last executing test programs: 6m55.119481376s ago: executing program 1 (id=1219): r0 = socket$nl_route(0x10, 0x3, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x100, 0x1a4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x7, 0x0, 0x9, 0xa550}) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$fuseblk(0x0, &(0x7f0000003540)='./bus\x00', 0x0, 0x20, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000000000000000000e8754a191230e9e5f60a00204000000007000000001431ed8076657468315f766c616e00000000000014000200fe800000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 6m54.881063044s ago: executing program 1 (id=1221): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) r2 = socket(0x18, 0x0, 0x1) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r4, &(0x7f0000000440)="e43bdff82030c564359983f7ef09ac8c3a7827b1234d428164349098f054fc5969b06578d0d91444a014ac86d1571d8ea55f3a835a0ab33810e6e19f5daaa8c648d4b2bbe4e9f76df9da6d33b4c0513d9e114c707fc7cddbdbc61ebad8c4743c553a1cfae616da6f1bd5cc2846911011344b664ee6d11e26f4309edcfd2029c41dfb04641a8a90727ac20ac96f368f04a8a8cbc861d4c13af8f9189f704766817ea589abf261bd5948672c282c2e027b6e1930855280c5c62511a4d23f460435938d14c25b32055ac99185c30d", 0xcd, 0x2001c815, &(0x7f0000000b40)={0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400000d}, 0x1c) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f00000003c0)=@secondary) keyctl$get_persistent(0x16, 0x0, r3) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xffff, 0x2, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$l2tp6(r2, &(0x7f0000000b00)={0xa, 0x0, 0x7, @loopback, 0x3, 0x1}, 0x20) mknod(0x0, 0x8, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000f40)={{{@in=@local, @in=@dev}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000001040)=0x82) mount$tmpfs(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000c00), 0x180080, &(0x7f0000000880)=ANY=[@ANYBLOB="687567653d7f65767917d26351d5722c71756f74612c657569643c00"/38, @ANYRES64=0x0, @ANYBLOB="eb0b17f1a372ef027f1c912933a7f688b5011dc67c10b45630df197ed0775dc008b98e77b68e2e54c6c2d03ac63e61874fbbef82efbadabfcc2636987019b9a4b65fb63ad511510df622674301ac309a11ebd7d21b00463c405699a7487ea0e648f2db74ecdb6d83d24447bc2259db75729afef1310e459dffd604c69503ede7a0b59e5b522d4dba5d609f80082d367ef65eb91e7afb42f0089edd9ebd77f8fd8cc45aec43fcb7efd7985e870b5c06ccffa493b5eff44b262dc30c52b034972532590655da3354242cf647d0259ab576e43446b7c6e1bd017f893e9153c66c9b68189bd017e4ef4c8f4c9d9adea134816f1137768bfac9f62e"]) socket(0x10, 0x80000, 0x1000000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3, 0x8000a, 0x10, 0x3ffffffe, 0x1}) 6m54.117817971s ago: executing program 1 (id=1224): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f00000019c0)=""/196, 0xc4}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x80}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x78}, 0x1, 0x0, 0x0, 0x48800}, 0x20050800) 6m50.270332599s ago: executing program 1 (id=1234): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x800000000000010, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x8000000000001, 0x5, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000480)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x20, 0x1) pivot_root(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000000000000000020000000000000000000080", @ANYRESDEC=r0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0c1000000000000440005"], 0xfc}}, 0x0) 6m50.095700311s ago: executing program 1 (id=1238): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0xc03e, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x4, 0x0}}], 0x2, 0x40008004) 6m49.817123696s ago: executing program 1 (id=1239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRES32=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x500, 0x0, 0xfffd, 0x0, 0x40000, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x8040, 0x120) close_range(r0, 0xffffffffffffffff, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000080)) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') setreuid(0xee01, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340), 0x0) ioprio_get$uid(0x3, 0xee01) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x20000001) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) 6m49.482192713s ago: executing program 32 (id=1239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRES32=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x500, 0x0, 0xfffd, 0x0, 0x40000, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x8040, 0x120) close_range(r0, 0xffffffffffffffff, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000080)) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') setreuid(0xee01, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340), 0x0) ioprio_get$uid(0x3, 0xee01) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x20000001) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) 2m44.681914346s ago: executing program 0 (id=2024): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="61155000000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf590000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf664e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab69a000248e167253472dc89a57c10bb08395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb845129361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386ba3b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f44fc00b69151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cbe8d23810052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a299fa176018054e9149a1c9d20a809ce3000000000000000000000000f6fad8476470bf4bb79d2ba2c0f7147577466f4229b364d6900ad22583c0ec630ea0c6177ad88014b074d88fea473d5ef91ed786bbd3371f0dfcc5ccf4aa82927192aa94fe70a261f1899e1f2f62d50b027f7e7cac8fe3691aa323e71d5e479d466512d1df57633a9006016322978a795431c745f0502e37b8884c368a3f9d5c05a7fb5bd25d95442d09f79c5bd656dccb450cb19c6df406ffcfc414334021df3e4654f84f10070846d3b0679544"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in6=@dev, 0xffff, 0x0, 0x0, 0xff, 0xa, 0x0, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, {0x0, 0x0, 0x19a}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400}}, 0xe8) r1 = socket$inet6(0xa, 0x6, 0x82ee) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008080) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000640)={{{@in=@broadcast, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) socket$packet(0x11, 0x3, 0x300) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 2m44.617904743s ago: executing program 0 (id=2025): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000080)="89e7ee2c21085aac4b0200ffce2ab08fc0aa969d381aaa", 0xe}, {0x0, 0x44}], 0x100000000000002a) 2m44.505430123s ago: executing program 0 (id=2026): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x30, 0x0, @void}, 0x7) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x8001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) getrlimit(0x8, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x5e21, 0x0, @empty, 0x1000}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$packet(0xffffffffffffffff, &(0x7f0000004ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2m44.081390767s ago: executing program 0 (id=2028): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x8, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_dev$audion(&(0x7f00000002c0), 0x2, 0x80002) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000300)={0xb6, 0x0, 0x5}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, r9, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0xd3c, [0xffff, 0x61, 0x8, 0x6, 0x2, 0xc1, 0x3, 0x15f, 0x4, 0x404, 0xd, 0x200, 0xf26, 0x0, 0x240, 0x9, 0xf046, 0x0, 0x1, 0xf000, 0xfffb, 0x5d, 0x5, 0x0, 0x1, 0x1000, 0x4efc, 0x8, 0x7f, 0x5, 0x2, 0x6, 0x2, 0x4, 0x1400, 0x13, 0x7, 0xc, 0xb673, 0x40, 0x10, 0x3, 0xf, 0x2, 0x734, 0xd, 0x7a7e, 0xfffc], 0x1c0}}) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) 2m42.585304402s ago: executing program 0 (id=2032): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x80, 0x7, 0x6, 0x0, {{0x30, 0x4, 0x1, 0x10, 0xc0, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x59, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x7}]}, @generic={0x88, 0xa, "cac0c89d4a4ed986"}, @generic={0x44, 0xe, "43726a2ba57c64f25e0f0aea"}, @cipso={0x86, 0x6a, 0x0, [{0x2, 0xe, "116c1b2b72535e28882c0d35"}, {0x7, 0xd, "524b8085d38b37f585c0f0"}, {0x7, 0xb, "b866aca7fbaf40c0c1"}, {0x2, 0x2}, {0x2, 0xa, "2b9faf77428c0dec"}, {0x6, 0xf, "52c1f2a4619ee1993b7cab024c"}, {0x6, 0x8, "39789541c9da"}, {0x1, 0xf, "de70caa5eb9b1a8c3e563157dd"}, {0x6, 0xc, "ebbea51b453cef9ecbfb"}]}, @cipso={0x86, 0x15, 0x1, [{0x7, 0xa, "180747e9eb84e4ac"}, {0x6, 0x5, "b8c79b"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4, 0x4b}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000002600)=@delqdisc={0x90, 0x25, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xf}, {0xfff1, 0x10}, {0xfff1, 0x2}}, [@TCA_STAB={0x6c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x1, 0x800, 0x0, 0x2, 0x95f, 0x2}}, {0x8, 0x2, [0x8, 0xd9]}}, {{0x1c, 0x1, {0x8, 0x7, 0x4, 0x6, 0x1, 0xc0, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x8, 0x800, 0x10000, 0x1, 0x7ff, 0x777, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x20008084) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x206080, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0x9362, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 2m41.823934414s ago: executing program 0 (id=2034): socket(0xa, 0x3, 0x10401) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002580)=@newtfilter={0x266c, 0x2c, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x8}, {0x5, 0x9}, {0xf, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xff}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0x2}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0x9}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x7c}]}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x25c4, 0x2, [@TCA_BPF_ACT={0x25b8, 0x1, [@m_ct={0x90, 0x1e, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x31}}]}, {0x58, 0x6, "5be6891f8b1fa10ce474f1dc2475a2015ca6c0fac5344204edaa48e71837cfe7ef636997769c3fe97f0824a2dbc9001908f937453d7fdd3a25e3b51fd5a9524f219ce70b609c9108eea554d0196c58250a699321"}, {0xc, 0x7, {0x0, 0xc4ad881a6ffc0da7}}, {0xc, 0x8, {0x2}}}}, @m_gact={0x168, 0x7, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9e9}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe4e3, 0x8000, 0x5, 0x3, 0x176}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x10000000, 0x0, 0xe185}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x60f, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x15e7, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x400, 0x0, 0x80000000, 0x1ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x3, 0x4, 0x9, 0x281}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x4a3, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1ca}}]}, {0xa0, 0x6, "0620c70262ae44eb46363c0916c77354660856e8bb544289b9ed40dfcbc189f96dac58e3d7513955a59c45c4c8c932c592783088cf55b5a6ef6cc55b0d99cfd143c67f6b5472a731202181b74abb984a463aefe084569026a4de0a0a13bf64b2d20fc4760469351f6e9bc5858be59433a17e2f02a8f1b512af64cc5d65a34ceb6d85e0f773c256559a4ab4407b200e9e3f833ca0d2825f5d6238cf17"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_sample={0x1070, 0x15, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0xa3, 0x2, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x400}]}, {0x1003, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xff8, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0xfcc, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x140, 0x10, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0xc8, 0x1, 0x5, 0x10001}, 0xf}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}]}, {0xd8, 0x6, "af32f5f06429d698ee1afe6f9a58413deaaad54381aa563616ea148d4af0a0ad614bb08b409e1994a4e9c128a43432e5e8f69d0082dfd7f5c1cd8acb8c4eb7c11250b28ffdde2dd361f48c6f872845675f5a4907b976972decebe9e742d834d0a8eb82ca2ff4c895074f5de35d2edd72e11e8056c4e7162f86ce7c653cd1bed2fd21eb255fc650fc8eb0dea46f62b3c607a7213993ab14d9281b8146b676b22567d635cb011ee065936f521bd61302f6e418524c56712d881367d417fcc9e94a352dff6d2c7eff07eb20fafdb6f61b1ea4eeac53"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0xb0, 0x6, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xb8, 0x4, 0xf, 0x10001}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x10000006, 0x0, 0x3}, 0xd1e1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0xffffffffffffffff, 0x5, 0x7}, 0xfff}}]}, {0x2a, 0x6, "bc5c6be6ce8845c985e626dbc37858cea7c2cdaba3a77160f4736d844f5848ec0fe53c57538c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mirred={0x164, 0x0, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1, 0x7, 0xfffffff8, 0x10000}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x0, 0xbf4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8, 0x3, 0xa2, 0x3f}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc4e, 0x4, 0x0, 0x2, 0x80000001}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8, 0x8, 0x9b, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x10000000, 0x0, 0x8000}}}]}, {0x77, 0x6, "4c65de528caf1182533f2342de79f1701367930e4f665e69fc5b06f8984b78ac3430ac5235fd28afea9b89769bfd57353e3f8045722e3e87567d2869b762c652908d73737e2f804516436da94d6c4528fe4e52474024fd4e8635f679ee4b29269895b3068109e162c4ab34a23ec11bd29cfef7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xf}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0x8}}]}, 0x266c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000c00)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000480)}, {&(0x7f0000000380)="ff3774598a8803", 0x7}, {0x0}, {&(0x7f00000005c0)="ee26cab5dae143322d5b9cb7a301d334d7250d9df057eb746c6c165ebf4f9f968859709273f6c7ae50260c3979dec8db283d79a225955ff8ba143e62eb78cd7e3a2f313699bb612c48a561d71d", 0x4d}, {&(0x7f0000000640)="fb6dc76f3a959ed197cde41281440d620754703920cc8de591575c8e64f92d08f180844162dbe0bacd1b538dc772fcdf89b22cd81e5ca109f5b42458acbc239b6b49bbdfec59442084a7d0e04f7da76ad54065f9cf4c984bac9709aeb13dcd00de34e89e14b3f68d99bc9d03a939410d9a306b281cacf503b32afbb5e7bf74faf14dd9955e9739f44589a9498e780d9d5de765d72a75a4f991f0b12bf8799e06e7143d61657c43b52a6a63d642b79ba276b03f1dd5056902", 0xb8}, {0x0}, {&(0x7f0000000800)="47058c75f613adf547bb848d395bb028e7ab3b4efa9afe4f676562df45f52e5368f85d5c50a7248f1428581e462842ab74ea75078c9feb97653a2d92ef027b306b63a006cca790d3fd4395e18d34de9a5b0c0d641210d7362e389fbe3765d3b82f885cefa4693b65b859bcf6bb2460bc13d44cdde8c94b5c7f4d4888a714f739b08960a7f7acf398dfab0987cbf571623ed0f560037e90c6174fb0802113f31d904c607be307c67bca5f66abc9cd09790d", 0xb1}], 0x7, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c2e74ff7edeee067acab2caae549c527b43dfe6bfcabafafdb520765c4bf13d62ccfcb8d93caa72a4014726ba2a629ba4ecd176eb14e8f203a93c335acfe55e94a3fba9d047b1b032faf17fa606d8819e749fe0d7ad855e71a6fca44dd2b3f48523c275feb0710cd7e7c040ea629faac8dc01fa98e2167797bfb7bcb9ff1fe52d775f0e6b5ca95c51aaa7b3be4b1c4bb64fe"], 0x80, 0x24008042}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$isdn_base(0x22, 0x2, 0x10) ioctl$IMGETCOUNT(r5, 0x80044943, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi0\x00', 0x141001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000740), 0xc0000, 0x0) ioctl$IMDELTIMER(r7, 0x80044941, &(0x7f00000001c0)) r8 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 2m41.159243422s ago: executing program 33 (id=2034): socket(0xa, 0x3, 0x10401) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002580)=@newtfilter={0x266c, 0x2c, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x8}, {0x5, 0x9}, {0xf, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xff}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0x2}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0x9}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x7c}]}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x25c4, 0x2, [@TCA_BPF_ACT={0x25b8, 0x1, [@m_ct={0x90, 0x1e, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x31}}]}, {0x58, 0x6, "5be6891f8b1fa10ce474f1dc2475a2015ca6c0fac5344204edaa48e71837cfe7ef636997769c3fe97f0824a2dbc9001908f937453d7fdd3a25e3b51fd5a9524f219ce70b609c9108eea554d0196c58250a699321"}, {0xc, 0x7, {0x0, 0xc4ad881a6ffc0da7}}, {0xc, 0x8, {0x2}}}}, @m_gact={0x168, 0x7, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9e9}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe4e3, 0x8000, 0x5, 0x3, 0x176}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x10000000, 0x0, 0xe185}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x60f, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x15e7, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x400, 0x0, 0x80000000, 0x1ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x3, 0x4, 0x9, 0x281}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x4a3, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1ca}}]}, {0xa0, 0x6, "0620c70262ae44eb46363c0916c77354660856e8bb544289b9ed40dfcbc189f96dac58e3d7513955a59c45c4c8c932c592783088cf55b5a6ef6cc55b0d99cfd143c67f6b5472a731202181b74abb984a463aefe084569026a4de0a0a13bf64b2d20fc4760469351f6e9bc5858be59433a17e2f02a8f1b512af64cc5d65a34ceb6d85e0f773c256559a4ab4407b200e9e3f833ca0d2825f5d6238cf17"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_sample={0x1070, 0x15, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0xa3, 0x2, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x400}]}, {0x1003, 0x6, "8f5310aefa784315f7d107f222518ee37ee658887250b334e2a6dfb240a622546c8ecb376ca9738cef86c8a75855636f2d4d92481f5ebff6d9c8cece69e7a4666ba7ddb7daa0646aa72c8dcc98836aaf333caf750408b37c28c6f3ac30af2823aa7ab680952b37a0f6964622af873d87489921b399dd6270a9675f605eb429aa2ac5c2be96c97c69a4992d66ac645cf61d6b0c6e01fd2ba77f6707c79bf1b300d9357ba0e77f1e77b16e73dbbbcfb64fc9b3a89f574a375c09521a2b8e92fbf38bae929ded75014dc2b079e4bf02f20ab075f19d66b04ac8475c78b655f2a6da543086a1a9f5c5cde3348f24a7fc270cb094d27c4b2360fea3d5a4c787ddcf9d19dce01c66be85cc55d3499992e659a9b198fc79e0cae4c69eba82f82cc1fea71fd2303cf90dbb0faef4dd368d8b55493ea1081b6e49dc811d8b8de96e5ab812b41993c884297487692d2ed62552a3f9a8f460caf8ba6b25f4a09939247b5bbbe989e14cbbc8d07cafed596bdcb97e7ed9506a2345f139d06fc8d90da21bdbaf2f7ab9423451271d09f3ad99503e387f3a5169a1c8a0dd3cce576b3d2a2369c52b3dd9a7348789103bb30986f69e99a5b5ece4e06d44e4c2c49cdcf8bcb24279a51e4df25398c5576aa8929e682e647e52e811ca6d05ef7f7935b105cae2a974bd4c1065480ab562cb412246533e0a46b37dd3094b33771998d463697efc7252c361e8e23bf575fdb51ee2054d007f0cd40b277ea0e4b5f3b419a4e80dd6a67d0fbb927794957ae5092ec29be7aef5b04df2bba3c804f8f90ab7c6406d086e4a2bd1ec2d2ed60f8cd0c0375985c3279e24666db40475240a5291dd1d48ca9e334cb9a35b433bcf63f6fb93bc8bb35fd9a24111539c6ffdb3238ea09a12ff0deb0ca587d7ccb87e2857386f3162068a09fdc1c2d9a1f44700e6d8c21780f5a5a426170944422c0b84685b2303c194d29d01dbb3deafe703b1d62f5f3a351fc1441f6c6c7a0ca4e4db580abf8c7ff93a8b12c6d2e7d0b5096fbec909f15291d88f4414a6a794ea6e9418a69b5d6a26d8c6e0cabb126273b135c9d208be38073fe47b2f1dba886aab28880baf1e38354b3b056b01402d73527f4fd04a709849f30aba66a814f3a13277a32dfe64ebffe157f20058f927de5ec14282e5178d8d8949e0d39464988dd1db2d99dc6e3c95141fdffd4d38518ed5b3617487be365460407b0482d47389427add9b2a6f04a2734fcb4833842528026d1d79f3bf7d8a5a7fabd27e0a61587faca700c52d2668494c8c15c0f620a83a9bb4e422de8c1b183f22918a4702167cb12e14aee76924ee4e9887e201feae52ff250295487f1c50bc26e3276ea68064b39f309a3cf3b49d9a948a8fb16c457553a3321762a75ba96905cc090738f8d313626c6359308a1112e1adb66f4771263ceb84e3c580d4ec0404ba71ef99ec83ede8d359ff5cd1acf4d0600f8bfe6c2c6fc564036bd17aaef15a535e54d8f2cabc27e26eb29ffdc745f2cb30161ae320abac5533c84694749ea30365a004dc41290365c8395698d43cc6b3dcdf9810a76aaf90025b6baee7d881c7e0892ec68b8bd14479d5beb661354ca28323b8287df69382843746aa1f820a5ec0c71aa00d0c9ce015da6d723aa7716776460f595189636e40323595b3741d7943eecd2f350a5cec3ea7a1b4b93ca590458ebd2720ce420b32f7b107573b083ce2253dcd1149fab8be20fbdef5f2fd3837c4dea43387413fcbad3b00a0aa3f1c615c6aea6ecd8c12637a683164a62bc8a5abfc7ff9b9eb2583e44ed52e372aeaf1f89b53f68e980f87a45a5371ede0b79821d69d9e5a1c480d8e1e1e15cb603ddb1c2fe347857a85f083650b05c1b82c3a2e0ae261898630d3c043778d0b5a9973c5008977395247b39eef1f5b54685e15c814b5120bfc0c230040957d506be46e654943392f755faf3a90b7eaed4382070dfc8046db5b1cb5121eb2c01c9bf5b776c5eba0212492e77037270112836257e7a67862508e82f7a368f7bb1a7b05cb0fd4e1347f233fdc7dc84ab492726bb2947da3e3967ee3ab75fc02f534412864b917ffa1fe6a6c7b3699255622833bc1084d403b2fc2ee783cab565da1c57c43981c5d50da87066df115844d2cbf00138105a58623b1aef1f09680718737b510a8c1783027ce9a0ced083c24c7bf0cecf0a6ee521b912d5807c1aa0f97d008263fa13b503d8bb6840043bcb8aa56f0ee4761a537ebb792e797de0e750b8dc1347327ddf5c4f6e98a034b548a6eb91008ba3626c563bd360d3472db245f0fda4eafb498a3fade550b80d2ec8a4db17b6f6dd176b3ff9379cb80b43fa84440a2d6e000c73d6ebecace5410e6f8b3e7cc0bd15ae5964d76575b2d04abc6a515e9035bc4e7a265b556bb4e3c3c3382ce57e564207b4be410259a482cb022355953f4e15b082eb4dbf8b96a2b5d3741d7c44b1de195f63581efa4c1e1b9a861804403dba95b4cd80fd8c9e6aee5fdcf083cc252f16ee6b448c839a386c8f86aa602eee1b13aafe20fef5593a44fbd16177d43cdcfe14773320091bef45f782c04a23229beb7374dd4504e54e5b69d0dd008cc04e4d4c2927d5663bf01e366f8c7b74d5932d072c3fe1b0d50c943b5a0d3336c30f22097e1ea7aced8d97a8cb458ab08a40e2cb55e7345db6887e3c90417a8fc244c52f3bf42ebe42a9ee8b8ea8a8c979f5019fb2e8484fc308cba0060717bd1e1c26251c39f918b12cc9df2534d5b910b5bd11ee89529f64a4c60002f042ab11811d6f29e71d957fce3b98d9e663cbd2ea859aac043bf602bff169d66b86161f161a1e48ad1910bd71cec79d3368f3b110881b61ac7685fdbe9e2cc2bc3d82ba9540bacda5b077b31dd6a0079d4d44b963325ed09f4254502ed3a5a6bd558976b8494d12ec6bb6551969984ff3f7b375bcd70e0b1e0ad372be34b82fb68c5ab806af9e6fa3b4c8cfaaa4258638913a0e96134af4999ea4779444e1025f8da3952feb8f32471ef0ba3d03acaed55e4db2ea82347657bf667d715fe424cc0449baf926048468ccb4c9c13977b9a0d3de89d609d907e76c7ec28e656930edb79d4f9448705b3c16c1bda3f01c58e22a6eef8beb82747ad2995d767560bac635516c8322035db1fa25d682671bf0f0952da66b0b4d1d0f47d592ae86e073e1ad6a98ea45c583d3a0e40156aa75bde088f4161b89e0fa2559fe51bbd14a0619f416195f69fcf2c7222966487af88e115c734f091f67162311755b86e10eccfd1b9386b117f09fe2f8e6d72b21070b4beca39f274b249ad277f2590afcddb5bc48b9818f0c4a661a0846f18e58cac033f6ca154dbb6d2f6d305323be0a812619f4c66915848e8f712d38dce413db9b728e7bbea8dad9b0314c683b0f38e51e16b99b2aa10f0967a650db45c378d2a46eff26e5966caae1c97db203152b0a54ba2da41cc7222300ed5da87ed0b4c4f5ac528d206cab74a03cecebce51ef4a299c28fd6e018559a11c17b026f51f30b64576cf924f5e87fa820fa0ae54cf075d7b8067726b8a47314bcd9a7f712a15891cab175faa8a08addc1363fcdcf6b08cd59d97004c40a62ae34e0b2b2b8b067edbc314dbc6715876456696de3c487de8c0cc6df45c78394e33b89133971fbaf530b8ee8e1c5bb3f4dbe8fba6d895077291520bb9b93583d1a3e3257417d28a111ea009ca09aa6df6dcaff6058fbb1b870db6b16f56088912dfe4f370fa6e021e635ebe299b64652dc1d58d57b089ba88e10bf53407f5edc61be7918194a778d905da2f47f1bf0a177289d3998a7b989930c9a72d8534dc4ea6823d5ca74ab132e5f42c4a300226cc9f81d53cb3c1c724834ff7bd0bfbedbbbf3da728c1fe8e1f87d9dbd7f0460ba16082953176d9440cca9f31b8c843d2f0b746d961e7dc78a8314a0a4d7c44923eadca8018d4ea5b0340b9fabba81ad534b49dd117ece94fa2a7347d22fbdec510fd8cab81909c35ccb42d2f980dd9cf1a607b4d194548497e8dfe62c90fa9954896095b3fca77839c929b51c8d3d1ef97a5cffa42515e52e80b85681743aa3fb92ba244d14561d8a40534c95933f69d352906064e7078393cd380f5ca7ecd2eac2445407a52093b0f2a06e57f419c044816b8aca878c7950675949b2c7f3c90b03e1e309c7e625d3521bf5bbe544c15242fc97b51e2454bcc9ffadef4e8f254497ef9b5eb573860cb37ac5d31cebe9197e9c86eb9408f5d39a2ff0e9087e5ac1ef82768b651b71ca4d912f48cd6f9bdb2023bd858aa598da2fbf184d82563259c6e6949ee9ce22132d5d566c16f9f557f8c463960dda9eff765ddda57571ccb0221a05c22f73712dbcb94a28ea8457fe138bda390a0d1428b3383cf6ee685c4512a0119a1d84ca5b4fee560de5356eae1062088cc69d000a047b9eafc52ec7fbbbb09bcc73911db28859295b467e9d522f736cd605c4bd0a4772a108fda8c7ce2abbfd43286fe610a0931855242a80b5254b578e78a1cfe6bb81894f1cb0580e021126f853d703a3658715e5452030e44a36382587f08737be52b896558c232f1d425cf0b0cfdcc4983515a34fd7205342e626aa0496956d419e5d5f8a623dc636d67102f330b184e35a833069675bbc80689a8fd5dda90127ef86af64bd111203bd5c562c432f2ce7c932f0a1d01b1cc2e9bc5e1394e250727021fa6d3965be5015172ed2294ce63475d8ae65334c88a4fc8d92e2185569ab5a77c92d4b3f6e063cdff2a79e4de1d1a754c87b2c9768b97f372f17e50f4d70f0932ed22e58588ab96396db6c4e3515a32658317281134498c21a9a088b4826d02c581833d0ac2af92b85e0c921894d1a6b22e59a996ed5de8c9298ac06cfef86c0a84fbe7e0a15baff5436f0db9810719e178c3aa9d36a01b54b0d3806835bbc098a20e91cc29e6e834d7ba47ac88b0ae74bd6bf5f75bf7da644f83463aafda892bd8f21c1e29796eeccca9746880eb0f551784ba6bf32c1a0f98e6d8118dd2d0c4b2432735e9d64726276fbb0fb1d1daa6bf32610540e9b737b7a8100f82c95b98180c714b30c5d4871d299a095cb37443ee55752e45bd700ac37c8fde716255fe12dbff53b0a1a88f2ad53e2a2fadba34439c9266091c4c1699740797da0e9f5d71fae865d4e4d1d20fe39f83cabc65da927c786501ced507170796cc492f3499ccafd23a42e4a5bf18d0c36480270f917dd7031e33805333592f4f2d4c18a115a8a41dfac0fe779aa16620856be4694a6ddbe6c8f6c1d47c5f236fbe013af2063455435658306cd29dc2beb8fdd84174f09bd3c4c360b44891239afc23b2d12e5f39e8d8a30bdc1cfb3de44033d15fdb6e810d7e72eef25666e9a7e020997ff1101d159a9d058b9f4d19210e69ff213526c5416bd95d589f952fe336f4dd5b400f716552d966b8b234b5745982e42380858a01a569a32084d086707e2332996cea0231e89bacdd9f4dde84ce1429a56c849887b76a4a5a95dd057550991808a07024adb2a1eee1aeeadc76c6047d3da96a73bcb48470bac30b4e18a6baccdc1cbe28d86d666341c239abd60a0396ba1aed01685c7a1bbdc3e09e275e1a2793a27621dde372017f7dbd4e0d6c47c16538c8622a9982b4717908f25af7846517467d53616f649d0b32331406c10833a0851d6c7687afe452068326873116009dd3082d96a66456190245333c2fddca74ff77f8d0d6268bd4f597bbaae348afebd4d75661aeca22d435b5749328e73a7ae8c4caba4c4ab86a4c72cd8156c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xff8, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0xfcc, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x140, 0x10, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0xc8, 0x1, 0x5, 0x10001}, 0xf}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}]}, {0xd8, 0x6, "af32f5f06429d698ee1afe6f9a58413deaaad54381aa563616ea148d4af0a0ad614bb08b409e1994a4e9c128a43432e5e8f69d0082dfd7f5c1cd8acb8c4eb7c11250b28ffdde2dd361f48c6f872845675f5a4907b976972decebe9e742d834d0a8eb82ca2ff4c895074f5de35d2edd72e11e8056c4e7162f86ce7c653cd1bed2fd21eb255fc650fc8eb0dea46f62b3c607a7213993ab14d9281b8146b676b22567d635cb011ee065936f521bd61302f6e418524c56712d881367d417fcc9e94a352dff6d2c7eff07eb20fafdb6f61b1ea4eeac53"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0xb0, 0x6, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xb8, 0x4, 0xf, 0x10001}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x10000006, 0x0, 0x3}, 0xd1e1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0xffffffffffffffff, 0x5, 0x7}, 0xfff}}]}, {0x2a, 0x6, "bc5c6be6ce8845c985e626dbc37858cea7c2cdaba3a77160f4736d844f5848ec0fe53c57538c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mirred={0x164, 0x0, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1, 0x7, 0xfffffff8, 0x10000}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x0, 0xbf4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8, 0x3, 0xa2, 0x3f}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc4e, 0x4, 0x0, 0x2, 0x80000001}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8, 0x8, 0x9b, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x10000000, 0x0, 0x8000}}}]}, {0x77, 0x6, "4c65de528caf1182533f2342de79f1701367930e4f665e69fc5b06f8984b78ac3430ac5235fd28afea9b89769bfd57353e3f8045722e3e87567d2869b762c652908d73737e2f804516436da94d6c4528fe4e52474024fd4e8635f679ee4b29269895b3068109e162c4ab34a23ec11bd29cfef7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xf}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0x8}}]}, 0x266c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000c00)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000480)}, {&(0x7f0000000380)="ff3774598a8803", 0x7}, {0x0}, {&(0x7f00000005c0)="ee26cab5dae143322d5b9cb7a301d334d7250d9df057eb746c6c165ebf4f9f968859709273f6c7ae50260c3979dec8db283d79a225955ff8ba143e62eb78cd7e3a2f313699bb612c48a561d71d", 0x4d}, {&(0x7f0000000640)="fb6dc76f3a959ed197cde41281440d620754703920cc8de591575c8e64f92d08f180844162dbe0bacd1b538dc772fcdf89b22cd81e5ca109f5b42458acbc239b6b49bbdfec59442084a7d0e04f7da76ad54065f9cf4c984bac9709aeb13dcd00de34e89e14b3f68d99bc9d03a939410d9a306b281cacf503b32afbb5e7bf74faf14dd9955e9739f44589a9498e780d9d5de765d72a75a4f991f0b12bf8799e06e7143d61657c43b52a6a63d642b79ba276b03f1dd5056902", 0xb8}, {0x0}, {&(0x7f0000000800)="47058c75f613adf547bb848d395bb028e7ab3b4efa9afe4f676562df45f52e5368f85d5c50a7248f1428581e462842ab74ea75078c9feb97653a2d92ef027b306b63a006cca790d3fd4395e18d34de9a5b0c0d641210d7362e389fbe3765d3b82f885cefa4693b65b859bcf6bb2460bc13d44cdde8c94b5c7f4d4888a714f739b08960a7f7acf398dfab0987cbf571623ed0f560037e90c6174fb0802113f31d904c607be307c67bca5f66abc9cd09790d", 0xb1}], 0x7, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c2e74ff7edeee067acab2caae549c527b43dfe6bfcabafafdb520765c4bf13d62ccfcb8d93caa72a4014726ba2a629ba4ecd176eb14e8f203a93c335acfe55e94a3fba9d047b1b032faf17fa606d8819e749fe0d7ad855e71a6fca44dd2b3f48523c275feb0710cd7e7c040ea629faac8dc01fa98e2167797bfb7bcb9ff1fe52d775f0e6b5ca95c51aaa7b3be4b1c4bb64fe"], 0x80, 0x24008042}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$isdn_base(0x22, 0x2, 0x10) ioctl$IMGETCOUNT(r5, 0x80044943, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi0\x00', 0x141001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000740), 0xc0000, 0x0) ioctl$IMDELTIMER(r7, 0x80044941, &(0x7f00000001c0)) r8 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 2m18.272451299s ago: executing program 3 (id=2115): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/15, 0x204000, 0x1400}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, 0x0, 0x0) syz_emit_ethernet(0xad, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @igmp={{0xc, 0x4, 0x0, 0x5, 0x9f, 0x68, 0x0, 0x9, 0x2, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x8, 0x1, [{0x5, 0x2}]}, @lsrr={0x83, 0x7, 0xef, [@local]}, @lsrr={0x83, 0xb, 0x88, [@remote, @private=0xa010100]}]}}, {0x13, 0x40, 0x0, @local, "354f96d734ff0b3565472d0def6efc77bcdcb02d7b86f220ef120d6d036271790d2548c41af8af9bd1bef3a8ace378a7823233c883e7d023ff401e53cd1cb95063816a75bf06a5a256667f60768b63d5e6b6d0a00eb8066e63423837e63aeab881d852df856153"}}}}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 2m16.404345325s ago: executing program 3 (id=2117): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001020000202505a1a44000010203010902680002010330040904000001020d00000a24060001ae3a1b592805240000000d240f0109000000cb0008000906241a0500cd072414b501f7ff09058103ff030420090904010000020d00000904010102020d00000906820200040403b0090503020004014005"], &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x7f, 0x8, 0x4, 0x40, 0x3}, 0xf4, &(0x7f0000000240)={0x5, 0xf, 0xf4, 0x1, [@generic={0xef, 0x10, 0x0, "ef970de9bbd5f22b82152ac07c4ca45bf3ffaf88a90bea586c00a0ed508ccfc49e5122a1fa9bb69ac7206b8838b4cd595a7878e467f263e56ed63e170d61b8b3a9eba3ccc864b78c13afecdc68b1ba3d19dcf9cfc6d0b6f40ede21deff7157b6b756c8f4948aafc0be40370b6bfdbb5990f17efff873003ec1d47a23df1d11292ae92d0ef95f9eb98a5741fda0c5c32c3d234135c6d78f0b4373dc0e6fa7527e0c655e10c794e18096ab428c318c1536c8c9c6507853be9ab4ad8ee1fd412dfe0d12aa7632fe648a85073b65c6c71131e1905d39a3e04ee7c9fb45d07cee64886cff70b2cfa4dca65da91639"}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x410}}]}) r0 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000500), &(0x7f0000000200)=""/21}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000680)='%pB \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0xc, [@float={0xa, 0x0, 0x0, 0x10, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x6}}, @func={0xb, 0x0, 0x0, 0xc, 0x3}, @func={0x4, 0x0, 0x0, 0xc, 0x5}, @struct={0x6, 0x4, 0x0, 0x4, 0x1, 0x5, [{0x7, 0x2, 0x4}, {0x1, 0x1, 0x8aed}, {0xd, 0x1, 0x7}, {0xb, 0x3, 0x3}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x3, 0x5}, @float={0xf, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f, 0x5f, 0x61, 0x5f, 0x30, 0x5f, 0x61, 0x2e, 0x61, 0x30]}}, &(0x7f0000000a40), 0xb8, 0x0, 0x1, 0x3, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b40)={0x80, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xc, 0xa, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0x2, 0x3, 0x4, 0x2, 0xfffffffffffffff0}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xb, 0x3, 0x7, 0x50, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000c00)='syzkaller\x00', 0xf, 0xa3, &(0x7f0000000c40)=""/163, 0x41100, 0x6, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x1, 0x3, 0x251, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000d80)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x1, 0x3, 0xf}, {0x5, 0x5, 0xb, 0x8}], 0x10, 0x3}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x25a5, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) writev(r11, &(0x7f0000000080)=[{&(0x7f0000001740)='9', 0x1}], 0x20) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) preadv(r12, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x44a2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50) r14 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0x8d33, 0x800, 0x0, 0x300, 0x0, r14}, &(0x7f0000000100), &(0x7f00000000c0)) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x1a, 0x2c, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb30, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xffffffff}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x9, 0x6, 0xc}, @jmp={0x5, 0x0, 0x2, 0xa, 0x6, 0x50, 0xfffffffffffffff0}, @ldst={0x1, 0x0, 0x1, 0x9, 0x0, 0x8, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd620}}, @call={0x85, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0xb, 0x4a, &(0x7f0000000900)=""/74, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, r5, 0x8, &(0x7f0000000ac0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x3, 0x1, 0x6, 0x5}, 0x10, r6, r7, 0x5, &(0x7f0000001040)=[0xffffffffffffffff, r8, r10, r11, r12, r13, r14, r15, r16], &(0x7f0000001080)=[{0x5, 0x1, 0xa, 0xb}, {0x0, 0x2, 0x7, 0xb}, {0x4, 0x4, 0x5, 0x1}, {0x1, 0x3, 0xe, 0x3}, {0x3, 0x4, 0x7, 0x2}], 0x10, 0x2000}, 0x94) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0xeef, 0x7224, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x811, 0x6, 0x1, {0x22, 0xbf6}}, {{{0x9, 0x5, 0x81, 0x3, 0x600, 0x1, 0xf0, 0x9}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xc, 0x8, 0x8, 0x40, 0x9}, 0x53, &(0x7f0000000080)={0x5, 0xf, 0x53, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x9, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xff, 0x8, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xd, 0x9, 0x6}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0xfbff, 0xff0f, 0x2, [0xf, 0x3fc0, 0x30, 0xfe7f3f, 0xff3f3f]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x8, 0xf, 0xa7d9, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3a, 0x1, 0xd2, 0x4, 0x8}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000640)=@lang_id={0x4}}, {0x6f, &(0x7f0000000440)=@string={0x6f, 0x3, "b2703bcb0510c07e7b91bcc158837504fa4c260201791c48bccc35750053aa8433694c5631397d4d0e08e68d8df167e9cdebc24e9888fe6e12806cc389df4ed9efd0660f26a8256c4c474ca51d837853975b4852e08686e1087117b0d4ea9c11d28c6601498e4d78a78d7b3225"}}, {0xd9, &(0x7f00000004c0)=@string={0xd9, 0x3, "e3d1a8525161d40f2f7efb52bcf79571ae24d5d9a535f3803c763bc5a63c3d3e2f48d11365818ec135cca5130df9022d07aa08aa56865f8182fc4631c5925348b60c103195d403c78c3fda11d6291b10edb3fc8188d234dc2581a59b0eac3abfd0f87fcbccf44c13928a1a70802dc021f50c98e4348c6ffef30ca11ea170202335b6b5c0f287a3a6580979fb6be6c336f419135b85c685a74e0ab61dca9109d70fa94abc9d9bdcb8277d38e960538f11892d08dfb1e0b9a0ef24de2f98c96b85817e4d718a4375ea578d988e69c925bf06ca68dfd35cfd"}}]}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) 2m12.892414158s ago: executing program 3 (id=2127): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/15, 0x204000, 0x1400}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, 0x0, 0x0) syz_emit_ethernet(0xaa, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @igmp={{0xc, 0x4, 0x0, 0x5, 0x9c, 0x68, 0x0, 0x9, 0x2, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x8, 0x1, [{0x5, 0x2}]}, @lsrr={0x83, 0x7, 0xef, [@local]}, @lsrr={0x83, 0xb, 0x88, [@remote, @private=0xa010100]}]}}, {0x13, 0x40, 0x0, @local, "354f96d734ff0b3565472d0def6efc77bcdcb02d7b86f220ef120d6d036271790d2548c41af8af9bd1bef3a8ace378a7823233c883e7d023ff401e53cd1cb95063816a75bf06a5a256667f60768b63d5e6b6d0a00eb8066e63423837e63aeab881d852df"}}}}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 2m11.810752012s ago: executing program 3 (id=2130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40000010) (fail_nth: 4) 2m10.842333275s ago: executing program 3 (id=2131): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) socket(0x9, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @random="2dea7035dd77"}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, 0x0, 0x0) connect$rose(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') 2m10.515668148s ago: executing program 3 (id=2132): socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mq_timedsend(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x800c, 0x4, 0x4, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, 0x0) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r3, 0x80927000) mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r3, 0xffffe000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c000}, 0x4000851) syz_open_dev$loop(0x0, 0x47ffffd, 0x122c42) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000440)={0x8, 0x0, 0x1}, 0x18, 0x3) 1m54.306801483s ago: executing program 34 (id=2132): socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mq_timedsend(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x800c, 0x4, 0x4, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, 0x0) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r3, 0x80927000) mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r3, 0xffffe000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c000}, 0x4000851) syz_open_dev$loop(0x0, 0x47ffffd, 0x122c42) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000440)={0x8, 0x0, 0x1}, 0x18, 0x3) 16.629212972s ago: executing program 4 (id=2496): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x80) linkat(r1, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1400) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f00000002c0)) 16.173065004s ago: executing program 4 (id=2498): newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x400) gettid() timer_create(0x5, &(0x7f00000000c0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000140)="370dc1a6dcaddad68efdd59bcc575fe75c851eb3260b32bc174727fdf3d5ea445ea9341076af2ff88df0436bc1bbdbdf7ddfd57c29734f88735a8dfcf8647adc574bac840d652fc2de602735c7", &(0x7f00000001c0)="f192aa7130ee3e7acc2e386e177033af64e30a7617159e9c9bfe4f5bd68165e4ff33be7a575719734c6b366ed01e0a1c9678da49f59c3f3b85aeb84271334f0acb8505d568b49c1e6187687e5acf1ee489ada6f891e7a73c1a47802f633ea424e099453d569ab5eac453851acf60b0834a28cce9232f0991467ba122975d5828d0369d68b195c8778580dfc03f3ca0eb0f7f1f4aabe7ebd6cd04b54feeaa37581715e1b7e86717971bd0056eb4fb951fb9795335c00af536c6dc460b82a3228657520959df6d340fee967f07546c7c3977b176fce8ff3af6f2b310d3d306048e7821c2825f8fc7ca63dc9ee24d974df23f4db8b03a"}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xc) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1b, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000b702000014000000b70300000000000009000000000000550901000000000095000000000000000303800005000000852000000100000085200000030000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa20000000000000900000000000000b703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000002c0)="d2ff0300600100", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r7, 0xc048aec8, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) 11.039577346s ago: executing program 2 (id=2515): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 11.004830896s ago: executing program 5 (id=2516): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000800)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1) 10.937648116s ago: executing program 4 (id=2517): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000005, &(0x7f00000001c0)={0xa, 0x2, 0x9, @empty, 0x3}, 0xfffffffffffffefb) setrlimit(0xf, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000030400"/19, @ANYRES32=0x0, @ANYBLOB="a5fdad5c490172d9a188b5398800000000140012800b00010067656e65e756581e59494c7ff859f50b766500000900000008000400e1ff0000"], 0x3c}}, 0x0) socket$inet6(0x10, 0x2, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[], 0x14}}, 0x0) mlockall(0x7) munlockall() socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f00000001c0)={0x9, 0x0, '\x00', {0x0, @bt={0x6, 0x5, 0x1, 0x3, 0x2, 0x10000, 0x905ffd, 0xfff, 0x9, 0x4, 0x1, 0x3, 0x106ac, 0x43cb, 0x0, 0x6, {0x1, 0x80000003}, 0x94, 0x81}}}) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x90, 0x43, 0xa0, 0x0, 0x98, 0x180, 0x178, 0x178, 0x180, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'erspan0\x00'}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}], 0x68662f0100d21ff2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000002c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c090) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e2e2c00000000000109022a000100000000090400000103000000092d0000000122070004e39a9fa0e60e3794"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.281217423s ago: executing program 2 (id=2519): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r1, 0x400}}, 0x48) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0x115, 0xfffffffffffffffb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fchdir(0xffffffffffffffff) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf, 0x70, 0x100000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000800000000000fbffffff000000", @ANYRES32=0x0, @ANYBLOB="ffffffff0500"/28], 0x50) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000000506010100000000000000000a0000010900028000000031000000000900030073797a320000000005000100070000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048045}, 0x4) io_submit(0x0, 0x0, &(0x7f00000002c0)) ioctl$TIOCCBRK(r4, 0x5428) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, r7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x400000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) 10.280669956s ago: executing program 5 (id=2520): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x1d, 0xd7, 0x82, 0x20, 0xc72, 0xc, 0xc575, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x4, 0x0, 0x7, [{{0x9, 0x4, 0x29, 0x0, 0x1, 0x40, 0x69, 0xee, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x400, 0xee, 0x9, 0x4}}]}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000780)=[{0x0}], 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) syz_usb_connect$cdc_ncm(0x0, 0x78, &(0x7f00000005c0)={{0x12, 0x1, 0x550, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x2, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "80ba"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfff, 0x9064, 0xf9}, {0x6, 0x24, 0x1a, 0x5, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xa, 0x75}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x1, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x5, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0xf9, 0x9}}}}}}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x6, 0xd6, 0x8, 0x8}, 0x51, &(0x7f0000000980)={0x5, 0xf, 0x51, 0x1, [@generic={0x4c, 0x10, 0xa, "a356d35e5003734e55283a7d3699e9f38d6d325a386f8f5de0c78d3e1bddbdcc68c9b0617a1d9a3dc2952eeca7b378b9d317e7932866894cd3550f645f9f454f3bc439b9dffd6b3b06"}]}, 0x5, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x2211}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x44c}}, {0xb, &(0x7f0000000e00)=@string={0xb, 0x3, "02b00611c2335fc925"}}]}) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r2, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) syz_usb_connect(0x2, 0x132, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000215a27a40311202ce057b0000020904bc0104da0468030905010110000004080905091000040108f209050a1010000200c607250102fffaff09050d101000f7040fe30d1845644c01bed98a2fa946fc5093bf3f31fe452abbbeebe41924b4c449ec70bd276034d70e32b07580711c312adb3cb816dbe7d900edbbb29aa3cbfd002a57158c33647ee5a956739a58bbd34f76e044bb5692449dd8c4fe82549c2ddd962a150a862ae856a14497d16b8a7389341815cbaa948ec11cffcb395f73ba41b63d55829cf36aa60344fb1a231be37e947511d79ac18fad7ab29a8b4f1de0bd281adaf65d206495b2089225e061d015b18b0b49bf38011d281c579472dc164853583d9185216f64c66d558d28ebd3ba6268ebfba78b0429246f997dff3afc16573b80f8585b94977dc3ade3cde80652b6ca0a63eaf4ed0b6398bcb038ba47d8f37f89176e1c9d3f02686f4027fbe1ce0e912e62"], &(0x7f0000000640)={0xffffffffffffff1c, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x3d, 