.104536][T21653] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.140482][T21653] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1406.183356][T21653] usb 8-1: config 0 has no interface number 0 [ 1406.204875][T24804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.222128][T21653] usb 8-1: config 0 interface 51 altsetting 6 endpoint 0x2 has invalid maxpacket 9226, setting to 1024 [ 1406.276923][T21653] usb 8-1: config 0 interface 51 altsetting 6 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1406.292018][T21653] usb 8-1: config 0 interface 51 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1406.312122][T21653] usb 8-1: config 0 interface 51 has no altsetting 0 [ 1406.416012][T21653] usb 8-1: New USB device found, idVendor=046d, idProduct=08d7, bcdDevice=1f.0a [ 1406.426169][T21653] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.445758][T21653] usb 8-1: Product: syz [ 1406.450093][T21653] usb 8-1: Manufacturer: syz [ 1406.456559][T21653] usb 8-1: SerialNumber: syz [ 1406.467873][T21653] usb 8-1: config 0 descriptor?? [ 1406.473651][T24795] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1406.593139][T16216] usb 3-1: USB disconnect, device number 83 [ 1407.020887][T24819] kvm: pic: non byte write [ 1407.219720][T16216] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1407.416069][T16216] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1407.449567][T16216] usb 3-1: config 0 has no interface number 0 [ 1407.480234][T16216] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.531254][T16216] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.577687][T16216] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 1407.587654][T16216] usb 3-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 1407.596007][T16216] usb 3-1: Product: syz [ 1407.605657][T16216] usb 3-1: config 0 descriptor?? [ 1408.072820][T16216] usbhid 3-1:0.16: can't add hid device: -71 [ 1408.079239][T16216] usbhid 3-1:0.16: probe with driver usbhid failed with error -71 [ 1408.089691][T16216] usb 3-1: USB disconnect, device number 84 [ 1408.108989][T24833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5131'. [ 1408.118784][T24833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5131'. [ 1408.203234][T18598] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1408.363582][T18598] usb 6-1: Using ep0 maxpacket: 8 [ 1408.370229][T18598] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1408.381527][T18598] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1408.391716][T18598] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1408.401898][T18598] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1408.415022][T18598] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1408.424087][T18598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.645377][ T30] audit: type=1326 audit(1760619790.444:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24831 comm="syz.0.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b4b8eec9 code=0x7fc00000 [ 1408.679761][T18598] usb 6-1: GET_CAPABILITIES returned 0 [ 1408.685556][T18598] usbtmc 6-1:16.0: can't read capabilities [ 1408.708742][T21653] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08d7 [ 1408.735052][T21653] gspca_zc3xx: reg_w_i err -71 [ 1409.073893][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1409.083494][T24850] usbtmc 6-1:16.0: Unable to send data, error -71 [ 1409.476348][T21653] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1409.537231][T21653] gspca_zc3xx 8-1:0.51: probe with driver gspca_zc3xx failed with error -71 [ 1409.607184][T21653] usb 8-1: USB disconnect, device number 15 [ 1411.347356][T21653] usb 6-1: USB disconnect, device number 31 [ 1411.437174][ T30] audit: type=1326 audit(1760619793.063:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24875 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36baf8eec9 code=0x7ffc0000 [ 1411.467985][ T30] audit: type=1326 audit(1760619793.063:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24875 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36baf8eec9 code=0x7ffc0000 [ 1411.886844][ T30] audit: type=1326 audit(1760619793.091:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24875 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f36baf8eec9 code=0x7ffc0000 [ 1412.144779][ T30] audit: type=1326 audit(1760619793.091:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24875 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36baf8eec9 code=0x7ffc0000 [ 1412.745256][ T30] audit: type=1326 audit(1760619793.091:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24875 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36baf8eec9 code=0x7ffc0000 [ 1412.780744][ T30] audit: type=1326 audit(1760619793.091:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24875 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f36baf8eec9 code=0x7ffc0000 [ 1412.833989][ T30] audit: type=1326 audit(1760619793.119:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24875 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36baf8eec9 code=0x7ffc0000 [ 1413.230858][ T30] audit: type=1326 audit(1760619793.119:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24875 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36baf8eec9 code=0x7ffc0000 [ 1413.266439][ T30] audit: type=1326 audit(1760619793.325:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24875 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f36baf8eec9 code=0x7ffc0000 [ 1413.295369][ T30] audit: type=1326 audit(1760619793.325:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24875 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36baf8eec9 code=0x7ffc0000 [ 1413.436234][T24909] binder: 24900:24909 ioctl c0306201 200000000640 returned -22 [ 1413.562634][T24906] netlink: 'syz.2.5152': attribute type 1 has an invalid length. [ 1414.043397][T24927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5154'. [ 1414.403963][T16216] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1414.556977][T16216] usb 1-1: device descriptor read/64, error -71 [ 1415.451521][T16216] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1415.675898][T16216] usb 1-1: device descriptor read/64, error -71 [ 1416.098551][T16216] usb usb1-port1: attempt power cycle [ 1416.752731][T16216] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1417.718405][T16216] usb 1-1: device descriptor read/8, error -71 [ 1418.112620][T24967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5167'. [ 1419.650881][T24981] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1419.657431][T24981] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1419.677194][T24981] vhci_hcd vhci_hcd.0: Device attached [ 1420.029450][ T980] usb 34-1: SetAddress Request (2) to port 0 [ 1420.036390][ T980] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1420.164001][T24982] vhci_hcd: connection closed [ 1420.235715][T23694] vhci_hcd: stop threads [ 1420.267094][T23694] vhci_hcd: release socket [ 1420.293309][T23694] vhci_hcd: disconnect device [ 1420.600996][T24999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1420.730900][T25005] fuse: Unknown parameter '0x0000000000000000' [ 1420.894212][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1420.894229][ T30] audit: type=1400 audit(1760619801.912:3276): avc: denied { map } for pid=25009 comm="syz.7.5179" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1420.926953][T25010] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1420.936121][T25010] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1420.967832][ T30] audit: type=1400 audit(1760619801.912:3277): avc: denied { execute } for pid=25009 comm="syz.7.5179" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1421.288425][T18598] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1421.461585][T18598] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.473006][T18598] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1421.482662][T18598] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.494061][T18598] usb 8-1: config 0 descriptor?? [ 1421.527154][T18598] pwc: Askey VC010 type 2 USB webcam detected. [ 1421.855297][ T30] audit: type=1400 audit(1760619802.801:3278): avc: denied { create } for pid=25021 comm="syz.5.5183" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1422.058757][T18598] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1422.065719][T18598] pwc: recv_control_msg error -32 req 02 val 2700 [ 1422.072734][T18598] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1422.079900][T18598] pwc: recv_control_msg error -32 req 04 val 1000 [ 1422.087573][T18598] pwc: recv_control_msg error -32 req 04 val 1300 [ 1422.102731][T18598] pwc: recv_control_msg error -32 req 04 val 1400 [ 1422.117306][T18598] pwc: recv_control_msg error -32 req 02 val 2000 [ 1422.139495][T18598] pwc: recv_control_msg error -32 req 02 val 2100 [ 1422.152260][T18598] pwc: recv_control_msg error -32 req 04 val 1500 [ 1422.415938][T18598] pwc: recv_control_msg error -32 req 02 val 2400 [ 1422.425227][T18598] pwc: recv_control_msg error -32 req 02 val 2600 [ 1422.432100][T18598] pwc: recv_control_msg error -32 req 02 val 2900 [ 1422.439314][T18598] pwc: recv_control_msg error -32 req 02 val 2800 [ 1422.531151][T25031] hub 1-0:1.0: USB hub found [ 1422.538121][T25031] hub 1-0:1.0: 1 port detected [ 1422.662212][T18598] pwc: recv_control_msg error -71 req 04 val 1200 [ 1422.669707][T18598] pwc: Registered as video103. [ 1422.676909][T18598] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input77 [ 1422.702132][T18598] usb 8-1: USB disconnect, device number 16 [ 1422.827969][T21653] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1423.000844][T21653] usb 3-1: Using ep0 maxpacket: 8 [ 1423.007762][T21653] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1423.015881][T21653] usb 3-1: config 0 has no interface number 0 [ 1423.023997][T21653] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1423.033100][T21653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.041083][T21653] usb 3-1: Product: syz [ 1423.045306][T21653] usb 3-1: Manufacturer: syz [ 1423.049892][T21653] usb 3-1: SerialNumber: syz [ 1423.056262][T21653] usb 3-1: config 0 descriptor?? [ 1423.302039][T21653] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1423.319561][T21653] uvcvideo 3-1:0.31: No valid video chain found. [ 1423.334584][T21653] usb 3-1: USB disconnect, device number 85 [ 1424.323988][T25058] binder: 25048:25058 ioctl c0306201 0 returned -14 [ 1424.510934][T25062] netlink: 'syz.0.5193': attribute type 10 has an invalid length. [ 1424.518860][T25062] macvlan0: entered promiscuous mode [ 1424.794365][T25069] netlink: 'syz.2.5196': attribute type 10 has an invalid length. [ 1424.802328][T25069] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5196'. [ 1425.733555][T25076] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1425.742327][ T980] usb 34-1: device descriptor read/8, error -110 [ 1426.176324][ T980] usb usb34-port1: attempt power cycle [ 1426.285594][T25089] xt_nat: multiple ranges no longer supported [ 1426.773229][ T980] usb usb34-port1: unable to enumerate USB device [ 1427.430482][T15348] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1427.619204][T15348] usb 6-1: config 7 descriptor has 1 excess byte, ignoring [ 1427.648921][T15348] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1427.661436][T15348] usb 6-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1427.670883][T15348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.678994][T15348] usb 6-1: Product: syz [ 1427.683638][T15348] usb 6-1: Manufacturer: syz [ 1427.688321][T15348] usb 6-1: SerialNumber: syz [ 1427.702164][T15348] rndis_host 6-1:7.0: skipping garbage [ 1427.712581][T15348] usb 6-1: bad CDC descriptors [ 1427.719236][T15348] option 6-1:7.0: GSM modem (1-port) converter detected [ 1428.099674][T25110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.132048][T25110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.133594][T25124] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1428.224341][ T980] usb 6-1: USB disconnect, device number 32 [ 1428.310921][ T980] option 6-1:7.0: device disconnected [ 1429.349080][ T30] audit: type=1326 audit(1760619809.807:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25138 comm="syz.7.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x7ffc0000 [ 1429.412727][T23694] Bluetooth: hci5: Frame reassembly failed (-84) [ 1429.502726][ T30] audit: type=1326 audit(1760619809.835:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25138 comm="syz.7.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x7ffc0000 [ 1429.526214][ C1] vkms_vblank_simulate: vblank timer overrun [ 1429.535559][ T980] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1429.659317][ T30] audit: type=1326 audit(1760619809.835:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25138 comm="syz.7.