last executing test programs: 12m10.341667196s ago: executing program 0 (id=502): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14400000", @ANYRES16=r0, @ANYBLOB="00082bbd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000004}, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x800000000000, 0x0, 0x0, 0x0, 0xc, 0x4, 0x3966, 0x1, 0x8000, 0xffffffff, r4, r5, 0x7ff, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpgrp(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002740)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000002840), 0x800) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$peeksig(0x4209, r10, &(0x7f0000000180)={0x9d, 0x1}, &(0x7f00000001c0)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002bc0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002c00)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) r13 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000003380)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000033c0)={{{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f00000034c0)=0xe8) r16 = getegid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000003500)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r19 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r19, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r19, &(0x7f0000005340)={0x78, 0x0, r20, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r21, r22, 0xb, 0x8, 0x1000000}}}, 0x78) r23 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r23) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="6b56489fe800a7eecd757003ad56b6b8d2109516fc038a9941d58792f91d6dcd127a4c5572c4884e6367dcd3662fba5eb798953c9487ff4b25bb1e8225e98036fdd3365f8fb1115aa7848cc0565ed7ba84f5bee0e28043045f75086f7f942827470162147ef892357a69e07cdcd43a4fbcf882ab8cde53f88f3cb9e9b56577b9b9a974207fd8735d343aa08428e267c837808c5bd3ebdedf5f1bdbd417e1e3db9b66a24dc627c0717d527eb5e8587f5c19d94491c363b52256007e82e24d016c5eaf71a2f39bc04f68", 0xc9}, {&(0x7f0000000400)="8f420207ce1417d4455cbfbfed556202f2b1f065808b5205edcd228e9aac62d9865831bc010844178fe9c5b4e8ad278fa10266c44ef21b78c59b0f8cc1501bbe057988012f0b04a01fdc2c41ca951b0d6624964745013958510584772a096d8a0bd53fbbf185df159f574a6fa27af997424eabab94c7df947da9e327c800fcd511eecaaa53b23fcc32c078dec329d64c72bd3d3f88b47a4a457612245907060e280847552beacfca7f9322925bb281", 0xaf}, {&(0x7f00000004c0)="d099e0b0e7cdb7ff8cd5ed95de9aec7ad4c30c4af6561dca72fb95f1286e49bfa149def708cbd2898b18d5b811e7dd118611b417d395", 0x36}, {&(0x7f0000000500)="9060a80eb4be5536a2fa4c867e0edf4063dbf9940baef1eab0a964fb4906c9776fc82d21cfc23a9382c8b3bf4a752b5ea67995057aa33f532af70ffc02eee591aa2340860bc1324eb1668dc43f4926d614dd9993d6bc439ca8acafc2304f37ee73625ac997b21f93e5fdada94405c4b6dc179d37c62df554a192abf8fa1d5a7d6323d571c1e018287386a10b0579c919fa9b52df533661e1dbe3ee9d00948427c6dbeb7667cd65b836019c5127cdd9af4653342c83a329750f4f1dcb764dcf0f54f9e19a002c96d659d07740418e08e185f93886e89e7395873175ed7c54b6", 0xdf}, {&(0x7f0000000600)="0c1704836cb1d29743a985082e251a8021b27fcc2179253f9cd8eb4c158dea8edd27917b0538ce13172c528dd6835afa4025ea89f9a4f29a7df7125d61d8cfa095e34a7126aba35a1e847a227926abaa68b24ab12902ca03540f9235540bbdc255691d5b861bee919a5cc329af560efca1f56e64418f688aaa1e87a2ff492d155b1c7523bdaffb581e51b6cc0f87567433", 0x91}], 0x5, 0x0, 0x0, 0x40080}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000740)="a029771d5bd52ce5b0e5c83fe8170f85aff81911d4297ccab89bef3f7d01a7c2e180569d252fceff66639ba310e816f6aa7be15567e841063d7103fa1b79db6e4192a73970ba1089761d7cd1473a5d666ba5d56b51c8deaf8de099d87884fff3cfc837491e294f110a6a2537dd13b28de129f24e160585d710dc", 0x7a}], 0x1, &(0x7f0000000800)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r1]}}, @rights={{0x10}}], 0x30}}, {{&(0x7f0000000840)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000008c0)="ae12ea37c6647f30cfc446eab8ed5174a2449575bb9dd2d7fc095273e0c20c20e21bc06de076d43c462ee298cf05642fa0110940b6b70b56b4c39ae389b410292c67e3632527a967ca67", 0x4a}, {&(0x7f0000000940)="5f53675880437f4f849603cc936c36ef15b85ef71bff6cfc3937f44369ca4853e429e79fca5ae90c579691712a68c33ab7400a02c1c5545a9a3b989ec4f246d1de9130b59a8a177242df8e5d9b743b6495eb4a4335bad63317", 0x59}], 0x2, &(0x7f0000000a00)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x8004}}, {{&(0x7f0000000a40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000ac0)="ec119eee4cfdb8ff29f5af8eab8418a2d7fedeb5f5c660", 0x17}, {&(0x7f0000000b00)="124db219b01ea53033ed70b334c88c9518e6701c2bdbf8236fb4c836631892644d51b7e0c4fa90fe9e645d9cc9d27b83b43b761981fc97d77dd06aaff6dd4f52a41d8377b37d9af76df8a8aafcbe9e65b74c66b0abe632b7bc7795633af7dcf6dfae688d7d07ac23878e40b204bb0af3d9f013b1c977e4cd89d2a6ef29b837e0b4f695363a44244a944b26bd2e51a3554fc984b9d9ed40ec114e2168e6ae4d04f5b2b9d14de5d5c8ac020bf369b6b6b1bb5c73ed9eef3047fcc521e18ba64c396711c1d6347916daea08b85e08adb73dac8de4d207e816ee4dd3", 0xda}], 0x2, &(0x7f0000001040)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x98, 0x4000}}, {{&(0x7f0000001100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000001180)="1a2864cb6f7e12180a0bf8ec92117517e67498d5cbd21bb009d4d3c346e5cc870ccf3f157e07051f12f52f78ba0fa329d5868e9ddae15858b026414bf5bd45de7a742e9589b38f1651eab70e5c307ba5973d14022e1c2f762ff69b3b1f475961876ac4f9d0c8495a7f72a0c9053f8a1a5abab5182ee0f770b1f7a6c431d49ab3cf13429d0bdd05cc050794e33fc98908aabe08b2ac329dd205cf9f2d7f99bc30070c0a0e873884065b0a07eb74bd8afd0e5f6d8e928df5e103", 0xb9}, {&(0x7f0000001240)="67a2640f3bd9a15e6002763e186a05e5ca00f00ac306df288e7f7e7a1567a7dea9d29071b6e0fd2482d19154a518491512ff4e7268c05c7d552f245a4965ef3f2d4b24caf7d0d61265ff469c12ae91ee31798c19d37cfa3a3885668630cfb2f88af23d2c28528e307ae6e8d1df26584487ae68d224c9bf9b5cfaf67252238e787903ef816b8e6fa88a8672a992cbbb61549e30d9a96bf9f4353c6a46bb3e21282a427cef84be3db56e61592890009b3bd7a5b28ea2b6624cdcf95f0cd3aeb2704a00405806f943e54b5e4032c3333df08bf47c8e68e5d4cf52876cd51b", 0xdd}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="c6409ac8cbae1f5326833f0166a02be76c6b4f906db74502dd2fda60cc323fc66dcd5e0919c72fd48117f341b7ed2a608f61ba502c1f14209c31fec3f343fbc5f309393637040cc2a8a28457beb64397335c2578fd496a29628239f9777711e2ff9bef2ab5866b8e49fc6fa6108f95c4cb235b24a8ee", 0x76}, {&(0x7f00000023c0)="96839de520c984e2480d1110d723d82b0be7b0cf0e32ab1ad107adb856d7f38df3919bad98235446e31c0c3608bf5078d86fc8fbe102b01e03", 0x39}], 0x5, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x34, 0x1, 0x1, [r1, r1, r1, r1, r1, r9, r1, r1, r2]}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002940)="b280deafe0955d13b4fa885c31a30367808a47a9ced8dd60e1869a9b022b348058b4c5dd2b8e1f32913b135fb5328e6fc26f768cda2f010a602f575e22b311be473ca8d9a3e713cbf7b5b2e12c936ae4309dcc00e773d560dd280c79ba02213a985d155e361222f1538140ae15e109ec23a91fd3110afd3caf2831d4c2a22933cc", 0x81}, {&(0x7f0000002a00)="d5c42c89c76c53ff71fcef39cd3b43672e29dbce65f1df8aaf2747a4326375870afaf94bee1545a41f3453fdef16293784907a9d5afc9fffa7df2a64305fde58adfe951b2379ee56a0c50d5ea37d0a0d484fc5ab086869999181a2fa40", 0x5d}, {&(0x7f0000002a80)="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", 0xfe}], 0x3, &(0x7f0000002c40)=[@cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r13]}}], 0x70}}, {{&(0x7f0000002cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003300)=[{&(0x7f0000002d40)="17880978d990667039e95700e7c1bd8d6665cb0bbad448a0f465004ea0f8ab53c769d5e0310c3aa77b5f1d1b667b996cb2d7727d9c75fa214693000b7bbae506c6770ec63e62300416df3fdabb1e65c92721836c2cbed73d0a55ef249d7b51a0ab5238f1ed6b86c6d3f96f60fa92f73e2daa934e9f6222ed302465c2ac2d4fcfb9c524d709277c777b17b4ee98fc1465ee5be5a2694e19b867f98357d3661d530a317ad4477165251561cdcc790541d64d169262592a1989ff5f2cc068f1ee2bfaf0ee7aad031c1a9bc7c434b17c1c9f06fe", 0xd2}, {&(0x7f0000002e40)="4b797e10f25f34b2cbf7b0b05cd6303060becab8afb47846857cc5ac5688261f31b8fbce991768931686b489410208c5be29676c7d3c79b88c4a961f4519a5dd74beae48d965fca025cdfc273846202942fe5f3c051cdfb28156abba6bb76026e84b5e7850a61add85095b21d91369ba3b88484208073d15dcbbe23d7254d1f5cc75bbe39e336e9e1ae3888598851e8d4a4ae13947eaad0b5a62618562c22b659133c8f5d6724e09eb167c779c9e542e5a7790926030847a62ebd7cd67e8dd2aa9c01e8c7ba61bf755e716426980e7f786893ae54b1b46f2c8bb0f70727389d5", 0xe0}, {&(0x7f0000002f40)="1242bd0ae3618fbca8db937de21a652c7f55889346830eb061870337d40b1e2a549d817516b2ffce4fa5ee04f42538de4bf0e93c64b2eb16b035b2ff2939f2e378e655a4aa6cb86d0e4c600e0b5a279593337ce0fd805a5e6023875fce43f9d86af1bc8a887170ff4a42c2c3ee16ae42dc7795cf9e183e6f3e582d602616ceb402ce", 0x82}, {&(0x7f0000003000)="36a90f606a95d091086938eee46b7f69a39a9117add34aebb41dc696ec6cd72261aed36b47ea2e615c3cafa43b9e1b2f5ba849ed51a340f3d6eb3f463a968aa6b6ae2aca5a43f3379f38af2712f2d8caa257c854e91a3ac9287bbd23936cac3e5f69b14edc2e27405aaed7fdcc5661395c1e0f38c5d6ada6ce", 0x79}, {&(0x7f0000003080)="d56fb9c143696661a96361f55b7eb67b82a2b89ddb9fbc673c2a33e005089550e51735c19553c775865f0c5f50839942088b19722b18ed29354857520ddea0d7cf47bca28106f5472a09f9708f5e074545b2cea9eb420584a0aeba3825e427f4c0f3e4d2ebab554f4e9e3463eb5e949f2f266d07a41076fe3798a20e6895bf343cab479a95c9eecc15885ec0e5e08663", 0x90}, {&(0x7f0000003140)="43f5fb5665e990b4024a0338d1064cfe95ef5724d319b59908141c8943d26525646df7ce1885ecc8a3200a85880a373e40fc58d0823371cd82f23627446319480cfc62689682ba6adb82feb1ffce2dcf5dd3fe79a26753d5755170bec62bd08188fa41a723a3ad24f3b5159175313af47c1de4a4a7bee464f7f1b0fcdc7a827a1324a5eec923d4c9f22824748ceed0aca3b45817590591588d57959af681699197ac6c212f5e638ab61f6e0f15e923826f59415b57aa", 0xb6}, {&(0x7f0000003200)="dc48c3ebf31539855e907768bab4deb2531171490250963038a8ebe1181e90d59e51647c7d543a68e19c0ddd528672408216b23121a43d200672601cec3c8dc84746e0af1e780ffa86ac7a237f15b297b3c9586cb95af223fc6309a2c6f79b0f29df976b4ee74a7ff04eb8475a7984dd01ed867b005ded97d46c4110da48dbde5262e7fc1dd9d6577e6c9628af9498e351a638f6b421927eb60bc3d22b534c7245baec956b4d9672f864152676b13e8a931807aa3202f3e237cdacee0ed10f802f64bacd144c6a502567d1f54bfed73ae230f73772052930c24f6f480d17", 0xde}], 0x7, &(0x7f0000003540)=[@cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r22}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r23, 0xffffffffffffffff, r1, r1, r1, r1]}}], 0x80, 0x4048000}}], 0x7, 0x20000005) 12m10.024233377s ago: executing program 0 (id=506): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) r2 = socket$inet6(0xa, 0x6, 0xb) chdir(0x0) connect$inet6(r2, 0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000300)="48b83a988a46000000000f23d80f21f835800000500f23f840da56d5c402a9dec6b805000000b90001c0fe0f01c166ba400066ed0f20e035200000000f22e0f3460f070f01df676745835f00ec43f4", 0x4f}], 0x1, 0x40, 0x0, 0x0) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x2000004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x7fffffff, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x11a, 0x4, 0x0, 0x0) 12m7.996795165s ago: executing program 0 (id=512): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x2, 0x4) getsockopt$nfc_llcp(r0, 0x118, 0x4, &(0x7f0000000000), 0x0) 12m7.040196482s ago: executing program 0 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004340)=""/102376, 0x18fe8) getpid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) unlinkat(r5, &(0x7f0000000280)='./file0\x00', 0x200) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) bind$phonet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) 12m6.459924395s ago: executing program 0 (id=516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) bind$inet6(r2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f00000005c0)=""/224, 0xe0}, {&(0x7f0000000a40)=""/199, 0xc7}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000b40)=""/206, 0xce}], 0x6, &(0x7f0000000cc0)=""/220, 0xdc}, 0x80}, {{&(0x7f0000000dc0)=@l2tp6, 0x80, &(0x7f0000003280)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/205, 0xcd}, {&(0x7f0000001f40)=""/202, 0xca}, {&(0x7f0000002140)=""/104, 0x68}, {&(0x7f00000021c0)=""/151, 0x97}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000000700)=""/44, 0x2c}], 0x7, &(0x7f0000002040)=""/9, 0x9}, 0x2}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r3, 0x0, 0x0, 0x5c, 0x10}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) syz_emit_ethernet(0x29c, &(0x7f0000000780)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x2, 0x2, 0x28e, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @local, {[@end]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa0, 0x3, [], "e526072a076ae0e6d6b16c8a0418f874f080afbf32d91cc256a695f1885b4c2b244fda5dd83cbf9c93ad17a6c5ca3e896f400d5c9789b7ecec780c32c8d7b8a8b293b95ff25efc770397d378df205dec379ca2638b7e3d2c821a123cdeb374c9553e094c235921e77404505bffee3a7d36d0976275bfeeb83aed74f325b28c3b00bc1f83d9a18f73ac26eae75e31f27100fa4fd332b00cc052e54afe4811be2b"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "4b4244ba48ac0eb230732ddc4f5366c66a66a56b34e9f57dfb0af6dbec17de1363d1e62edff835d955caeb3d1f9ad337ffd8618afb765a445d8704139498331a513b9596f91021cb9f36d7d92b8c9bee3e330c39cebdc1ebc0d8443a32e2b1216843deb27a221bd7ee20bcd37e5cd2b432660c5ea886aa221e387f3ebc7e84adcf026ec054554f02fb21ba9bdc4459c159aeba045841b942ff"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xef], "be89a95f0f7c82b59657248ffcface0514e989700a893445ea9d5c0bb0ebeb34261392057a5733842f2a56c903d411ee258968773189c70196f443819d8d18767359d3acb3c6b3b8e6aed6f70cbb7a4e9c4fcbdd7d0844efd7cfdbd2198d8af6141e34ab7cf2abaa7987ea5dcc24b6eb31c34f6ed11afab0f9443bd167bae19c77727de95abc4fdc82a2e73b18388cac3a050f1644b1f38019a1754d2912c3c693be525b10d4e3e2e17d28e861d6f481bfcc98113350887ba19c4f08759a100ffab1257dc3fded45f816d718fd125a9053d14e7ba9223349b904ab1e1ac286ae841b"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0xc, 0x3, 0x0, 0x1, 0x5, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x4, 0x1, 0x0, 0x3, 0x1, 0xfc}, 0x2, {0x10, 0x8, 0x3, 0x1e, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "3214db542e56943b1e25aed4442a56a85d32bd9f42"}}}}}}, 0x0) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8004) r7 = io_uring_setup(0x54a0, &(0x7f00000002c0)={0x0, 0xb7a, 0x1, 0x3, 0x276}) socket$rxrpc(0x21, 0x2, 0xa) syz_open_dev$sndpcmp(0x0, 0x0, 0x40000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0xee01, 0xee01}}, './file0\x00'}) read$FUSE(r8, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r9, r10, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c673d0000000000001721b784376b188de0e69db115ef2cbc9683c0c741f125aecbb7ddaa8a5138d88ff5722dc6770dd90125547e326ae9288fdc258f557beabdf920603e04288ee5c96602045fd73ea315d2b248f21ec93de7ad096e8cd011f6ca2f8e94caff15c3e07b1cdc14ca0026", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r11, &(0x7f00000083c0)={0x2020}, 0x2020) 12m5.133009117s ago: executing program 0 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) r2 = socket$inet6(0xa, 0x80000, 0x6c97) bind(r2, &(0x7f0000000140)=@nl=@unspec, 0x80) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1ff) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) (async) socket$inet6(0xa, 0x80000, 0x6c97) (async) bind(r2, &(0x7f0000000140)=@nl=@unspec, 0x80) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) (async) 12m4.362157392s ago: executing program 32 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) r2 = socket$inet6(0xa, 0x80000, 