0x0, 0x4, 0x10, 0x9}, 0x2f, &(0x7f00000001c0)={0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x27aec4648875baed, 0x11, 0x40, 0x5, 0xffbf, 0x40}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0xdc, 0x6, 0x6}, @ssp_cap={0x14, 0x10, 0xa, 0x3c, 0x2, 0x8, 0xf00, 0x6, [0x0, 0xf0]}]}, 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2809}}, {0x11, &(0x7f0000000080)=@string={0x11, 0x3, "4621f4a7be297e0e6f7f583e7e5794"}}, {0xcf, &(0x7f0000000300)=@string={0xcf, 0x3, "fd63c2c76c22e53ceb5dbd857c65deecb20f3ef0819fa57e362e586111e00b6a9a32ceb213a2bb2e2ca4f56dffec22ff96469af537227ac812db398f20abc2a44ad9292fd962915ec0ce8c74b684d64f1cdaa218cdb6f1a0c24f0f3f687c82d637fd26a036b6f51d8eab9aa5cf34862316acd0334cbfc5cfad580e365f9ac95099516d0f2c16fa255bf2fa7ac6f19f29a3caf833729c55b9e7f50e0c914d8e303a2ba9cbb6df621866d1cae84e90092e2aa36ca246ab30d227c651fa5103c18552aea6e74b42fa8025ffd7fc7e"}}, {0xef, &(0x7f0000000400)=@string={0xef, 0x3, "cec670ddc50ee341d2b174fe22f4b0018c026fdab3959077d681b4addc85f086fbeada9ca43f0cd495680ccb6b08a57d7fc449ceac023862786380d7f174b654794ffbd0a1cbe641d157dd37392d639353f94714e34356fb2ddab5ad0de901c448d8393d8b12d0713bc7d88a60ac33af5c669fccb03ce511a773ee9366045a872faccbcdcd386104caa697d16854e491eb7ab28e469e1a75e99a8e855c3fff51d71dfd571b8bd0973dbf8530059bd5a1b819f385c0e2f8caafa3a83cb011a3f18eff944e855eecc94787a2b1c45a8b0cb5f3dbfea07edd568e8b0ccc4aa48775aba2eacc82ddf36b3986ed7564"}}, {0x70, &(0x7f0000000500)=@string={0x70, 0x3, "fb568d5c622ecddf6e6fbe09278850acb2bd72f50cd8efd86a3a4629f5d7f0fc67f751c538cb6131fae734f1f4734b880c27c02a17e6bf002434089d7d44a792c499877939b4865c859ba2f8184232cb74ff323ea65a1591f49353148e637ff1c707f50913680d897e81547a7a35"}}, {0xa4, &(0x7f0000000580)=@lang_id={0x0, 0x3, 0x814}}]}) syz_usb_connect$uac1(0x5, 0xe0, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0xb, 0x60, 0xc5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x2, 0xe, 0x9, "84f591d09a5a"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x8, 0x1b, "57c1", "1a"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x0, 0x9, "78c78f449a8360"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x4, 0x5, {0x7, 0x25, 0x1, 0x2, 0xec, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xc9, 0x4, 0x40, 0x65, "b4fb6b"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xbb, 0x4, 0x1, 0xf5, "d29448", "f42dd4"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x3, 0x5, 0x3, "648cccbfbb9c80ad04"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x2, 0x1, 0x4, "788e3848d42e"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xa, 0x9, 0x2, "624bd04df9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x8, 0xa3, {0x7, 0x25, 0x1, 0x80, 0xe, 0x5}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x8, 0x6, 0x8, 0x61cf820c5e402cb5, 0x1}, 0x24, &(0x7f0000000bc0)=ANY=[@ANYBLOB="050f2400020b100104500007020600081410040826a5e0c26126a0bf6839c57772897795a6d9a3c713f451a20978e14330694122f7c1e718aad9699db7c8ed33d39c2ce86892b806ce37baacbde6b522c83f2a7d754629c991a30d6e0621e0ed51ddd7cfe1cf3d185704c8b3dfcae853edc6bd2ea14ebcfa3218e7fcdf7831cc2a9b3c055274448f6339e748ef090d3fa7191d4d5a132624745dd7d308ccad872068b1855d8bdf2bcaaee67a3be810619fc06c6ac366b16bc1b6ee47911a787793d32d27896827b3a8f32e2bb5d7bbf725fa72c42f84666b339718ed994c567f750a2a43ccb4b38fbe722820fb0c2e505955166a9672fd8318ffdf46b4406cbc7c446f8669d07303799f9727ab14f6ed0259e82a03e43ee0567c9a5546ebe1d0886365d2944d83b37f8c0c3c7e71b93b1b02dc6e100baeeb5f1c"], 0xd3, [{0x8a, &(0x7f0000000a40)=@string={0x8a, 0x3, "63d5a1df54db6442f210f7fb56cf6214b8974f627ec430dd0cfa5315cdbcecce95f37d24fb27f340a4658158d1b8c31c21b81c2fe15ca43bbb70eeb03fe824bf0fbec983e5317b3d5c8c435b18fc16158dd7981674080e8bcc0793cda82fb3ea747ea76e5cc9f6a59719e984a84faa588725b186d93067aafe103b4fe4b8c6f23f7c1fbb77c1044a"}}, {0x7d, &(0x7f0000000140)=@string={0x7d, 0x3, "4a190ce30b7773a49d0e3977e53f8b8d6a64c3ad9f47880b69534fa40e9e6bc0957240407895eee57d22784cb12f210f50e991282b8827e75668616060cb200d7748e298e2010e3d9119e83a9326a6aa09efaf82c0b7ee5f13d7a42aa23c1eca0302420b4def72cf8f22c43121404044431bf20ec110b7dd728f86"}}, {0x8a, &(0x7f0000000b00)=@string={0x8a, 0x3, "02b5d3c0e735703cfbe7c9b5cf7dece1a785d4c88d5c323989e7d691645f2a501e7b0734da16c8d0ca34fa4282d3e691078af66f8232ad88e84c99248e300d08f289c3aa772b99a6e850bcbcb739ef10136764bcccd29525395e9c1fe8b65c1211b1c1c347c054502ee2034f1b32c1dc7a05f3f7c60ca6b4ad6e93f58da16d57da4687215eea57e8"}}]}) 8.738208792s ago: executing program 2 (id=2521): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000001c0)={0xf0f026, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000003c00001e00000000f21900008520"], 0x0, 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000150a010200000100000000f106000005"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x400c001) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8001}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 7.2876327s ago: executing program 7 (id=2523): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @empty, 0x20b00}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="140000000000000029000000080000000300000007000000"], 0x18}, 0x40c0) 7.091679807s ago: executing program 6 (id=2524): syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r6, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4e0cdd70e9af79cd, 0x4}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={@mcast1, @loopback, 0xb, 0x3}}) 6.748639259s ago: executing program 7 (id=2525): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000ffe000/0x2000)=nil, 0x4) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000100)={0x2a, 0x1, 0x8000}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 6.105185877s ago: executing program 2 (id=2526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 5.717089635s ago: executing program 6 (id=2527): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cf30203001a000000", 0x33a) 5.52931471s ago: executing program 6 (id=2528): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3", 0x2}], 0x1}], 0x1, 0x40800) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040)=0x7f, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x5, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904100002e51de5000b2402010302057ff49bfd052406000105240002000d240f010500000009000700080624037f000109050602ff0300000009058202", @ANYRESHEX], 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r5) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x1, 0x1}}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) 4.869183639s ago: executing program 7 (id=2529): r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_SETRSUBD(r0, 0x6410) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x2, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) 4.743321781s ago: executing program 2 (id=2530): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000005, &(0x7f00000001c0)={0xa, 0x2, 0x9, @empty, 0x3}, 0xfffffffffffffefb) setrlimit(0xf, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x3c}}, 0x0) socket$inet6(0x10, 0x2, 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) mlockall(0x7) munlockall() socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x90, 0x43, 0xa0, 0x0, 0x98, 0x180, 0x178, 0x178, 0x180, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'erspan0\x00'}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}], 0x68662f0100d21ff2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000002c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c090) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.631918871s ago: executing program 4 (id=2531): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x109800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r4, 0x0, 0x7, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r7, r7, 0x0, 0x4800000009) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x80000000}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x0, 0x300}}, 0x26}}, 0x0) 4.554882602s ago: executing program 5 (id=2532): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x344f6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = io_uring_setup(0x7eb8, &(0x7f00000000c0)={0x0, 0xffffdffe, 0x800, 0x103fc, 0x81}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = fcntl$dupfd(r1, 0x406, r2) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x50048, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0xeea, 0x4) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, 0x0, 0x3001, 0x2}}}, 0xffffff03) close_range(r0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000326000/0x4000)=nil, 0x4000, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.397032485s ago: executing program 7 (id=2533): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, 0x0, 0x5005) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, 0x0) mlockall(0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x184200, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fcntl$getown(r3, 0x9) timerfd_settime(r0, 0x0, &(0x7f0000000280), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f00000002c0)) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274b4be40d08127fc96a837e6e86b8659269be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8761d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb", 0xa8, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x840048, &(0x7f0000000100)=ANY=[@ANYBLOB='i\x00\x00\x00\x00\x00\x00\x00\x00']) 3.345249935s ago: executing program 4 (id=2534): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x3) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4ea", 0x3}], 0x1}}], 0x1, 0x44088) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x400000001000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82a398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0x8]}}) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c09, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, 0x0) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@remote, @in6=@remote}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_setup(0x5, &(0x7f00000003c0)=0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000ec0)={0x6f0, 0x7d, 0x4000, {{0x500, 0x366, 0x0, 0x40, {0x20, 0xffffffff, 0x6}, 0x1310000, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\xcaY_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1H\xea\x97\x8b\xab\xa0\xfe5\xb3e\xdc\x81i\xea\x90\xb2\xcd\xef`\x107\t\xd4\xe0\xd61\x15pL\xba\xc2`\xa7\xe8\x0e\x04i(D\xddZ>n{\x1e\xdc\xc7\xebK\x89F\xa5!\x9d\xb2\x94\xe1\xb6|J\x04P\xe3\x81cX\xb2q]\xba`\xc8\xcc\xf0\xb2\x8di\xf1\x14\xff\xff\xcc\xeb?bF\xe3\xbaDys4\xf5_\xf7u\x82\xa6\xb7\x04\xe7H`\xd0\xca\x05Y-v\xc8\x99m\xd5\x9b\x80\b&.k8\xed\xa7z\xb9\xc6\x00\xb6\n\x9d\xd4\xc7\xe0\x97k\xeb\x90\xbf\x10\xb2=pn\xe9h0\xcd.\xf3r[?Cs+\xc2l\xaa\xde\t\xedWF\x9b\xf2p\x97\x88\x01L%!\xb3\x1c<\xf5\xff\xcd5\x18\xbd#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x81\xc4G\x80\x9d\xb7=9\xab\xe3\xfb\xf1\xac\xfd$\x88:\x1b\x7f\x167Sz\x86\v\x1aj\xcb\x94XNL(\xfeQQ,\x06\xf5L[\x11\x8ej\xaf\x1a\x9c\xde\xd2\xdd{%y\ta\xa6\b\xfc\xdd\f\r\xb9\x13\xd4\x98\xaf#\xfd\x91H\x9b\"@\x7f5|4*tO\xfba\xdb\xd8\xee\x11>\xe0\x99\x7f\\?#\x15\x9aB\x03\xa2\xc8\xd0\xe8\xb9<\xaf\x95F\xd4\xdc}\a\xcc\xd9\x9a\xe6\xa8', 0xffffffffffffffff, 0xee01}}, 0x6f0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd9d) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000023000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f000022c000/0x3000)=nil) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) 2.249370143s ago: executing program 2 (id=2536): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x88) 1.973701107s ago: executing program 4 (id=2537): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = accept4$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) sendmmsg$unix(r2, &(0x7f00000001c0), 0x0, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000004, 0x40008001, 0x1, 0x7f, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x18b140, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) ftruncate(0xffffffffffffffff, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x298, 0x258, 0x258, 0x298, 0x258, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x1, 0x7}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x2, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x3}, {}, 0x0, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3c8) io_uring_setup(0x549c, &(0x7f00000004c0)={0x0, 0xdd98, 0x2004a, 0x3, 0x34d}) socket(0x29, 0x2, 0x101) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x7fe, 0x0, &(0x7f00000002c0)=0x1, 0x0) ioctl$TCGETA(r6, 0x5405, 0xffffffffffffffff) 1.733233194s ago: executing program 6 (id=2538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x4, 0xff}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_ADDRESS={0x10, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x48}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000021aee3dece8055f60000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000040000000000000000000200000000000000000000000000000000000000100000300000000440005000a010101000000000000000000000000000004d62b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.679512746s ago: executing program 5 (id=2539): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000ffe000/0x2000)=nil, 0x4) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000100)={0x2a, 0x1, 0x8000}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 1.149644561s ago: executing program 5 (id=2540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) 1.053324077s ago: executing program 6 (id=2541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 895.650396ms ago: executing program 5 (id=2542): syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, 0x0, 0x0) add_key(&(0x7f0000000000)='logon\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000008c0)="ea54018b7812ac9ae0651e67ffbf48aecdbb05c0e3f7ba35f71f9d1186de2b687d28a793d1bde1c17089d3a32b0e9969def617766e4e1632f7683c96b5f4ba25e817c97f97311baae4e9cc4a6483399ef49356e244", 0x55, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xffffeffc, 0x0, 0x4) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000100)={0x4, 0xd6, "ae50e74ba166ea39b2fe57d6c4671314f7e8a03e7e5243a96c75fb36caec7363d79c4dc9fbd8c17c7ce933d30c971a484b143eab4b1a95a3754f19595ca86bc1ac3a591757ea6081c1e110690aee705a119c00b68985398b422dc055bd01e41276899cc9a29edabda26d1c837df1fe520314251b6e09a992a74588d56e498c8bb05381644fe702340f877a522db842942ba084287e7f4910b751d3817fb021454fe4f7129d14222ff464ea8fb09335b98cd716c8781f8cc3df7f36c50915fad36fdac2d011735afa27f9ea66a8d86525be74ef7cdd1f"}) 866.492754ms ago: executing program 7 (id=2543): r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_SETRSUBD(r0, 0x6410) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x2, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=2544): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r1 = fanotify_init(0x200, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x102, 0x0) fanotify_mark(r1, 0x39, 0x1a, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) tkill(0x0, 0xb) socket$alg(0x26, 0x5, 0x0) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x1, 0x6, @random="7d797f66fb42"}, 0x14) socket$kcm(0x10, 0x400000002, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005780)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff0, 0xa}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 745.931389][ T2328] pvrusb2: Device being rendered inoperable [ 745.937586][ T2328] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 745.944610][ T2328] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 745.956530][ T2328] pvrusb2: Attached sub-driver cx25840 [ 745.959094][T13845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.963999][ T2328] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 745.976690][T13845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.989705][ T2328] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 746.010740][ T1207] usb 1-1: device descriptor read/64, error -71 [ 746.084629][ T9] usb 5-1: USB disconnect, device number 74 [ 746.139612][ T1207] usb usb1-port1: attempt power cycle [ 746.144181][ T911] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 746.310171][ T911] usb 4-1: Using ep0 maxpacket: 32 [ 746.343276][ T911] usb 4-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config [ 746.354651][ T911] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 746.442011][ T911] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 746.498402][ T911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.534665][ T1207] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 746.551980][ T911] usb 4-1: config 0 descriptor?? [ 746.570178][ T911] rndis_host 4-1:0.0: skipping garbage [ 746.577170][ T1207] usb 1-1: device descriptor read/8, error -71 [ 746.601810][ T911] usb 4-1: bad CDC descriptors [ 746.607145][ T911] cdc_acm 4-1:0.0: skipping garbage [ 746.817832][T13844] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 746.837808][ T5877] usb 4-1: USB disconnect, device number 68 [ 746.868662][ T1207] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 746.899130][ T1207] usb 1-1: device descriptor read/8, error -71 [ 747.016935][ T1207] usb usb1-port1: unable to enumerate USB device [ 747.622245][ T30] audit: type=1400 audit(710.632:1168): avc: denied { shutdown } for pid=13868 comm="syz.3.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 749.041387][T13887] bpq0: entered allmulticast mode [ 749.484761][ T30] audit: type=1400 audit(712.371:1169): avc: denied { read write } for pid=13893 comm="syz.2.2012" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 749.508368][ T9] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 749.585303][ T30] audit: type=1400 audit(712.371:1170): avc: denied { open } for pid=13893 comm="syz.2.2012" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 749.608173][ C0] vkms_vblank_simulate: vblank timer overrun [ 749.848295][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 749.858113][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.875636][ T5877] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 750.010284][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 750.029683][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.193332][ T5877] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 750.213459][ T5877] usb 6-1: config 155 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 750.336299][ T5877] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 750.352862][ T5877] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 750.362028][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.363448][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 750.370322][ T5877] usb 6-1: Product: syz [ 750.390623][ T5877] usb 6-1: Manufacturer: syz [ 750.390722][ T9] usbtmc 1-1:16.0: can't read capabilities [ 750.395461][ T5877] usb 6-1: SerialNumber: syz [ 750.476582][ T5877] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 750.498054][ T5877] imon 6-1:155.0: unable to initialize intf0, err -19 [ 750.516904][ T5877] imon:imon_probe: failed to initialize context! [ 750.525142][ T5877] imon 6-1:155.0: unable to register, err -19 [ 750.697672][T13896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.706217][T13896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.716868][ T5877] usb 6-1: USB disconnect, device number 32 [ 751.178956][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 751.201617][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 751.213145][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 751.460085][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2021'. [ 751.676324][T13891] delete_channel: no stack [ 752.138638][ T9] usb 1-1: USB disconnect, device number 69 [ 752.471317][ T911] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 753.079838][ T911] usb 3-1: Using ep0 maxpacket: 32 [ 753.086258][ T911] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 753.094874][ T911] usb 3-1: config 0 has no interface number 0 [ 753.107595][ T911] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 753.140850][ T911] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 753.150468][ T911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.239708][ T911] usb 3-1: Product: syz [ 753.276120][ T911] usb 3-1: Manufacturer: syz [ 753.280760][ T911] usb 3-1: SerialNumber: syz [ 753.342590][ T911] usb 3-1: config 0 descriptor?? [ 753.367392][T13931] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 753.708720][T13931] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 753.977727][ T5884] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 753.994229][T13956] FAULT_INJECTION: forcing a failure. [ 753.994229][T13956] name failslab, interval 1, probability 0, space 0, times 0 [ 754.007441][T13956] CPU: 1 UID: 0 PID: 13956 Comm: syz.5.2031 Not tainted syzkaller #0 PREEMPT(full) [ 754.007462][T13956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 754.007471][T13956] Call Trace: [ 754.007478][T13956] [ 754.007484][T13956] dump_stack_lvl+0x16c/0x1f0 [ 754.007514][T13956] should_fail_ex+0x512/0x640 [ 754.007530][T13956] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 754.007543][T13956] should_failslab+0xc2/0x120 [ 754.007555][T13956] __kvmalloc_node_noprof+0x141/0x9c0 [ 754.007566][T13956] ? find_held_lock+0x2b/0x80 [ 754.007579][T13956] ? seq_read_iter+0x830/0x12d0 [ 754.007607][T13956] ? seq_read_iter+0x830/0x12d0 [ 754.007629][T13956] seq_read_iter+0x830/0x12d0 [ 754.007663][T13956] vfs_read+0x8bf/0xcf0 [ 754.007676][T13956] ? __pfx___mutex_lock+0x10/0x10 [ 754.007687][T13956] ? __pfx_vfs_read+0x10/0x10 [ 754.007706][T13956] ksys_read+0x12a/0x250 [ 754.007715][T13956] ? __pfx_ksys_read+0x10/0x10 [ 754.007729][T13956] do_syscall_64+0xcd/0xfa0 [ 754.007746][T13956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.007762][T13956] RIP: 0033:0x7f8b5118f6c9 [ 754.007775][T13956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.007790][T13956] RSP: 002b:00007f8b52029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 754.007806][T13956] RAX: ffffffffffffffda RBX: 00007f8b513e5fa0 RCX: 00007f8b5118f6c9 [ 754.007815][T13956] RDX: 