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2fe898eec9 code=0x7ffc0000 [ 1429.723112][T25153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5219'. [ 1429.807474][T25154] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1429.816877][ T30] audit: type=1326 audit(1760619809.835:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25138 comm="syz.7.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x7ffc0000 [ 1429.883711][ T980] usb 6-1: device descriptor read/64, error -71 [ 1430.012057][ T30] audit: type=1326 audit(1760619809.835:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25138 comm="syz.7.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x7ffc0000 [ 1430.123606][ T30] audit: type=1326 audit(1760619809.835:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25138 comm="syz.7.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fe898eec9 code=0x7ffc0000 [ 1430.204695][ T980] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1430.209981][ T30] audit: type=1326 audit(1760619809.835:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25138 comm="syz.7.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x7ffc0000 [ 1430.240833][ T30] audit: type=1326 audit(1760619809.835:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25138 comm="syz.7.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x7ffc0000 [ 1430.267639][ T30] audit: type=1326 audit(1760619809.835:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25138 comm="syz.7.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fe898eec9 code=0x7ffc0000 [ 1430.294332][ T30] audit: type=1326 audit(1760619809.835:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25138 comm="syz.7.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x7ffc0000 [ 1430.396805][ T980] usb 6-1: device descriptor read/64, error -71 [ 1430.514909][ T980] usb usb6-port1: attempt power cycle [ 1430.771103][T25165] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1430.902413][ T980] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1430.944607][ T980] usb 6-1: device descriptor read/8, error -71 [ 1431.315106][T25169] lo: entered allmulticast mode [ 1431.324659][T25169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5224'. [ 1431.583532][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1431.623391][ T980] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1431.664702][ T980] usb 6-1: device descriptor read/8, error -71 [ 1431.810033][ T980] usb usb6-port1: unable to enumerate USB device [ 1432.118190][T25171] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5225'. [ 1432.231071][T25179] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5226'. [ 1432.515889][T16216] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1432.801992][T25188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5228'. [ 1433.247351][T16216] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1434.181813][T25199] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5233'. [ 1434.206157][T25199] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1434.815840][T18598] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 1435.729197][T18598] usb 3-1: string descriptor 0 read error: -22 [ 1435.760984][T18598] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1435.844970][T18598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.025581][T25226] ptrace attach of "./syz-executor exec"[21252] was attempted by ""[25226] [ 1436.147539][T18598] usb 3-1: USB disconnect, device number 86 [ 1436.160131][ T980] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1436.319357][ T980] usb 1-1: device descriptor read/64, error -71 [ 1436.576100][ T980] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1436.798737][ T980] usb 1-1: device descriptor read/64, error -71 [ 1436.940180][ T980] usb usb1-port1: attempt power cycle [ 1437.078416][T22626] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1437.086023][ T5923] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1437.270918][T22626] usb 6-1: Using ep0 maxpacket: 16 [ 1437.277653][ T5923] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1437.285835][ T5923] usb 3-1: config 0 has no interface number 0 [ 1437.292455][ T5923] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.303694][ T980] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1437.311543][ T5923] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.321880][T22626] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1437.328613][T22626] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1437.337693][ T5923] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1437.347192][T22626] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.355218][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.363302][ T980] usb 1-1: device descriptor read/8, error -71 [ 1437.372033][ T5923] usb 3-1: config 0 descriptor?? [ 1437.379457][T22626] usb 6-1: config 0 descriptor?? [ 1437.645187][ T980] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 1437.764130][ T980] usb 1-1: device descriptor read/8, error -71 [ 1438.002371][T22626] usbhid 6-1:0.0: can't add hid device: -71 [ 1438.028180][T22626] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1438.174358][ T980] usb usb1-port1: unable to enumerate USB device [ 1438.183701][T22626] usb 6-1: USB disconnect, device number 37 [ 1438.604164][T25251] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5246'. [ 1439.925119][T25261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5249'. [ 1439.951633][T25261] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1440.127313][T15348] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1440.500706][T15348] usb 8-1: config 0 has an invalid interface number: 16 but max is 0 [ 1440.508906][T15348] usb 8-1: config 0 has no interface number 0 [ 1440.515122][T15348] usb 8-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.526179][T15348] usb 8-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.539244][T15348] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 1440.550776][T15348] usb 8-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 1440.559076][T15348] usb 8-1: Product: syz [ 1440.571319][T15348] usb 8-1: config 0 descriptor?? [ 1440.693206][ T5923] usbhid 3-1:0.1: can't add hid device: -71 [ 1440.707000][ T5923] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 1440.727259][ T5923] usb 3-1: USB disconnect, device number 87 [ 1441.028393][T15348] usbhid 8-1:0.16: can't add hid device: -71 [ 1441.038901][T15348] usbhid 8-1:0.16: probe with driver usbhid failed with error -71 [ 1441.052354][T15348] usb 8-1: USB disconnect, device number 17 [ 1441.258445][ T5923] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1441.503113][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1441.522591][ T5923] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1441.531911][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.551752][ T5923] usb 3-1: config 0 descriptor?? [ 1441.775651][T25276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.784479][T25276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.857230][ T5886] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 1442.019863][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1442.024136][ T5923] sony 0003:054C:0268.001F: hiddev0,hidraw0: USB HID v88.07 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 1442.040014][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1442.047467][ T5923] sony 0003:054C:0268.001F: failed to claim input [ 1442.061703][ T5886] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1442.075719][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.083986][ T5886] usb 8-1: Product: syz [ 1442.088206][ T5886] usb 8-1: Manufacturer: syz [ 1442.093509][ T5886] usb 8-1: SerialNumber: syz [ 1442.100749][ T5886] usb 8-1: config 0 descriptor?? [ 1442.106954][T25292] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1442.117534][ T5886] port100 8-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1442.237622][ T5923] usb 3-1: USB disconnect, device number 88 [ 1442.336379][ T980] usb 8-1: USB disconnect, device number 18 [ 1442.691079][T21653] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1442.851438][T21653] usb 1-1: Using ep0 maxpacket: 16 [ 1442.895383][T21653] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1442.902001][T21653] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1442.926172][T21653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.936276][T21653] usb 1-1: config 0 descriptor?? [ 1443.355994][T21653] usbhid 1-1:0.0: can't add hid device: -71 [ 1443.440235][T21653] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1443.489494][T21653] usb 1-1: USB disconnect, device number 96 [ 1443.551237][T25304] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5264'. [ 1444.447900][T25317] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5266'. [ 1445.091266][T25329] input: syz1 as /devices/virtual/input/input79 [ 1445.139199][T16216] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1445.259168][T25333] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1445.345038][T16216] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1445.438199][T16216] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1445.447514][T16216] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.529370][T16216] usb 8-1: config 0 descriptor?? [ 1445.989823][T25341] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5272'. [ 1447.440706][T16216] usbhid 8-1:0.0: can't add hid device: -71 [ 1447.469756][T16216] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1447.514582][T16216] usb 8-1: USB disconnect, device number 19 [ 1447.751207][ T980] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1448.080739][ T980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.091104][ T980] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1448.105049][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.135472][ T980] usb 6-1: config 0 descriptor?? [ 1448.213933][ T980] pwc: Askey VC010 type 2 USB webcam detected. [ 1448.364307][T25360] wg0 speed is unknown, defaulting to 1000 [ 1448.606067][ T980] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1448.652974][ T980] pwc: recv_control_msg error -32 req 02 val 2700 [ 1448.660141][ T980] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1448.668273][ T980] pwc: recv_control_msg error -32 req 04 val 1000 [ 1448.675508][ T980] pwc: recv_control_msg error -32 req 04 val 1300 [ 1448.683427][ T980] pwc: recv_control_msg error -32 req 04 val 1400 [ 1448.693992][ T980] pwc: recv_control_msg error -32 req 02 val 2000 [ 1448.754420][ T980] pwc: recv_control_msg error -32 req 02 val 2100 [ 1448.784646][T21653] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1448.988233][T21653] usb 8-1: Using ep0 maxpacket: 16 [ 1449.001523][T21653] usb 8-1: config 0 has no interfaces? [ 1449.008299][T21653] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1449.018286][T21653] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1449.027889][T21653] usb 8-1: Manufacturer: syz [ 1449.049507][ T980] pwc: recv_control_msg error -32 req 02 val 2500 [ 1449.064180][ T980] pwc: recv_control_msg error -32 req 02 val 2400 [ 1449.073468][ T5923] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1449.087265][ T980] pwc: recv_control_msg error -32 req 02 val 2600 [ 1449.097515][T21653] usb 8-1: config 0 descriptor?? [ 1449.150266][ T980] pwc: recv_control_msg error -32 req 02 val 2900 [ 1449.179327][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1449.179366][ T30] audit: type=1326 audit(1760619828.356:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25367 comm="syz.6.5279" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e6b38eec9 code=0x0 [ 1449.391516][ T980] pwc: recv_control_msg error -71 req 04 val 1100 [ 1449.400348][T25360] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1449.416316][ T980] pwc: recv_control_msg error -71 req 04 val 1200 [ 1449.422936][ T5923] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1449.432905][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.441166][ T980] pwc: Registered as video103. [ 1449.452282][ T980] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input80 [ 1449.476749][ T5923] usb 3-1: config 0 descriptor?? [ 1449.492425][ T980] usb 6-1: USB disconnect, device number 38 [ 1449.510749][T22628] usb 8-1: USB disconnect, device number 20 [ 1449.698275][ T5923] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1450.533344][ T980] libceph: connect (1)[c::]:6789 error -13 [ 1450.540886][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 1450.783832][T25390] ceph: No mds server is up or the cluster is laggy [ 1450.869668][T21653] libceph: connect (1)[c::]:6789 error -13 [ 1450.876106][T21653] libceph: mon0 (1)[c::]:6789 connect error [ 1451.045766][T21653] libceph: connect (1)[c::]:6789 error -101 [ 1451.053100][T21653] libceph: mon0 (1)[c::]:6789 connect error [ 1451.176611][T25400] ceph: No mds server is up or the cluster is laggy [ 1451.961781][ T5923] [drm:udl_init] *ERROR* Selecting channel failed [ 1451.985011][ T5923] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1451.992596][ T5923] [drm] Initialized udl on minor 2 [ 1452.001148][ T5923] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1452.016340][ T5923] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1452.023764][T21653] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1452.034866][T21653] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1452.047130][ T5923] usb 3-1: USB disconnect, device number 89 [ 1453.007437][ T5923] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1454.064245][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 1454.311927][ T5923] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1454.320040][ T5923] usb 3-1: config 0 has no interface number 0 [ 1454.326255][ T5923] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1454.337193][ T5923] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1454.348128][ T5923] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 1454.357264][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 1454.374556][ T5923] usb 3-1: Product: syz [ 1454.411754][ T5923] usb 3-1: config 0 descriptor?? [ 1454.865420][T25440] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5299'. [ 1455.213964][T25410] No control pipe specified [ 1455.223540][ T30] audit: type=1400 audit(1760619834.006:3310): avc: denied { connect } for pid=25437 comm="syz.0.5298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1455.245941][ T30] audit: type=1400 audit(1760619834.015:3311): avc: denied { read } for pid=25437 comm="syz.0.5298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1455.265901][ T5923] usbhid 3-1:0.16: can't add hid device: -71 [ 1455.271960][ T5923] usbhid 3-1:0.16: probe with driver usbhid failed with error -71 [ 1455.289569][ T5923] usb 3-1: USB disconnect, device number 90 [ 1455.576137][T25455] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5302'. [ 1455.590054][T25455] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5302'. [ 1455.608105][T25452] binder: 25449:25452 ioctl c0306201 200000000040 returned -14 [ 1455.619324][T25452] binder: 25449:25452 ioctl c0306201 200000000540 returned -14 [ 1456.007731][T25468] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1456.214840][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 1456.221299][T23806] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1456.336156][T25480] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5310'. [ 1456.910202][T25487] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5311'. [ 1456.995510][T25487] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1457.259827][ T30] audit: type=1400 audit(1760619835.923:3312): avc: denied { mount } for pid=25491 comm="syz.0.5313" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1457.465695][ T980] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1457.775454][ T980] usb 6-1: Using ep0 maxpacket: 16 [ 1457.782956][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1457.789787][ T980] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1457.799504][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.813013][ T980] usb 6-1: config 0 descriptor?? [ 1458.450835][ T980] usbhid 6-1:0.0: can't add hid device: -71 [ 1458.457669][ T980] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1458.496354][ T980] usb 6-1: USB disconnect, device number 39 [ 1459.176687][ T30] audit: type=1400 audit(1760619837.710:3313): avc: denied { unmount } for pid=16190 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1459.299727][T25510] syzkaller0: entered promiscuous mode [ 1459.319019][T25510] syzkaller0: entered allmulticast mode [ 1459.575299][T25516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1459.684514][T25516] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5321'. [ 1459.721471][T25518] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5322'. [ 1459.737429][T25516] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1459.820648][ T5923] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1459.999234][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 1460.008275][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1460.015188][ T5923] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1460.024698][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.192484][ T5923] usb 6-1: config 0 descriptor?? [ 1460.342959][T25525] tipc: Started in network mode [ 1460.358786][T25525] tipc: Node identity 7e0938a196d8, cluster identity 4711 [ 1460.371856][T25525] tipc: Enabled bearer , priority 0 [ 1460.392083][T25525] syzkaller0: entered promiscuous mode [ 1460.401883][T25525] syzkaller0: entered allmulticast mode [ 1460.793060][T25527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5324'. [ 1460.802802][ T5923] usbhid 6-1:0.0: can't add hid device: -71 [ 1460.808818][ T5923] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1460.815909][T25527] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1460.827507][T25524] tipc: Resetting bearer [ 1460.829867][ T5923] usb 6-1: USB disconnect, device number 40 [ 1460.855863][T25524] tipc: Disabling bearer [ 1460.931439][ T30] audit: type=1326 audit(1760619839.356:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25534 comm="syz.7.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x50000 [ 1460.956833][ T30] audit: type=1326 audit(1760619839.384:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25534 comm="syz.7.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x50000 [ 1460.988609][ T30] audit: type=1326 audit(1760619839.384:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25534 comm="syz.7.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x50000 [ 1461.012044][ T30] audit: type=1326 audit(1760619839.384:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25534 comm="syz.7.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x50000 [ 1461.038520][ T30] audit: type=1326 audit(1760619839.384:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25534 comm="syz.7.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x50000 [ 1461.062281][ T30] audit: type=1326 audit(1760619839.384:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25534 comm="syz.7.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x50000 [ 1461.363962][ T30] audit: type=1326 audit(1760619839.384:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25534 comm="syz.7.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x50000 [ 1461.387600][ T30] audit: type=1326 audit(1760619839.384:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25534 comm="syz.7.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x50000 [ 1461.411835][ T30] audit: type=1326 audit(1760619839.384:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25534 comm="syz.7.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x50000 [ 1461.435109][ T30] audit: type=1326 audit(1760619839.384:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25534 comm="syz.7.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe898eec9 code=0x50000 [ 1461.901998][ T5923] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1462.074490][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.095630][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1462.125342][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1462.245047][ T5923] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1462.280724][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.345176][ T5923] usb 3-1: Product: syz [ 1462.349375][ T5923] usb 3-1: Manufacturer: syz [ 1462.374293][T25565] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5333'. [ 1462.398803][ T5923] usb 3-1: SerialNumber: syz [ 1462.518317][ T5923] usb 3-1: config 0 descriptor?? [ 1463.900129][T25576] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1463.906679][T25576] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1463.947380][T25576] vhci_hcd vhci_hcd.0: Device attached [ 1463.984472][T25578] vhci_hcd: connection closed [ 1463.986396][ T13] vhci_hcd: stop threads [ 1464.008120][ T13] vhci_hcd: release socket [ 1464.021265][ T13] vhci_hcd: disconnect device [ 1464.521874][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1464.531450][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1464.550686][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1464.559546][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1464.568994][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1464.630515][T25587] wg0 speed is unknown, defaulting to 1000 [ 1464.671239][T21653] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1464.852803][T21653] usb 8-1: Using ep0 maxpacket: 16 [ 1465.286316][ T5923] uvcvideo 3-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1465.325078][T21653] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1465.331731][T21653] usb 8-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1465.359950][ T5923] uvcvideo 3-1:0.0: No valid video chain found. [ 1465.382890][ T5923] usb 3-1: USB disconnect, device number 91 [ 1465.388945][T21653] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.420666][T21653] usb 8-1: config 0 descriptor?? [ 1465.456286][T25608] syz_tun: entered allmulticast mode [ 1465.466023][T25587] chnl_net:caif_netlink_parms(): no params data found [ 1466.189482][T25614] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5346'. [ 1466.398246][T21653] usbhid 8-1:0.0: can't add hid device: -71 [ 1466.404379][T21653] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1466.414382][T21653] usb 8-1: USB disconnect, device number 21 [ 1466.468115][T25587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.490619][T25587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.497951][T25587] bridge_slave_0: entered allmulticast mode [ 1466.511619][ T52] Bluetooth: hci3: connection err: -111 [ 1466.529258][T25587] bridge_slave_0: entered promiscuous mode [ 1466.537440][T25587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.544903][T25587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.563503][T25587] bridge_slave_1: entered allmulticast mode [ 1466.570210][T25587] bridge_slave_1: entered promiscuous mode [ 1466.625576][T25587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.642207][T25587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1466.736523][ T52] Bluetooth: hci4: command tx timeout [ 1466.781858][T25587] team0: Port device team_slave_0 added [ 1466.800907][T25587] team0: Port device team_slave_1 added [ 1466.866003][T25587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.875753][T25587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.912712][T25587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.925954][T25587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.934665][T25587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1467.360731][T25628] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1467.748145][T25587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.964242][T25587] hsr_slave_0: entered promiscuous mode [ 1467.975323][T25587] hsr_slave_1: entered promiscuous mode [ 1467.985469][T25587] debugfs: 'hsr0' already exists in 'hsr' [ 1467.994278][T25587] Cannot create hsr debugfs directory [ 1468.252378][T21653] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1468.426035][T21653] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1468.591431][T21653] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1468.656982][T21653] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1468.685984][T21653] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1468.707984][T21653] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1468.724547][T21653] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1468.747200][T25587] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1468.753922][T21653] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1468.762195][T21653] usb 8-1: Product: syz [ 1468.766413][T21653] usb 8-1: Manufacturer: syz [ 1468.779643][T21653] cdc_wdm 8-1:1.0: skipping garbage [ 1468.785279][T21653] cdc_wdm 8-1:1.0: skipping garbage [ 1468.785845][T25587] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1468.800341][T21653] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1468.803081][T25587] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1468.806361][T21653] cdc_wdm 8-1:1.0: Unknown control protocol [ 