0x6c97) bind(r2, &(0x7f0000000140)=@nl=@unspec, 0x80) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1ff) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) (async) socket$inet6(0xa, 0x80000, 0x6c97) (async) bind(r2, &(0x7f0000000140)=@nl=@unspec, 0x80) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) (async) 8.484933792s ago: executing program 3 (id=3149): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x189, 0x100) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002280)=""/102400, 0x19000) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x10, 0x0, 0x0) 8.389296952s ago: executing program 1 (id=3150): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x80, 0xf4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xf7, 0x9, 0x6, {0x7, 0x25, 0x1, 0x83, 0x2, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x26, 0x6, 0x1, {0x7, 0x25, 0x1, 0x3, 0x8, 0xdd60}}}}}}}]}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x7fc, @loopback}}, 0x1e) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80002, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @empty}, &(0x7f0000000340)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x48}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x44080) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r5, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r13 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x32, 0x33, 0x7a, 0x8, 0x644, 0x8021, 0x4778, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x30, 0xe, [{{0x9, 0x4, 0x1, 0x1, 0x0, 0xff, 0xbc, 0x54, 0x8}}]}}]}}, 0x0) syz_usb_control_io$hid(r13, &(0x7f0000001ec0)={0x24, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r13, &(0x7f0000002500)={0x2c, 0x0, &(0x7f00000022c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}, 0x0, 0x0, 0x0}, 0x0) 7.876063288s ago: executing program 4 (id=3152): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) capset(&(0x7f0000a31000), &(0x7f0000000080)) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4bfb, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x1a, {0x8001, 0x8, 0x2}}]}, 0x28}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xb) shutdown(r6, 0x1) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x80000040}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/159, 0x9f}, {&(0x7f0000000980)=""/4105, 0x1009}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {0x0}, {&(0x7f0000000440)=""/63, 0x3f}, {&(0x7f0000000780)=""/161, 0xa1}, {&(0x7f0000000840)=""/101, 0x65}], 0xb}, 0xec}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x80000010, 0x0, @thr={0x0, &(0x7f00000006c0)="8700ce3814fc9bcc0e7522b190110bc257698a1f9d0981016b437d04d98d5c0f4b5dcf4c3565673606dc2d1f6e1382cddb7d0c788767f677caeaa1f8a7a37bdb7f7dc7ef27350a1f4a3a2e9e0db56a16da4a05f80fbc4678648b84f8a1e33de36bfe1c405be0b7f7b81877bfc5d9c859033e68f0426d10a1f863ced625e85d7f9f4af2eb8000"/143}}, 0x0) sendfile(r7, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x21c) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) 7.825201154s ago: executing program 3 (id=3153): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0x3, 0x2, 0x9, 0x9, "ea7174ddcf0fc7010002f7ffd2a2d97500", 0x2, 0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000400)=0xb8e7) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x109) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="0700000009000000010000000000000040000000", @ANYRES32, @ANYBLOB="0700000000000000000000000000f03900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="4fc100000100"/28], 0x50) r5 = fsopen(&(0x7f0000000180)='jfs\x00', 0x1) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000240)={0xb8b, 0x89, 0xa57, 0x9, 0x2, 0x4}) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r6 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 6.739712076s ago: executing program 5 (id=3156): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x288, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x24, 0x4, 0x0, 0x7, 0x27a, 0x65, 0x0, 0x6, 0x2f, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x44, 0x8f, 0x1, 0x9, [{@local, 0x4}, {@empty, 0x2}, {@remote, 0x6}, {@loopback, 0x2}, {@multicast2, 0x6}, {@broadcast, 0x8000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @timestamp_addr={0x44, 0x1c, 0xf1, 0x1, 0x0, [{@private=0xa010101, 0x7fffffff}, {@loopback, 0x2}, {@private=0xa010102, 0x7}]}, @rr={0x7, 0x1b, 0xd7, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @private=0xa010102]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x9e, 0x0, [], "400009b1e1a8cbc6c6aecbfcc2a28903cadd73797134079a38d1ebc166eff4080de49663dda06e3db1f343f21adc52857015fe0472ef3b878f8a2ef58a34ba89a24ec845a7db012838ad8d2566e07bbc60701f7e5863ddd41c7c7cbd89c63363abc747fbcecb53b3634db4445b200fa332bcd7aa53814f2fbb20d28187b90b11c9c523b3b2b97fdf26ddd8d5e78400ceb099d7bce659a229a3e0ac767358"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "409e487b4a4298704084020822437916b0429e8b2e5f97995f"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x2], "c85b29ffd614a1f72375764e77e6fe797626e56fa40e361108fc3fdbbeb55502ea5b212bb369a5edbe53c794d5a87d599cb7927bde699039da17792bf62fb1e5972502fd8341ffa8f59c9b71e1a49d036ff8517ba7096c6dca3e12c4f66afa5b17ff3d732467a135f7eaf1fc27f822208d07bb8f0e96ebbd9868d9ea48cde631f89477601e59f484c3e50fb2a1ab76c088b7d312e086a38d5d"}, {0x8, 0x88be, 0x4, {{0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x6, 0xff}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x4, {{0x2, 0x2, 0x1, 0x3, 0x1, 0x3, 0x5, 0x2}, 0x2, {0xc8c7, 0x1, 0x3, 0x2, 0x0, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "12cbe130305b5bc22fd8003791cd6044ba0e3c2f1a1f0345d0d079b21a7cfba040c5d112be12edd87ece4ae63762770bc85ec8368c167f4c68591486d3efdf9b7c2fe727a73176d41263f285f1f2bdd9fec1"}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 5.7894729s ago: executing program 5 (id=3157): modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/127, 0x7f) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(r1, &(0x7f00000003c0)='statm\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='ext4_allocate_inode\x00'}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0xa, 0x3, 0xff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r7, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) write$rfkill(r0, &(0x7f0000000080)={0x1, 0x7, 0x3, 0xc1}, 0x8) 5.417857574s ago: executing program 2 (id=3158): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) fcntl$setown(r0, 0x8, r1) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000080), 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x602002, 0x0) ioctl$COMEDI_BUFINFO(r2, 0xc02c640e, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x2, 0x5, 0xfb, 0x4}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40400082}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x3, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4b34}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8801) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x10001, 0x18}, 0xc) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x15, 0x6, 0x8, 0x6, 0x40091, r4, 0x9, '\x00', 0x0, r5, 0x3, 0x3, 0x3}, 0x50) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r6, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x6c5, 0x8, @local, @private1, 0x7, 0x8000, 0x34945fb9, 0x44a}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x1, 0x7, 0x6a7, 0x24d, {{0x11, 0x4, 0x1, 0x0, 0x44, 0x65, 0x0, 0x1, 0x0, 0x0, @empty, @local, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x97, 0x3, 0x0, [{@remote, 0x3}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb33}, {@rand_addr=0x64010100, 0xffff}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20003}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, r7, 0x200, 0x3, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x60}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfffffe01}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x844}, 0x4048004) mount(&(0x7f0000000780)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='vfat\x00', 0x1000a1, &(0x7f0000000840)='syztnl2\x00') ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000880)={0x1, r5}) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f00000008c0)={0x101, 0x7}) alarm(0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1, 0x23}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) rseq(&(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x5, 0x1, 0x9, 0x1}, 0x1}, 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000bc0)={&(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0], 0x8, 0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000d00)={&(0x7f0000000c00)=[0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0], &(0x7f0000000c80)=[0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000e80)={&(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0x9, 0x6}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000ec0)={&(0x7f0000000d40)=[r12, r13, 0x0], 0x3, 0x0, r14, 0x3c, 0x6, 0xfffffe01, 0x146f293, {0x5, 0xa35, 0x6, 0x8e9, 0x8, 0x2b54, 0xa, 0x4, 0x400, 0x5, 0x40, 0x80000000, 0x7, 0x80000000, "a5f08d96f3877319903b6fce9394ed1af343f0a8eb8a240ece57149161381e5e"}}) futex_waitv(&(0x7f0000002840)=[{0x6, &(0x7f0000000f40)=0x80, 0x82}, {0x5, &(0x7f0000000f80)=0x9, 0x2}, {0x0, &(0x7f0000000fc0)=0x9, 0x2}, {0x5, &(0x7f0000001000)=0x9, 0x82}, {0xe, &(0x7f0000001040)=0x5, 0x82}, {0x5, &(0x7f0000001080)=0x7, 0x2}, {0x8, &(0x7f00000010c0)=0x7, 0x82}, {0xf24, &(0x7f0000001100)=0x5}, {0x2, &(0x7f0000001140)=0x8000000000000000, 0x82}, {0x0, &(0x7f0000001180)=0xdc0, 0x2}, {0x6, &(0x7f00000011c0)=0x9f, 0x82}, {0x80, &(0x7f0000001200)=0x1, 0x82}, {0x9, &(0x7f0000001240)=0x7, 0x82}, {0x0, &(0x7f0000001280)=0x7, 0x82}, {0x6, &(0x7f00000012c0)=0xc, 0x2}, {0x2, &(0x7f0000001300)=0x3ff, 0x82}, {0x6, &(0x7f0000001340), 0x2}, {0x800, &(0x7f0000001380)=0x6, 0x2}, {0x100000001, &(0x7f00000013c0)=0xd000, 0x2}, {0x30000, &(0x7f0000001400)=0x40, 0x82}, {0x8, &(0x7f0000001440)=0x9, 0x104}, {0x9, &(0x7f0000001480)=0x9f7, 0x82}, {0x51c6, &(0x7f00000014c0)=0x10, 0x82}, {0x800000000000, &(0x7f0000001500)=0x2, 0x82}, {0xfffffffffffffff9, &(0x7f0000001540)=0x1, 0x82}, {0x5, &(0x7f0000001580)=0xfffffffffffffff7, 0x82}, {0x5, &(0x7f00000015c0)=0xc, 0x2}, {0x8, &(0x7f0000001600)=0x2, 0x82}, {0x9, &(0x7f0000001640)=0x4000000, 0x2}, {0x2, &(0x7f0000001680)=0x1, 0x80}, {0x6, &(0x7f00000016c0)=0x8}, {0x8000, &(0x7f0000001700)=0x100000001, 0x7141536b45da553c}, {0xfffffffffffffff7, &(0x7f0000001740)=0xfffffffffffffff9, 0x82}, {0x40, &(0x7f0000001780)=0x401, 0x2}, {0xb, &(0x7f00000017c0)=0x4, 0x2}, {0x401, &(0x7f0000001800)=0x6, 0x2}, {0x4, &(0x7f0000001840)=0x5, 0x82}, {0x7, &(0x7f0000001880)=0x1000, 0x82}, {0xc2, &(0x7f00000018c0)=0x2, 0x82}, {0xa5, &(0x7f0000001900)=0x8, 0x1}, {0xfffffffffffffffa, &(0x7f0000001940)=0x2a}, {0xc, &(0x7f0000001980)=0xfffffffffffffeff, 0x82}, {0x9f47652, &(0x7f00000019c0)=0x100000001, 0x106}, {0xfffffffffffffffc, &(0x7f0000001a00)=0x5, 0x82}, {0x6, &(0x7f0000001a40)=0x1, 0x2}, {0x101, &(0x7f0000001a80), 0x82}, {0x8, &(0x7f0000001ac0)=0x40, 0x82}, {0x7e9, &(0x7f0000001b00)=0x6f1, 0x2}, {0xd, &(0x7f0000001b40), 0x82}, {0x8a, &(0x7f0000001b80)=0xffff, 0x2}, {0x5, &(0x7f0000001bc0)=0x8, 0x82}, {0xe, &(0x7f0000001c00)=0x7, 0x80}, {0xc61, &(0x7f0000001c40)=0x8, 0x2}, {0x0, &(0x7f0000001c80)=0xfffffffffffffffb, 0x2}, {0x1, &(0x7f0000001cc0)=0x7, 0x82}, {0x1, &(0x7f0000001d00)=0x4331, 0x82}, {0xffffffffffffffff, &(0x7f0000001d40)=0x10, 0x82}, {0x5, &(0x7f0000001d80)=0x8, 0x2}, {0xfffffffffffffffb, &(0x7f0000001dc0)=0x81, 0x82}, {0x1ff, &(0x7f0000001e00)=0xa, 0x82}, {0x9b, &(0x7f0000001e40)=0x2753, 0x2}, {0x6, &(0x7f0000001e80)=0x1, 0x82}, {0x80000000, &(0x7f0000001ec0)=0xff, 0x82}, {0x5, &(0x7f0000001f00)=0x7, 0x82}, {0x0, &(0x7f0000001f40)=0xfffffffffffffffe, 0x82}, {0x9, &(0x7f0000001f80)=0x8000000000000001, 0x2}, {0x9, &(0x7f0000001fc0)=0x4c6, 0x82}, {0xfff, &(0x7f0000002000)=0x12000000000000, 0x2}, {0x1, &(0x7f0000002040)=0x3, 0x82}, {0xc0d, &(0x7f0000002080)=0x3800, 0x82}, {0x200, &(0x7f00000020c0)=0x9, 0x82}, {0x6, &(0x7f0000002100)=0x1161, 0x82}, {0x0, &(0x7f0000002140)=0x578, 0x82}, {0x7ff, &(0x7f0000002180)=0x2, 0x82}, {0xae5, &(0x7f00000021c0)=0x9, 0x2}, {0x7, &(0x7f0000002200)=0x36, 0x82}, {0x9, &(0x7f0000002240)=0x3, 0x2}, {0x6, &(0x7f0000002280)=0x5e4c, 0x2}, {0x4, &(0x7f00000022c0)=0x10001, 0x82}, {0xffff, &(0x7f0000002300)=0x3, 0x2}, {0xfffffffffffffffb, &(0x7f0000002340)=0x1, 0x2}, {0x1, &(0x7f0000002380)=0x1, 0x2}, {0x0, &(0x7f00000023c0)=0x7, 0x82}, {0x8, &(0x7f0000002400)=0xffff, 0x82}, {0x6, &(0x7f0000002440)=0x9, 0x2}, {0xac, &(0x7f0000002480)=0x6, 0x82}, {0x1ff, &(0x7f00000024c0)=0x5, 0x82}, {0x6, &(0x7f0000002500)=0x400, 0x2}, {0x1ff, &(0x7f0000002540)=0x214c, 0x82}, {0x9, &(0x7f0000002580)=0x40, 0x2}, {0x140000000000, &(0x7f00000025c0)=0xc12, 0x82}, {0xb623, &(0x7f0000002600)=0x1, 0x82}, {0x5, &(0x7f0000002640)=0xffff, 0xcc3f0b943aa44224}, {0x4, &(0x7f0000002680)=0x4, 0x2}, {0xe01, &(0x7f00000026c0)=0x4, 0x2}, {0x23d9, &(0x7f0000002700)=0x7fffffffffffffff, 0x2}, {0x7da9, &(0x7f0000002740)=0x4, 0x2}, {0xfff, &(0x7f0000002780)=0x2, 0x82}, {0xc, &(0x7f00000027c0)=0xd, 0x82}, {0x1, &(0x7f0000002800)=0x9, 0x2}], 0x64, 0x0, &(0x7f00000031c0)={0x0, 0x989680}, 0x1) alarm(0x9ac3) 5.308722688s ago: executing program 4 (id=3159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000080)={0x2, 0xffff, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd40700002000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00'}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000240)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 5.216991582s ago: executing program 2 (id=3160): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) (async) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) (async) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r8}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) (async) setrlimit(0x9, &(0x7f00000001c0)={0x5, 0xdbc}) 5.153542742s ago: executing program 1 (id=3161): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x71}}, './file0\x00'}) close_range(0xffffffffffffffff, r0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0xfffffffffffffffd, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000440)={0x1, 0x10000, 0x40, 0x6dd, 0xffffffff, 0x0, 0x2, 0x3, 0xffffff6f, 0x40000009, 0x4, 0x4, &(0x7f0000001140)=[0x6], 0x1, 0x0}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) open(&(0x7f00000003c0)='./file0\x00', 0x8060, 0x2c) r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r6 = syz_io_uring_setup(0xbda, &(0x7f0000000100)={0x0, 0xec25, 0x8, 0x10000001, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000000080)="9b", 0x1}], 0x1, 0x6) (async) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000000080)="9b", 0x1}], 0x1, 0x6) sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x180d0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 4.492221338s ago: executing program 3 (id=3162): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002021, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x8042, 0x80) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) r5 = fanotify_init(0x20, 0x101000) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(r5, 