0000000000002020 RSI: 00002000000005c0 RDI: 0000000000000003 [ 754.007821][T13956] RBP: 00007f8b52029090 R08: 0000000000000000 R09: 0000000000000000 [ 754.007827][T13956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.007833][T13956] R13: 00007f8b513e6038 R14: 00007f8b513e5fa0 R15: 00007ffee45fb5b8 [ 754.007847][T13956] [ 754.331118][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 754.339123][ T5884] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 754.348252][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.356302][ T5884] usb 4-1: Product: syz [ 754.360443][ T5884] usb 4-1: Manufacturer: syz [ 754.365044][ T5884] usb 4-1: SerialNumber: syz [ 754.373525][ T5884] usb 4-1: config 0 descriptor?? [ 754.384783][ T5884] gspca_main: se401-2.14.0 probing 047d:5003 [ 755.736278][ T911] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 755.753619][ T911] asix 3-1:0.188: probe with driver asix failed with error -71 [ 755.776393][ T911] usb 3-1: USB disconnect, device number 76 [ 755.983089][T13971] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57616 sclass=netlink_xfrm_socket pid=13971 comm=syz.5.2036 [ 756.214849][ T1207] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 756.260371][T10044] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 756.269261][T10044] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 756.278454][T10044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 756.286681][T10044] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 756.295836][T10044] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 756.327382][ T5877] kernel write not supported for file /dsp1 (pid: 5877 comm: kworker/1:5) [ 756.384811][ T1207] usb 5-1: device descriptor read/64, error -71 [ 756.448738][ T5884] gspca_se401: read req failed req 0x06 error -19 [ 756.459054][ T5884] usb 4-1: USB disconnect, device number 69 [ 756.695196][T13972] wg2 speed is unknown, defaulting to 1000 [ 756.906137][ T1207] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 757.072552][ T1207] usb 5-1: device descriptor read/64, error -71 [ 757.336727][ T1207] usb usb5-port1: attempt power cycle [ 757.613323][T13987] FAULT_INJECTION: forcing a failure. [ 757.613323][T13987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.638486][T13987] CPU: 0 UID: 0 PID: 13987 Comm: syz.2.2042 Not tainted syzkaller #0 PREEMPT(full) [ 757.638507][T13987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 757.638516][T13987] Call Trace: [ 757.638520][T13987] [ 757.638527][T13987] dump_stack_lvl+0x16c/0x1f0 [ 757.638547][T13987] should_fail_ex+0x512/0x640 [ 757.638562][T13987] _copy_from_user+0x2e/0xd0 [ 757.638576][T13987] copy_msghdr_from_user+0x98/0x160 [ 757.638591][T13987] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 757.638611][T13987] ___sys_sendmsg+0xfe/0x1d0 [ 757.638625][T13987] ? __pfx____sys_sendmsg+0x10/0x10 [ 757.638637][T13987] ? __lock_acquire+0x622/0x1c90 [ 757.638664][T13987] __sys_sendmsg+0x16d/0x220 [ 757.638678][T13987] ? __pfx___sys_sendmsg+0x10/0x10 [ 757.638706][T13987] do_syscall_64+0xcd/0xfa0 [ 757.638721][T13987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.638732][T13987] RIP: 0033:0x7fc39cf8f6c9 [ 757.638741][T13987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.638751][T13987] RSP: 002b:00007fc39dd4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.638762][T13987] RAX: ffffffffffffffda RBX: 00007fc39d1e5fa0 RCX: 00007fc39cf8f6c9 [ 757.638773][T13987] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000005 [ 757.638783][T13987] RBP: 00007fc39dd4e090 R08: 0000000000000000 R09: 0000000000000000 [ 757.638793][T13987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.638802][T13987] R13: 00007fc39d1e6038 R14: 00007fc39d1e5fa0 R15: 00007ffc30c3ada8 [ 757.638817][T13987] [ 757.887213][T13972] lo speed is unknown, defaulting to 1000 [ 758.242996][T13972] chnl_net:caif_netlink_parms(): no params data found [ 758.298618][ T1207] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 758.320361][ T1207] usb 5-1: device descriptor read/8, error -71 [ 758.489511][T13972] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.497139][T13972] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.512478][ T5135] Bluetooth: hci4: command tx timeout [ 758.519170][T13972] bridge_slave_0: entered allmulticast mode [ 758.526946][T13972] bridge_slave_0: entered promiscuous mode [ 758.535182][T13972] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.542568][T13972] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.550709][T13972] bridge_slave_1: entered allmulticast mode [ 758.560097][T13972] bridge_slave_1: entered promiscuous mode [ 758.577029][ T1207] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 758.621794][ T1207] usb 5-1: device descriptor read/8, error -71 [ 758.707388][ T911] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 758.738301][ T1207] usb usb5-port1: unable to enumerate USB device [ 758.740598][T13972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.976038][T13972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.992872][ T911] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 759.011815][ T911] usb 4-1: config 0 has no interface number 0 [ 759.019087][ T911] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.037396][ T911] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.050326][ T911] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 759.064807][ T911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.080533][ T911] usb 4-1: config 0 descriptor?? [ 759.126580][T13972] team0: Port device team_slave_0 added [ 759.137822][ T30] audit: type=1400 audit(721.404:1171): avc: denied { getopt } for pid=14013 comm="syz.5.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 759.144483][T13972] team0: Port device team_slave_1 added [ 759.339187][T13972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.346483][T13972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.372735][T13972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.394207][T13972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.405904][T13972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.969332][ T911] prodikeys 0003:041E:2801.000A: unknown main item tag 0x0 [ 759.982075][ T911] prodikeys 0003:041E:2801.000A: unknown main item tag 0x0 [ 759.994080][T13972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.019983][ T911] prodikeys 0003:041E:2801.000A: unknown main item tag 0x0 [ 760.040743][ T911] prodikeys 0003:041E:2801.000A: unknown main item tag 0x0 [ 760.048146][ T911] prodikeys 0003:041E:2801.000A: unknown main item tag 0x0 [ 760.070139][ T911] prodikeys 0003:041E:2801.000A: unknown main item tag 0x0 [ 760.087808][ T911] prodikeys 0003:041E:2801.000A: unknown main item tag 0x0 [ 760.241704][ T911] prodikeys 0003:041E:2801.000A: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 760.310283][ T911] hid_prodikeys: hid-prodikeys: failed to find output report [ 760.310283][ T911] [ 760.395786][T13972] hsr_slave_0: entered promiscuous mode [ 760.441613][T13972] hsr_slave_1: entered promiscuous mode [ 760.468316][T13972] debugfs: 'hsr0' already exists in 'hsr' [ 760.501473][T13972] Cannot create hsr debugfs directory [ 760.663583][ T5884] usb 4-1: USB disconnect, device number 70 [ 760.738593][ T5135] Bluetooth: hci4: command tx timeout [ 760.772853][T14038] loop6: detected capacity change from 0 to 524287999 [ 761.085913][T13972] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 761.126760][T13972] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 761.137941][T13972] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 761.149689][T13972] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 761.238327][T13972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.261739][T13972] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.276434][ T6566] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.283564][ T6566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.396282][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.403409][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.421265][ T1207] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 761.493347][T13972] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 761.570663][T13972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 762.127853][ T1207] usb 3-1: config index 0 descriptor too short (expected 42, got 36) [ 762.136127][ T1207] usb 3-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 762.146467][ T1207] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 762.160690][ T1207] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 762.169807][ T5877] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 762.179564][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.190544][ T1207] usb 3-1: config 0 descriptor?? [ 762.215048][ T1207] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 762.246719][T13972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.329752][ T5877] usb 4-1: device descriptor read/64, error -71 [ 762.461773][T13972] veth0_vlan: entered promiscuous mode [ 762.473535][ T911] usb 3-1: USB disconnect, device number 77 [ 762.480599][T13972] veth1_vlan: entered promiscuous mode [ 762.516810][T13972] veth0_macvtap: entered promiscuous mode [ 762.527553][T13972] veth1_macvtap: entered promiscuous mode [ 762.542880][T13972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.556482][T13972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.568557][ T6566] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.575691][ T1207] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 762.582450][ T6566] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.602349][ T6566] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.615772][ T6566] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.624628][ T5877] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 762.745455][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.755258][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.771312][ T1207] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 762.781013][ T5877] usb 4-1: device descriptor read/64, error -71 [ 762.791261][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.813148][ T1207] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 762.824872][ T1207] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 762.833802][ T5934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.834349][ T1207] usb 5-1: Manufacturer: syz [ 762.842320][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.859086][ T1207] usb 5-1: config 0 descriptor?? [ 762.920261][ T5877] usb usb4-port1: attempt power cycle [ 762.940655][ T1207] rc_core: IR keymap rc-hauppauge not found [ 762.946538][ T1207] Registered IR keymap rc-empty [ 762.967325][ T1207] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 762.977633][ T5135] Bluetooth: hci4: command tx timeout [ 762.985711][ T1207] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input32 [ 763.103725][ T30] audit: type=1400 audit(725.116:1172): avc: denied { setopt } for pid=14077 comm="syz.2.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 763.147879][ T30] audit: type=1400 audit(725.154:1173): avc: denied { ioctl } for pid=14079 comm="syz.2.2061" path="socket:[45365]" dev="sockfs" ino=45365 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 763.227628][ T30] audit: type=1400 audit(725.229:1174): avc: denied { write } for pid=14079 comm="syz.2.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 763.228878][ T5815] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 763.322843][ T5877] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 763.382926][ T5877] usb 4-1: device descriptor read/8, error -71 [ 763.410817][ T30] audit: type=1400 audit(725.406:1175): avc: denied { accept } for pid=14064 comm="syz.4.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 763.641337][ T5815] usb 7-1: Using ep0 maxpacket: 8 [ 763.657509][ T5815] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 763.670787][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.691717][ T5815] usb 7-1: Product: syz [ 763.714371][ T5815] usb 7-1: Manufacturer: syz [ 763.851078][ T5877] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 764.061115][ T5815] usb 7-1: SerialNumber: syz [ 764.072607][ T5815] usb 7-1: config 0 descriptor?? [ 764.084220][ T5877] usb 4-1: device descriptor read/8, error -71 [ 764.094144][ T911] usb 5-1: USB disconnect, device number 79 [ 764.109365][ T5815] gspca_main: se401-2.14.0 probing 047d:5003 [ 764.212830][ T5877] usb usb4-port1: unable to enumerate USB device [ 764.668784][T14082] syz.2.2061 (14082): drop_caches: 2 [ 765.197036][ T5135] Bluetooth: hci4: command tx timeout [ 765.382318][T14102] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 765.516566][ T1207] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 765.570760][ T5815] gspca_se401: read req failed req 0x06 error -19 [ 765.580396][ T5815] usb 7-1: USB disconnect, device number 2 [ 765.705780][ T1207] usb 5-1: config index 0 descriptor too short (expected 42, got 36) [ 765.705795][ T1207] usb 5-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 765.705815][ T1207] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 765.705836][ T1207] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 765.705848][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.707882][ T1207] usb 5-1: config 0 descriptor?? [ 765.734626][ T1207] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 767.872774][ T5815] usb 5-1: USB disconnect, device number 80 [ 768.508106][ T5135] Bluetooth: hci4: ISO packet for unknown connection handle 1550 [ 768.517708][T14121] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2071'. [ 768.670196][T14135] CUSE: info not properly terminated [ 768.922120][T14140] tc_dump_action: action bad kind [ 769.543796][T14144] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2078'. [ 769.858421][ T5884] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 770.086648][ T5884] usb 7-1: config 0 has an invalid interface number: 11 but max is 0 [ 770.093856][ T5815] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 770.114059][ T5884] usb 7-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 770.137203][T14159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=14159 comm=syz.2.2082 [ 770.169329][T14159] tipc: Started in network mode [ 770.174214][T14159] tipc: Node identity 10001, cluster identity 4711 [ 770.194083][ T5884] usb 7-1: config 0 has no interface number 0 [ 770.200958][T14159] tipc: Node number set to 65537 [ 770.212438][ T5884] usb 7-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 770.229087][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.256705][ T5884] usb 7-1: config 0 descriptor?? [ 770.272618][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 770.273710][ T5884] usb 7-1: unknown interface protocol 0x1c, assuming v1 [ 770.296358][ T5884] usb 7-1: cannot find UAC_HEADER [ 770.320993][ T5815] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 770.344144][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.352742][ T5884] snd-usb-audio 7-1:0.11: probe with driver snd-usb-audio failed with error -22 [ 770.360959][ T5815] usb 5-1: Product: syz [ 770.370704][ T5815] usb 5-1: Manufacturer: syz [ 770.395910][ T5815] usb 5-1: SerialNumber: syz [ 770.433325][ T5815] usb 5-1: config 0 descriptor?? [ 770.446550][ T911] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 770.476430][ T5815] gspca_main: se401-2.14.0 probing 047d:5003 [ 770.515950][ T5884] usb 7-1: USB disconnect, device number 3 [ 770.607126][ T911] usb 4-1: Using ep0 maxpacket: 8 [ 770.661566][ T911] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 770.672127][ T911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.293449][ T911] pvrusb2: Hardware description: Terratec Grabster AV400 [ 771.320265][ T911] pvrusb2: ********** [ 771.334032][ T911] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 771.354102][ T911] pvrusb2: Important functionality might not be entirely working. [ 771.362666][ T911] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 771.374887][ T911] pvrusb2: ********** [ 771.507702][ T2328] pvrusb2: Invalid write control endpoint [ 771.659976][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2086'. [ 772.362625][T14161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.371293][T14161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.387483][ T2328] pvrusb2: Invalid write control endpoint [ 772.396168][ T2328] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 772.414304][ T5884] usb 4-1: USB disconnect, device number 75 [ 772.444978][ T2328] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 772.468543][ T2328] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 772.547572][ T2328] pvrusb2: Device being rendered inoperable [ 772.566585][ T2328] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 772.907162][T14180] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2087'. [ 772.917387][ T30] audit: type=1400 audit(734.280:1176): avc: denied { setopt } for pid=14171 comm="syz.6.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 772.942804][ T2328] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 772.954725][ T2328] pvrusb2: Attached sub-driver cx25840 [ 772.964827][ T2328] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 772.975370][ T2328] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 773.170847][ T30] audit: type=1400 audit(734.523:1177): avc: denied { watch_mount } for pid=14187 comm="syz.6.2090" path="pipe:[45509]" dev="pipefs" ino=45509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 773.261645][ T5815] gspca_se401: read req failed req 0x06 error -19 [ 773.275936][ T5815] usb 5-1: USB disconnect, device number 81 [ 773.434271][T14200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2089'. [ 773.900915][ T5884] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 774.044408][T14211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2095'. [ 774.695275][ T5884] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 774.704059][ T5884] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 774.712990][ T5884] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 774.737414][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 774.802254][ T5884] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 774.824463][ T5884] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 774.838119][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 774.955361][ T5884] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 774.974117][ T5884] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 775.064439][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 775.765223][T14229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 776.097968][ T5884] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 776.137611][ T5884] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 776.161516][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 776.176189][ T5884] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 776.188013][ T5884] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 776.200301][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 776.212699][ T5884] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 776.237600][ T5884] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 776.429992][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 776.514466][ T5884] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 776.525289][ T5884] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 776.538562][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 776.632923][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2104'. [ 776.672865][ T5884] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 776.694641][ T5884] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 776.748755][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 776.766766][ T5884] usb 4-1: string descriptor 0 read error: -71 [ 776.783644][ T5884] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 776.792719][ T30] audit: type=1400 audit(737.908:1178): avc: denied { map } for pid=14239 comm="syz.2.2103" path="socket:[46083]" dev="sockfs" ino=46083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 776.807746][T14248] bond1: option arp_validate: invalid value (18446744073709551615) [ 776.824502][ T5884] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 776.843248][T14248] bond1 (unregistering): Released all slaves [ 777.055030][ T5884] usb 4-1: config 0 descriptor?? [ 777.091582][ T5884] usb 4-1: can't set config #0, error -71 [ 777.241033][ T5884] usb 4-1: USB disconnect, device number 76 [ 777.751463][ T30] audit: type=1400 audit(738.816:1179): avc: denied { listen } for pid=14259 comm="syz.2.