1468.823718][T25587] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1468.892996][T25587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1468.909718][T25587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1468.920476][T14786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.927579][T14786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1468.940013][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.947192][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.963999][ T52] Bluetooth: hci4: command tx timeout [ 1468.996954][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1468.996972][ T30] audit: type=1400 audit(1760619846.896:3385): avc: denied { read write } for pid=25633 comm="syz.7.5351" name="cdc-wdm0" dev="devtmpfs" ino=3928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1469.034097][ T30] audit: type=1400 audit(1760619846.896:3386): avc: denied { open } for pid=25633 comm="syz.7.5351" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1469.162428][T25587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.229571][ T5923] usb 8-1: USB disconnect, device number 22 [ 1469.910122][T25587] veth0_vlan: entered promiscuous mode [ 1469.914335][T25587] veth1_vlan: entered promiscuous mode [ 1469.946405][T25587] veth0_macvtap: entered promiscuous mode [ 1469.948617][T25587] veth1_macvtap: entered promiscuous mode [ 1469.976394][T25587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1469.982880][T25587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1470.005508][ T2984] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.016234][ T2984] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.016273][ T2984] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.016304][ T2984] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.155598][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.174581][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.221322][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.229306][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.311288][T25686] vlan2: entered allmulticast mode [ 1470.317891][T25686] bond0: entered allmulticast mode [ 1470.323038][T25686] bond_slave_0: entered allmulticast mode [ 1470.329855][T25686] bond_slave_1: entered allmulticast mode [ 1470.504669][ T5923] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1470.678998][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 1470.710852][ T5886] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1470.924770][ T5923] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1470.939685][ T5923] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1470.950203][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.959942][ T5923] usb 6-1: Product: syz [ 1470.964294][ T5923] usb 6-1: Manufacturer: syz [ 1470.969304][ T5923] usb 6-1: SerialNumber: syz [ 1470.993699][ T5886] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.004846][ T5886] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1471.020162][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.035791][ T5886] usb 9-1: config 0 descriptor?? [ 1471.060676][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 1471.195319][ T52] Bluetooth: hci4: command tx timeout [ 1471.425374][T25682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.446539][T25699] befs: (nullb0): invalid magic header [ 1471.674989][T25682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.711494][ T5923] cdc_ncm 6-1:1.0: bind() failure [ 1471.723306][ T5923] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1471.853815][ T5923] cdc_ncm 6-1:1.1: bind() failure [ 1471.876543][ T5923] usb 6-1: USB disconnect, device number 41 [ 1471.891718][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1471.993802][ T5886] pwc: recv_control_msg error -32 req 02 val 2700 [ 1472.028065][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1472.308499][ T5886] pwc: recv_control_msg error -32 req 04 val 1000 [ 1472.339880][ T5886] pwc: recv_control_msg error -32 req 04 val 1300 [ 1472.351082][ T5886] pwc: recv_control_msg error -32 req 04 val 1400 [ 1472.367314][ T5886] pwc: recv_control_msg error -32 req 02 val 2000 [ 1472.376139][ T5886] pwc: recv_control_msg error -32 req 02 val 2100 [ 1473.405401][ T52] Bluetooth: hci4: command tx timeout [ 1473.639018][ T5886] pwc: recv_control_msg error -32 req 02 val 2500 [ 1473.681795][ T5886] pwc: recv_control_msg error -32 req 02 val 2400 [ 1473.739412][T25712] tmpfs: Bad value for 'mpol' [ 1473.749914][ T5886] pwc: recv_control_msg error -32 req 02 val 2600 [ 1473.786381][ T5886] pwc: recv_control_msg error -32 req 02 val 2900 [ 1474.093875][ T5886] pwc: recv_control_msg error -71 req 04 val 1100 [ 1474.131176][ T5886] pwc: recv_control_msg error -71 req 04 val 1200 [ 1474.290906][ T5886] pwc: Registered as video103. [ 1474.478246][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input84 [ 1474.534092][ T5886] usb 9-1: USB disconnect, device number 2 [ 1475.655148][T25759] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5381'. [ 1476.729939][T16216] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1477.606609][T16216] usb 9-1: Using ep0 maxpacket: 8 [ 1477.615554][T16216] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 1477.625971][T16216] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.634129][T16216] usb 9-1: Product: syz [ 1477.638395][T16216] usb 9-1: Manufacturer: syz [ 1477.643064][T16216] usb 9-1: SerialNumber: syz [ 1477.667883][T16216] usb 9-1: config 0 descriptor?? [ 1477.674872][T16216] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 1477.688464][T16216] dvb-usb: bulk message failed: -22 (2/0) [ 1477.694456][T16216] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1477.705194][T16216] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 1477.772554][T16216] usb 9-1: media controller created [ 1477.796847][T16216] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1477.870739][T25782] tipc: Started in network mode [ 1477.875907][T25782] tipc: Node identity ea9d2e2c1062, cluster identity 4711 [ 1477.883425][T25782] tipc: Enabled bearer , priority 0 [ 1477.890765][T25782] syzkaller0: entered promiscuous mode [ 1477.896751][T25782] syzkaller0: entered allmulticast mode [ 1477.913876][T25782] tipc: Resetting bearer [ 1477.924310][T25781] tipc: Resetting bearer [ 1477.937930][T25781] tipc: Disabling bearer [ 1477.971078][T16216] dvb-usb: bulk message failed: -22 (1/0) [ 1477.976888][T16216] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 1478.026266][T25784] binder: BINDER_SET_CONTEXT_MGR already set [ 1478.032251][T25784] binder: 25783:25784 ioctl 4018620d 200000000040 returned -16 [ 1478.083692][T16216] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input85 [ 1478.099961][T16216] dvb-usb: schedule remote query interval to 50 msecs. [ 1478.110386][T16216] dvb-usb: bulk message failed: -22 (2/0) [ 1478.137843][T16216] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 1478.179456][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 1478.189369][ T5886] dvb-usb: error while querying for an remote control event. [ 1478.239349][T16216] usb 9-1: USB disconnect, device number 3 [ 1478.433527][T16216] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 1478.948699][T25801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5391'. [ 1480.525134][ T5923] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1480.942005][T21653] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1480.989624][ T5923] usb 9-1: Using ep0 maxpacket: 8 [ 1481.006907][ T5923] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1481.025907][ T5923] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1481.091617][ T5923] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1481.270066][ T5923] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1481.300581][T21653] usb 8-1: Using ep0 maxpacket: 16 [ 1481.380373][ T980] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1481.393707][T21653] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1481.406622][ T5923] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1481.448153][T21653] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1481.458005][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.488111][T21653] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1481.607233][T21653] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1481.662416][ T980] usb 3-1: device descriptor read/64, error -71 [ 1481.678740][T21653] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1481.688996][T21653] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1481.695870][T21653] usb 8-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1481.706011][T21653] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.722605][T21653] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 1481.835715][ T5923] usb 9-1: GET_CAPABILITIES returned 0 [ 1481.851106][ T5923] usbtmc 9-1:16.0: can't read capabilities [ 1481.915480][ T980] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1481.990012][T21653] ums-sddr09 8-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1482.005246][T21653] usb 8-1: USB disconnect, device number 23 [ 1482.064505][ T980] usb 3-1: device descriptor read/64, error -71 [ 1482.092723][ T5886] usb 9-1: USB disconnect, device number 4 [ 1482.182553][ T980] usb usb3-port1: attempt power cycle [ 1482.556555][ T980] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1482.599531][ T980] usb 3-1: device descriptor read/8, error -71 [ 1482.629226][T25859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1482.704840][T25859] ptrace attach of "./syz-executor exec"[23551] was attempted by " ÿ\x07  ‚@ ÿÿ › ÿÿ “ ÿÿ û ÿÿ ó ÿÿ ›@ ÿÿ “@ ÿÿ û@ ÿÿ ó@ ÿÿ › ÿÿ “@ ÿÿ û ÿÿ ó@ ‘¨ „  ƒ ‘0 Œ À ‹ ‘P Œ ÿ = ÿ > ÿ ? á ÿ H ‰ ÿ J ‰ ÿ L ‰ ÿ N ‰ ÿ : ‰ ÿ < é [ 1482.756485][ T30] audit: type=1400 audit(1760619859.767:3387): avc: denied { append } for pid=25861 comm="syz.8.5409" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1482.848003][ C1] vkms_vblank_simulate: vblank timer overrun [ 1482.951840][ T980] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1482.976781][ T980] usb 3-1: device descriptor read/8, error -71 [ 1483.169346][ T980] usb usb3-port1: unable to enumerate USB device [ 1483.518445][ T980] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1484.215105][ T980] usb 9-1: config 0 has an invalid interface number: 16 but max is 0 [ 1484.223339][ T980] usb 9-1: config 0 has no interface number 0 [ 1484.229543][ T980] usb 9-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.254658][ T980] usb 9-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1484.299946][ T980] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 1484.309887][ T980] usb 9-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 1484.317197][T25890] input: syz1 as /devices/virtual/input/input86 [ 1484.339663][ T980] usb 9-1: Product: syz [ 1484.370044][ T980] usb 9-1: config 0 descriptor?? [ 1484.597076][T25894] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1484.899486][ T980] usbhid 9-1:0.16: can't add hid device: -71 [ 1484.905680][ T980] usbhid 9-1:0.16: probe with driver usbhid failed with error -71 [ 1484.944777][ T980] usb 9-1: USB disconnect, device number 5 [ 1486.578808][ T30] audit: type=1400 audit(1760619863.349:3388): avc: denied { sys_admin } for pid=25917 comm="syz.7.5423" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1487.219769][T25923] tmpfs: Bad value for 'nr_blocks' [ 1487.226984][ T30] audit: type=1400 audit(1760619863.948:3389): avc: denied { map } for pid=25921 comm="syz.8.5424" path="socket:[85588]" dev="sockfs" ino=85588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1487.250979][ C1] vkms_vblank_simulate: vblank timer overrun [ 1488.216088][T25938] netlink: 'syz.5.5428': attribute type 1 has an invalid length. [ 1488.801362][T25942] netlink: 'syz.6.5429': attribute type 6 has an invalid length. [ 1488.809979][T25942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5429'. [ 1488.821353][T25942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.163530][T25942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1490.356582][T25958] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5434'. [ 1490.723884][T16216] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1490.895011][T16216] usb 3-1: device descriptor read/64, error -71 [ 1491.074648][T25970] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5439'. [ 1491.090779][T25970] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1491.112662][T25970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5439'. [ 1491.115127][ T30] audit: type=1400 audit(1760619867.587:3390): avc: denied { read } for pid=25971 comm="syz.8.5440" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1491.144839][ T30] audit: type=1400 audit(1760619867.605:3391): avc: denied { open } for pid=25971 