0x1, 0x48000013, r3, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) 4.409051266s ago: executing program 1 (id=3163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c"], 0x26c0}}, 0x4010) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x3, 0xc, 0x0, 0x80000000, 0x0, 0x10, 0x0, 0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000080)={0x8, 0x101}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x130}}, 0x85) 4.306143036s ago: executing program 4 (id=3164): sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x8000002000000, 0x0) (rerun: 32) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) (async) syz_usb_connect(0x0, 0x5b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa9400819151300000181000109024900020000000009047f0002030000000a240100000002010205240400001d05000000000000000753766b03616ccc3b01000000000905000000000000000904"], 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@local, @in6=@empty}}, {{@in6=@private1}, 0x0, @in6=@private2}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 64) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) socket$inet_sctp(0x2, 0x5, 0x84) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) (async, rerun: 64) write$RDMA_USER_CM_CMD_SET_OPTION(r4, 0x0, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}, 0x3}, r5, 0x7}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r6, 0x0, 0x0) 4.15455221s ago: executing program 1 (id=3165): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x50}}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bind$inet(r0, &(0x7f0000000f80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) 3.636246774s ago: executing program 2 (id=3166): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x5, 0x10000, 0x15, 0x40c, 0xc3, 0x0}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000400)=0x200000000) write$vhost_msg(r2, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/68, 0xffffffffffffffb0, 0x0, 0x2, 0x2}}, 0x48) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x110, &(0x7f0000000040)=0xe, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x35dfdbfe, {0x0, 0x0, 0x3, 0x0, 0xd410, 0xf69aa1672a50ebb1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40881}, 0x10) 3.502383666s ago: executing program 1 (id=3167): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340), 0x4) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000500)={r7, r7, r6}, &(0x7f0000000b40)=""/4111, 0x100f, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300000010001fff0000000001000000000000d7", @ANYRESHEX=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x0) 2.775845253s ago: executing program 4 (id=3168): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) ioctl$TIOCGSID(r2, 0x5429, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000100), 0x4003) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r2, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1408009, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x8, 0xbde, 0x6, 0x100}}) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r6 = syz_open_dev$sg(&(0x7f00000006c0), 0x1, 0x8200) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f00000007c0)) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000580)={@private2, 0x0}, &(0x7f00000005c0)=0x14) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r9, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x0, 0x2000, 0x1, [0xfffffffd, 0x20001ff, 0x722, 0x1000]}) 2.593098147s ago: executing program 2 (id=3169): socket$kcm(0x1e, 0x5, 0x0) r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x2}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESOCT=r0], 0x220}, 0x0) 2.59181748s ago: executing program 4 (id=3170): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4bfb, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x1a, {0x8001, 0x8, 0x2}}]}, 0x28}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r5 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x4004510d, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xb) shutdown(r7, 0x1) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x80000040}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/159, 0x9f}, {&(0x7f0000000980)=""/4105, 0x1009}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {0x0}, {&(0x7f0000000440)=""/63, 0x3f}, {&(0x7f0000000780)=""/161, 0xa1}, {&(0x7f0000000840)=""/101, 0x65}], 0xb}, 0xec}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x80000010, 0x0, @thr={0x0, &(0x7f00000006c0)="8700ce3814fc9bcc0e7522b190110bc257698a1f9d0981016b437d04d98d5c0f4b5dcf4c3565673606dc2d1f6e1382cddb7d0c788767f677caeaa1f8a7a37bdb7f7dc7ef27350a1f4a3a2e9e0db56a16da4a05f80fbc4678648b84f8a1e33de36bfe1c405be0b7f7b81877bfc5d9c859033e68f0426d10a1f863ced625e85d7f9f4af2eb8000"/143}}, 0x0) sendfile(r8, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x21c) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) 2.523221534s ago: executing program 2 (id=3171): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = epoll_create(0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0xc29}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x44804) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) ioctl$I2C_PEC(r2, 0x708, 0xffffffffffffffff) 2.327469312s ago: executing program 5 (id=3172): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x288, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x24, 0x4, 0x0, 0x7, 0x27a, 0x65, 0x0, 0x6, 0x2f, 0x0, @broadcast, @broadcast, {[@end, @timestamp_addr={0x44, 0x44, 0x8f, 0x1, 0x9, [{@local, 0x4}, {@empty, 0x2}, {@remote, 0x6}, {@loopback, 0x2}, {@multicast2, 0x6}, {@broadcast, 0x8000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @timestamp_addr={0x44, 0x1c, 0xf1, 0x1, 0x0, [{@private=0xa010101, 0x7fffffff}, {@loopback, 0x2}, {@private=0xa010102, 0x7}]}, @rr={0x7, 0x1b, 0xd7, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @private=0xa010102]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x9e, 0x0, [], "400009b1e1a8cbc6c6aecbfcc2a28903cadd73797134079a38d1ebc166eff4080de49663dda06e3db1f343f21adc52857015fe0472ef3b878f8a2ef58a34ba89a24ec845a7db012838ad8d2566e07bbc60701f7e5863ddd41c7c7cbd89c63363abc747fbcecb53b3634db4445b200fa332bcd7aa53814f2fbb20d28187b90b11c9c523b3b2b97fdf26ddd8d5e78400ceb099d7bce659a229a3e0ac767358"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "409e487b4a4298704084020822437916b0429e8b2e5f97995f"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x2], "c85b29ffd614a1f72375764e77e6fe797626e56fa40e361108fc3fdbbeb55502ea5b212bb369a5edbe53c794d5a87d599cb7927bde699039da17792bf62fb1e5972502fd8341ffa8f59c9b71e1a49d036ff8517ba7096c6dca3e12c4f66afa5b17ff3d732467a135f7eaf1fc27f822208d07bb8f0e96ebbd9868d9ea48cde631f89477601e59f484c3e50fb2a1ab76c088b7d312e086a38d5d"}, {0x8, 0x88be, 0x4, {{0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x6, 0xff}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x4, {{0x2, 0x2, 0x1, 0x3, 0x1, 0x3, 0x5, 0x2}, 0x2, {0xc8c7, 0x1, 0x3, 0x2, 0x0, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "12cbe130305b5bc22fd8003791cd6044ba0e3c2f1a1f0345d0d079b21a7cfba040c5d112be12edd87ece4ae63762770bc85ec8368c167f4c68591486d3efdf9b7c2fe727a73176d41263f285f1f2bdd9fec1"}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0xd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x34, 0xd, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000a00000000000000feffffff950400000000000012ab5aab69c87efa572bdf462ad404bbae8f0d2365574250917ae77f774a1bf4e774dd6065290e85637e30b5b30cce74a8363ce967f8b565e6909c3a8ee337ba76e9db21a5713df0832d28acb4b30bf9062a351ca0616057061d9e3f42eee9b9fa33ab9f5ca618f3"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 2.044842578s ago: executing program 3 (id=3173): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x64, &(0x7f00000002c0)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='mark_victim\x00', r0, 0x0, 0xfffffffffffffff4}, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe980}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffe, 0xe}, {0x6}, {0x10}}}, 0x24}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="23009b0000000000006700"/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x2000000000000037, &(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRES8=r5, @ANYRES8=r4], &(0x7f0000000000)='syzkaller\x00', 0x3000000, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r9], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000440)="66d4492a0a1b30e699005a6d88a8", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) 1.892943604s ago: executing program 5 (id=3174): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 1', 0x1b) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) write$6lowpan_control(r0, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 0', 0x1b) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19fdfff007049ebf5b2e1f", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.15327481s ago: executing program 1 (id=3175): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x383080, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140)) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setfsgid(0xee01) (async, rerun: 32) setresgid(0x0, 0x0, 0x0) (async, rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRESDEC=r0, @ANYBLOB="0400000000000000", @ANYRES64, @ANYRES16=r0], 0x113c}, 0x1, 0x0, 0x0, 0x804}, 0x8014) (rerun: 32) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xdaf}}, './file0\x00'}) (async) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@echo) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, {0xa, 0x4e23, 0x0, @loopback}, 0xffffffffffffffff, 0x8}}, 0x48) (async, rerun: 32) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x100000c, 0x0, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00') pread64(r5, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) (async, rerun: 64) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0xffffffefffffffff) 1.09965872s ago: executing program 2 (id=3176): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000ec001fb6330d700000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010000009500200c00"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x501000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89ef, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(&(0x7f0000000140)=""/115, 0x73) r6 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/d\n\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280", @ANYRES32], 0x3c}}, 0x0) 1.004981499s ago: executing program 5 (id=3177): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) socket$igmp(0x2, 0x3, 0x2) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0xce08, 0x10100, 0x1, 0x170}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) rename(0x0, &(0x7f0000000240)='.\x02\x00') clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f00000000c0)={r6, r7+10000000}, 0x0, 0x0) close(r0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x200481, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000140)={0x10000a, 0xf0, 0x0, {r9}}, 0x20) gettid() r10 = fcntl$getown(r8, 0x9) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004891}, 0x24044000) r11 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r11, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) sched_setscheduler(r10, 0x0, &(0x7f0000000080)=0x7fffffff) socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) getpid() bind$inet(r0, &(0x7f0000000f80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 988.077401ms ago: executing program 3 (id=3178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xd0}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) 121.429583ms ago: executing program 5 (id=3179): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f00000001c0)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0fbc789d2a8d405e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="dbc04cf662463666a39db512071b12d4"}]}]}, 0x40}}, 0x20000040) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x100) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0xfe) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="000080000085bec6c378c815caa2c41b67d500000000000000000000000000008d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00'}, 0x18) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000040), 0xc) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x3, 0x4, 0xba4}) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "0a1000", {0x3, 0x0, 0x0, 0x6, 0x100, 0xe8, 0x49}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001980)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f00000001c0)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0fbc789d2a8d405e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="dbc04cf662463666a39db512071b12d4"}]}]}, 0x40}}, 0x20000040) (async) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x100) (async) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0xfe) (async) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="000080000085bec6c378c815caa2c41b67d500000000000000000000000000008d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00'}, 0x18) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) (async) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000040), 0xc) (async) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x3, 0x4, 0xba4}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "0a1000", {0x3, 0x0, 0x0, 0x6, 0x100, 0xe8, 0x49}}) (async) 15.084303ms ago: executing program 3 (id=3180): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee3, 0x40010, 0xffffffffffffffff, 0x2000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x618f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x40ceb152, 0x4, 0x40, 0x0, 0xc}}, 0x50) r4 = epoll_create(0x1) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r5, &(0x7f0000000080)=""/203, 0xcb, 0xa) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000280)=0x2) epoll_wait(r4, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x2) syz_fuse_handle_req(r1, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=3181): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) ioctl$TIOCGSID(r2, 0x5429, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000100), 0x4003) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r2, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1408009, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x8, 0xbde, 0x6, 0x100}}) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r6 = syz_open_dev$sg(&(0x7f00000006c0), 0x1, 0x8200) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f00000007c0)) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000580)={@private2, 0x0}, &(0x7f00000005c0)=0x14) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r9, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x0, 0x2000, 0x1, [0xfffffffd, 0x20001ff, 0x722, 0x1000]}) kernel console output (not intermixed with test programs): 0638][T16578] bond0 (unregistering): Released all slaves [ 788.459135][T16607] siw: device registration error -23 [ 788.464797][T16607] siw: device registration error -23 [ 788.471534][T16607] smc: removing ib device syz1 [ 789.053996][T16615] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2565'. [ 789.105004][ T913] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 789.562006][T16624] futex_wake_op: syz.4.2566 tries to shift op by -1; fix this program [ 790.552730][ T913] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 790.562017][ T913] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 790.576123][ T913] usb 4-1: config 8 has no interface number 0 [ 790.580898][T16628] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2568'. [ 790.597028][ T913] usb 4-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 790.625571][T16628] hsr_slave_0: left promiscuous mode [ 790.630913][ T913] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 790.652735][T16628] hsr_slave_1: left promiscuous mode [ 790.659526][ T913] usb 4-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 790.701884][ T913] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 790.719655][ T913] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 790.731151][ T913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.768632][ T913] usb 4-1: NFC: intf ffff888027e98000 id ffffffff8f56a740 [ 790.820741][ T913] nfcmrvl 4-1:8.80: NFC: registered with nci successfully [ 791.172747][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 791.172764][ T30] audit: type=1400 audit(1021.405:1825): avc: denied { ioctl } for pid=16606 comm="syz.3.2564" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 791.206137][ T30] audit: type=1400 audit(1021.405:1824): avc: denied { ioctl } for pid=16606 comm="syz.3.2564" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 791.231013][ T5864] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 791.237193][ T913] usb 4-1: USB disconnect, device number 82 [ 791.247790][ T913] usb 4-1: NFC: intf ffff888027e98000 [ 791.453508][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 791.487270][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.515910][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.532508][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 791.545917][ T5864] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 791.555395][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.564194][ T30] audit: type=1326 audit(1021.788:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16650 comm="syz.4.2575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f097238eec9 code=0x0 [ 791.593736][ T5864] usb 3-1: config 0 descriptor?? [ 791.946528][T16662] Invalid ELF header magic: != ELF [ 791.962443][ T30] audit: type=1400 audit(1022.135:1827): avc: denied { module_load } for pid=16650 comm="syz.4.2575" path="/316/bus" dev="tmpfs" ino=1729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 792.045832][ T5864] input: HID 0955:7214 Haptics as /devices/virtual/input/input43 [ 792.086635][T16666] FAT-fs (nbd1): unable to read boot sector [ 792.103196][ T5864] shield 0003:0955:7214.0025: Registered Thunderstrike controller [ 792.222289][ T5864] shield 0003:0955:7214.0025: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 792.222589][T16666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2579'. [ 792.262398][T16672] futex_wake_op: syz.3.2580 tries to shift op by -1; fix this program [ 792.355375][T12844] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 792.369435][ T5864] usb 3-1: USB disconnect, device number 90 [ 792.376093][T12844] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 792.730925][T12844] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 792.786855][T12844] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 792.802919][T16683] fuse: Bad value for 'fd' [ 793.856204][T16693] netlink: 'syz.3.2584': attribute type 1 has an invalid length. [ 794.249150][T16693] 8021q: adding VLAN 0 to HW filter on device bond15 [ 794.491606][T16709] overlayfs: failed to clone upperpath [ 794.670948][ T30] audit: type=1400 audit(1024.688:1828): avc: denied { read } for pid=16705 comm="syz.1.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 794.878809][T16714] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 794.885319][T16714] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 794.932298][T16714] vhci_hcd vhci_hcd.0: Device attached [ 795.250339][ T5864] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 795.373343][T16733] netlink: 'syz.5.2593': attribute type 1 has an invalid length. [ 795.461295][T16733] bond6: entered promiscuous mode [ 795.471731][T16724] vhci_hcd: connection reset by peer [ 795.471922][T16733] 8021q: adding VLAN 0 to HW filter on device bond6 [ 795.483844][ T9053] vhci_hcd: stop threads [ 795.495346][ T9053] vhci_hcd: release socket [ 795.574484][ T9053] vhci_hcd: disconnect device [ 796.210474][T16733] overlayfs: failed to clone upperpath [ 796.266758][T16736] 8021q: adding VLAN 0 to HW filter on device bond6 [ 796.273714][T16736] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 796.317927][T16736] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 796.377191][T16736] bond6: (slave vcan1): making interface the new active one [ 796.426318][T16736] vcan1: entered promiscuous mode [ 796.432055][T16736] bond6: (slave vcan1): Enslaving as an active interface with an up link [ 798.284323][ T30] audit: type=1400 audit(1028.056:1829): avc: denied { read write } for pid=5848 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 798.327914][T16765] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 798.370915][ T30] audit: type=1400 audit(1028.056:1830): avc: denied { open } for pid=5848 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 798.435775][ T30] audit: type=1400 audit(1028.056:1831): avc: denied { ioctl } for pid=5848 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 798.496395][ T30] audit: type=1400 audit(1028.121:1832): avc: denied { execmem } for pid=16771 comm="syz.2.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 798.638300][ T30] audit: type=1400 audit(1028.149:1833): avc: denied { create } for pid=16774 comm="syz.3.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 798.708319][ T30] audit: type=1400 audit(1028.149:1834): avc: denied { watch watch_reads } for pid=16774 comm="syz.3.2601" path="/481" dev="tmpfs" ino=2623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 798.782043][ T30] audit: type=1400 audit(1028.149:1835): avc: denied { prog_load } for pid=16774 comm="syz.3.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 798.835038][ T30] audit: type=1400 audit(1028.149:1836): avc: denied { bpf } for pid=16774 comm="syz.3.2601" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 798.916278][ T30] audit: type=1400 audit(1028.149:1837): avc: denied { perfmon } for pid=16774 comm="syz.3.2601" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 798.918782][T16781] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 798.960818][T16783] netlink: 'syz.4.2604': attribute type 2 has an invalid length. [ 798.968605][T16783] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2604'. [ 799.293404][T16781] Error validating options; rc = [-22] [ 799.314542][ T30] audit: type=1400 audit(1028.149:1838): avc: denied { prog_run } for pid=16774 comm="syz.3.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 799.687095][T12844] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 799.742170][T16795] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2607'. [ 799.830196][T16799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.841370][T16799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.849588][T12844] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 799.919355][T12844] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 799.930416][T12844] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 799.946792][T12844] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 799.959654][T12844] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 799.981608][T12844] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 799.990758][T12844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.006505][T16792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 800.038608][T12844] hub 2-1:1.0: bad descriptor, ignoring hub [ 800.072869][T12844] hub 2-1:1.0: probe with driver hub failed with error -5 [ 800.087619][T12844] cdc_wdm 2-1:1.0: skipping garbage [ 800.103744][T12844] cdc_wdm 2-1:1.0: skipping garbage [ 800.125958][T12844] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 800.131883][T12844] cdc_wdm 2-1:1.0: Unknown control protocol [ 800.217997][ T913] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 800.274920][ T24] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 800.725515][ T5864] vhci_hcd: vhci_device speed not set [ 800.777388][ T24] usb 4-1: device descriptor read/64, error -71 [ 800.863776][T12844] usb 2-1: USB disconnect, device number 92 [ 801.103823][ T24] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 801.258473][ T24] usb 4-1: device descriptor read/64, error -71 [ 801.361789][T16844] vxcan1 speed is unknown, defaulting to 1000 [ 801.437596][T16844] lo speed is unknown, defaulting to 1000 [ 801.472116][T16846] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 801.478877][ T24] usb usb4-port1: attempt power cycle [ 801.846581][ T24] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 801.879328][ T24] usb 4-1: device descriptor read/8, error -71 [ 802.274057][ T24] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 803.591942][ T24] usb 4-1: device descriptor read/8, error -71 [ 803.642661][ T5862] Bluetooth: hci0: command tx timeout [ 803.706905][ T24] usb usb4-port1: unable to enumerate USB device [ 803.920112][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 803.920129][ T30] audit: type=1400 audit(1033.313:1899): avc: denied { create } for pid=16866 comm="syz.4.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 804.449310][ T30] audit: type=1400 audit(1033.331:1900): avc: denied { bind } for pid=16866 comm="syz.4.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 804.468182][ T30] audit: type=1400 audit(1033.509:1901): avc: denied { accept } for pid=16866 comm="syz.4.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 804.492779][ T30] audit: type=1400 audit(1033.874:1902): avc: denied { getopt } for pid=16866 comm="syz.4.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 805.229151][ T30] audit: type=1400 audit(1034.052:1903): avc: denied { read write } for pid=16871 comm="syz.3.2629" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 805.257934][T16887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2629'. [ 805.336556][ T30] audit: type=1400 audit(1034.052:1904): avc: denied { open } for pid=16871 comm="syz.3.2629" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 805.423654][ T30] audit: type=1400 audit(1034.052:1905): avc: denied { ioctl } for pid=16871 comm="syz.3.2629" path="/dev/video8" dev="devtmpfs" ino=951 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 805.880359][ T30] audit: type=1400 audit(1034.052:1906): avc: denied { create } for pid=16871 comm="syz.3.2629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 805.923343][ T30] audit: type=1400 audit(1034.052:1907): avc: denied { write } for pid=16871 comm="syz.3.2629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 806.049436][ T30] audit: type=1400 audit(1034.070:1908): avc: denied { setopt } for pid=16878 comm="syz.5.2632" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 807.924340][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 808.262176][T16940] bridge0: port 1(syz_tun) entered blocking state [ 808.268652][T16940] bridge0: port 1(syz_tun) entered disabled state [ 808.275401][T16940] syz_tun: entered allmulticast mode [ 808.282788][T16940] syz_tun: entered promiscuous mode [ 808.314277][ T5864] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 808.358969][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2645'. [ 808.553401][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 808.595330][ T5864] usb 4-1: unable to get BOS descriptor or descriptor too short [ 808.604959][ T5864] usb 4-1: config 5 has an invalid interface number: 215 but max is 0 [ 808.614629][ T5864] usb 4-1: config 5 has no interface number 0 [ 808.622768][ T5864] usb 4-1: config 5 interface 215 has no altsetting 0 [ 808.641644][ T5864] usb 4-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 808.651638][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.659880][ T5864] usb 4-1: Product: syz [ 808.669008][ T5864] usb 4-1: Manufacturer: syz [ 808.680665][ T5864] usb 4-1: SerialNumber: syz [ 809.330339][T16948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.341771][T16948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.874326][T16952] overlayfs: failed to clone lowerpath [ 809.928683][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 809.934845][ T30] audit: type=1400 audit(1038.897:1941): avc: denied { mount } for pid=16949 comm="syz.5.2648" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 810.264626][T16947] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.412545][T16947] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.533327][T16957] netlink: 'syz.4.2649': attribute type 5 has an invalid length. [ 810.541178][T16957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2649'. [ 810.550214][ T30] audit: type=1400 audit(1039.524:1942): avc: denied { setopt } for pid=16956 comm="syz.4.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 810.595791][ T30] audit: type=1400 audit(1039.570:1943): avc: denied { mount } for pid=16956 comm="syz.4.2649" name="/" dev="ocfs2_dlmfs" ino=53833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 810.743312][T16947] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.770647][ T30] audit: type=1400 audit(1039.748:1944): avc: denied { mounton } for pid=16967 comm="syz.1.2652" path="/525/file0" dev="tmpfs" ino=2887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 810.803380][ T30] audit: type=1400 audit(1039.748:1945): avc: denied { mount } for pid=16967 comm="syz.1.2652" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 811.014679][T16980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2653'. [ 811.040757][T16947] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.185628][T15578] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.240708][T15589] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.271873][ T30] audit: type=1400 audit(1040.216:1946): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 811.346439][T15589] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.388419][T15589] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.482169][ T5864] cypress_m8 4-1:5.215: DeLorme Earthmate USB converter detected [ 811.504679][ T30] audit: type=1400 audit(1040.431:1947): avc: denied { mount } for pid=16982 comm="syz.1.2655" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 811.613508][ T5864] earthmate ttyUSB0: required endpoint is missing [ 811.780490][ T5864] usb 4-1: USB disconnect, device number 87 [ 811.790477][ T5864] cypress_m8 4-1:5.215: device disconnected [ 811.885417][ T30] audit: type=1400 audit(1040.525:1948): avc: denied { listen } for pid=16988 comm="syz.3.