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 780.748209][ T1207] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 781.224324][T14310] fuse: Invalid rootmode [ 781.316758][T14310] wg2 speed is unknown, defaulting to 1000 [ 781.752386][T14310] lo speed is unknown, defaulting to 1000 [ 781.780231][ T30] audit: type=1400 audit(742.079:1180): avc: denied { name_bind } for pid=14300 comm="syz.5.2120" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 781.835840][ T1207] usb 4-1: Using ep0 maxpacket: 32 [ 781.873883][ T1207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.217691][ T1207] usb 4-1: config 0 has no interfaces? [ 782.235497][ T1207] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 782.302601][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.352438][ T1207] usb 4-1: config 0 descriptor?? [ 782.551040][ T30] audit: type=1400 audit(743.285:1181): avc: denied { audit_write } for pid=14318 comm="syz.4.2122" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 782.676017][ T30] audit: type=1400 audit(743.332:1182): avc: denied { watch watch_reads } for pid=14318 comm="syz.4.2122" path="/proc/1536/net/sockstat6" dev="proc" ino=4026532895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 782.688926][T14297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.720591][T14297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.012056][ T1207] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 783.193818][ T1207] usb 6-1: Using ep0 maxpacket: 32 [ 783.236771][ T1207] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 783.245944][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.256539][ T1207] usb 6-1: config 0 descriptor?? [ 783.504906][ T1207] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 783.526945][ T1207] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 783.541085][ T1207] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 783.541085][ T30] audit: type=1400 audit(744.220:1183): avc: denied { firmware_load } for pid=1207 comm="kworker/1:2" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 783.965581][ T5884] usb 4-1: USB disconnect, device number 77 [ 785.300794][ T911] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 785.383023][T14350] FAULT_INJECTION: forcing a failure. [ 785.383023][T14350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.396449][T14350] CPU: 0 UID: 0 PID: 14350 Comm: syz.3.2130 Not tainted syzkaller #0 PREEMPT(full) [ 785.396471][T14350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 785.396481][T14350] Call Trace: [ 785.396488][T14350] [ 785.396494][T14350] dump_stack_lvl+0x16c/0x1f0 [ 785.396526][T14350] should_fail_ex+0x512/0x640 [ 785.396551][T14350] _copy_from_iter+0x29f/0x1720 [ 785.396576][T14350] ? __alloc_skb+0x200/0x380 [ 785.396598][T14350] ? __pfx__copy_from_iter+0x10/0x10 [ 785.396622][T14350] ? netlink_autobind.isra.0+0x1f6/0x370 [ 785.396654][T14350] netlink_sendmsg+0x820/0xdd0 [ 785.396685][T14350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 785.396711][T14350] ? security_socket_sendmsg+0x18/0x240 [ 785.396743][T14350] ____sys_sendmsg+0xa98/0xc70 [ 785.396761][T14350] ? copy_msghdr_from_user+0x10a/0x160 [ 785.396783][T14350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 785.396812][T14350] ___sys_sendmsg+0x134/0x1d0 [ 785.396836][T14350] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.396856][T14350] ? __lock_acquire+0x622/0x1c90 [ 785.396909][T14350] __sys_sendmsg+0x16d/0x220 [ 785.396933][T14350] ? __pfx___sys_sendmsg+0x10/0x10 [ 785.396972][T14350] do_syscall_64+0xcd/0xfa0 [ 785.396989][T14350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.397007][T14350] RIP: 0033:0x7f89b178f6c9 [ 785.397021][T14350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.397038][T14350] RSP: 002b:00007f89b26a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.397054][T14350] RAX: ffffffffffffffda RBX: 00007f89b19e6180 RCX: 00007f89b178f6c9 [ 785.397066][T14350] RDX: 0000000040000010 RSI: 0000200000000100 RDI: 0000000000000007 [ 785.397077][T14350] RBP: 00007f89b26a3090 R08: 0000000000000000 R09: 0000000000000000 [ 785.397087][T14350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.397097][T14350] R13: 00007f89b19e6218 R14: 00007f89b19e6180 R15: 00007ffdd322b8b8 [ 785.397122][T14350] [ 785.612521][ T911] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 785.622306][ T911] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 785.635707][ T911] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 785.645044][ T911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.879595][ T911] usb 5-1: GET_CAPABILITIES returned 0 [ 785.891538][ T911] usbtmc 5-1:16.0: can't read capabilities [ 786.214207][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 786.223358][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 786.562480][T14359] Error: Driver 'c6xdigio' is already registered, aborting... [ 786.592404][ T911] usb 5-1: USB disconnect, device number 82 [ 787.697280][T14374] binder: 14372:14374 ioctl c018620c 0 returned -14 [ 787.963530][ T5884] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 788.776135][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 788.788433][ T5884] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 788.807528][ T5884] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 788.828326][ T5884] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 788.838274][ T5884] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 788.902147][ T5884] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 788.916316][ T5884] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 788.925509][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.158692][T14385] Invalid ELF header type: 3 != 1 [ 789.181021][ T30] audit: type=1400 audit(749.476:1184): avc: denied { module_load } for pid=14380 comm="syz.4.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 789.282217][T14375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.363964][T14375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.249333][ T30] audit: type=1326 audit(750.495:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14394 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d7f8f6c9 code=0x7ffc0000 [ 790.274094][ T30] audit: type=1326 audit(750.523:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14394 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd7d7f8f6c9 code=0x7ffc0000 [ 790.343879][ T30] audit: type=1326 audit(750.523:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14394 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d7f8f6c9 code=0x7ffc0000 [ 790.367724][ T30] audit: type=1326 audit(750.523:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14394 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd7d7f8f6c9 code=0x7ffc0000 [ 790.401877][ T30] audit: type=1326 audit(750.542:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14394 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d7f8f6c9 code=0x7ffc0000 [ 790.443084][ T30] audit: type=1326 audit(750.542:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14394 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7d7f8f6c9 code=0x7ffc0000 [ 790.465846][ C0] vkms_vblank_simulate: vblank timer overrun [ 790.473052][ T30] audit: type=1326 audit(750.542:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14394 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d7f8f6c9 code=0x7ffc0000 [ 790.473153][T14375] usbtmc 3-1:16.0: simple usb_control_msg failed -32 [ 790.503116][ T30] audit: type=1326 audit(750.542:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14394 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7d7f8f6c9 code=0x7ffc0000 [ 790.527332][ T30] audit: type=1326 audit(750.542:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14394 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d7f8f6c9 code=0x7ffc0000 [ 790.576186][ T5815] usb 3-1: USB disconnect, device number 78 [ 790.850861][ T5884] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 791.013434][ T5884] usb 7-1: not running at top speed; connect to a high speed hub [ 791.022280][ T5884] usb 7-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 791.035216][ T5884] usb 7-1: config 1 interface 0 has no altsetting 0 [ 791.043510][ T5884] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 791.052810][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.060883][ T5884] usb 7-1: Product: à Œ [ 791.065882][ T5884] usb 7-1: Manufacturer: á Œ [ 791.070469][ T5884] usb 7-1: SerialNumber: à ’ [ 791.528938][T14407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2146'. [ 791.576249][ T5884] usb 7-1: USB disconnect, device number 4 [ 791.884286][T14413] bond0: entered allmulticast mode [ 791.895103][T14413] bond_slave_0: entered allmulticast mode [ 791.904305][T14413] bond_slave_1: entered allmulticast mode [ 792.091287][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2150'. [ 792.188275][ T5815] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 792.635591][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 792.919300][ T5815] usb 3-1: too many configurations: 195, using maximum allowed: 8 [ 792.931654][ T5815] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 792.939293][ T5815] usb 3-1: can't read configurations, error -61 [ 793.091156][ T5815] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 793.278345][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 793.341740][ T5815] usb 3-1: too many configurations: 195, using maximum allowed: 8 [ 793.432329][T14437] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2155'. [ 793.442324][ T5135] Bluetooth: hci4: ISO packet for unknown connection handle 1550 [ 793.470859][ T5815] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 793.552505][ T5815] usb 3-1: can't read configurations, error -61 [ 793.597932][ T5815] usb usb3-port1: attempt power cycle [ 793.896445][T14444] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2158'. [ 794.070815][ T5815] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 794.190123][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 794.197605][ T5815] usb 3-1: too many configurations: 195, using maximum allowed: 8 [ 794.466766][ T5815] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 794.474317][ T5815] usb 3-1: can't read configurations, error -61 [ 794.679316][ T5815] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 794.701927][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 794.845137][ T5815] usb 3-1: too many configurations: 195, using maximum allowed: 8 [ 794.850963][ T5884] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 794.959997][ T5815] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 794.967198][T14454] ieee802154 phy0 wpan0: encryption failed: -22 [ 794.974632][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 794.974641][ T30] audit: type=1400 audit(754.909:1243): avc: denied { create } for pid=14453 comm="syz.2.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 795.019042][ T5815] usb 3-1: can't read configurations, error -71 [ 795.033212][ T5815] usb usb3-port1: unable to enumerate USB device [ 795.033608][ T5884] usb 7-1: config index 0 descriptor too short (expected 42, got 36) [ 795.084274][ T5884] usb 7-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 795.098403][ T30] audit: type=1400 audit(754.909:1244): avc: denied { write } for pid=14453 comm="syz.2.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 795.125133][ T5884] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 795.139333][ T5884] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 795.149271][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.166350][ T5884] usb 7-1: config 0 descriptor?? [ 795.178243][ T5884] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 796.267159][ T5815] usb 7-1: USB disconnect, device number 5 [ 796.521375][T14474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 796.676688][ T30] audit: type=1326 audit(756.498:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.2.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39cf8f6c9 code=0x7ffc0000 [ 796.737367][ T30] audit: type=1326 audit(756.498:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.2.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39cf8f6c9 code=0x7ffc0000 [ 796.782532][ T30] audit: type=1326 audit(756.498:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.2.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc39cf8f6c9 code=0x7ffc0000 [ 796.812544][ T30] audit: type=1326 audit(756.498:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.2.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39cf8f6c9 code=0x7ffc0000 [ 796.872931][T14479] [ 796.879472][ T30] audit: type=1326 audit(756.498:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.2.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39cf8f6c9 code=0x7ffc0000 [ 796.906225][ T30] audit: type=1326 audit(756.498:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.2.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc39cf8f6c9 code=0x7ffc0000 [ 797.194695][T14472] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2169'. [ 797.195859][ T30] audit: type=1326 audit(756.498:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.2.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39cf8f6c9 code=0x7ffc0000 [ 797.262757][ T30] audit: type=1326 audit(756.498:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.2.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39cf8f6c9 code=0x7ffc0000 [ 797.564963][T14493] FAULT_INJECTION: forcing a failure. [ 797.564963][T14493] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 797.578419][T14493] CPU: 1 UID: 0 PID: 14493 Comm: syz.5.2172 Not tainted syzkaller #0 PREEMPT(full) [ 797.578440][T14493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 797.578451][T14493] Call Trace: [ 797.578458][T14493] [ 797.578465][T14493] dump_stack_lvl+0x16c/0x1f0 [ 797.578502][T14493] should_fail_ex+0x512/0x640 [ 797.578527][T14493] should_fail_alloc_page+0xe7/0x130 [ 797.578549][T14493] prepare_alloc_pages+0x3c2/0x610 [ 797.578570][T14493] ? __schedule+0x11a3/0x5de0 [ 797.578597][T14493] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 797.578623][T14493] ? __lock_acquire+0xb8a/0x1c90 [ 797.578644][T14493] ? kvm_sched_clock_read+0x11/0x20 [ 797.578668][T14493] ? sched_clock+0x38/0x60 [ 797.578696][T14493] ? lock_acquire+0x179/0x350 [ 797.578711][T14493] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 797.578740][T14493] ? mark_held_locks+0x49/0x80 [ 797.578758][T14493] ? finish_task_switch.isra.0+0x221/0xc10 [ 797.578782][T14493] ? rcu_is_watching+0x12/0xc0 [ 797.578804][T14493] ? trace_sched_exit_tp+0xd1/0x120 [ 797.578823][T14493] ? __schedule+0x11a3/0x5de0 [ 797.578846][T14493] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 797.578871][T14493] ? policy_nodemask+0xea/0x4e0 [ 797.578893][T14493] alloc_pages_mpol+0x1fb/0x550 [ 797.578914][T14493] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 797.578942][T14493] folio_alloc_mpol_noprof+0x36/0x2f0 [ 797.578967][T14493] shmem_alloc_folio+0x135/0x160 [ 797.578991][T14493] shmem_alloc_and_add_folio+0x499/0xc20 [ 797.579022][T14493] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 797.579049][T14493] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 797.579074][T14493] ? shmem_get_folio_gfp+0x6e0/0x1610 [ 797.579103][T14493] shmem_get_folio_gfp+0x67f/0x1610 [ 797.579134][T14493] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 797.579161][T14493] ? __pfx___might_resched+0x10/0x10 [ 797.579187][T14493] shmem_fallocate+0x794/0xf50 [ 797.579223][T14493] ? __pfx_shmem_fallocate+0x10/0x10 [ 797.579257][T14493] ? __lock_acquire+0xb8a/0x1c90 [ 797.579276][T14493] ? __lock_acquire+0x622/0x1c90 [ 797.579307][T14493] ? __pfx_shmem_fallocate+0x10/0x10 [ 797.579332][T14493] vfs_fallocate+0x5b4/0x10e0 [ 797.579353][T14493] ? __pfx_vfs_fallocate+0x10/0x10 [ 797.579377][T14493] __x64_sys_fallocate+0xd5/0x150 [ 797.579398][T14493] do_syscall_64+0xcd/0xfa0 [ 797.579415][T14493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.579432][T14493] RIP: 0033:0x7f8b5118f6c9 [ 797.579446][T14493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.579462][T14493] RSP: 002b:00007f8b51fe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 797.579483][T14493] RAX: ffffffffffffffda RBX: 00007f8b513e6180 RCX: 00007f8b5118f6c9 [ 797.579494][T14493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 797.579504][T14493] RBP: 00007f8b51fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 797.579514][T14493] R10: 00000000001001f0 R11: 0000000000000246 R12: 0000000000000002 [ 797.579524][T14493] R13: 00007f8b513e6218 R14: 00007f8b513e6180 R15: 00007ffee45fb5b8 [ 797.579549][T14493] [ 799.347499][T14508] wg2 speed is unknown, defaulting to 1000 [ 799.439124][T14516] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2179'. [ 799.801835][ T5815] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 800.220196][ T5815] usb 5-1: config index 0 descriptor too short (expected 42, got 36) [ 800.235466][T14508] lo speed is unknown, defaulting to 1000 [ 800.248572][ T5815] usb 5-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 800.260660][ T5815] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 800.281009][ T5815] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 800.315531][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.343625][ T5815] usb 5-1: config 0 descriptor?? [ 800.441419][ T5815] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 800.554957][T14525] fuse: Invalid rootmode [ 801.281203][ T5884] usb 5-1: USB disconnect, device number 83 [ 801.547108][ T5135] Bluetooth: hci4: ISO packet for unknown connection handle 1550 [ 801.547640][T14531] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2183'. [ 802.154325][ T5884] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 802.197586][ T5815] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 802.316403][ T5884] usb 7-1: Using ep0 maxpacket: 8 [ 802.324048][ T5884] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 802.333151][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.341200][ T5884] usb 7-1: Product: syz [ 802.346806][ T5884] usb 7-1: Manufacturer: syz [ 802.351407][ T5884] usb 7-1: SerialNumber: syz [ 802.357574][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 802.359029][ T5884] usb 7-1: config 0 descriptor?? [ 802.379112][ T5815] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 802.379206][ T5884] gspca_main: se401-2.14.0 probing 047d:5003 [ 802.400120][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.408580][ T5815] usb 3-1: Product: syz [ 802.415227][ T5815] usb 3-1: Manufacturer: syz [ 802.419915][ T5815] usb 3-1: SerialNumber: syz [ 802.429802][ T5815] usb 3-1: config 0 descriptor?? [ 802.441596][ T5815] gspca_main: se401-2.14.0 probing 047d:5003 [ 804.045602][ T5884] usb 7-1: reset high-speed USB device number 6 using dummy_hcd [ 804.079636][ T5815] usb 3-1: reset high-speed USB device number 83 using dummy_hcd [ 804.250560][ T5884] usb 7-1: device descriptor read/64, error -32 [ 804.507298][ T5815] usb 3-1: device descriptor read/64, error -32 [ 805.285767][ T5815] usb 3-1: reset high-speed USB device number 83 using dummy_hcd [ 805.291693][T14560] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 805.303113][T14560] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 805.310935][T14560] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 805.323816][T14560] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 805.337582][T14560] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 805.398074][T14558] wg2 speed is unknown, defaulting to 1000 [ 805.449316][ T5884] gspca_se401: read req failed req 0x06 error -19 [ 805.473338][ T5884] usb 7-1: USB disconnect, device number 6 [ 806.080593][T14573] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2195'. [ 806.090462][ T5135] Bluetooth: hci4: ISO packet for unknown connection handle 1550 [ 806.444813][ T5815] usb 3-1: device descriptor read/64, error -71 [ 807.348408][T14558] lo speed is unknown, defaulting to 1000 [ 807.405473][ T5815] usb 3-1: reset high-speed USB device number 83 using dummy_hcd [ 807.460560][ T5815] usb 3-1: device reset changed ep0 maxpacket size! [ 807.489854][ T5815] gspca_se401: read req failed req 0x06 error -19 [ 807.498548][ T5815] usb 3-1: USB disconnect, device number 83 [ 807.544582][ T5135] Bluetooth: hci5: command tx timeout [ 807.662092][ T5815] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 807.976566][ T5815] usb 3-1: config index 0 descriptor too short (expected 42, got 36) [ 807.986855][ T5815] usb 3-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 808.016227][ T5815] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 808.053129][ T5815] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 808.068002][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.087047][ T5815] usb 3-1: config 0 descriptor?? [ 808.097088][ T5815] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 808.146560][T14558] chnl_net:caif_netlink_parms(): no params data found [ 808.195655][T14558] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.203019][T14558] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.210254][T14558] bridge_slave_0: entered allmulticast mode [ 808.216960][T14558] bridge_slave_0: entered promiscuous mode [ 808.224873][T14558] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.232399][T14558] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.239588][T14558] bridge_slave_1: entered allmulticast mode [ 808.246258][T14558] bridge_slave_1: entered promiscuous mode [ 808.267800][T14558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.278666][T14558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.304310][T14558] team0: Port device team_slave_0 added [ 808.314476][ T42] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 808.324114][ T5815] usb 3-1: USB disconnect, device number 84 [ 808.324255][T14558] team0: Port device team_slave_1 added [ 808.361878][T14558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.368830][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.395130][T14558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.407798][T14558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.415313][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.441697][T14558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.471695][T14558] hsr_slave_0: entered promiscuous mode [ 808.477766][T14558] hsr_slave_1: entered promiscuous mode [ 808.483725][T14558] debugfs: 'hsr0' already exists in 'hsr' [ 808.489799][T14558] Cannot create hsr debugfs directory [ 808.497821][ T42] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.508950][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 808.515559][ T42] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 808.525813][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.537111][ T42] usb 5-1: config 0 descriptor?? [ 809.221720][T14558] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 809.231830][T14558] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 809.243140][T14558] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 809.258440][ T42] usbhid 5-1:0.0: can't add hid device: -71 [ 809.264415][ T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 809.284770][ T42] usb 5-1: USB disconnect, device number 84 [ 809.335360][T14558] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 809.485127][T14558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.516674][T14558] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.758079][ T5135] Bluetooth: hci5: command tx timeout [ 809.770109][ T799] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.777219][ T799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.830997][ T799] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.838100][ T799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.207289][T14558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.499606][T14633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14633 comm=syz.4.2207 [ 810.791992][T14558] veth0_vlan: entered promiscuous mode [ 810.831494][T14558] veth1_vlan: entered promiscuous mode [ 811.571258][T14558] veth0_macvtap: entered promiscuous mode [ 811.597477][T14558] veth1_macvtap: entered promiscuous mode [ 811.737634][T14558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.789475][T14558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.982256][ T5135] Bluetooth: hci5: command tx timeout [ 811.982578][ T5919] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 812.317185][ T3492] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.482967][ T3492] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.513185][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2213'. [ 812.532776][ T3492] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.980248][ T5919] usb 3-1: unable to get BOS descriptor or descriptor too short [ 812.991463][T14657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.000134][T14660] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2215'. [ 813.030472][ T5919] usb 3-1: not running at top speed; connect to a high speed hub [ 813.125040][ T5919] usb 3-1: config 1 has an invalid interface number: 138 but max is 0 [ 813.136446][ T5919] usb 3-1: config 1 has no interface number 0 [ 813.146603][ T5919] usb 3-1: config 1 interface 138 has no altsetting 0 [ 813.159030][T14657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.170603][ T5919] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 813.179784][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.188005][ T5919] usb 3-1: Product: syz [ 813.192595][ T5919] usb 3-1: Manufacturer: syz [ 813.199428][ T5919] usb 3-1: SerialNumber: syz [ 813.285933][ T3492] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.709755][T14667] fuse: Invalid rootmode [ 814.215984][ T5135] Bluetooth: hci5: command tx timeout [ 814.268500][ T799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.379761][ T799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.592114][ T799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.853322][T14672] netlink: 'syz.5.2218': attribute type 2 has an invalid length. [ 814.862032][T14672] netlink: 'syz.5.2218': attribute type 1 has an invalid length. [ 815.154658][ T799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.500223][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 816.500233][ T30] audit: type=1326 audit(775.023:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.7.