comm="syz.8.5440" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1491.162226][T16216] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1491.322731][T16216] usb 3-1: device descriptor read/64, error -71 [ 1491.440917][T16216] usb usb3-port1: attempt power cycle [ 1491.446869][ T30] audit: type=1400 audit(1760619867.886:3392): avc: denied { write } for pid=25974 comm="syz.5.5441" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1491.879489][T16216] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1491.900586][T16216] usb 3-1: device descriptor read/8, error -71 [ 1492.156543][T16216] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1492.188920][T16216] usb 3-1: device descriptor read/8, error -71 [ 1492.306878][T16216] usb usb3-port1: unable to enumerate USB device [ 1498.229533][T16216] wg0 speed is unknown, defaulting to 1000 [ 1498.235584][T16216] syz2: Port: 1 Link DOWN [ 1498.259768][T23694] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.342011][T23694] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.381746][T23694] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.446974][T23694] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.888610][T23694] bond0 (unregistering): left promiscuous mode [ 1498.895964][T23694] bond_slave_0: left promiscuous mode [ 1498.901685][T23694] bond_slave_1: left promiscuous mode [ 1498.908578][T23694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1498.919135][T23694] bond_slave_0: left allmulticast mode [ 1498.928628][T23694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.937946][T23694] bond_slave_1: left allmulticast mode [ 1498.945275][T23694] bond0 (unregistering): Released all slaves [ 1499.026746][T23694] tipc: Left network mode [ 1499.339379][T23694] hsr_slave_0: left promiscuous mode [ 1499.346950][T23694] hsr_slave_1: left promiscuous mode [ 1499.353030][T23694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1499.360405][T23694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1499.371691][T23694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.380693][T23694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.405137][T23694] veth1_macvtap: left promiscuous mode [ 1499.410682][T23694] veth0_macvtap: left promiscuous mode [ 1499.416908][T23694] veth1_vlan: left promiscuous mode [ 1499.422208][T23694] veth0_vlan: left promiscuous mode [ 1499.874535][T23694] team0 (unregistering): Port device team_slave_1 removed [ 1499.908543][T23694] team0 (unregistering): Port device team_slave_0 removed [ 1500.543530][T23694] IPVS: stop unused estimator thread 0... [ 1544.625746][ T30] audit: type=1400 audit(1760619917.640:3393): avc: denied { listen } for pid=26121 comm="syz.8.5446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1545.353571][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1545.621722][T26145] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5454'. [ 1546.468165][T26158] sctp: [Deprecated]: syz.8.5458 (pid 26158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1546.468165][T26158] Use struct sctp_sack_info instead [ 1546.468414][T26156] tipc: Enabled bearer , priority 0 [ 1546.493389][T26158] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5458'. [ 1546.505335][T26158] netlink: 'syz.8.5458': attribute type 7 has an invalid length. [ 1546.514300][T26158] netlink: 'syz.8.5458': attribute type 8 has an invalid length. [ 1546.564982][T26155] tipc: Enabling of bearer rejected, already enabled [ 1546.574944][T26161] syzkaller0: entered promiscuous mode [ 1546.580423][T26161] syzkaller0: entered allmulticast mode [ 1546.580498][T26158] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5458'. [ 1546.612987][T26155] tipc: Resetting bearer [ 1547.237448][T26156] tipc: Resetting bearer [ 1547.253631][T26156] tipc: Disabling bearer [ 1548.898782][ T30] audit: type=1326 audit(1760619921.625:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1549.264606][ T30] audit: type=1326 audit(1760619921.625:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1549.288119][ C1] vkms_vblank_simulate: vblank timer overrun [ 1549.369287][ T30] audit: type=1326 audit(1760619921.690:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1549.396042][ C1] vkms_vblank_simulate: vblank timer overrun [ 1549.654797][ T30] audit: type=1326 audit(1760619921.690:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1549.678275][ C1] vkms_vblank_simulate: vblank timer overrun [ 1549.705859][ T30] audit: type=1326 audit(1760619921.690:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1549.733642][ T30] audit: type=1326 audit(1760619921.896:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1e6b38d97f code=0x7ffc0000 [ 1549.734363][T26216] bond0: (slave rose0): Releasing backup interface [ 1549.759766][ T30] audit: type=1326 audit(1760619921.896:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1549.787327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1549.884047][ T30] audit: type=1326 audit(1760619921.896:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1549.908901][ T30] audit: type=1326 audit(1760619921.896:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1549.932351][ C1] vkms_vblank_simulate: vblank timer overrun [ 1550.346268][ T30] audit: type=1326 audit(1760619921.896:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1550.374031][ T30] audit: type=1326 audit(1760619921.905:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1550.408085][T26224] xt_l2tp: unknown flags: 51 [ 1550.429249][ T30] audit: type=1326 audit(1760619921.905:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1550.481078][ T30] audit: type=1326 audit(1760619921.915:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1550.527645][ T30] audit: type=1326 audit(1760619921.915:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1550.551614][ T30] audit: type=1326 audit(1760619921.952:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1550.901445][ T5923] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1550.981623][ T30] audit: type=1326 audit(1760619921.952:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1551.130213][ T5923] usb 9-1: Using ep0 maxpacket: 16 [ 1551.150283][ T5923] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1551.157583][ T5923] usb 9-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1551.275517][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.340447][ T5923] usb 9-1: config 0 descriptor?? [ 1551.366628][ T30] audit: type=1326 audit(1760619921.952:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1551.397048][T26239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5481'. [ 1551.406060][ T30] audit: type=1326 audit(1760619921.952:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1551.406109][ T30] audit: type=1326 audit(1760619921.952:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26205 comm="syz.6.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1551.689501][ T5923] usbhid 9-1:0.0: can't add hid device: -71 [ 1551.753196][ T5923] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1551.914733][ T5923] usb 9-1: USB disconnect, device number 6 [ 1551.965715][T26252] input: syz1 as /devices/virtual/input/input87 [ 1552.425708][T26264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26264 comm=syz.7.5486 [ 1554.101012][T26272] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1554.107532][T26272] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1554.129933][T26272] vhci_hcd vhci_hcd.0: Device attached [ 1554.393672][T26275] vhci_hcd: connection closed [ 1554.395458][ T5979] vhci_hcd: stop threads [ 1554.407126][ T5979] vhci_hcd: release socket [ 1554.418888][T18598] usb 46-1: SetAddress Request (2) to port 0 [ 1554.425334][T18598] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1554.430976][ T5979] vhci_hcd: disconnect device [ 1554.764092][T26299] comedi comedi2: comedi_config --init_data is deprecated [ 1555.516325][T26314] FAULT_INJECTION: forcing a failure. [ 1555.516325][T26314] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.573214][T26314] CPU: 0 UID: 0 PID: 26314 Comm: syz.5.5494 Not tainted syzkaller #0 PREEMPT(full) [ 1555.573241][T26314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1555.573256][T26314] Call Trace: [ 1555.573263][T26314] [ 1555.573271][T26314] dump_stack_lvl+0x16c/0x1f0 [ 1555.573298][T26314] should_fail_ex+0x512/0x640 [ 1555.573320][T26314] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1555.573345][T26314] should_failslab+0xc2/0x120 [ 1555.573371][T26314] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1555.573392][T26314] ? __alloc_skb+0x2b2/0x380 [ 1555.573417][T26314] ? __alloc_skb+0x2b2/0x380 [ 1555.573433][T26314] ? __pfx_avc_has_perm+0x10/0x10 [ 1555.573449][T26314] __alloc_skb+0x2b2/0x380 [ 1555.573468][T26314] ? __pfx___alloc_skb+0x10/0x10 [ 1555.573486][T26314] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1555.573508][T26314] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1555.573538][T26314] netlink_alloc_large_skb+0x69/0x140 [ 1555.573564][T26314] netlink_sendmsg+0x698/0xdd0 [ 1555.573590][T26314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1555.573623][T26314] ____sys_sendmsg+0xa98/0xc70 [ 1555.573650][T26314] ? copy_msghdr_from_user+0x10a/0x160 [ 1555.573670][T26314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1555.573708][T26314] ___sys_sendmsg+0x134/0x1d0 [ 1555.573730][T26314] ? __pfx____sys_sendmsg+0x10/0x10 [ 1555.573749][T26314] ? __lock_acquire+0x622/0x1c90 [ 1555.573803][T26314] __sys_sendmsg+0x16d/0x220 [ 1555.573824][T26314] ? __pfx___sys_sendmsg+0x10/0x10 [ 1555.573868][T26314] do_syscall_64+0xcd/0xfa0 [ 1555.573891][T26314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.573910][T26314] RIP: 0033:0x7f36baf8eec9 [ 1555.573924][T26314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1555.573942][T26314] RSP: 002b:00007f36bbe02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1555.573959][T26314] RAX: ffffffffffffffda RBX: 00007f36bb1e5fa0 RCX: 00007f36baf8eec9 [ 1555.573970][T26314] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1555.573981][T26314] RBP: 00007f36bbe02090 R08: 0000000000000000 R09: 0000000000000000 [ 1555.573991][T26314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1555.574001][T26314] R13: 00007f36bb1e6038 R14: 00007f36bb1e5fa0 R15: 00007ffc050e0c28 [ 1555.574027][T26314] [ 1556.182976][T26325] No control pipe specified [ 1558.221520][T26358] IPVS: ip_vs_add_dest(): server weight less than zero [ 1558.573575][ T52] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1559.568606][T21653] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1559.886114][T18598] usb 46-1: device descriptor read/8, error -110 [ 1560.010828][T21653] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1560.168103][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1560.168126][ T30] audit: type=1400 audit(1760619932.092:3459): avc: denied { read } for pid=26395 comm="syz.7.5514" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1560.311009][T18598] usb usb46-port1: attempt power cycle [ 1560.533651][ T30] audit: type=1400 audit(1760619932.092:3460): avc: denied { open } for pid=26395 comm="syz.7.5514" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1560.908809][T18598] usb usb46-port1: unable to enumerate USB device [ 1561.792989][T26419] fuse: Unknown parameter 'euid<00000000000000000000' [ 1563.113183][ T30] audit: type=1400 audit(1760619934.917:3461): avc: denied { listen } for pid=26434 comm="syz.7.5524" path="/121/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1563.180227][ T30] audit: type=1400 audit(1760619935.001:3462): avc: denied { read } for pid=26437 comm="syz.6.5525" path="socket:[86516]" dev="sockfs" ino=86516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1563.654068][T26451] kernel read not supported for file /file2 (pid: 26451 comm: syz.5.5528) [ 1563.668034][ T30] audit: type=1800 audit(1760619935.459:3463): pid=26451 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.5528" name="file2" dev="mqueue" ino=87469 res=0 errno=0 [ 1563.668358][T26451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5528'. [ 1563.705677][T26451] netlink: 'syz.5.5528': attribute type 5 has an invalid length. [ 1563.714326][T26451] netlink: 'syz.5.5528': attribute type 8 has an invalid length. [ 1563.737104][T26451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5528'. [ 1563.752401][T26451] geneve2: entered promiscuous mode [ 1563.757986][T26451] geneve2: entered allmulticast mode [ 1563.765463][T14788] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1563.822844][T14788] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1563.840857][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5529'. [ 1563.900573][T14788] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1563.915239][T14788] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1563.945609][T26461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5529'. [ 