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 812.025194][T12844] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 812.086815][ T30] audit: type=1400 audit(1040.974:1949): avc: denied { read write } for pid=16992 comm="syz.2.2658" name="mouse0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 812.159005][ T30] audit: type=1400 audit(1040.974:1950): avc: denied { open } for pid=16992 comm="syz.2.2658" path="/dev/input/mouse0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 812.205765][ T5864] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 812.215446][T12844] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 812.223729][T12844] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 812.237799][T12844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 812.248898][T12844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 812.283935][T12844] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 812.366301][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 812.373134][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 812.479362][T12844] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 812.488664][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 812.499879][T12844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.508041][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 812.523231][T12844] usb 2-1: config 0 descriptor?? [ 812.528456][T17001] futex_wake_op: syz.5.2660 tries to shift op by -1; fix this program [ 812.528776][ T5864] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 812.546265][T16991] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 812.554431][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.566214][ T5864] usb 4-1: config 0 descriptor?? [ 812.572139][T16989] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 812.600922][ T5864] hub 4-1:0.0: USB hub found [ 812.908852][T17005] overlayfs: failed to clone lowerpath [ 813.013939][T16991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.406630][T16991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.406769][ T5864] hub 4-1:0.0: 1 port detected [ 814.387259][ T5864] usb 4-1: reset high-speed USB device number 88 using dummy_hcd [ 814.490275][T17030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2667'. [ 814.883435][T17032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.907659][T17032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.533591][T12844] usbhid 2-1:0.0: can't add hid device: -71 [ 815.577283][T12844] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 815.613000][T12844] usb 2-1: USB disconnect, device number 93 [ 815.641256][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 815.641272][ T30] audit: type=1400 audit(1044.304:1956): avc: denied { ioctl } for pid=17043 comm="syz.1.2671" path="socket:[54794]" dev="sockfs" ino=54794 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 816.123262][T12844] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 816.284400][T17060] overlayfs: failed to clone lowerpath [ 816.505855][ T5895] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 816.510761][ T30] audit: type=1400 audit(1044.961:1957): avc: denied { firmware_load } for pid=17057 comm="syz.5.2675" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 816.591609][T12844] usb 2-1: Using ep0 maxpacket: 8 [ 816.601473][T12844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.613826][T12844] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 816.623195][T12844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.633638][T12844] usb 2-1: config 0 descriptor?? [ 816.640983][T12844] usb 2-1: Found UVC 0.00 device (2833:0201) [ 816.648217][T12844] usb 2-1: No valid video chain found. [ 816.699153][ T5895] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 816.709331][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.722164][ T5895] usb 3-1: config 0 descriptor?? [ 817.069523][ T5979] usb 4-1: USB disconnect, device number 88 [ 817.156709][ T5895] usb 2-1: USB disconnect, device number 94 [ 817.463725][T17076] overlayfs: failed to clone lowerpath [ 817.970692][ T30] audit: type=1400 audit(1046.477:1958): avc: denied { read } for pid=17081 comm="syz.1.2679" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 818.223349][T17086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2680'. [ 818.681622][ T30] audit: type=1400 audit(1046.477:1959): avc: denied { open } for pid=17081 comm="syz.1.2679" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 818.704858][ C1] vkms_vblank_simulate: vblank timer overrun [ 818.744266][ T30] audit: type=1400 audit(1046.486:1960): avc: denied { ioctl } for pid=17081 comm="syz.1.2679" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 818.774012][ T30] audit: type=1400 audit(1046.486:1961): avc: denied { read write } for pid=17083 comm="syz.3.2680" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 818.808811][ T30] audit: type=1400 audit(1046.486:1962): avc: denied { open } for pid=17083 comm="syz.3.2680" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 819.090520][T12844] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 819.141455][ T5979] usb 3-1: USB disconnect, device number 92 [ 819.142238][T17092] vxcan1 speed is unknown, defaulting to 1000 [ 819.251873][T12844] usb 2-1: Using ep0 maxpacket: 8 [ 819.259566][T12844] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 819.275755][T12844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.285301][ T30] audit: type=1400 audit(1047.702:1963): avc: denied { sqpoll } for pid=17103 comm="syz.3.2686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 819.304967][T17105] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2686'. [ 819.313929][T17105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2686'. [ 819.333893][T12844] pvrusb2: Hardware description: Terratec Grabster AV400 [ 819.355599][T12844] pvrusb2: ********** [ 819.362219][T12844] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 819.410110][T12844] pvrusb2: Important functionality might not be entirely working. [ 819.430202][T12844] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 819.433632][T17092] lo speed is unknown, defaulting to 1000 [ 819.457598][T12844] pvrusb2: ********** [ 819.539648][ T5979] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 819.612666][ T2331] pvrusb2: Invalid write control endpoint [ 819.650523][T12844] usb 2-1: USB disconnect, device number 95 [ 819.655424][ T2331] pvrusb2: Invalid write control endpoint [ 819.665491][ T2331] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 819.677494][ T2331] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 819.687450][ T2331] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 819.701020][ T2331] pvrusb2: Device being rendered inoperable [ 819.709398][ T2331] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 819.985278][ T2331] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 819.993851][ T2331] pvrusb2: Attached sub-driver cx25840 [ 820.002918][ T2331] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 820.030229][ T2331] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 820.042371][ T5979] usb 3-1: Using ep0 maxpacket: 32 [ 820.050178][ T5979] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 820.064226][ T5979] usb 3-1: config 0 has no interface number 0 [ 820.083090][T17113] netlink: 'syz.3.2687': attribute type 1 has an invalid length. [ 820.101867][ T5979] usb 3-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=d5.96 [ 820.115752][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.141156][ T5979] usb 3-1: Product: syz [ 820.149737][T17113] 8021q: adding VLAN 0 to HW filter on device bond16 [ 820.151521][ T5979] usb 3-1: Manufacturer: syz [ 820.210990][ T5979] usb 3-1: SerialNumber: syz [ 820.253764][ T5979] usb 3-1: config 0 descriptor?? [ 820.259084][ T30] audit: type=1400 audit(1048.619:1964): avc: denied { unlink } for pid=17118 comm="syz.1.2690" name="#50" dev="tmpfs" ino=2929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 820.288705][T17119] overlay: filesystem on ./file0 not supported as upperdir [ 820.328119][ T5979] s2255 3-1:0.133: Could not find bulk-in endpoint [ 820.344238][ T30] audit: type=1400 audit(1048.628:1965): avc: denied { mount } for pid=17118 comm="syz.1.2690" name="/" dev="overlay" ino=2925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 820.418606][ T5979] Sensoray 2255 driver load failed: 0xfffffff4 [ 820.435051][ T5979] s2255 3-1:0.133: probe with driver s2255 failed with error -12 [ 820.456828][ T5979] usbhid 3-1:0.133: couldn't find an input interrupt endpoint [ 822.432302][T17137] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2693'. [ 822.627782][T17102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.653547][T17102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.678833][T17146] overlayfs: failed to clone upperpath [ 822.709169][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 822.709185][ T30] audit: type=1400 audit(1050.910:2001): avc: denied { write } for pid=17101 comm="syz.2.2685" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 822.735938][T17102] random: crng reseeded on system resumption [ 822.741110][ T30] audit: type=1400 audit(1050.929:2002): avc: denied { open } for pid=17101 comm="syz.2.2685" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 822.818274][T17155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2698'. [ 822.829245][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2697'. [ 822.838618][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2697'. [ 822.931720][ T30] audit: type=1400 audit(1051.126:2003): avc: denied { ioctl } for pid=17154 comm="syz.4.2698" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=54105 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 823.205548][ T30] audit: type=1400 audit(1051.266:2004): avc: denied { ioctl } for pid=17158 comm="syz.1.2700" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 823.235769][ T30] audit: type=1400 audit(1051.369:2005): avc: denied { ioctl } for pid=17101 comm="syz.2.2685" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 823.262664][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2700'. [ 823.264807][ T30] audit: type=1400 audit(1051.369:2006): avc: denied { link } for pid=17101 comm="syz.2.2685" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 823.271682][T17162] netlink: 'syz.1.2700': attribute type 30 has an invalid length. [ 823.307854][ T6467] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.317926][ T6467] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.329029][ T30] audit: type=1400 audit(1051.378:2007): avc: denied { read write } for pid=17101 comm="syz.2.2685" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 823.352235][ C1] vkms_vblank_simulate: vblank timer overrun [ 823.358390][ T6467] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.367221][ T6467] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.377794][ T30] audit: type=1400 audit(1051.378:2008): avc: denied { open } for pid=17101 comm="syz.2.2685" path="/dev/input/event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 823.401703][ T30] audit: type=1400 audit(1051.378:2009): avc: denied { ioctl } for pid=17101 comm="syz.2.2685" path="/dev/input/event1" dev="devtmpfs" ino=919 ioctlcmd=0x454b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 823.536782][ T30] audit: type=1400 audit(1051.687:2010): avc: denied { write } for pid=17169 comm="syz.3.2702" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 824.141462][T17181] tipc: Enabling of bearer rejected, failed to enable media [ 824.273660][T17186] CUSE: info not properly terminated [ 824.313007][ T5979] usb 3-1: USB disconnect, device number 93 [ 825.494464][T17208] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2711'. [ 826.054766][T17225] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 827.360147][T17249] macsec2: entered promiscuous mode [ 827.369556][T17249] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 828.120380][T17256] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 828.128575][T17256] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 828.143151][T17256] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 828.151895][T17256] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 828.400031][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 828.400045][ T30] audit: type=1326 audit(1056.224:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17251 comm="syz.2.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cbf8eec9 code=0x7fc00000 [ 828.675476][ T30] audit: type=1400 audit(1056.495:2039): avc: denied { ioctl } for pid=17266 comm="syz.1.2726" path="socket:[55325]" dev="sockfs" ino=55325 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 829.967720][T17298] Process accounting resumed [ 830.145754][ T30] audit: type=1400 audit(1057.861:2040): avc: denied { accept } for pid=17307 comm="syz.2.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 830.239144][T17309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2732'. [ 830.420912][ T30] audit: type=1400 audit(1057.954:2041): avc: denied { mount } for pid=17304 comm="syz.4.2732" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 830.508081][ T5974] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 830.658160][ T5974] usb 3-1: device descriptor read/64, error -71 [ 830.888095][ T30] audit: type=1400 audit(1058.459:2042): avc: denied { setopt } for pid=17314 comm="syz.5.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 831.524055][ T5974] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 831.716117][ T5974] usb 3-1: device descriptor read/64, error -71 [ 831.834054][ T5974] usb usb3-port1: attempt power cycle [ 831.942638][T17324] macsec2: entered promiscuous mode [ 831.947860][T17324] bridge0: entered promiscuous mode [ 832.050062][T17322] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 832.052313][T17324] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 832.060461][T17322] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 832.292899][ T5979] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 832.357601][ T5974] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 832.379946][ T5974] usb 3-1: device descriptor read/8, error -71 [ 832.453657][ T5979] usb 2-1: Using ep0 maxpacket: 8 [ 832.463313][ T5979] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 832.472475][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.480723][ T5979] usb 2-1: Product: syz [ 832.484876][ T5979] usb 2-1: Manufacturer: syz [ 832.489538][ T5979] usb 2-1: SerialNumber: syz [ 832.495230][ T5979] usb 2-1: config 0 descriptor?? [ 832.635457][ T5974] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 832.657398][ T5974] usb 3-1: device descriptor read/8, error -71 [ 832.720710][ T5979] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 832.774641][ T5974] usb usb3-port1: unable to enumerate USB device [ 832.902024][ T30] audit: type=1400 audit(1060.442:2043): avc: denied { create } for pid=17337 comm="syz.3.