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2cb8f6c9 code=0x7ffc0000 [ 816.583527][ T30] audit: type=1326 audit(775.023:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.7.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2cb8f6c9 code=0x7ffc0000 [ 816.622668][ T30] audit: type=1326 audit(775.097:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.7.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7feb2cb8f6c9 code=0x7ffc0000 [ 816.719806][ T30] audit: type=1326 audit(775.097:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.7.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2cb8f6c9 code=0x7ffc0000 [ 816.751392][ T5919] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 816.837545][ T5919] usb 3-1: USB disconnect, device number 85 [ 816.916169][ T30] audit: type=1326 audit(775.107:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.7.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2cb8f6c9 code=0x7ffc0000 [ 817.072723][ T30] audit: type=1326 audit(775.107:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.7.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7feb2cb8f6c9 code=0x7ffc0000 [ 817.623013][ T30] audit: type=1326 audit(775.107:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.7.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2cb8f6c9 code=0x7ffc0000 [ 817.651219][ T30] audit: type=1326 audit(775.107:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.7.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7feb2cb8f6c9 code=0x7ffc0000 [ 817.680091][ T30] audit: type=1326 audit(775.107:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.7.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2cb8f6c9 code=0x7ffc0000 [ 818.024464][ T30] audit: type=1326 audit(775.107:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.7.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb2cb8df10 code=0x7ffc0000 [ 818.033057][T14704] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2224'. [ 818.135836][T14707] comedi comedi3: comedi_config --init_data is deprecated [ 818.224934][T14709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2226'. [ 822.095007][T14753] sctp: [Deprecated]: syz.5.2238 (pid 14753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 822.095007][T14753] Use struct sctp_sack_info instead [ 822.496332][T14762] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 822.573906][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 822.573918][ T30] audit: type=1400 audit(780.727:1321): avc: denied { write } for pid=14768 comm="syz.7.2243" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 822.602451][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.652877][ T30] audit: type=1400 audit(780.792:1322): avc: denied { map } for pid=14768 comm="syz.7.2243" path="socket:[48731]" dev="sockfs" ino=48731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 822.656370][T14769] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 822.675922][ T30] audit: type=1400 audit(780.792:1323): avc: denied { read } for pid=14768 comm="syz.7.2243" path="socket:[48731]" dev="sockfs" ino=48731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 822.682475][T14769] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 822.711088][ T5815] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 822.723304][T14769] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 822.732148][T14769] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 822.738118][T14769] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 822.746205][T14769] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 822.826117][ T5919] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 822.890357][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 822.897709][ T5815] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 822.906658][ T5815] usb 3-1: config 0 has no interface number 0 [ 822.915795][ T5815] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 822.925129][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.933627][ T5815] usb 3-1: Product: syz [ 822.943739][ T5815] usb 3-1: Manufacturer: syz [ 822.948339][ T5815] usb 3-1: SerialNumber: syz [ 822.961481][ T5815] usb 3-1: config 0 descriptor?? [ 822.969081][ T5815] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 822.989467][ T5919] usb 7-1: Using ep0 maxpacket: 8 [ 823.135795][ T5919] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 823.145124][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.153456][ T5919] usb 7-1: Product: syz [ 823.162355][ T5919] usb 7-1: Manufacturer: syz [ 823.168170][ T5919] usb 7-1: SerialNumber: syz [ 823.178357][ T5919] usb 7-1: config 0 descriptor?? [ 823.256017][ T5919] gspca_main: se401-2.14.0 probing 047d:5003 [ 823.263557][ T5815] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 823.285351][ T5815] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 823.295859][T14785] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 823.312657][T14785] No control pipe specified [ 823.804709][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 823.814027][ T911] usb 3-1: USB disconnect, device number 86 [ 823.850067][ T911] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 823.880869][ T911] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 823.894223][ T911] quatech2 3-1:0.51: device disconnected [ 824.874292][ T5135] Bluetooth: hci4: command 0x0c1a tx timeout [ 824.900944][ T5135] Bluetooth: hci5: command 0x0c1a tx timeout [ 825.109281][ T5919] gspca_se401: read req failed req 0x06 error -19 [ 825.118448][ T5919] usb 7-1: USB disconnect, device number 7 [ 825.170954][T14790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2248'. [ 825.875404][ T5919] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 826.264427][ T5919] usb 5-1: config index 0 descriptor too short (expected 42, got 36) [ 826.279398][ T5919] usb 5-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 826.319355][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 826.348123][ T5919] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 826.374566][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.396770][ T5919] usb 5-1: config 0 descriptor?? [ 826.411773][ T5919] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 826.719747][ T42] usb 5-1: USB disconnect, device number 85 [ 826.811449][T14817] netlink: 'syz.2.2254': attribute type 11 has an invalid length. [ 826.865842][T14822] fuse: Unknown parameter 'group_id-³§Á5@¬' [ 827.039384][ T5135] Bluetooth: hci4: command 0x0c1a tx timeout [ 827.093050][ T911] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 827.124975][ T5135] Bluetooth: hci5: command 0x0c1a tx timeout [ 827.255175][ T911] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 827.264687][ T911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.295010][ T911] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 827.320440][ T911] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 827.341019][ T911] usb 7-1: Manufacturer: syz [ 827.357242][ T911] usb 7-1: config 0 descriptor?? [ 828.122772][ T911] rc_core: IR keymap rc-hauppauge not found [ 828.136494][ T911] Registered IR keymap rc-empty [ 828.143125][ T911] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 828.155344][ T911] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input33 [ 828.176942][ T911] usb 7-1: USB disconnect, device number 8 [ 829.274544][ T5135] Bluetooth: hci4: command 0x0c1a tx timeout [ 829.360049][ T5135] Bluetooth: hci5: command 0x0c1a tx timeout [ 830.358946][T14866] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2268'. [ 830.380378][T14866] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2268'. [ 830.390960][T14866] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2268'. [ 830.411469][T14868] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 830.417984][T14868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 830.438380][T14868] vhci_hcd vhci_hcd.0: Device attached [ 830.782295][ T5815] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 830.811489][T14869] vhci_hcd: connection reset by peer [ 830.817512][ T60] vhci_hcd: stop threads [ 830.821805][ T60] vhci_hcd: release socket [ 830.828771][ T60] vhci_hcd: disconnect device [ 830.868093][ T42] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 831.049629][ T42] usb 5-1: device descriptor read/64, error -71 [ 831.195798][ T30] audit: type=1400 audit(788.787:1324): avc: denied { ioctl } for pid=14882 comm="syz.5.2271" path="socket:[49360]" dev="sockfs" ino=49360 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 831.306308][ T42] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 831.488116][ T42] usb 5-1: device descriptor read/64, error -71 [ 831.557830][ T30] audit: type=1400 audit(789.124:1325): avc: denied { getattr } for pid=14889 comm="syz.2.2272" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 831.562120][T14890] [U] 0 0 [ 831.583534][T14890] [U] btrfs_delayed_extent_op 0 0 48 85 1 : tunables 0 0 0 : slabdata 0 0 0 [ 831.595920][T14890] [U] btrfs_delayed_ref_node 0 0 176 23 1 : tunables 0 0 0 : slabdata 0 0 0 [ 831.608217][T14890] [U] btrfs_delayed_ref_head 0 0 368 22 2 : tunables 0 0 0 : slabdata 0 0 0 [ 831.620513][T14890] [U] btrfs_inode_defrag 0 0 88 46 1 : tunables 0 0 0 : slabdata 0 0 0 [ 831.632462][T14890] [U] btrfs_delayed_node 0 0 488 16 2 : tunables 0 0 0 : slabdata 0 0 0 [ 831.644411][T14890] [U] btrfs_ordered_extent 0 0 736 22 4 : tunables 0 0 0 : slabdata 0 0 0 [ 831.656534][T14890] [U] btrfs_extent_map 0 0 168 24 1 : tunables 0 0 0 : slabdata 0 0 0 [ 831.668394][T14890] [U] bio-360 18 18 448 18 2 : tunables 0 0 0 : slabdata 1 1 0 [ 831.680255][T14890] [U] bio-424 16 16 512 16 2 : tunables 0 0 0 : slabdata 1 1 0 [ 831.692115][T14890] [U] btrfs_extent_buffer 0 0 480 17 2 : tunables 0 0 0 : slabdata 0 0 0 [ 831.704147][T14890] [U] btrfs_extent_state 0 0 192 21 1 : tunables 0 0 0 : slabdata 0 0 0 [ 831.716094][T14890] [U] btrfs_free_space_bitmap 0 0 8192 4 8 : tunables 0 0 0 : slabdata 0 0 0 [ 831.728480][T14890] [U] btrfs_free_space 0 0 168 24 1 : tunables 0 0 0 : slabdata 0 0 0 [ 831.740347][T14890] [U] btrfs_path 0 0 176 23 1 : tunables 0 0 0 : slabdata 0 0 0 [ 831.752212][T14890] [U] btrfs_trans_handle 0 0 296 13 1 : tunables 0 0 0 : slabdata 0 0 0 [ 831.764163][T14890] [U] bio-440 16 16 512 16 2 : tunables 0 0 0 : slabdata 1 1 0 [ 831.776024][T14890] [U] btrfs_inode 0 0 2208 14 8 : tunables 0 0 0 : slabdata 0 0 0 [ 831.787885][T14890] [U] bio-536 23 23 704 23 4 : tunables 0 0 0 : slabdata 1 1 0 [ 831.856934][T14890] [U] afs_inode_cache 12 12 2624 12 8 : tunables 0 0 0 : slabdata 1 1 0 [ 831.864242][ T42] usb usb5-port1: attempt power cycle [ 831.868808][T14890] [U] ubifs_inode_slab 0 0 1728 18 8 : tunables 0 0 0 : slabdata 0 0 0 [ 831.886006][T14890] [U] fsverity_info 0 0 328 12 1 : tunables 0 0 0 : slabdata 0 0 0 [ 831.897869][T14890] [U] fscrypt_inode_info 0 0 184 22 1 : tunables 0 0 0 : slabdata 0 0 0 [ 831.909814][T14890] [U] zspage-zswap1 72 72 224 18 1 : tunables 0 0 0 : slabdata 4 4 0 [ 831.921667][T14890] [U] zs_handle-zswap1 256 256 32 128 1 : tunables 0 0 0 : slabdata 2 2 0 [ 831.933519][T14890] [U] zswap_entry 92 92 88 46 1 : tunables 0 0 0 : slabdata 2 2 0 [ 831.945369][T14890] [U] AF_VSOCK 28 28 2240 14 8 : tunables 0 0 0 : slabdata 2 2 0 [ 831.957219][T14890] [U] sw_flow_stats 64 64 128 32 1 : tunables 0 0 0 : slabdata 2 2 0 [ 831.969069][T14890] [U] sw_flow 42 42 776 21 4 : tunables 0 0 0 : slabdata 2 2 0 [ 831.980919][T14890] [U] batadv_tt_roam_cache 0 0 64 64 1 : tunables 0 0 0 : slabdata 0 0 0 [ 831.993042][T14890] [U] batadv_tt_req_cache 0 0 64 64 1 : tunables 0 0 0 : slabdata 0 0 0 [ 832.005086][T14890] [U] [ 832.109215][T14890] [U] [ 832.111903][T14890] [U] [ 832.114573][T14890] [U] [ 832.429286][ T42] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 832.454243][ T42] usb 5-1: device descriptor read/8, error -71 [ 832.477259][T14905] sctp: [Deprecated]: syz.6.2277 (pid 14905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 832.477259][T14905] Use struct sctp_sack_info instead [ 832.511004][T14905] sctp: [Deprecated]: syz.6.2277 (pid 14905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 832.511004][T14905] Use struct sctp_sack_info instead [ 832.538212][T14905] netlink: 'syz.6.2277': attribute type 4 has an invalid length. [ 832.728693][ T42] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 832.761143][ T42] usb 5-1: device descriptor read/8, error -71 [ 832.884550][ T42] usb usb5-port1: unable to enumerate USB device [ 832.985331][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 833.051247][T14891] [U] [ 833.261880][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 833.277197][ T24] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 833.286338][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.299867][ T24] usb 7-1: Product: syz [ 833.304017][ T24] usb 7-1: Manufacturer: syz [ 833.321424][ T24] usb 7-1: SerialNumber: syz [ 833.331613][ T24] usb 7-1: config 0 descriptor?? [ 833.555870][T14909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.564539][T14909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.575346][T14909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.590215][T14909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.625460][T14909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.639867][T14909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.679367][ T5135] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 833.701350][ T24] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 833.710176][ T24] peak_usb 7-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 833.772429][ T24] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 833.795489][ T24] usb 7-1: USB disconnect, device number 9 [ 833.884843][ T30] audit: type=1400 audit(791.303:1326): avc: denied { getopt } for pid=14923 comm="syz.4.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 834.571322][T14941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 835.274085][T14932] [U]  [ 835.488243][ T24] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 836.418065][ T5815] vhci_hcd: vhci_device speed not set [ 836.954532][T14971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 837.883112][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2301'. [ 837.892682][T14983] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2301'. [ 837.958376][T14983] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2301'. [ 837.980664][ T30] audit: type=1400 audit(795.127:1327): avc: denied { ioctl } for pid=14982 comm="syz.6.2301" path="net:[4026532979]" dev="nsfs" ino=4026532979 ioctlcmd=0x5661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 838.204532][ T5919] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 838.366315][ T5919] usb 5-1: config index 0 descriptor too short (expected 42, got 36) [ 838.380069][T14993] devpts: Unknown parameter 'tracefs' [ 838.385473][ T30] audit: type=1400 audit(795.501:1328): avc: denied { mount } for pid=14990 comm="syz.7.2302" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 838.443585][ T5919] usb 5-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 838.454130][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 838.467469][ T5919] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 838.478232][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.493775][ T5919] usb 5-1: config 0 descriptor?? [ 838.509739][ T5815] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 838.517420][ T30] audit: type=1400 audit(795.501:1329): avc: denied { remount } for pid=14990 comm="syz.7.2302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 838.550143][ T30] audit: type=1400 audit(795.511:1330): avc: denied { accept } for pid=14990 comm="syz.7.2302" lport=38126 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 838.578584][ T5919] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 838.598388][ T30] audit: type=1400 audit(795.511:1331): avc: denied { write } for pid=14990 comm="syz.7.2302" lport=38126 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 838.771770][ T5815] usb 7-1: Using ep0 maxpacket: 8 [ 838.934542][ T5815] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 838.953892][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.978447][ T30] audit: type=1400 audit(795.511:1332): avc: denied { setopt } for pid=14990 comm="syz.7.2302" lport=38126 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 839.005283][ T5815] usb 7-1: Product: syz [ 839.017389][ T9] usb 5-1: USB disconnect, device number 90 [ 839.028510][ T30] audit: type=1400 audit(795.529:1333): avc: denied { mount } for pid=14990 comm="syz.7.2302" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 839.056801][ T5815] usb 7-1: Manufacturer: syz [ 839.073144][ T5815] usb 7-1: SerialNumber: syz [ 839.120814][T15003] tipc: Enabled bearer , priority 0 [ 839.282737][ T5815] usb 7-1: config 0 descriptor?? [ 839.298838][ T5815] gspca_main: se401-2.14.0 probing 047d:5003 [ 839.488360][ T30] audit: type=1400 audit(796.549:1334): avc: denied { unmount } for pid=14558 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 839.616970][ T5919] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 840.022265][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 840.028709][ T5919] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 840.037965][ T5919] usb 3-1: config 1 has no interface number 1 [ 840.044865][ T5919] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 840.109682][ T5919] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 840.228486][ T911] tipc: Node number set to 485809462 [ 840.238512][ T5919] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 840.252432][ T5919] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 840.267211][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.284584][ T5919] usb 3-1: Product: syz [ 840.288762][ T5919] usb 3-1: Manufacturer: syz [ 840.293946][ T5919] usb 3-1: SerialNumber: syz [ 840.314694][T15014] netlink: 'syz.5.2310': attribute type 2 has an invalid length. [ 840.531075][ T5919] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 840.547697][ T5919] usb 3-1: found format II with max.bitrate = 64, frame size=5 [ 840.566508][ T5919] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 840.579109][ T5919] usb 3-1: found format II with max.bitrate = 64, frame size=5 [ 840.593594][ T5919] usb 3-1: 2:1: cannot set freq 1372320 to ep 0x82 [ 840.630429][ T5919] usb 3-1: USB disconnect, device number 88 [ 840.659974][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 841.795253][ T5815] gspca_se401: read req failed req 0x06 error -19 [ 841.809744][ T5815] usb 7-1: USB disconnect, device number 10 [ 843.141134][T15052] bridge0: entered promiscuous mode [ 843.146867][T15052] macvlan2: entered promiscuous mode [ 843.852853][ T30] audit: type=1400 audit(800.626:1335): avc: denied { ioctl } for pid=15056 comm="syz.6.2321" path="/54/file0" dev="tmpfs" ino=305 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 844.988763][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2324'. [ 846.075683][ T42] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 846.267344][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 846.277667][ T42] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 846.287079][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.295807][ T42] usb 7-1: Product: syz [ 846.300303][ T42] usb 7-1: Manufacturer: syz [ 846.305013][ T42] usb 7-1: SerialNumber: syz [ 846.342344][ T5815] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 846.355098][ T42] usb 7-1: config 0 descriptor?? [ 846.381411][ T42] gspca_main: se401-2.14.0 probing 047d:5003 [ 846.387532][ T5884] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 846.514710][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 846.546117][ T5884] usb 3-1: device descriptor read/64, error -71 [ 846.560434][ T5815] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 846.578894][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.587432][ T5815] usb 5-1: Product: syz [ 846.592895][ T5815] usb 5-1: Manufacturer: syz [ 846.909006][ T5884] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 846.994491][ T5815] usb 5-1: SerialNumber: syz [ 847.182722][ T5815] usb 5-1: config 0 descriptor?? [ 847.212166][ T5815] gspca_main: se401-2.14.0 probing 047d:5003 [ 847.251946][ T5884] usb 3-1: device descriptor read/64, error -71 [ 847.730302][ T5884] usb usb3-port1: attempt power cycle [ 847.910820][T15104] sctp: [Deprecated]: syz.6.2335 (pid 15104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 847.910820][T15104] Use struct sctp_sack_info instead [ 848.095966][ T5884] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 848.117845][ T5884] usb 3-1: device descriptor read/8, error -71 [ 848.171959][ T42] gspca_se401: read req failed req 0x06 error -19 [ 848.179674][ T42] usb 7-1: USB disconnect, device number 11 [ 848.374021][ T5884] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 848.406691][ T5884] usb 3-1: device descriptor read/8, error -71 [ 848.541520][ T5884] usb usb3-port1: unable to enumerate USB device [ 848.925355][ T5815] gspca_se401: read req failed req 0x06 error -19 [ 848.933090][ T42] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 848.951338][ T5815] usb 5-1: USB disconnect, device number 91 [ 849.509202][ T42] usb 7-1: unable to get BOS descriptor or descriptor too short [ 849.523537][ T42] usb 7-1: config 0 interface 0 has no altsetting 0 [ 849.534182][ T42] usb 7-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 849.545625][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.553849][ T42] usb 7-1: Product: syz [ 849.558055][ T42] usb 7-1: Manufacturer: syz [ 849.563192][ T42] usb 7-1: SerialNumber: syz [ 849.696912][ T42] usb 7-1: config 0 descriptor?? [ 850.295797][ T42] snd_usb_podhd 7-1:0.0: Line 6 POD HDDESKTOP found [ 850.296900][ T5934] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 850.303941][ T42] snd_usb_podhd 7-1:0.0: set_interface failed [ 850.322881][ T42] snd_usb_podhd 7-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 850.331639][ T42] snd_usb_podhd 7-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 850.345531][ T42] usb 7-1: USB disconnect, device number 12 [ 850.573355][T12313] Bluetooth: hci6: Frame reassembly failed (-84) [ 851.389710][ T42] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 851.565389][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 851.574189][ T42] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 851.585993][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.596881][ T42] usb 7-1: Product: syz [ 851.601111][ T42] usb 7-1: Manufacturer: syz [ 851.606030][ T42] usb 7-1: SerialNumber: syz [ 851.613440][ T42] usb 7-1: config 0 descriptor?? [ 851.625380][ T42] gspca_main: se401-2.14.0 probing 047d:5003 [ 851.892605][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 851.975068][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 852.176413][ T1207] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 852.201921][ T1207] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 852.233795][ T1207] usb 6-1: USB disconnect, device number 33 [ 852.448495][ T5135] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 852.653487][T15167] ieee802154 phy0 wpan0: encryption failed: -22 [ 853.097934][ T42] gspca_se401: read req failed req 0x06 error -19 [ 853.377560][ T42] usb 7-1: USB disconnect, device number 13 [ 855.453431][ T42] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 855.950955][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 855.971402][ T42] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 856.318071][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.497227][ T42] usb 7-1: config 0 has no interface number 0 [ 856.571634][ T42] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 856.635066][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.666257][ T42] usb 7-1: config 0 descriptor?? [ 856.675349][ T42] ldusb 7-1:0.55: Interrupt in endpoint not found [ 856.736704][T11025] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 856.957385][T11025] usb 5-1: Using ep0 maxpacket: 32 [ 856.975302][ T911] usb 7-1: USB disconnect, device number 14 [ 857.002236][T11025] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 857.010756][T11025] usb 5-1: config 0 has no interface number 0 [ 857.010772][T11214] bridge_slave_1: left allmulticast mode [ 857.028079][T11214] bridge_slave_1: left promiscuous mode [ 857.031107][T11025] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 857.044633][T11214] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.059982][T11025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.088730][T11025] usb 5-1: Product: syz [ 857.093143][T11025] usb 5-1: Manufacturer: syz [ 857.097734][T11025] usb 5-1: SerialNumber: syz [ 857.105866][T11214] bridge_slave_0: left allmulticast mode [ 857.124150][T11214] bridge_slave_0: left promiscuous mode [ 857.131625][T11214] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.144290][T11025] usb 5-1: config 0 descriptor?? [ 857.166320][T11025] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 857.276598][T15212] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2361'. [ 857.376884][T11025] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 857.435344][T11025] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 857.822925][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 857.862242][ T5815] usb 5-1: USB disconnect, device number 92 [ 857.941370][ T5815] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 857.974528][ T5815] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 857.999091][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 858.005254][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 858.010322][ T5815] quatech2 5-1:0.51: device disconnected [ 858.027624][T15229] ceph: No mds server is up or the cluster is laggy [ 858.313529][T15237] netlink: 'syz.7.2366': attribute type 1 has an invalid length. [ 858.334842][T15237] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2366'. [ 858.351987][T11214] dvmrp0 (unregistering): left allmulticast mode [ 858.522652][ T5884] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 859.068069][ T5884] usb 7-1: Using ep0 maxpacket: 8 [ 859.097688][ T5884] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 859.408043][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.532424][ T5884] usb 7-1: Product: syz [ 859.536791][ T5884] usb 7-1: Manufacturer: syz [ 859.543879][ T5884] usb 7-1: SerialNumber: syz [ 859.571108][ T5884] usb 7-1: config 0 descriptor?? [ 859.599038][ T5884] gspca_main: se401-2.14.0 probing 047d:5003 [ 859.741634][T11214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.754073][T11214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.858141][T15257] overlayfs: missing 'lowerdir' [ 860.189492][T11214] bond0 (unregistering): Released all slaves [ 860.218831][T15259] 9pnet_fd: Insufficient options for proto=fd [ 860.582614][T11214] tipc: Disabling bearer [ 860.646210][T11214] tipc: Disabling bearer [ 860.720433][T11214] tipc: Left network mode [ 862.051651][ T5884] usb 7-1: reset high-speed USB device number 15 using dummy_hcd [ 862.071028][ T5884] usb 7-1: device reset changed ep0 maxpacket size! [ 862.108786][ T5884] gspca_se401: read req failed req 0x06 error -19 [ 862.131263][ T5884] usb 7-1: USB disconnect, device number 15 [ 862.135393][T11214] hsr_slave_0: left promiscuous mode [ 862.147176][T11214] hsr_slave_1: left promiscuous mode [ 862.372456][ T5884] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 862.557647][T15302] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2378'. [ 862.618429][ T5884] usb 7-1: Using ep0 maxpacket: 32 [ 862.628595][ T5884] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 862.697305][ T5884] usb 7-1: config 0 has no interface number 0 [ 862.768011][ T5884] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 862.811509][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.820931][ T5884] usb 7-1: Product: syz [ 862.826740][ T5884] usb 7-1: Manufacturer: syz [ 862.831481][ T5884] usb 7-1: SerialNumber: syz [ 862.842652][ T5884] usb 7-1: config 0 descriptor?? [ 862.852920][ T5884] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 863.316036][ T5884] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 863.469437][ T5884] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 863.534415][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 863.573445][ T5884] usb 7-1: USB disconnect, device number 16 [ 863.598303][ T5884] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 863.644783][ T5884] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 863.681038][ T5884] quatech2 7-1:0.51: device disconnected [ 863.740623][T15310] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 863.780967][T11214] team0 (unregistering): Port device team_slave_1 removed [ 863.820944][T11214] team0 (unregistering): Port device team_slave_0 removed [ 864.497045][T15336] FAULT_INJECTION: forcing a failure. [ 864.497045][T15336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.510151][T15336] CPU: 1 UID: 0 PID: 15336 Comm: syz.7.2388 Not tainted syzkaller #0 PREEMPT(full) [ 864.510173][T15336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 864.510183][T15336] Call Trace: [ 864.510189][T15336] [ 864.510197][T15336] dump_stack_lvl+0x16c/0x1f0 [ 864.510228][T15336] should_fail_ex+0x512/0x640 [ 864.510252][T15336] _copy_from_user+0x2e/0xd0 [ 864.510275][T15336] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 864.510296][T15336] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 864.510317][T15336] ? trace_sched_exit_tp+0xd1/0x120 [ 864.510337][T15336] ? __schedule+0x11a3/0x5de0 [ 864.510364][T15336] sk_getsockopt+0x13e/0x2eb0 [ 864.510389][T15336] ? avc_has_perm_noaudit+0x149/0x3b0 [ 864.510417][T15336] ? __pfx_sk_getsockopt+0x10/0x10 [ 864.510443][T15336] ? __pfx___schedule+0x10/0x10 [ 864.510485][T15336] ? find_held_lock+0x2b/0x80 [ 864.510505][T15336] ? __might_fault+0xe3/0x190 [ 864.510529][T15336] ? __might_fault+0xe3/0x190 [ 864.510552][T15336] ? __might_fault+0x13b/0x190 [ 864.510585][T15336] do_sock_getsockopt+0x3a3/0x440 [ 864.510615][T15336] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 864.510641][T15336] ? __rcu_read_unlock+0x2bc/0x550 [ 864.510669][T15336] __sys_getsockopt+0x12f/0x260 [ 864.510696][T15336] __x64_sys_getsockopt+0xbd/0x160 [ 864.510716][T15336] ? do_syscall_64+0x91/0xfa0 [ 864.510731][T15336] ? lockdep_hardirqs_on+0x7c/0x110 [ 864.510757][T15336] do_syscall_64+0xcd/0xfa0 [ 864.510774][T15336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.510792][T15336] RIP: 0033:0x7feb2cb8f6c9 [ 864.510805][T15336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.510822][T15336] RSP: 002b:00007feb2da6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 864.510839][T15336] RAX: ffffffffffffffda RBX: 00007feb2cde6180 RCX: 00007feb2cb8f6c9 [ 864.510850][T15336] RDX: 000000000000003b RSI: 0000000000000001 RDI: 0000000000000006 [ 864.510860][T15336] RBP: 00007feb2da6a090 R08: 0000200000000100 R09: 0000000000000000 [ 864.510871][T15336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.510880][T15336] R13: 00007feb2cde6218 R14: 00007feb2cde6180 R15: 00007ffc5051afd8 [ 864.510910][T15336] [ 865.272869][T15344] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15344 comm=syz.7.2391 [ 865.914005][T12313] smc: removing ib device sz1 [ 866.020712][ T5815] lo speed is unknown, defaulting to 1000 [ 866.051634][ T5815] sz1: Port: 1 Link DOWN [ 867.141758][T15354] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2393'. [ 867.158618][ T30] audit: type=1400 audit(822.021:1336): avc: denied { append } for pid=15359 comm="syz.4.2396" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 867.356257][ T911] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 867.501641][ T911] usb 3-1: device descriptor read/64, error -71 [ 867.762503][ T42] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 867.956110][ T911] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 868.062626][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 868.076111][ T42] usb 7-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 868.108429][ T42] usb 7-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 868.151638][ T42] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 868.173617][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.179568][ T911] usb 3-1: device descriptor read/64, error -71 [ 868.318955][ T911] usb usb3-port1: attempt power cycle [ 868.714063][ T911] usb 3-1: new low-speed USB device number 95 using dummy_hcd [ 868.972621][ T911] usb 3-1: device descriptor read/8, error -71 [ 868.980019][T15381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.013348][T15381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.038820][T15381] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 869.055325][ T30] audit: type=1400 audit(824.162:1337): avc: denied { write } for pid=15384 comm="syz.4.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 869.307924][ T911] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 869.357675][ T911] usb 3-1: device descriptor read/8, error -71 [ 869.512544][ T911] usb usb3-port1: unable to enumerate USB device [ 869.525942][T15401] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 870.840438][ T42] usb 7-1: USB disconnect, device number 17 [ 871.193819][ T30] audit: type=1400 audit(825.911:1338): avc: denied { ioctl } for pid=15411 comm="syz.6.2406" path="socket:[51578]" dev="sockfs" ino=51578 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 871.468734][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2405'. [ 871.478993][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2405'. [ 871.529684][T15410] netlink: 'syz.2.2405': attribute type 4 has an invalid length. [ 871.565137][T15399] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2403'. [ 871.574117][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2403'. [ 871.625324][T15418] netlink: 'syz.4.2407': attribute type 6 has an invalid length. [ 872.999677][ T42] wg2 speed is unknown, defaulting to 1000 [ 873.020557][ T42] syz2: Port: 1 Link DOWN [ 873.112159][T11214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.172849][ T1207] wg2 speed is unknown, defaulting to 1000 [ 873.602043][T15453] random: crng reseeded on system resumption [ 873.625710][T15453] Restarting kernel threads ... [ 873.638354][T15453] Done restarting kernel threads. [ 873.694080][T15453] 9pnet_fd: p9_fd_create_tcp (15453): problem connecting socket to 127.0.0.1 [ 873.740195][ T30] audit: type=1400 audit(828.464:1339): avc: denied { ioctl } for pid=15445 comm="syz.5.2414" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 874.453586][T11214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.590488][T11214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.169236][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2417'. [ 875.178109][T15467] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2417'. [ 875.187216][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2417'. [ 875.205591][ T3492] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 875.289920][ T3492] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 875.377403][T15467] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.424402][T11214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.469787][ T3492] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 875.626324][T11214] bridge0: port 3(batadv0) entered disabled state [ 875.639811][T11214] bridge_slave_1: left allmulticast mode [ 875.647040][T11214] bridge_slave_1: left promiscuous mode [ 875.759152][T11214] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.769221][T11214] bridge_slave_0: left allmulticast mode [ 875.775504][T11214] bridge_slave_0: left promiscuous mode [ 875.781414][T11214] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.075266][T11214] dvmrp0 (unregistering): left allmulticast mode [ 876.320599][T11214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.336114][T11214] bond0 (unregistering): Released all slaves [ 876.508598][T15491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 876.633928][T15491] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 877.483095][ T30] audit: type=1400 audit(832.017:1340): avc: denied { bind } for pid=15504 comm="syz.4.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 877.564287][T15467] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.574730][T15467] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.488110][T15467] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.499310][T15467] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.566692][T11214] hsr_slave_0: left promiscuous mode [ 878.583575][T11214] hsr_slave_1: left promiscuous mode [ 878.702966][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.710387][T11214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.778331][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.785709][T11214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.877146][T11214] veth1_vlan: left allmulticast mode [ 878.882676][T11214] dummy0: left allmulticast mode [ 878.945586][T11214] veth1_macvtap: left promiscuous mode [ 878.965014][T11214] veth0_macvtap: left promiscuous mode [ 878.983544][T11214] veth1_vlan: left promiscuous mode [ 878.994865][T11214] veth0_vlan: left promiscuous mode [ 879.675323][T11214] pim6reg (unregistering): left allmulticast mode [ 881.727340][T11214] team0 (unregistering): Port device team_slave_1 removed [ 881.755685][T11214] team0 (unregistering): Port device team_slave_0 removed [ 881.981030][ T6566] smc: removing ib device syz2 [ 882.414441][T15467] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.424821][T15467] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.604897][ T5934] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.706323][ T5934] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.847551][ T5934] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.855755][ T5934] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.865853][ T5934] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.874120][ T5934] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.882733][ T5934] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.891208][ T5934] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.991306][T15568] Invalid logical block size (9) [ 884.100529][T15581] overlayfs: failed to resolve './file1': -2 [ 885.535946][T15603] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2443'. [ 885.862733][T15614] openvswitch: netlink: Message has 4 unknown bytes. [ 887.445382][T15643] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2452'. [ 887.455240][T15643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2452'. [ 887.465408][T15643] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2452'. [ 888.107746][ T5815] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 888.316223][ T5815] usb 5-1: Using ep0 maxpacket: 32 [ 888.330067][ T5815] usb 5-1: config index 0 descriptor too short (expected 11044, got 36) [ 888.355568][ T5815] usb 5-1: config 36 has an invalid descriptor of length 128, skipping remainder of the config [ 888.434220][ T5815] usb 5-1: config 36 has 0 interfaces, different from the descriptor's value: 9 [ 888.518464][ T5815] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 888.546868][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.721402][T11214] IPVS: stop unused estimator thread 0... [ 888.736215][T15653] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2453'. [ 888.745822][ T5135] Bluetooth: hci5: ISO packet for unknown connection handle 1550 [ 888.797751][ T5919] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 888.958310][ T5919] usb 7-1: device descriptor read/64, error -71 [ 889.045626][ T5815] usb 5-1: string descriptor 0 read error: -71 [ 889.056616][ T5815] usb 5-1: USB disconnect, device number 93 [ 889.278669][ T5919] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 889.431172][ T5919] usb 7-1: device descriptor read/64, error -71 [ 889.956484][ T5919] usb usb7-port1: attempt power cycle [ 890.348220][ T5919] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 890.384570][T15683] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2460'. [ 890.422439][T15683] openvswitch: netlink: Missing key (keys=40, expected=80) [ 890.431154][ T5919] usb 7-1: device descriptor read/8, error -71 [ 890.472525][T15688] overlayfs: conflicting options: userxattr,metacopy=on [ 890.711802][ T5919] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 890.778122][ T5919] usb 7-1: device descriptor read/8, error -71 [ 890.927065][ T5919] usb usb7-port1: unable to enumerate USB device [ 891.417013][T15694] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2463'. [ 891.981372][ T5919] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 891.988401][T15719] netlink: 'syz.4.2468': attribute type 3 has an invalid length. [ 892.085572][ T24] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 892.268475][ T5919] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 892.282285][ T5919] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.437878][ T5919] usb 6-1: config 0 interface 0 has no altsetting 0 [ 892.445217][ T5919] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 892.454300][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.474999][ T5919] usb 6-1: config 0 descriptor?? [ 892.519025][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 892.537368][ T24] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 892.547576][ T24] usb 3-1: config 0 has no interface number 0 [ 892.588340][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 892.623377][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.641710][ T24] usb 3-1: Product: syz [ 892.662343][ T24] usb 3-1: Manufacturer: syz [ 892.667124][ T24] usb 3-1: SerialNumber: syz [ 892.685027][ T24] usb 3-1: config 0 descriptor?? [ 892.711916][ T24] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 892.923820][ T5919] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 892.942906][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 892.942997][ T5919] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 892.959229][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 893.084453][ T30] audit: type=1400 audit(846.577:1341): avc: denied { remount } for pid=15732 comm="syz.6.2471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 893.103745][ C0] vkms_vblank_simulate: vblank timer overrun [ 893.150320][ T5815] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 893.163524][ T5919] hid-steam 0003:28DE:1102.000B: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 893.544299][ T5919] hid-steam 0003:28DE:1102.000B: Steam Controller 'XXXXXXXXXX' connected [ 893.566961][ T5815] usb 5-1: Using ep0 maxpacket: 32 [ 893.574442][ T5919] input: Steam Controller as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1102.000B/input/input34 [ 893.593759][ T5815] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 893.594713][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 893.602258][ T5815] usb 5-1: config 0 has no interface number 0 [ 893.610054][ T5884] usb 3-1: USB disconnect, device number 97 [ 893.648047][ T5884] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 893.674816][ T5884] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 893.716805][ T5884] quatech2 3-1:0.51: device disconnected [ 893.733901][ T5815] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 893.823385][ T5815] usb 5-1: config 0 interface 85 has no altsetting 0 [ 893.857175][ T5815] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 893.877856][ T5919] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 893.885161][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.897603][ T5919] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 893.913874][ T5815] usb 5-1: Product: syz [ 893.929230][ T5815] usb 5-1: Manufacturer: syz [ 893.974236][ T5815] usb 5-1: SerialNumber: syz [ 894.014288][ T5919] hid-steam 0003:28DE:1102.000C: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 894.038152][ T5815] usb 5-1: config 0 descriptor?? [ 894.144697][ T5919] usb 6-1: USB disconnect, device number 34 [ 894.212652][T15750] fido_id[15750]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 894.239135][ T5919] hid-steam 0003:28DE:1102.000B: Steam Controller 'XXXXXXXXXX' disconnected [ 894.879480][ T5815] appletouch 5-1:0.85: Geyser mode initialized. [ 895.177722][ T5815] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input35 [ 895.266724][ T5815] usb 5-1: USB disconnect, device number 94 [ 895.273065][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 895.664736][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 895.820581][ T5815] appletouch 5-1:0.85: input: appletouch disconnected [ 895.840125][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 896.047032][T15781] netlink: 'syz.2.2480': attribute type 21 has an invalid length. [ 896.054931][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'. [ 896.107281][ T9] usb 6-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 896.134576][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 896.143791][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 896.154967][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.162949][ T9] usb 6-1: Product: syz [ 896.167894][ T9] usb 6-1: Manufacturer: syz [ 896.172539][ T9] usb 6-1: SerialNumber: syz [ 896.193569][T15758] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 898.587498][T15809] netlink: 'syz.4.2487': attribute type 1 has an invalid length. [ 898.733360][T15758] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2477'. [ 898.742411][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2477'. [ 898.786289][ T9] usb 6-1: USB disconnect, device number 35 [ 899.562419][T15819] SELinux: failed to load policy [ 899.605962][ T30] audit: type=1400 audit(852.664:1342): avc: denied { load_policy } for pid=15818 comm="syz.7.2489" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 899.658991][T15827] netlink: 'syz.2.2490': attribute type 23 has an invalid length. [ 899.694265][T15819] vlan2: entered promiscuous mode [ 899.699381][T15819] bridge0: entered promiscuous mode [ 899.704681][T15819] vlan2: entered allmulticast mode [ 899.709818][T15819] bridge0: entered allmulticast mode [ 899.759563][ T30] audit: type=1400 audit(852.888:1343): avc: denied { listen } for pid=15826 comm="syz.2.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 899.860975][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2490'. [ 899.888423][T15831] netlink: 'syz.6.2491': attribute type 3 has an invalid length. [ 899.933236][T15839] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 899.939857][T15839] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 900.135436][ T30] audit: type=1400 audit(853.253:1344): avc: denied { bind } for pid=15835 comm="syz.7.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 901.442961][T15861] vlan2: entered promiscuous mode [ 901.448050][T15861] vlan2: entered allmulticast mode [ 901.453200][T15861] bridge0: entered allmulticast mode [ 904.937969][T15907] netlink: 'syz.5.2510': attribute type 3 has an invalid length. [ 906.414351][T15931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2517'. [ 906.668025][ T30] audit: type=1400 audit(859.369:1345): avc: denied { read } for pid=15935 comm="syz.7.2518" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 906.703048][ T30] audit: type=1400 audit(859.387:1346): avc: denied { open } for pid=15935 comm="syz.7.2518" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 906.727290][ T30] audit: type=1400 audit(859.387:1347): avc: denied { ioctl } for pid=15935 comm="syz.7.2518" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 908.389184][ T42] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 908.546461][ T24] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 908.634899][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 909.139176][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 909.164313][ T42] usb 6-1: config 4 has an invalid interface number: 41 but max is 0 [ 909.182500][ T42] usb 6-1: config 4 has no interface number 0 [ 909.193092][ T42] usb 6-1: config 4 interface 41 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 909.208576][ T42] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=c5.75 [ 909.218233][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.226673][ T42] usb 6-1: Product: syz [ 909.231135][ T24] usb 5-1: config index 0 descriptor too short (expected 42, got 36) [ 909.241441][ T42] usb 6-1: Manufacturer: syz [ 909.249603][ T24] usb 5-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 909.262139][ T42] usb 6-1: SerialNumber: syz [ 909.271645][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 909.286093][T15947] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 909.298296][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 909.334306][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.358798][ T24] usb 5-1: config 0 descriptor?? [ 909.696023][T15970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.707319][T15970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.852821][T15974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.862819][T15974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.887581][T15974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.898031][T15974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.201429][ T42] peak_usb 6-1:4.41 can0: sending cmd f=0x6 n=0x1 failure: -71 [ 911.222819][ T42] peak_usb 6-1:4.41: unable to read PCAN-USB serial number (err -71) [ 911.318123][T15988] netlink: 'syz.6.2527': attribute type 3 has an invalid length. [ 911.909658][ T42] peak_usb 6-1:4.41: probe with driver peak_usb failed with error -71 [ 911.980181][ T42] usb 6-1: USB disconnect, device number 36 [ 912.215981][ T24] usb 5-1: can't set config #0, error -71 [ 912.255570][ T24] usb 5-1: USB disconnect, device number 95 [ 912.313800][ T5877] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 912.652822][T16014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 912.701843][ T5877] usb 7-1: Using ep0 maxpacket: 32 [ 912.713830][ T5877] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 913.120806][ T5877] usb 7-1: config 0 has no interface number 0 [ 913.142400][ T5877] usb 7-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 913.200950][ T5877] usb 7-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 913.279063][ T5877] usb 7-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 913.361909][ T5877] usb 7-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 913.386021][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.490025][ T5877] usb 7-1: Product: syz [ 913.494532][ T5877] usb 7-1: Manufacturer: syz [ 913.510240][ T5877] usb 7-1: SerialNumber: syz [ 913.538752][ T5877] usb 7-1: config 0 descriptor?? [ 913.584620][T15993] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 913.604238][T15993] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 913.766954][ T5877] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 914.388595][ T5877] usb 7-1: USB disconnect, device number 22 [ 914.688019][ T30] audit: type=1400 audit(866.859:1348): avc: denied { nosuid_transition } for pid=16027 comm="syz.4.2534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 914.719923][ T30] audit: type=1400 audit(866.859:1349): avc: denied { transition } for pid=16027 comm="syz.4.2534" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 914.914342][ T30] audit: type=1400 audit(866.859:1350): avc: denied { entrypoint } for pid=16027 comm="syz.4.2534" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=368 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 915.034622][T16047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 915.046180][ T30] audit: type=1400 audit(866.859:1351): avc: denied { share } for pid=16027 comm="syz.4.2534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 915.065996][ T30] audit: type=1400 audit(866.859:1352): avc: denied { noatsecure } for pid=16027 comm="syz.4.2534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 915.087648][ T30] audit: type=1400 audit(867.186:1353): avc: denied { accept } for pid=16045 comm="syz.4.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 915.201142][ T1207] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 915.226588][T16051] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.2538'. [ 915.289984][T16051] openvswitch: netlink: Flow key attr not present in new flow. [ 915.425924][ T1207] usb 3-1: Using ep0 maxpacket: 32 [ 915.668979][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.692007][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.711755][ T1207] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 915.738922][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.782929][ T1207] usb 3-1: config 0 descriptor?? [ 916.480709][ T1207] uclogic 0003:28BD:0074.000D: interface is invalid, ignoring [ 916.774699][T16041] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 916.914541][T16071] ================================================================== [ 916.922591][T16071] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 916.930543][T16071] Read of size 8 at addr ffff888034cab630 by task syz.6.2544/16071 [ 916.938398][T16071] [ 916.940693][T16071] CPU: 0 UID: 0 PID: 16071 Comm: syz.6.2544 Not tainted syzkaller #0 PREEMPT(full) [ 916.940707][T16071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 916.940714][T16071] Call Trace: [ 916.940719][T16071] [ 916.940723][T16071] dump_stack_lvl+0x116/0x1f0 [ 916.940741][T16071] print_report+0xcd/0x630 [ 916.940753][T16071] ? __virt_addr_valid+0x81/0x610 [ 916.940769][T16071] ? __phys_addr+0xe8/0x180 [ 916.940783][T16071] ? sysfs_remove_file_ns+0x63/0x70 [ 916.940794][T16071] kasan_report+0xe0/0x110 [ 916.940805][T16071] ? sysfs_remove_file_ns+0x63/0x70 [ 916.940817][T16071] sysfs_remove_file_ns+0x63/0x70 [ 916.940828][T16071] driver_remove_file+0x4a/0x60 [ 916.940842][T16071] bus_remove_driver+0x224/0x2c0 [ 916.940858][T16071] driver_unregister+0x76/0xb0 [ 916.940869][T16071] comedi_device_detach_locked+0x12f/0xa50 [ 916.940883][T16071] do_devconfig_ioctl+0x555/0x710 [ 916.940901][T16071] ? __mutex_lock+0x1c5/0x1060 [ 916.940912][T16071] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 916.940930][T16071] ? find_held_lock+0x2b/0x80 [ 916.940944][T16071] comedi_unlocked_ioctl+0x165d/0x2f00 [ 916.940955][T16071] ? futex_wake+0x1ad/0x530 [ 916.940966][T16071] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 916.940981][T16071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 916.940995][T16071] ? do_vfs_ioctl+0x128/0x14f0 [ 916.941009][T16071] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 916.941022][T16071] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 916.941037][T16071] ? hook_file_ioctl_common+0x145/0x410 [ 916.941053][T16071] ? selinux_file_ioctl+0x180/0x270 [ 916.941063][T16071] ? selinux_file_ioctl+0xb4/0x270 [ 916.941074][T16071] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 916.941084][T16071] __x64_sys_ioctl+0x18e/0x210 [ 916.941098][T16071] do_syscall_64+0xcd/0xfa0 [ 916.941108][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.941118][T16071] RIP: 0033:0x7fa59498f6c9 [ 916.941127][T16071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.941137][T16071] RSP: 002b:00007fa595859038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 916.941147][T16071] RAX: ffffffffffffffda RBX: 00007fa594be5fa0 RCX: 00007fa59498f6c9 [ 916.941154][T16071] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 916.941160][T16071] RBP: 00007fa594a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 916.941166][T16071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.941173][T16071] R13: 00007fa594be6038 R14: 00007fa594be5fa0 R15: 00007ffe2f23a428 [ 916.941182][T16071] [ 916.941186][T16071] [ 917.196515][T16071] Allocated by task 16013: [ 917.200898][T16071] kasan_save_stack+0x33/0x60 [ 917.205544][T16071] kasan_save_track+0x14/0x30 [ 917.210186][T16071] __kasan_kmalloc+0xaa/0xb0 [ 917.214744][T16071] __kmalloc_noprof+0x32f/0x880 [ 917.219565][T16071] iter_file_splice_write+0x1cc/0x12e0 [ 917.224996][T16071] direct_splice_actor+0x192/0x6c0 [ 917.230075][T16071] splice_direct_to_actor+0x345/0xa30 [ 917.235411][T16071] do_splice_direct+0x174/0x240 [ 917.240239][T16071] do_sendfile+0xb06/0xe50 [ 917.244625][T16071] __x64_sys_sendfile64+0x1d8/0x220 [ 917.249790][T16071] do_syscall_64+0xcd/0xfa0 [ 917.254260][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.260120][T16071] [ 917.262411][T16071] Freed by task 16013: [ 917.266442][T16071] kasan_save_stack+0x33/0x60 [ 917.271086][T16071] kasan_save_track+0x14/0x30 [ 917.275736][T16071] __kasan_save_free_info+0x3b/0x60 [ 917.280904][T16071] __kasan_slab_free+0x5f/0x80 [ 917.285635][T16071] kfree+0x2b8/0x6d0 [ 917.289501][T16071] iter_file_splice_write+0x67a/0x12e0 [ 917.294928][T16071] direct_splice_actor+0x192/0x6c0 [ 917.300004][T16071] splice_direct_to_actor+0x345/0xa30 [ 917.305343][T16071] do_splice_direct+0x174/0x240 [ 917.310160][T16071] do_sendfile+0xb06/0xe50 [ 917.314546][T16071] __x64_sys_sendfile64+0x1d8/0x220 [ 917.319712][T16071] do_syscall_64+0xcd/0xfa0 [ 917.324182][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.330041][T16071] [ 917.332336][T16071] The buggy address belongs to the object at ffff888034cab600 [ 917.332336][T16071] which belongs to the cache kmalloc-256 of size 256 [ 917.346353][T16071] The buggy address is located 48 bytes inside of [ 917.346353][T16071] freed 256-byte region [ffff888034cab600, ffff888034cab700) [ 917.360031][T16071] [ 917.362340][T16071] The buggy address belongs to the physical page: [ 917.368730][T16071] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34caa [ 917.377457][T16071] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 917.385921][T16071] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 917.393779][T16071] page_type: f5(slab) [ 917.397728][T16071] raw: 00fff00000000040 ffff88813ffa6b40 ffffea0001b25f80 dead000000000003 [ 917.406277][T16071] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 917.414827][T16071] head: 00fff00000000040 ffff88813ffa6b40 ffffea0001b25f80 dead000000000003 [ 917.423464][T16071] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 917.432099][T16071] head: 00fff00000000001 ffffea0000d32a81 00000000ffffffff 00000000ffffffff [ 917.440736][T16071] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 917.449369][T16071] page dumped because: kasan: bad access detected [ 917.455744][T16071] page_owner tracks the page as allocated [ 917.461423][T16071] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5819, tgid 5819 (syz-executor), ts 65648564033, free_ts 65639495330 [ 917.481962][T16071] post_alloc_hook+0x1c0/0x230 [ 917.486701][T16071] get_page_from_freelist+0x10a3/0x3a30 [ 917.492215][T16071] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 917.498078][T16071] alloc_pages_mpol+0x1fb/0x550 [ 917.502896][T16071] new_slab+0x24a/0x360 [ 917.507023][T16071] ___slab_alloc+0xd79/0x1a50 [ 917.511668][T16071] __slab_alloc.constprop.0+0x63/0x110 [ 917.517098][T16071] __kmalloc_noprof+0x501/0x880 [ 917.521919][T16071] security_inode_init_security+0x13f/0x390 [ 917.527784][T16071] shmem_mknod+0x22e/0x450 [ 917.532167][T16071] shmem_mkdir+0x31/0x80 [ 917.536381][T16071] vfs_mkdir+0x593/0x8c0 [ 917.540594][T16071] do_mkdirat+0x304/0x3e0 [ 917.544891][T16071] __x64_sys_mkdirat+0x83/0xb0 [ 917.549621][T16071] do_syscall_64+0xcd/0xfa0 [ 917.554095][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.559975][T16071] page last free pid 13 tgid 13 stack trace: [ 917.565918][T16071] __free_frozen_pages+0x7df/0x1160 [ 917.571086][T16071] qlist_free_all+0x4d/0x120 [ 917.575641][T16071] kasan_quarantine_reduce+0x195/0x1e0 [ 917.581065][T16071] __kasan_slab_alloc+0x69/0x90 [ 917.585881][T16071] __kmalloc_noprof+0x2e8/0x880 [ 917.590702][T16071] fib6_info_alloc+0x40/0x160 [ 917.595344][T16071] ip6_route_info_create+0x14c/0x870 [ 917.600600][T16071] ip6_route_add.part.0+0x22/0x1d0 [ 917.605681][T16071] ip6_route_add+0x45/0x60 [ 917.610067][T16071] addrconf_add_mroute+0x1dd/0x350 [ 917.615148][T16071] addrconf_add_dev+0x14e/0x1c0 [ 917.619963][T16071] addrconf_init_auto_addrs+0x201/0x810 [ 917.625478][T16071] addrconf_notify+0x6e2/0x19e0 [ 917.630298][T16071] notifier_call_chain+0xbc/0x410 [ 917.635294][T16071] call_netdevice_notifiers_info+0xbe/0x140 [ 917.641159][T16071] netif_state_change+0x165/0x3b0 [ 917.646150][T16071] [ 917.648439][T16071] Memory state around the buggy address: [ 917.654033][T16071] ffff888034cab500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 917.662060][T16071] ffff888034cab580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 917.670085][T16071] >ffff888034cab600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 917.678109][T16071] ^ [ 917.683705][T16071] ffff888034cab680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 917.691731][T16071] ffff888034cab700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 917.699755][T16071] ================================================================== [ 917.709056][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 917.715435][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 917.872894][T16071] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 917.880113][T16071] CPU: 1 UID: 0 PID: 16071 Comm: syz.6.2544 Not tainted syzkaller #0 PREEMPT(full) [ 917.889474][T16071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 917.899518][T16071] Call Trace: [ 917.902792][T16071] [ 917.905716][T16071] dump_stack_lvl+0x3d/0x1f0 [ 917.910318][T16071] vpanic+0x640/0x6f0 [ 917.914306][T16071] panic+0xca/0xd0 [ 917.918032][T16071] ? __pfx_panic+0x10/0x10 [ 917.922452][T16071] ? sysfs_remove_file_ns+0x63/0x70 [ 917.927648][T16071] ? preempt_schedule_common+0x44/0xc0 [ 917.933110][T16071] ? preempt_schedule_thunk+0x16/0x30 [ 917.938487][T16071] check_panic_on_warn+0xab/0xb0 [ 917.943417][T16071] end_report+0x107/0x170 [ 917.947741][T16071] kasan_report+0xee/0x110 [ 917.952153][T16071] ? sysfs_remove_file_ns+0x63/0x70 [ 917.957349][T16071] sysfs_remove_file_ns+0x63/0x70 [ 917.962375][T16071] driver_remove_file+0x4a/0x60 [ 917.967226][T16071] bus_remove_driver+0x224/0x2c0 [ 917.972167][T16071] driver_unregister+0x76/0xb0 [ 917.976931][T16071] comedi_device_detach_locked+0x12f/0xa50 [ 917.982739][T16071] do_devconfig_ioctl+0x555/0x710 [ 917.987764][T16071] ? __mutex_lock+0x1c5/0x1060 [ 917.992522][T16071] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 917.998078][T16071] ? find_held_lock+0x2b/0x80 [ 918.002755][T16071] comedi_unlocked_ioctl+0x165d/0x2f00 [ 918.008207][T16071] ? futex_wake+0x1ad/0x530 [ 918.012711][T16071] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 918.018512][T16071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 918.024404][T16071] ? do_vfs_ioctl+0x128/0x14f0 [ 918.029166][T16071] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 918.034190][T16071] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 918.041044][T16071] ? hook_file_ioctl_common+0x145/0x410 [ 918.046589][T16071] ? selinux_file_ioctl+0x180/0x270 [ 918.051780][T16071] ? selinux_file_ioctl+0xb4/0x270 [ 918.056890][T16071] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 918.062687][T16071] __x64_sys_ioctl+0x18e/0x210 [ 918.067454][T16071] do_syscall_64+0xcd/0xfa0 [ 918.071952][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.077840][T16071] RIP: 0033:0x7fa59498f6c9 [ 918.082247][T16071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.101846][T16071] RSP: 002b:00007fa595859038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 918.110253][T16071] RAX: ffffffffffffffda RBX: 00007fa594be5fa0 RCX: 00007fa59498f6c9 [ 918.118220][T16071] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 918.126178][T16071] RBP: 00007fa594a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 918.134142][T16071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.142104][T16071] R13: 00007fa594be6038 R14: 00007fa594be5fa0 R15: 00007ffe2f23a428 [ 918.150073][T16071] [ 918.153276][T16071] Kernel Offset: disabled [ 918.157574][T16071] Rebooting in 86400 seconds..