1565.451344][T21653] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1565.698592][T21653] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.728166][T21653] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1565.762905][T21653] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1565.796118][T21653] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1565.814685][T21653] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.144765][T21653] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1566.157920][T21653] usb 9-1: invalid MIDI out EP 0 [ 1566.374847][T21653] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1566.408025][T21653] usb 9-1: USB disconnect, device number 7 [ 1566.434945][T26486] udevd[26486]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1566.513624][T26491] fuse: Unknown parameter 'r¡3IA' [ 1566.617285][T26487] netlink: 'syz.6.5539': attribute type 21 has an invalid length. [ 1566.664483][T26487] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5539'. [ 1567.579664][T26500] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5541'. [ 1568.111359][T26504] input: syz1 as /devices/virtual/input/input90 [ 1568.378553][T26509] overlayfs: missing 'lowerdir' [ 1568.516966][T26506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1569.540216][T26529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5550'. [ 1570.259871][T26548] overlayfs: missing 'workdir' [ 1570.618660][ T30] audit: type=1400 audit(1760619941.605:3464): avc: denied { setopt } for pid=26537 comm="syz.6.5553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1570.792029][T26556] IPv6: NLM_F_CREATE should be specified when creating new route [ 1570.846652][T26556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1570.854539][T26556] IPv6: NLM_F_CREATE should be set when creating new route [ 1572.438496][ T30] audit: type=1400 audit(1760619943.663:3465): avc: denied { map } for pid=26585 comm="syz.8.5569" path="socket:[86976]" dev="sockfs" ino=86976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1572.589270][ T5886] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1572.774878][ T5886] usb 8-1: Using ep0 maxpacket: 8 [ 1572.813945][ T5886] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 1572.831432][ T5886] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1572.841314][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.850211][ T980] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1572.850590][ T5886] usb 8-1: Product: syz [ 1572.862199][ T5886] usb 8-1: Manufacturer: syz [ 1572.866893][ T5886] usb 8-1: SerialNumber: syz [ 1572.883454][ T5886] usb 8-1: config 0 descriptor?? [ 1572.899810][ T5886] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1572.910867][ T5886] usb 8-1: setting power ON [ 1572.917670][ T5886] dvb-usb: bulk message failed: -22 (2/0) [ 1572.930261][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1572.940285][ T5886] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1572.949043][ T5886] usb 8-1: media controller created [ 1573.603980][T26604] Bluetooth: MGMT ver 1.23 [ 1573.704431][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 1573.709581][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1573.719760][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1573.728676][ T980] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1573.736096][ T5886] usb 8-1: selecting invalid altsetting 6 [ 1573.744316][ T5886] usb 8-1: digital interface selection failed (-22) [ 1573.745744][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.760359][ T5886] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1573.930879][ T5886] usb 8-1: setting power OFF [ 1573.938248][ T5886] dvb-usb: bulk message failed: -22 (2/0) [ 1573.944063][ T5886] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1573.953490][ T5886] (NULL device *): no alternate interface [ 1574.022695][ T980] usb 3-1: config 0 descriptor?? [ 1574.092547][ T5886] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1575.246856][ T980] usbhid 3-1:0.0: can't add hid device: -71 [ 1575.278901][T26619] 9pnet_fd: Insufficient options for proto=fd [ 1575.309643][ T980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1575.368817][ T980] usb 3-1: USB disconnect, device number 100 [ 1575.415831][T26623] netlink: 'syz.8.5578': attribute type 32 has an invalid length. [ 1576.396223][T26643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1576.636807][T18598] usb 8-1: USB disconnect, device number 24 [ 1577.477844][T18598] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1578.932214][T18598] usb 8-1: Using ep0 maxpacket: 16 [ 1579.189226][T18598] usb 8-1: config 8 has an invalid interface number: 206 but max is 0 [ 1579.213224][T18598] usb 8-1: config 8 has no interface number 0 [ 1579.219346][T18598] usb 8-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1579.231240][T18598] usb 8-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 1579.253965][T18598] usb 8-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1579.330578][T26672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1579.422394][T18598] usb 8-1: config 8 interface 206 has no altsetting 0 [ 1579.448675][T18598] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1579.468954][T18598] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.476966][T18598] usb 8-1: Product: syz [ 1579.524119][T26686] binder: 26678:26686 unknown command 0 [ 1579.529677][T26686] binder: 26678:26686 ioctl c0306201 200000000080 returned -22 [ 1579.538725][ T30] audit: type=1400 audit(1760619950.295:3466): avc: denied { call } for pid=26678 comm="syz.2.5596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1579.542813][T18598] usb 8-1: Manufacturer: syz [ 1579.569197][T18598] usb 8-1: SerialNumber: syz [ 1579.841176][ T5886] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1579.970663][T18598] garmin_gps 8-1:8.206: Garmin GPS usb/tty converter detected [ 1580.006541][T18598] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1580.015170][ T5886] usb 9-1: Using ep0 maxpacket: 8 [ 1580.021904][ T5886] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1580.032122][ T5886] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1580.041317][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.049508][ T5886] usb 9-1: Product: syz [ 1580.145546][ T5886] usb 9-1: Manufacturer: syz [ 1580.152793][ T5886] usb 9-1: SerialNumber: syz [ 1580.157678][T18598] usb 8-1: USB disconnect, device number 25 [ 1580.201127][ T5886] usb 9-1: config 0 descriptor?? [ 1580.613039][T18598] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1580.630623][ T5886] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1580.638810][ T5886] usb 9-1: setting power ON [ 1580.645638][T18598] garmin_gps 8-1:8.206: device disconnected [ 1580.651629][ T5886] dvb-usb: bulk message failed: -22 (2/0) [ 1581.025374][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1581.130625][ T5886] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1581.163258][ T5886] usb 9-1: media controller created [ 1581.214208][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1581.374525][ T5886] usb 9-1: selecting invalid altsetting 6 [ 1581.388034][ T5886] usb 9-1: digital interface selection failed (-22) [ 1582.766506][ T5886] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1582.777339][ T5886] usb 9-1: setting power OFF [ 1582.782082][ T5886] dvb-usb: bulk message failed: -22 (2/0) [ 1582.787987][ T5886] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1582.863242][ T5886] (NULL device *): no alternate interface [ 1582.937713][ T5886] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1583.938613][ T5886] usb 9-1: USB disconnect, device number 8 [ 1584.822618][T22626] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1584.942177][T26738] netlink: 'syz.6.5610': attribute type 12 has an invalid length. [ 1584.950182][T26738] netlink: 'syz.6.5610': attribute type 29 has an invalid length. [ 1584.958280][T26738] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5610'. [ 1584.967536][T26738] netlink: 51 bytes leftover after parsing attributes in process `syz.6.5610'. [ 1585.051910][T22626] usb 8-1: config 0 has no interfaces? [ 1585.056965][T26738] netlink: 'syz.6.5610': attribute type 12 has an invalid length. [ 1585.065498][T26738] netlink: 'syz.6.5610': attribute type 29 has an invalid length. [ 1585.073603][T26738] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5610'. [ 1585.084367][T26738] netlink: 51 bytes leftover after parsing attributes in process `syz.6.5610'. [ 1585.218572][T22626] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1585.331039][T22626] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.481309][T22626] usb 8-1: Product: syz [ 1585.485639][T22626] usb 8-1: Manufacturer: syz [ 1585.490324][T22626] usb 8-1: SerialNumber: syz [ 1585.513049][T22626] usb 8-1: config 0 descriptor?? [ 1585.750427][T18598] usb 8-1: USB disconnect, device number 26 [ 1585.992380][T26753] random: crng reseeded on system resumption [ 1586.475969][T26764] input: syz1 as /devices/virtual/input/input93 [ 1587.140015][T26766] overlayfs: missing 'lowerdir' [ 1588.613815][T26770] pim6reg: entered allmulticast mode [ 1589.498791][T26810] netlink: 'syz.5.5631': attribute type 15 has an invalid length. [ 1589.580170][T26810] netlink: 410 bytes leftover after parsing attributes in process `syz.5.5631'. [ 1589.615236][T26810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1590.975068][T26819] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5633'. [ 1591.924939][T26834] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1592.326799][T26833] 9pnet_fd: Insufficient options for proto=fd [ 1592.621670][T26848] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5638'. [ 1592.975663][ T5886] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1593.031871][T26852] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5641'. [ 1593.311083][ T5886] usb 9-1: device descriptor read/64, error -71 [ 1593.530065][ T30] audit: type=1326 audit(1760619963.390:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26857 comm="syz.2.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdabb58eec9 code=0x7ffc0000 [ 1593.569862][ T5886] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1593.645706][ T30] audit: type=1326 audit(1760619963.390:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26857 comm="syz.2.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fdabb58eec9 code=0x7ffc0000 [ 1593.694384][T26862] random: crng reseeded on system resumption [ 1593.703228][ T30] audit: type=1326 audit(1760619963.390:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26857 comm="syz.2.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdabb58eec9 code=0x7ffc0000 [ 1593.737649][ T30] audit: type=1326 audit(1760619963.390:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26857 comm="syz.2.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fdabb58eec9 code=0x7ffc0000 [ 1593.749296][T15348] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1593.761369][ T30] audit: type=1326 audit(1760619963.390:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26857 comm="syz.2.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdabb58eec9 code=0x7ffc0000 [ 1593.793267][ T30] audit: type=1326 audit(1760619963.390:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26857 comm="syz.2.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdabb58eec9 code=0x7ffc0000 [ 1593.797514][ T5886] usb 9-1: device descriptor read/64, error -71 [ 1593.816728][ T30] audit: type=1326 audit(1760619963.390:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26857 comm="syz.2.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdabb58eec9 code=0x7ffc0000 [ 1593.816774][ T30] audit: type=1326 audit(1760619963.390:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26857 comm="syz.2.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdabb58eec9 code=0x7ffc0000 [ 1593.816812][ T30] audit: type=1326 audit(1760619963.390:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26857 comm="syz.2.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdabb58eec9 code=0x7ffc0000 [ 1593.816852][ T30] audit: type=1326 audit(1760619963.390:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26857 comm="syz.2.