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 833.215848][ T30] audit: type=1400 audit(1060.732:2044): avc: denied { mounton } for pid=17340 comm="syz.5.2744" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 833.516851][ T30] audit: type=1400 audit(1060.732:2045): avc: denied { unmount } for pid=17340 comm="syz.5.2744" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 833.565506][ T5974] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 833.609846][ T30] audit: type=1400 audit(1061.097:2046): avc: denied { bind } for pid=17351 comm="syz.2.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 833.630611][ T30] audit: type=1400 audit(1061.097:2047): avc: denied { setopt } for pid=17351 comm="syz.2.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 833.760613][ T5974] usb 4-1: config 27 has an invalid descriptor of length 48, skipping remainder of the config [ 833.876806][ T5974] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 48, changing to 9 [ 833.906272][ T5974] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 833.949492][ T5979] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 833.963623][ T5979] usb 2-1: USB disconnect, device number 96 [ 833.964017][ T30] audit: type=1400 audit(1061.424:2048): avc: denied { setopt } for pid=17325 comm="syz.1.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 834.012719][ T5974] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 834.067219][ T30] audit: type=1400 audit(1061.424:2049): avc: denied { write } for pid=17325 comm="syz.1.2739" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 834.096370][T17359] MTD: Couldn't look up '/dev/nullb0': -15 [ 834.102445][T17359] /dev/nullb0: Can't lookup blockdev [ 834.134748][ T30] audit: type=1400 audit(1061.574:2050): avc: denied { mount } for pid=17355 comm="syz.5.2748" name="/" dev="autofs" ino=55496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 834.195247][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.587216][ T5974] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 834.621051][ T30] audit: type=1400 audit(1062.051:2051): avc: denied { setopt } for pid=17364 comm="syz.1.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 834.683815][ T5974] usb 4-1: invalid MIDI out EP 0 [ 834.904076][ T30] audit: type=1400 audit(1062.322:2052): avc: denied { write } for pid=17381 comm="syz.2.2754" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 835.366736][ T5974] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 835.584154][ T30] audit: type=1400 audit(1062.491:2053): avc: denied { read } for pid=17381 comm="syz.2.2754" laddr=::ac14:14aa lport=39460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 835.814962][ T30] audit: type=1400 audit(1062.594:2054): avc: denied { mounton } for pid=17381 comm="syz.2.2754" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 836.475664][ T30] audit: type=1400 audit(1063.791:2055): avc: denied { getopt } for pid=17386 comm="syz.5.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 836.655316][ T30] audit: type=1400 audit(1063.819:2056): avc: denied { create } for pid=17386 comm="syz.5.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 836.829579][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 836.836921][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 837.103142][T17389] netlink: 'syz.5.2755': attribute type 10 has an invalid length. [ 837.333234][T17389] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 837.361798][ T30] audit: type=1400 audit(1063.856:2057): avc: denied { ioctl } for pid=17386 comm="syz.5.2755" path="socket:[55524]" dev="sockfs" ino=55524 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 837.427689][ T5974] usb 4-1: USB disconnect, device number 89 [ 837.435092][T17342] delete_channel: no stack [ 837.504583][T17390] vxcan1 speed is unknown, defaulting to 1000 [ 837.531078][T17394] 9pnet_fd: Insufficient options for proto=fd [ 837.537927][T17391] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 837.733690][T17390] lo speed is unknown, defaulting to 1000 [ 838.385841][T17406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.408656][T17406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.465747][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 839.465763][ T30] audit: type=1400 audit(1066.588:2059): avc: denied { accept } for pid=17413 comm="syz.1.2761" lport=56542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 840.274266][ T30] audit: type=1400 audit(1067.345:2060): avc: denied { setopt } for pid=17434 comm="syz.5.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 840.314892][T17450] ieee802154 phy1 wpan1: encryption failed: -22 [ 840.346216][T17452] 9pnet_fd: Insufficient options for proto=fd [ 842.945799][ T30] audit: type=1400 audit(1069.478:2061): avc: denied { setopt } for pid=17481 comm="syz.3.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 843.386064][ T30] audit: type=1400 audit(1069.534:2062): avc: denied { watch } for pid=17481 comm="syz.3.2778" path="/512/bus/file1" dev="overlay" ino=2796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 843.486416][ T30] audit: type=1400 audit(1069.534:2063): avc: denied { watch_sb watch_reads } for pid=17481 comm="syz.3.2778" path="/512/bus/file1" dev="overlay" ino=2796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 844.021421][T17494] overlayfs: failed to clone upperpath [ 844.071916][T17508] netlink: 'syz.4.2788': attribute type 33 has an invalid length. [ 844.260735][T17510] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 844.290991][ T30] audit: type=1400 audit(1071.106:2064): avc: denied { create } for pid=17511 comm="syz.1.2790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 844.329011][T17515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2792'. [ 844.371744][ T30] audit: type=1400 audit(1071.106:2065): avc: denied { read write } for pid=17511 comm="syz.1.2790" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 844.410867][T17515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2792'. [ 844.452906][T17515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2792'. [ 844.479664][T17515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2792'. [ 844.525000][ T30] audit: type=1400 audit(1071.106:2066): avc: denied { open } for pid=17511 comm="syz.1.2790" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 844.947758][ T30] audit: type=1400 audit(1071.227:2067): avc: denied { write } for pid=17511 comm="syz.1.2790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 846.130267][T17538] kAFS: No cell specified [ 846.371509][T17540] netlink: 'syz.4.2799': attribute type 9 has an invalid length. [ 846.400217][ T5974] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 846.647350][ T5974] usb 3-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.663531][ T5974] usb 3-1: config 0 interface 0 has no altsetting 0 [ 846.868733][ T5974] usb 3-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 846.887136][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.920515][ T5974] usb 3-1: config 0 descriptor?? [ 847.256123][ T30] audit: type=1400 audit(1073.875:2068): avc: denied { read } for pid=17555 comm="syz.1.2803" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 847.278190][T17560] vxcan1 speed is unknown, defaulting to 1000 [ 847.288632][ T30] audit: type=1400 audit(1073.875:2069): avc: denied { open } for pid=17555 comm="syz.1.2803" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 847.480119][T17560] lo speed is unknown, defaulting to 1000 [ 847.535533][ T30] audit: type=1400 audit(1073.875:2070): avc: denied { mount } for pid=17556 comm="syz.5.2802" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 847.606798][ T30] audit: type=1400 audit(1074.202:2071): avc: denied { ioctl } for pid=17555 comm="syz.1.2803" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 847.654838][ T5974] usbhid 3-1:0.0: can't add hid device: -71 [ 847.679911][ T5974] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 847.996437][ T30] audit: type=1400 audit(1074.511:2072): avc: denied { mounton } for pid=17564 comm="syz.3.2804" path="/514/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 848.019255][ T5974] usb 3-1: USB disconnect, device number 98 [ 848.054521][T17570] netlink: 'syz.3.2804': attribute type 1 has an invalid length. [ 848.244370][T17570] 8021q: adding VLAN 0 to HW filter on device bond17 [ 848.667435][T17578] fuse: Unknown parameter 'ö°eb#/w;n0x0000000000000008' [ 848.977138][ T30] audit: type=1400 audit(1075.483:2073): avc: denied { shutdown } for pid=17584 comm="syz.3.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 849.682525][T17608] sp0: Synchronizing with TNC [ 849.939355][ T30] audit: type=1400 audit(1076.381:2074): avc: denied { listen } for pid=17603 comm="syz.1.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 849.980321][T17614] 9pnet_fd: Insufficient options for proto=fd [ 850.097555][ T30] audit: type=1400 audit(1076.531:2075): avc: denied { create } for pid=17617 comm="syz.2.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 850.122251][ T30] audit: type=1400 audit(1076.531:2076): avc: denied { map } for pid=17617 comm="syz.2.2819" path="socket:[57100]" dev="sockfs" ino=57100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 850.612500][ T30] audit: type=1400 audit(1076.531:2077): avc: denied { read accept } for pid=17617 comm="syz.2.2819" path="socket:[57100]" dev="sockfs" ino=57100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 851.158999][T17633] comedi comedi1: pcl812: I/O port conflict (0x4f27,16) [ 851.167890][ T30] audit: type=1400 audit(1077.523:2078): avc: denied { append } for pid=17630 comm="syz.3.2821" name="comedi1" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 851.194376][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 852.182452][ T30] audit: type=1400 audit(1078.477:2079): avc: denied { bind } for pid=17642 comm="syz.5.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 852.249087][ T30] audit: type=1400 audit(1078.477:2080): avc: denied { write } for pid=17642 comm="syz.5.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 852.281781][ T30] audit: type=1400 audit(1078.570:2081): avc: denied { ioctl } for pid=17638 comm="syz.1.2823" path="socket:[57141]" dev="sockfs" ino=57141 ioctlcmd=0x5532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 852.311881][T17646] netlink: 'syz.4.2826': attribute type 1 has an invalid length. [ 852.414469][T17646] 8021q: adding VLAN 0 to HW filter on device bond2 [ 852.469898][T17649] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 852.600845][ T30] audit: type=1400 audit(1078.879:2082): avc: denied { read } for pid=17652 comm="syz.1.2828" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 852.633924][T17653] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 852.640428][T17653] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 852.648067][T17653] vhci_hcd vhci_hcd.0: Device attached [ 852.656456][T17654] vhci_hcd: connection closed [ 852.661789][T15571] vhci_hcd: stop threads [ 852.678448][T15571] vhci_hcd: release socket [ 852.691143][T15571] vhci_hcd: disconnect device [ 852.696248][ T30] audit: type=1400 audit(1078.879:2083): avc: denied { open } for pid=17652 comm="syz.1.2828" path="/dev/sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 852.774404][ T30] audit: type=1400 audit(1078.898:2084): avc: denied { ioctl } for pid=17652 comm="syz.1.2828" path="/dev/sg0" dev="devtmpfs" ino=759 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 853.201236][ T5903] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 853.303991][T17664] 9pnet_fd: Insufficient options for proto=fd [ 853.483557][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.498145][ T5903] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 853.507368][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.564025][ T5903] usb 4-1: config 0 descriptor?? [ 854.241744][ T5903] waterforce 0003:1044:7A4D.0026: item fetching failed at offset 0/3 [ 854.250359][ T5903] waterforce 0003:1044:7A4D.0026: hid parse failed with -22 [ 854.257786][ T5903] waterforce 0003:1044:7A4D.0026: probe with driver waterforce failed with error -22 [ 854.382669][T17674] overlayfs: failed to clone lowerpath [ 854.815704][ T30] audit: type=1400 audit(1080.946:2085): avc: denied { ioctl } for pid=17656 comm="syz.3.2829" path="socket:[56064]" dev="sockfs" ino=56064 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 855.152876][T12844] usb 4-1: USB disconnect, device number 91 [ 855.278936][ T30] audit: type=1400 audit(1081.386:2086): avc: denied { connect } for pid=17682 comm="syz.1.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 855.402683][T17688] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 855.409211][T17688] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 855.416877][T17688] vhci_hcd vhci_hcd.0: Device attached [ 855.793165][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2838'. [ 855.823843][ T5903] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 856.221415][T17690] vhci_hcd: connection reset by peer [ 856.233471][ T6467] vhci_hcd: stop threads [ 856.241121][ T6467] vhci_hcd: release socket [ 856.245686][ T6467] vhci_hcd: disconnect device [ 856.360463][T17713] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 856.450759][T17715] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 856.635841][ T5974] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 856.710627][T12844] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 856.800483][ T5974] usb 4-1: config index 0 descriptor too short (expected 12343, got 441) [ 856.809094][ T5974] usb 4-1: config 53 has too many interfaces: 57, using maximum allowed: 32 [ 856.818035][ T5974] usb 4-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 856.828338][ T5974] usb 4-1: config 53 has 0 interfaces, different from the descriptor's value: 57 [ 856.837535][ T5974] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 856.847297][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.881347][T12844] usb 2-1: config index 0 descriptor too short (expected 12343, got 441) [ 856.891370][T17720] tmpfs: Unknown parameter 'ÞŽðŠ[Tæ+ü­ƒ‘*Wã^4*Œ\X]ÊÅJCIȤg•z [ 856.891370][T17720] D2¨DùbÕ[¶YO³N8HKa1êÑ7š_¸:Ê’\ñX6(¯bK¹ROèq(@!¬ •¿%ÅÌDKÁvÞ~‰' [ 856.909396][T12844] usb 2-1: config 53 has too many interfaces: 57, using maximum allowed: 32 [ 856.914690][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 856.914703][ T30] audit: type=1400 audit(1082.911:2088): avc: denied { read } for pid=17718 comm="syz.2.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 856.943618][T12844] usb 2-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 856.953886][T12844] usb 2-1: config 53 has 0 interfaces, different from the descriptor's value: 57 [ 856.963126][T12844] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 856.972222][T12844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.073250][T17707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.082119][T17707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.095107][ T5974] usb 4-1: string descriptor 0 read error: -71 [ 857.105557][ T5974] usb 4-1: USB disconnect, device number 92 [ 857.225205][T17715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.233952][T17715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.244990][T12844] usb 2-1: string descriptor 0 read error: -71 [ 857.252985][T12844] usb 2-1: USB disconnect, device number 97 [ 857.391240][T17724] overlayfs: failed to clone lowerpath [ 857.879610][T12844] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 857.887707][ T5974] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 857.933480][ T30] audit: type=1400 audit(1083.865:2089): avc: denied { read } for pid=17731 comm="syz.2.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 857.939601][T17736] sit2: entered promiscuous mode [ 857.958126][T17736] sit2: entered allmulticast mode [ 858.105182][T17738] overlayfs: failed to clone lowerpath [ 858.385282][ T5974] usb 4-1: Using ep0 maxpacket: 16 [ 858.394115][T12844] usb 2-1: Using ep0 maxpacket: 16 [ 858.403460][ T5974] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 858.414714][T12844] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 858.520693][ T5974] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 858.529954][T12844] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 858.547442][ T5974] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 858.559076][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.092340][T12844] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 859.108700][ T5974] usb 4-1: Product: syz [ 859.118473][T12844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.204620][ T5974] usb 4-1: Manufacturer: syz [ 859.211635][ T5974] usb 4-1: SerialNumber: syz [ 859.220904][T12844] usb 2-1: Product: syz [ 859.231073][T12844] usb 2-1: Manufacturer: syz [ 859.247603][T12844] usb 2-1: SerialNumber: syz [ 859.422580][T17750] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2854'. [ 859.687913][ T5974] usb 4-1: 0:2 : does not exist [ 859.920380][T17764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2856'. [ 860.561759][ T5974] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 860.612381][ T5974] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 860.643164][ T5974] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 860.676644][T17775] tipc: Enabling of bearer rejected, failed to enable media [ 860.677653][T17773] futex_wake_op: syz.2.2859 tries to shift op by -1; fix this program [ 860.705643][ T5974] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 860.731464][ T5974] usb 4-1: USB disconnect, device number 93 [ 860.751842][T12844] usb 2-1: 0:2 : does not exist [ 860.761822][T12844] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 860.874720][ T30] audit: type=1400 audit(1086.615:2090): avc: denied { wake_alarm } for pid=17779 comm="syz.1.2863" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 860.910477][T12844] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 860.930516][T12844] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 860.949981][T12844] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 861.043498][T17792] overlayfs: failed to clone lowerpath [ 861.080981][T17792] netlink: 'syz.4.2862': attribute type 1 has an invalid length. [ 861.115759][ T24] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 861.314410][ T5903] vhci_hcd: vhci_device speed not set [ 861.355290][T12844] usb 2-1: USB disconnect, device number 98 [ 861.408955][ T30] audit: type=1400 audit(1087.110:2091): avc: denied { setattr } for pid=17796 comm="syz.5.2866" name="NETLINK" dev="sockfs" ino=56217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 861.435448][ T30] audit: type=1400 audit(1087.110:2092): avc: denied { ioctl } for pid=17796 comm="syz.5.2866" path="socket:[57442]" dev="sockfs" ino=57442 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 861.451119][T17792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 861.461831][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 861.485053][ T24] usb 3-1: config 186 has an invalid interface number: 40 but max is 0 [ 861.496582][ T24] usb 3-1: config 186 has no interface number 0 [ 861.503327][ T24] usb 3-1: config 186 interface 40 has no altsetting 0 [ 861.520353][ T24] usb 3-1: New USB device found, idVendor=03eb, idProduct=21fe, bcdDevice=73.53 [ 861.529889][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.538000][ T24] usb 3-1: Product: syz [ 861.542350][ T24] usb 3-1: Manufacturer: syz [ 861.547309][ T24] usb 3-1: SerialNumber: syz [ 861.773554][T17784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.789199][T17784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.800667][T17784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.906297][T17815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'. [ 862.195261][T17784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.214795][ T24] igorplugusb 3-1:186.40: endpoint incorrect [ 862.249016][ T24] usb 3-1: USB disconnect, device number 99 [ 862.256924][T17817] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2873'. [ 862.267810][T17817] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2873'. [ 862.276921][T17817] netlink: 'syz.1.2873': attribute type 5 has an invalid length. [ 862.285510][T17817] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2873'. [ 862.301013][ T30] audit: type=1400 audit(1087.952:2093): avc: denied { read } for pid=17816 comm="syz.1.2873" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 862.326109][ T30] audit: type=1400 audit(1087.952:2094): avc: denied { open } for pid=17816 comm="syz.1.2873" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 862.355647][ T30] audit: type=1400 audit(1087.952:2095): avc: denied { ioctl } for pid=17816 comm="syz.1.2873" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 862.452242][ T30] audit: type=1400 audit(1088.093:2096): avc: denied { bind } for pid=17822 comm="syz.1.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 862.547497][T17823] SELinux: policydb magic number 0x50 does not match expected magic number 0xf97cff8c [ 862.557379][ T30] audit: type=1400 audit(1088.177:2097): avc: denied { ioctl } for pid=17822 comm="syz.1.2874" path="socket:[56258]" dev="sockfs" ino=56258 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 862.601310][ T30] audit: type=1400 audit(1088.177:2098): avc: denied { load_policy } for pid=17822 comm="syz.1.2874" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 862.621601][T17823] SELinux: failed to load policy [ 862.642466][T17824] netlink: 'syz.4.2872': attribute type 26 has an invalid length. [ 862.800140][T17835] tmpfs: Bad value for 'mpol' [ 863.691762][ T5974] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 863.910947][ T5974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.967129][T17849] overlayfs: failed to clone lowerpath [ 864.021617][T17850] netlink: 'syz.4.2881': attribute type 1 has an invalid length. [ 864.309368][T17850] 8021q: adding VLAN 0 to HW filter on device bond4 [ 864.345532][ T5974] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 864.356226][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.630315][ T5974] usb 2-1: config 0 descriptor?? [ 864.693999][T17854] 9pnet_fd: Insufficient options for proto=fd [ 865.461721][ T5974] nintendo 0003:057E:200E.0027: item fetching failed at offset 6/7 [ 865.470586][ T5974] nintendo 0003:057E:200E.0027: HID parse failed [ 865.479478][ T5974] nintendo 0003:057E:200E.0027: probe - fail = -22 [ 865.486096][ T5974] nintendo 0003:057E:200E.0027: probe with driver nintendo failed with error -22 [ 865.672456][T17841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.684439][T17841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.700002][ T5903] usb 2-1: USB disconnect, device number 99 [ 865.882709][T17874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2886'. [ 867.479027][T17889] overlayfs: failed to clone lowerpath [ 867.592383][T17891] netlink: 'syz.5.2888': attribute type 1 has an invalid length. [ 867.635967][T17891] 8021q: adding VLAN 0 to HW filter on device bond7 [ 868.500242][T17908] netlink: 'syz.2.2892': attribute type 1 has an invalid length. [ 868.751990][T17908] 8021q: adding VLAN 0 to HW filter on device bond8 [ 869.531002][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2895'. [ 869.539967][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2895'. [ 870.165461][T17927] bridge0: entered promiscuous mode [ 870.174599][T17927] bridge0: entered allmulticast mode [ 870.204031][T17924] macsec1: entered allmulticast mode [ 870.223711][ T30] audit: type=1400 audit(1095.345:2099): avc: denied { write } for pid=17926 comm="syz.1.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 870.277480][T17933] netlink: 'syz.5.2901': attribute type 4 has an invalid length. [ 870.560499][ T30] audit: type=1400 audit(1095.672:2100): avc: denied { read write } for pid=17934 comm="syz.3.2902" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 870.583992][ T5974] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 870.597492][T12844] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 870.617512][T12844] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 870.640147][T12844] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 870.665112][T12844] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 870.677785][ T30] audit: type=1400 audit(1095.672:2101): avc: denied { open } for pid=17934 comm="syz.3.2902" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 870.717978][T12844] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 870.736302][T12844] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 870.768822][T12844] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 870.776422][T12844] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 870.785634][ T5974] usb 3-1: Using ep0 maxpacket: 16 [ 870.791450][T12844] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 870.800928][ T5974] usb 3-1: config 0 has an invalid interface number: 163 but max is 0 [ 870.809266][ T5974] usb 3-1: config 0 has no interface number 0 [ 870.815516][ T5974] usb 3-1: config 0 interface 163 has no altsetting 0 [ 870.822862][T12844] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 870.835383][ T5974] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=56.cc [ 870.847469][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.855657][ T5974] usb 3-1: Product: syz [ 870.859818][ T5974] usb 3-1: Manufacturer: syz [ 870.864418][ T5974] usb 3-1: SerialNumber: syz [ 870.930768][T12844] hid-generic 0003:0004:0000.0028: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 870.979684][ T5974] usb 3-1: config 0 descriptor?? [ 871.737046][ T5974] f81534a_ctrl 3-1:0.163: failed to set register 0x116: -5 [ 871.769246][ T5974] f81534a_ctrl 3-1:0.163: failed to enable ports: -5 [ 871.884174][ T5974] f81534a_ctrl 3-1:0.163: probe with driver f81534a_ctrl failed with error -5 [ 871.911915][ T5974] usb 3-1: USB disconnect, device number 100 [ 873.797437][T17950] netlink: 'syz.5.2906': attribute type 1 has an invalid length. [ 873.954721][ T30] audit: type=1400 audit(1098.843:2102): avc: denied { create } for pid=17976 comm="syz.1.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 874.051485][T17978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2913'. [ 875.140996][T17987] vxcan1 speed is unknown, defaulting to 1000 [ 875.317667][T17987] lo speed is unknown, defaulting to 1000 [ 875.496848][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2916'. [ 876.000294][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2917'. [ 876.385956][ T30] audit: type=1400 audit(1101.107:2103): avc: denied { create } for pid=18003 comm="syz.1.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 877.435133][T18024] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2924'. [ 877.461852][T18024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2924'. [ 877.630421][T18024] futex_wake_op: syz.2.2924 tries to shift op by -1; fix this program [ 877.805799][T18030] 9pnet_fd: Insufficient options for proto=fd [ 879.123594][ T30] audit: type=1400 audit(1103.660:2104): avc: denied { bind } for pid=18036 comm="syz.2.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 879.153082][T18045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2929'. [ 879.185669][ T30] audit: type=1400 audit(1103.660:2105): avc: denied { name_bind } for pid=18036 comm="syz.2.2927" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 879.281391][ T30] audit: type=1400 audit(1103.660:2106): avc: denied { node_bind } for pid=18036 comm="syz.2.2927" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 880.271011][T18065] overlayfs: failed to clone lowerpath [ 881.509142][T18090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2939'. [ 881.688501][T18098] macsec3: entered promiscuous mode [ 881.699565][T18098] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 883.413005][ T30] audit: type=1326 audit(1107.692:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097238eec9 code=0x7ffc0000 [ 883.599891][ T30] audit: type=1326 audit(1107.739:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097238eec9 code=0x7ffc0000 [ 883.625670][ T30] audit: type=1326 audit(1107.767:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f097238eec9 code=0x7ffc0000 [ 883.649204][ T30] audit: type=1326 audit(1107.767:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097238eec9 code=0x7ffc0000 [ 884.545183][ T30] audit: type=1326 audit(1107.767:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097238eec9 code=0x7ffc0000 [ 884.579775][ T30] audit: type=1326 audit(1107.776:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f097238eec9 code=0x7ffc0000 [ 884.602940][ T30] audit: type=1326 audit(1108.019:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097238eec9 code=0x7ffc0000 [ 884.626202][ T30] audit: type=1326 audit(1108.019:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097238eec9 code=0x7ffc0000 [ 884.649722][ T30] audit: type=1326 audit(1108.141:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f097238eec9 code=0x7ffc0000 [ 884.737133][ T30] audit: type=1326 audit(1108.141:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.4.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097238eec9 code=0x7ffc0000 [ 886.031205][T18149] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 886.037728][T18149] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 886.045910][T18149] vhci_hcd vhci_hcd.0: Device attached [ 886.080449][T18150] vhci_hcd: connection closed [ 886.080646][T15581] vhci_hcd: stop threads [ 886.093360][T18153] 9pnet_fd: Insufficient options for proto=fd [ 886.099424][T15581] vhci_hcd: release socket [ 886.099451][T15581] vhci_hcd: disconnect device [ 887.547533][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2959'. [ 888.149247][T18172] netlink: 'syz.5.2962': attribute type 26 has an invalid length. [ 888.236889][T18173] overlayfs: failed to clone lowerpath [ 888.350919][T18176] netlink: 'syz.4.2961': attribute type 1 has an invalid length. [ 888.393237][T18176] 8021q: adding VLAN 0 to HW filter on device bond5 [ 888.842956][T18187] netlink: 'syz.1.2963': attribute type 1 has an invalid length. [ 888.963823][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 888.963837][ T30] audit: type=1400 audit(1112.883:2151): avc: denied { read } for pid=18189 comm="syz.4.