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdabb58eec9 code=0x7ffc0000 [ 1593.988847][ T5886] usb usb9-port1: attempt power cycle [ 1594.059407][T15348] usb 8-1: Using ep0 maxpacket: 16 [ 1594.087938][T15348] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 1594.107602][T15348] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 1594.153311][T15348] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 1594.203379][T15348] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 1594.249999][T15348] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1594.260562][T15348] usb 8-1: config 0 has no interface number 0 [ 1594.268995][T15348] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1594.285563][T15348] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1594.296140][T15348] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1594.306048][T15348] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1594.319275][T15348] usb 8-1: config 0 interface 125 has no altsetting 0 [ 1594.326054][T15348] usb 8-1: config 0 interface 125 has no altsetting 2 [ 1594.334505][T15348] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1594.345216][T15348] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.355312][T15348] usb 8-1: Product: syz [ 1594.359602][ T5886] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1594.367987][T15348] usb 8-1: Manufacturer: syz [ 1594.372961][T15348] usb 8-1: SerialNumber: syz [ 1594.430040][T15348] usb 8-1: config 0 descriptor?? [ 1594.430150][ T5886] usb 9-1: device descriptor read/8, error -71 [ 1594.449299][T15348] usb 8-1: selecting invalid altsetting 2 [ 1594.564752][T26872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5650'. [ 1594.575565][T26872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5650'. [ 1594.690359][ T5886] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1594.712184][ T5886] usb 9-1: device descriptor read/8, error -71 [ 1594.829775][ T5886] usb usb9-port1: unable to enumerate USB device [ 1595.665906][T15348] get_1284_register timeout [ 1595.671310][T15348] uss720 8-1:0.125: probe with driver uss720 failed with error -5 [ 1595.679291][ C0] usb 8-1: async_complete: urb error -104 [ 1595.679402][ C0] usb 8-1: async_complete: urb error -104 [ 1596.145091][T26892] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5655'. [ 1598.662629][T26944] netlink: 220 bytes leftover after parsing attributes in process `syz.8.5670'. [ 1598.895986][T26946] loop6: detected capacity change from 0 to 524288000 [ 1598.961161][T23806] Bluetooth: hci4: command 0x0406 tx timeout [ 1599.025266][T15348] usb 8-1: USB disconnect, device number 27 [ 1599.479965][T15348] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 1599.562078][T26960] overlayfs: failed to resolve './file0': -2 [ 1599.776501][T15348] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.851902][T15348] usb 8-1: config 0 has no interfaces? [ 1599.930966][T15348] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1600.028317][T15348] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.159066][T15348] usb 8-1: config 0 descriptor?? [ 1600.532400][T22626] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1600.556120][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1600.556139][ T30] audit: type=1400 audit(1760619969.957:3480): avc: denied { accept } for pid=26970 comm="syz.5.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1600.556410][T26971] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5679'. [ 1600.596469][T26971] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5679'. [ 1600.609324][T26971] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1600.619481][T26971] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1600.630332][T26972] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5672'. [ 1600.847800][T22626] usb 9-1: Using ep0 maxpacket: 16 [ 1600.856702][T22626] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1600.864063][T22626] usb 9-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1600.875276][T22626] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.917229][T22626] usb 9-1: config 0 descriptor?? [ 1601.456299][T22626] usbhid 9-1:0.0: can't add hid device: -71 [ 1601.463174][T22626] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1601.480572][T26978] autofs: Unknown parameter '0x0000000000000000' [ 1601.489653][T22626] usb 9-1: USB disconnect, device number 13 [ 1601.560388][T26983] loop5: detected capacity change from 0 to 16384 [ 1601.591495][T26984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=26984 comm=syz.8.5682 [ 1602.013143][T22626] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1602.752670][T22626] usb 9-1: Using ep0 maxpacket: 8 [ 1602.779695][ T5886] usb 8-1: USB disconnect, device number 28 [ 1602.808347][T22626] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1602.842030][T22626] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1602.868757][T22626] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.886975][T22626] usb 9-1: Product: syz [ 1602.888067][ T30] audit: type=1400 audit(1760619972.136:3481): avc: denied { mounton } for pid=26995 comm="syz.7.5686" path="/143/file0" dev="autofs" ino=90120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 1602.893817][T22626] usb 9-1: Manufacturer: syz [ 1602.923137][ T30] audit: type=1400 audit(1760619972.146:3482): avc: denied { append } for pid=26995 comm="syz.7.5686" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1602.940801][T22626] usb 9-1: SerialNumber: syz [ 1602.953012][ T30] audit: type=1400 audit(1760619972.183:3483): avc: denied { ioctl } for pid=26995 comm="syz.7.5686" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1602.971106][T22626] usb 9-1: config 0 descriptor?? [ 1603.002175][T22626] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1603.073323][T22626] usb 9-1: setting power ON [ 1603.078538][T22626] dvb-usb: bulk message failed: -22 (2/0) [ 1603.088153][T22626] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1603.098262][T22626] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1603.119746][T22626] usb 9-1: media controller created [ 1603.154522][T22626] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1603.186883][T22626] usb 9-1: selecting invalid altsetting 6 [ 1603.199927][T22626] usb 9-1: digital interface selection failed (-22) [ 1603.217403][T22626] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1603.238017][T22626] usb 9-1: setting power OFF [ 1603.247744][T22626] dvb-usb: bulk message failed: -22 (2/0) [ 1603.268291][T22626] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1603.286010][ T980] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1603.294493][T22626] (NULL device *): no alternate interface [ 1603.321967][T22626] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1603.458191][ T980] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 1603.466573][ T980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.478004][ T980] usb 6-1: config 0 has no interface number 0 [ 1603.484178][ T980] usb 6-1: config 0 interface 126 has no altsetting 0 [ 1603.494371][ T980] usb 6-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 1603.518777][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.536977][ T980] usb 6-1: Product: syz [ 1603.546753][ T980] usb 6-1: Manufacturer: syz [ 1603.555777][ T980] usb 6-1: SerialNumber: syz [ 1603.567127][T27010] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1603.573656][T27010] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1603.584923][ T980] usb 6-1: config 0 descriptor?? [ 1603.593287][ T980] zaurus 6-1:0.126: More than one union descriptor, skipping ... [ 1603.605335][ T980] zaurus 6-1:0.126: skipping garbage [ 1603.621125][ T980] usb 6-1: bad CDC descriptors [ 1603.629421][T27010] vhci_hcd vhci_hcd.0: Device attached [ 1603.813919][ T980] usb 6-1: USB disconnect, device number 42 [ 1603.926769][T22626] usb 48-1: SetAddress Request (6) to port 0 [ 1603.934870][T22626] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1604.017274][T27011] vhci_hcd: connection reset by peer [ 1604.022788][ T7424] vhci_hcd: stop threads [ 1604.027131][ T7424] vhci_hcd: release socket [ 1604.031696][ T7424] vhci_hcd: disconnect device [ 1604.152778][ T30] audit: type=1326 audit(1760619973.324:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27018 comm="syz.6.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1604.177170][ T30] audit: type=1326 audit(1760619973.343:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27018 comm="syz.6.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1604.201443][ T30] audit: type=1326 audit(1760619973.343:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27018 comm="syz.6.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1604.225517][ T30] audit: type=1326 audit(1760619973.343:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27018 comm="syz.6.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1604.254130][ T30] audit: type=1326 audit(1760619973.343:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27018 comm="syz.6.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1604.277968][ T30] audit: type=1326 audit(1760619973.343:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27018 comm="syz.6.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f1e6b38eec9 code=0x7ffc0000 [ 1604.525056][T27023] 9pnet: Could not find request transport: XE}Xº^QåËÙÅÆ㛡C#/|«•-| κ@rüœPé~ rv>Ž8ƒ0ÈÜ F?YD [ 1604.803379][ T980] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1604.876134][ T5886] usb 9-1: USB disconnect, device number 14 [ 1604.910439][T27028] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1604.916982][T27028] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1604.927488][T27028] vhci_hcd vhci_hcd.0: Device attached [ 1605.037039][ T980] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1605.047823][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.097832][ T980] usb 6-1: Product: syz [ 1605.102160][ T980] usb 6-1: Manufacturer: syz [ 1605.106860][ T980] usb 6-1: SerialNumber: syz [ 1605.180124][ T980] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1605.196138][T21653] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1605.572882][T27029] vhci_hcd: connection closed [ 1605.577367][ T7424] vhci_hcd: stop threads [ 1605.587960][ T7424] vhci_hcd: release socket [ 1605.592479][ T7424] vhci_hcd: disconnect device [ 1605.597239][T15348] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1605.645044][T16216] usb 6-1: USB disconnect, device number 43 [ 1605.766761][T15348] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.776993][T15348] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1605.786066][T15348] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.795549][T15348] usb 9-1: config 0 descriptor?? [ 1605.803561][T15348] pwc: Askey VC010 type 2 USB webcam detected. [ 1606.240949][T15348] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1606.253620][T27043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1606.262207][T15348] pwc: recv_control_msg error -32 req 02 val 2700 [ 1606.269782][T15348] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1606.277277][T15348] pwc: recv_control_msg error -32 req 04 val 1000 [ 1606.285054][T15348] pwc: recv_control_msg error -32 req 04 val 1300 [ 1606.294025][T15348] pwc: recv_control_msg error -32 req 04 val 1400 [ 1606.306219][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1606.306235][ T30] audit: type=1400 audit(1760619975.335:3492): avc: denied { read } for pid=27041 comm="syz.5.5700" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1606.344261][ T30] audit: type=1400 audit(1760619975.335:3493): avc: denied { open } for pid=27041 comm="syz.5.5700" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1606.396875][T15348] pwc: recv_control_msg error -32 req 02 val 2000 [ 1606.569500][T21653] usb 6-1: Service connection timeout for: 256 [ 1606.575870][T21653] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1606.608506][T15348] pwc: recv_control_msg error -32 req 02 val 2100 [ 1606.622777][T21653] ath9k_htc: Failed to initialize the device [ 1606.652606][T15348] pwc: recv_control_msg error -32 req 04 val 1500 [ 1606.694256][T16216] usb 6-1: ath9k_htc: USB layer deinitialized [ 1606.824857][T27056] FAULT_INJECTION: forcing a failure. [ 1606.824857][T27056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1606.858095][T27056] CPU: 0 UID: 0 PID: 27056 Comm: syz.7.5704 Not tainted syzkaller #0 PREEMPT(full) [ 1606.858122][T27056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1606.858132][T27056] Call Trace: [ 1606.858142][T27056] [ 1606.858149][T27056] dump_stack_lvl+0x16c/0x1f0 [ 1606.858175][T27056] should_fail_ex+0x512/0x640 [ 1606.858201][T27056] _copy_from_user+0x2e/0xd0 [ 1606.858224][T27056] memdup_user+0x6b/0xe0 [ 1606.858247][T27056] strndup_user+0x78/0xe0 [ 1606.858270][T27056] __x64_sys_mount+0x136/0x310 [ 1606.858297][T27056] ? __pfx___x64_sys_mount+0x10/0x10 [ 1606.858323][T27056] ? getname_flags.part.0+0x1c5/0x550 [ 1606.858348][T27056] do_syscall_64+0xcd/0xfa0 [ 1606.858370][T27056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.858388][T27056] RIP: 0033:0x7f2fe898eec9 [ 1606.858403][T27056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1606.858420][T27056] RSP: 002b:00007f2fe978e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1606.858437][T27056] RAX: ffffffffffffffda RBX: 00007f2fe8be5fa0 RCX: 00007f2fe898eec9 [ 1606.858449][T27056] RDX: 0000200000000080 RSI: 00002000000012c0 RDI: 0000000000000000 [ 1606.858460][T27056] RBP: 00007f2fe978e090 R08: 0000200000000340 R09: 0000000000000000 [ 1606.858470][T27056] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1606.858481][T27056] R13: 00007f2fe8be6038 R14: 00007f2fe8be5fa0 R15: 00007ffca91b9dc8 [ 1606.858506][T27056] [ 1607.155398][T15348] pwc: recv_control_msg error -32 req 02 val 2400 [ 1607.162369][T15348] pwc: recv_control_msg error -32 req 02 val 2600 [ 1607.208954][T15348] pwc: recv_control_msg error -32 req 02 val 2900 [ 1607.217896][T15348] pwc: recv_control_msg error -32 req 02 val 2800 [ 1607.455937][T27068] autofs: Unknown parameter 'fd0x0000000000000000' [ 1607.457938][T27067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5707'. [ 1607.616614][T15348] pwc: recv_control_msg error -71 req 04 val 1200 [ 1607.625373][T15348] pwc: Registered as video103. [ 1607.637624][T15348] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input95 [ 1607.657633][T15348] usb 9-1: USB disconnect, device number 15 [ 1607.681283][ C1] ------------[ cut here ]------------ [ 1607.687240][ C1] ODEBUG: free active (active state 0) object: ffff888040f31c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1607.700535][ C1] WARNING: CPU: 1 PID: 26486 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 1607.710121][ C1] Modules linked in: [ 1607.714327][ C1] CPU: 1 UID: 0 PID: 26486 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1607.723259][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1607.733343][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1607.739145][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 f4 f1 8b 4c 89 e6 48 c7 c7 20 e9 f1 8b e8 2f de c7 fc 90 <0f> 0b 90 90 58 83 05 36 cf cf 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1607.758785][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010282 [ 1607.764867][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b6ee8 [ 1607.772838][ C1] RDX: ffff888030494900 RSI: ffffffff817b6ef5 RDI: 0000000000000001 [ 1607.780811][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1607.786025][T16216] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1607.788797][ C1] R10: 0000000000000000 R11: 0000000000009b50 R12: ffffffff8bf1efc0 [ 1607.804270][ C1] R13: ffffffff8b901fe0 R14: ffffffff8a533f10 R15: ffffc90000a08b18 [ 1607.812231][ C1] FS: 00007f4c6cded880(0000) GS:ffff888124ad9000(0000) knlGS:0000000000000000 [ 1607.821153][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1607.827711][ C1] CR2: 00007f4c6bccd170 CR3: 000000007f498000 CR4: 00000000003526f0 [ 1607.835686][ C1] Call Trace: [ 1607.838966][ C1] [ 1607.841808][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1607.847433][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1607.853235][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 1607.858775][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1607.864841][ C1] kfree+0x291/0x6d0 [ 1607.868712][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1607.873835][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1607.878918][ C1] rose_timer_expiry+0x53f/0x630 [ 1607.883844][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1607.889279][ C1] call_timer_fn+0x19a/0x620 [ 1607.893863][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1607.898953][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1607.904395][ C1] __run_timers+0x6ef/0x960 [ 1607.908887][ C1] ? __pfx___run_timers+0x10/0x10 [ 1607.913901][ C1] run_timer_base+0x114/0x190 [ 1607.918564][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1607.923741][ C1] run_timer_softirq+0x1a/0x40 [ 1607.928495][ C1] handle_softirqs+0x219/0x8e0 [ 1607.933240][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1607.938516][ C1] __irq_exit_rcu+0x109/0x170 [ 1607.943199][ C1] irq_exit_rcu+0x9/0x30 [ 1607.947422][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1607.953041][ C1] [ 1607.955945][ C1] [ 1607.958862][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1607.964827][ C1] RIP: 0010:step_into+0xe1b/0x21a0 [ 1607.969925][ C1] Code: 48 8b 75 08 4c 89 e7 e8 d3 e8 5c ff 9c 41 5c 41 81 e4 00 02 00 00 31 ff 4c 89 e6 e8 af 0a 81 ff 58 4d 85 e4 0f 85 00 04 00 00 30 0f 81 ff 4d 8d 7d 08 4c 89 f8 48 c1 e8 03 42 0f b6 0c 30 4c [ 1607.989537][ C1] RSP: 0018:ffffc9000c1ff8b8 EFLAGS: 00000293 [ 1607.995582][ C1] RAX: 0000000000000000 RBX: ffffc9000c1ffb30 RCX: ffffffff823c2b98 [ 1608.003546][ C1] RDX: ffff888030494900 RSI: ffffffff823c2ba7 RDI: 0000000000000007 [ 1608.011508][ C1] RBP: ffffc9000c1ff9b8 R08: 0000000000000007 R09: 0000000000000000 [ 1608.019465][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1608.027420][ C1] R13: ffff888031184bc0 R14: dffffc0000000000 R15: 0000000000000200 [ 1608.035384][ C1] ? step_into+0x1038/0x21a0 [ 1608.039952][ C1] ? step_into+0x1047/0x21a0 [ 1608.044530][ C1] ? step_into+0x1047/0x21a0 [ 1608.049099][ C1] ? __pfx_step_into+0x10/0x10 [ 1608.053858][ C1] ? lookup_fast+0x156/0x610 [ 1608.058443][ C1] walk_component+0xfc/0x5b0 [ 1608.063051][ C1] link_path_walk+0x627/0xe20 [ 1608.067755][ C1] path_lookupat+0x15a/0x6d0 [ 1608.072344][ C1] filename_lookup+0x224/0x5f0 [ 1608.077098][ C1] ? __pfx_filename_lookup+0x10/0x10 [ 1608.082387][ C1] ? find_held_lock+0x2b/0x80 [ 1608.087066][ C1] ? __might_fault+0xe3/0x190 [ 1608.091718][ C1] ? __might_fault+0xe3/0x190 [ 1608.096375][ C1] ? __might_fault+0x13b/0x190 [ 1608.101130][ C1] vfs_statx+0x101/0x3f0 [ 1608.105359][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 1608.110114][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 1608.115462][ C1] vfs_fstatat+0x7b/0xf0 [ 1608.119687][ C1] __do_sys_newfstatat+0x97/0x120 [ 1608.124693][ C1] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 1608.130343][ C1] ? xfd_validate_state+0x61/0x180 [ 1608.135459][ C1] do_syscall_64+0xcd/0xfa0 [ 1608.140015][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.145899][ C1] RIP: 0033:0x7f4c6c711b0a [ 1608.150313][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 1608.169923][ C1] RSP: 002b:00007ffccdeb6a38 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 1608.178325][ C1] RAX: ffffffffffffffda RBX: 00005602444472c0 RCX: 00007f4c6c711b0a [ 1608.186281][ C1] RDX: 00007ffccdeb6a40 RSI: 00007ffccdeb6ad0 RDI: 00000000ffffff9c [ 1608.194241][ C1] RBP: 0000560244441c20 R08: 00005602444472c0 R09: 0000000000000000 [ 1608.202189][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 0000560244441d10 [ 1608.210147][ C1] R13: 00007ffccdeb6ad0 R14: 00005602276bbca4 R15: 00005602276bbbcc [ 1608.218133][ C1] [ 1608.221127][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1608.228379][ C1] CPU: 1 UID: 0 PID: 26486 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1608.237283][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1608.247308][ C1] Call Trace: [ 1608.250559][ C1] [ 1608.253375][ C1] dump_stack_lvl+0x3d/0x1f0 [ 1608.257943][ C1] vpanic+0x640/0x6f0 [ 1608.261900][ C1] ? debug_print_object+0x1a2/0x2b0 [ 1608.267075][ C1] panic+0xca/0xd0 [ 1608.270768][ C1] ? __pfx_panic+0x10/0x10 [ 1608.275161][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 1608.280246][ C1] check_panic_on_warn+0xab/0xb0 [ 1608.285158][ C1] __warn+0xf6/0x3c0 [ 1608.289027][ C1] ? debug_print_object+0x1a2/0x2b0 [ 1608.294200][ C1] report_bug+0x3c3/0x580 [ 1608.298499][ C1] ? debug_print_object+0x1a2/0x2b0 [ 1608.303671][ C1] handle_bug+0x184/0x210 [ 1608.307981][ C1] exc_invalid_op+0x17/0x50 [ 1608.312458][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1608.317278][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1608.323057][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 f4 f1 8b 4c 89 e6 48 c7 c7 20 e9 f1 8b e8 2f de c7 fc 90 <0f> 0b 90 90 58 83 05 36 cf cf 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1608.342636][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010282 [ 1608.348674][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b6ee8 [ 1608.356616][ C1] RDX: ffff888030494900 RSI: ffffffff817b6ef5 RDI: 0000000000000001 [ 1608.364561][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1608.372502][ C1] R10: 0000000000000000 R11: 0000000000009b50 R12: ffffffff8bf1efc0 [ 1608.380444][ C1] R13: ffffffff8b901fe0 R14: ffffffff8a533f10 R15: ffffc90000a08b18 [ 1608.388388][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1608.394000][ C1] ? __warn_printk+0x198/0x350 [ 1608.398736][ C1] ? __warn_printk+0x1a5/0x350 [ 1608.403474][ C1] ? debug_print_object+0x1a1/0x2b0 [ 1608.408645][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1608.414254][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1608.420049][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 1608.425569][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1608.431614][ C1] kfree+0x291/0x6d0 [ 1608.435480][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1608.440566][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1608.445651][ C1] rose_timer_expiry+0x53f/0x630 [ 1608.450577][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1608.456007][ C1] call_timer_fn+0x19a/0x620 [ 1608.460574][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1608.465675][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1608.471103][ C1] __run_timers+0x6ef/0x960 [ 1608.475583][ C1] ? __pfx___run_timers+0x10/0x10 [ 1608.480589][ C1] run_timer_base+0x114/0x190 [ 1608.485244][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1608.490424][ C1] run_timer_softirq+0x1a/0x40 [ 1608.495157][ C1] handle_softirqs+0x219/0x8e0 [ 1608.499914][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1608.505178][ C1] __irq_exit_rcu+0x109/0x170 [ 1608.509832][ C1] irq_exit_rcu+0x9/0x30 [ 1608.514042][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1608.519647][ C1] [ 1608.522554][ C1] [ 1608.525458][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1608.531410][ C1] RIP: 0010:step_into+0xe1b/0x21a0 [ 1608.536493][ C1] Code: 48 8b 75 08 4c 89 e7 e8 d3 e8 5c ff 9c 41 5c 41 81 e4 00 02 00 00 31 ff 4c 89 e6 e8 af 0a 81 ff 58 4d 85 e4 0f 85 00 04 00 00 30 0f 81 ff 4d 8d 7d 08 4c 89 f8 48 c1 e8 03 42 0f b6 0c 30 4c [ 1608.556073][ C1] RSP: 0018:ffffc9000c1ff8b8 EFLAGS: 00000293 [ 1608.562112][ C1] RAX: 0000000000000000 RBX: ffffc9000c1ffb30 RCX: ffffffff823c2b98 [ 1608.570055][ C1] RDX: ffff888030494900 RSI: ffffffff823c2ba7 RDI: 0000000000000007 [ 1608.578002][ C1] RBP: ffffc9000c1ff9b8 R08: 0000000000000007 R09: 0000000000000000 [ 1608.585958][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1608.593903][ C1] R13: ffff888031184bc0 R14: dffffc0000000000 R15: 0000000000000200 [ 1608.601854][ C1] ? step_into+0x1038/0x21a0 [ 1608.606424][ C1] ? step_into+0x1047/0x21a0 [ 1608.611006][ C1] ? step_into+0x1047/0x21a0 [ 1608.615573][ C1] ? __pfx_step_into+0x10/0x10 [ 1608.620316][ C1] ? lookup_fast+0x156/0x610 [ 1608.624883][ C1] walk_component+0xfc/0x5b0 [ 1608.629449][ C1] link_path_walk+0x627/0xe20 [ 1608.634108][ C1] path_lookupat+0x15a/0x6d0 [ 1608.638676][ C1] filename_lookup+0x224/0x5f0 [ 1608.643416][ C1] ? __pfx_filename_lookup+0x10/0x10 [ 1608.648687][ C1] ? find_held_lock+0x2b/0x80 [ 1608.653334][ C1] ? __might_fault+0xe3/0x190 [ 1608.657989][ C1] ? __might_fault+0xe3/0x190 [ 1608.662641][ C1] ? __might_fault+0x13b/0x190 [ 1608.667381][ C1] vfs_statx+0x101/0x3f0 [ 1608.671603][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 1608.676360][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 1608.681738][ C1] vfs_fstatat+0x7b/0xf0 [ 1608.685978][ C1] __do_sys_newfstatat+0x97/0x120 [ 1608.690983][ C1] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 1608.696598][ C1] ? xfd_validate_state+0x61/0x180 [ 1608.701711][ C1] do_syscall_64+0xcd/0xfa0 [ 1608.706204][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.712072][ C1] RIP: 0033:0x7f4c6c711b0a [ 1608.716466][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 1608.736047][ C1] RSP: 002b:00007ffccdeb6a38 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 1608.744439][ C1] RAX: ffffffffffffffda RBX: 00005602444472c0 RCX: 00007f4c6c711b0a [ 1608.752387][ C1] RDX: 00007ffccdeb6a40 RSI: 00007ffccdeb6ad0 RDI: 00000000ffffff9c [ 1608.760349][ C1] RBP: 0000560244441c20 R08: 00005602444472c0 R09: 0000000000000000 [ 1608.768310][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 0000560244441d10 [ 1608.776257][ C1] R13: 00007ffccdeb6ad0 R14: 00005602276bbca4 R15: 00005602276bbbcc [ 1608.784225][ C1] [ 1608.787446][ C1] Kernel Offset: disabled [ 1608.791749][ C1] Rebooting in 86400 seconds..