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 889.003272][T18187] macvlan2: entered promiscuous mode [ 889.011713][T18187] macvlan2: entered allmulticast mode [ 889.020506][T18187] bond0: entered promiscuous mode [ 889.026281][T18187] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 889.050615][T18187] bond0: left promiscuous mode [ 889.113964][ T5974] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 889.275549][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.287915][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.297855][ T5974] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 889.307461][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.323714][ T5974] usb 3-1: config 0 descriptor?? [ 889.609629][T18193] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2968'. [ 890.056989][ T30] audit: type=1400 audit(1113.912:2152): avc: denied { connect } for pid=18207 comm="syz.4.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 890.386706][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'. [ 890.481405][ T30] audit: type=1400 audit(1114.305:2153): avc: denied { write } for pid=18209 comm="syz.5.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 890.680499][T18225] futex_wake_op: syz.3.2974 tries to shift op by -1; fix this program [ 890.896230][ T5974] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0029/input/input45 [ 890.916155][ T5974] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0029/input/input46 [ 890.933057][ T5974] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0029/input/input47 [ 890.951367][ T5974] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0029/input/input48 [ 890.973641][ T5974] uclogic 0003:256C:006D.0029: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 891.145997][ T5903] usb 3-1: USB disconnect, device number 101 [ 891.961441][T18240] netlink: 'syz.2.2982': attribute type 1 has an invalid length. [ 892.202198][T18252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2984'. [ 893.085814][ T30] audit: type=1400 audit(1116.747:2154): avc: denied { setopt } for pid=18262 comm="syz.5.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 893.127054][ T30] audit: type=1400 audit(1116.747:2155): avc: denied { connect } for pid=18262 comm="syz.5.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 893.628958][T18271] macsec4: entered promiscuous mode [ 893.654897][T18278] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 893.797080][ T30] audit: type=1400 audit(1117.411:2156): avc: denied { create } for pid=18287 comm="syz.1.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 893.863142][T18288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.882337][ T5974] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 894.069476][ T5974] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 894.850414][ T5974] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 894.860862][ T5974] usb 3-1: config 0 interface 0 has no altsetting 0 [ 894.871297][ T5974] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 894.890510][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 894.903934][ T5974] usb 3-1: Product: syz [ 894.908850][ T5974] usb 3-1: Manufacturer: syz [ 894.913512][ T5974] usb 3-1: SerialNumber: syz [ 894.922665][ T5974] usb 3-1: config 0 descriptor?? [ 894.930912][ T5974] hub 3-1:0.0: bad descriptor, ignoring hub [ 894.937524][ T5974] hub 3-1:0.0: probe with driver hub failed with error -5 [ 894.947651][ T5974] usb 3-1: selecting invalid altsetting 0 [ 894.992156][T18300] 9pnet_fd: Insufficient options for proto=fd [ 895.662392][ T5903] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 895.966567][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 896.015816][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.087859][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.301443][ T5903] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 896.316667][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.357850][ T5903] usb 4-1: config 0 descriptor?? [ 897.746400][ T5974] hid_parser_main: 8 callbacks suppressed [ 897.746413][ T5974] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 897.820363][ T5974] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 897.837614][ T5974] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 897.858843][ T5974] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 897.877715][ T5974] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 897.901252][ T5974] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 897.930394][ T5974] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 897.944074][ T5974] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 897.962758][ T5974] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 897.976409][ T5974] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 898.016835][ T5974] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.43 Device [syz1] on syz1 [ 898.034414][T18329] macsec5: entered promiscuous mode [ 898.044034][T18329] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 898.206184][ T5974] usb 3-1: USB disconnect, device number 102 [ 898.215630][ T5903] corsair 0003:1B1C:1B02.002B: item fetching failed at offset 4/5 [ 898.246059][ T5903] corsair 0003:1B1C:1B02.002B: parse failed [ 898.252056][ T5903] corsair 0003:1B1C:1B02.002B: probe with driver corsair failed with error -22 [ 898.439343][ T5974] usb 4-1: USB disconnect, device number 94 [ 898.581244][T18343] netlink: 'syz.4.3012': attribute type 1 has an invalid length. [ 898.743472][T18345] macvlan2: entered promiscuous mode [ 898.748838][T18345] macvlan2: entered allmulticast mode [ 898.755135][T18345] bond6: entered promiscuous mode [ 898.761363][T18345] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 898.945097][T18345] bond6: left promiscuous mode [ 898.965494][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 898.985064][T18352] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 898.995890][T18352] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 899.011995][T18352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 899.021800][T18352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 899.082229][T18354] 9pnet_fd: Insufficient options for proto=fd [ 899.750380][T18349] vxcan1 speed is unknown, defaulting to 1000 [ 900.050178][T15589] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.364473][T15589] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.490908][T15589] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.524827][T18349] lo speed is unknown, defaulting to 1000 [ 900.595250][T15589] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 900.624705][T15589] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.297976][T18352] Bluetooth: hci0: command tx timeout [ 902.511313][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 902.521991][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 902.903694][T18390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3022'. [ 902.972409][T18394] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 902.998635][T18395] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 903.112223][T15589] bond1 (unregistering): Released all slaves [ 903.226417][T15589] bond2 (unregistering): Released all slaves [ 903.237465][T15589] bond3 (unregistering): Released all slaves [ 903.268349][ T5903] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 903.347711][T15589] bond4 (unregistering): Released all slaves [ 903.360354][T15589] bond5 (unregistering): Released all slaves [ 903.370644][T15589] bond6 (unregistering): Released all slaves [ 903.381751][T15589] bond7 (unregistering): Released all slaves [ 903.392668][T15589] bond8 (unregistering): Released all slaves [ 903.406116][T15589] bond9 (unregistering): Released all slaves [ 903.417180][T15589] bond10 (unregistering): Released all slaves [ 903.428351][T15589] bond11 (unregistering): Released all slaves [ 903.442966][T15589] bond12 (unregistering): Released all slaves [ 903.445271][ T5903] usb 3-1: config index 0 descriptor too short (expected 12343, got 441) [ 903.456381][T18352] Bluetooth: hci0: command tx timeout [ 903.470161][T15589] bond13 (unregistering): Released all slaves [ 903.472728][ T5903] usb 3-1: config 53 has too many interfaces: 57, using maximum allowed: 32 [ 903.485946][T15589] bond14 (unregistering): Released all slaves [ 903.500989][T15589] bond15 (unregistering): Released all slaves [ 903.511421][ T5903] usb 3-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 903.517610][T15589] bond16 (unregistering): Released all slaves [ 903.526391][ T5903] usb 3-1: config 53 has 0 interfaces, different from the descriptor's value: 57 [ 903.536780][T15589] bond0 (unregistering): Released all slaves [ 903.573650][T18349] chnl_net:caif_netlink_parms(): no params data found [ 903.602765][T18392] macsec2: entered promiscuous mode [ 903.608000][T18392] bridge0: entered promiscuous mode [ 903.621254][ T5903] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 903.663200][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.200920][T18404] netlink: 'syz.3.3028': attribute type 1 has an invalid length. [ 904.317540][ T30] audit: type=1400 audit(1127.251:2157): avc: denied { setattr } for pid=18415 comm="syz.5.3030" name="NETLINK" dev="sockfs" ino=59501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 904.349351][T18392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.371531][T18404] 8021q: adding VLAN 0 to HW filter on device bond18 [ 904.379384][T15589] tipc: Left network mode [ 904.384540][ T30] audit: type=1400 audit(1127.251:2158): avc: denied { map } for pid=18415 comm="syz.5.3030" path="socket:[59501]" dev="sockfs" ino=59501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 904.423461][ T30] audit: type=1400 audit(1127.251:2159): avc: denied { read accept } for pid=18415 comm="syz.5.3030" path="socket:[59501]" dev="sockfs" ino=59501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 904.448299][T18392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.470470][T18392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.479300][T18392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.509427][T15589] IPVS: stopping backup sync thread 12940 ... [ 904.610997][T18349] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.625172][T18349] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.661687][T18349] bridge_slave_0: entered allmulticast mode [ 904.671535][T18349] bridge_slave_0: entered promiscuous mode [ 904.705183][T18349] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.720539][ T5903] usb 3-1: USB disconnect, device number 103 [ 904.749279][T18349] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.773763][T18349] bridge_slave_1: entered allmulticast mode [ 904.785663][T18349] bridge_slave_1: entered promiscuous mode [ 905.356293][T18430] netlink: 'syz.5.3033': attribute type 1 has an invalid length. [ 905.573073][T18349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.584028][T18349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.622473][T18431] macvlan5: entered promiscuous mode [ 905.627990][T18431] macvlan5: entered allmulticast mode [ 905.639759][T18431] bond8: entered promiscuous mode [ 905.648205][T18431] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 905.712168][T18352] Bluetooth: hci0: command tx timeout [ 905.731420][T18431] bond8: left promiscuous mode [ 906.009162][ T30] audit: type=1400 audit(1134.838:2160): avc: denied { create } for pid=18437 comm="syz.2.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 906.047758][ T5903] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 906.128508][T18440] overlayfs: failed to clone lowerpath [ 906.249609][T18349] team0: Port device team_slave_0 added [ 906.450428][ T30] audit: type=1400 audit(1134.838:2161): avc: denied { read } for pid=18437 comm="syz.2.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 906.485877][T18349] team0: Port device team_slave_1 added [ 906.590855][T18349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.603697][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 906.612132][T18349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.636399][ T5903] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 906.663070][ T5903] usb 4-1: config 0 has no interface number 0 [ 906.697863][ T5903] usb 4-1: config 0 interface 184 has no altsetting 0 [ 906.738977][ T5903] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 906.750429][T18349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.763981][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.793688][ T5903] usb 4-1: Product: syz [ 906.799944][ T30] audit: type=1400 audit(1135.577:2162): avc: denied { append } for pid=18442 comm="syz.2.3037" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 906.836185][ T5903] usb 4-1: Manufacturer: syz [ 906.864867][T18349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.871918][T18349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.897979][ T5903] usb 4-1: SerialNumber: syz [ 906.909116][T18349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.937652][ T5903] usb 4-1: config 0 descriptor?? [ 906.944822][T18445] 9pnet_fd: Insufficient options for proto=fd [ 906.948519][ T5903] smsc75xx v1.0.0 [ 906.966012][T15589] hsr_slave_0: left promiscuous mode [ 906.973557][T15589] hsr_slave_1: left promiscuous mode [ 906.985606][T15589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.022315][T15589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.212339][T15589] batman_adv: batadv0: Removing interface: macvtap1 [ 908.045367][T18352] Bluetooth: hci0: command tx timeout [ 908.238935][T15589] pim6reg9 (unregistering): left allmulticast mode [ 908.358255][ T5903] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 908.369128][ T30] audit: type=1400 audit(1136.952:2163): avc: denied { shutdown } for pid=18442 comm="syz.2.3037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 908.369132][ T5903] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 908.408959][ T5903] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 908.429085][ T5903] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 908.461872][T15589] team0 (unregistering): Port device batadv1 removed [ 908.496795][ T5903] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 908.532732][ T5903] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 908.543194][ T5903] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 908.587332][ T5903] usb 4-1: USB disconnect, device number 95 [ 909.321717][T15589] team0 (unregistering): Port device team_slave_1 removed [ 909.365498][T15589] team0 (unregistering): Port device team_slave_0 removed [ 909.740871][T18476] overlayfs: failed to clone lowerpath [ 909.860313][T18478] netlink: 'syz.5.3044': attribute type 1 has an invalid length. [ 910.413658][T18453] netlink: 'syz.2.3037': attribute type 26 has an invalid length. [ 910.423149][T18478] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 910.522907][ T30] audit: type=1400 audit(1139.057:2164): avc: denied { ioctl } for pid=18480 comm="syz.3.3045" path="socket:[59608]" dev="sockfs" ino=59608 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 910.866715][ T30] audit: type=1400 audit(1139.057:2165): avc: denied { setopt } for pid=18480 comm="syz.3.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 910.910836][T18349] hsr_slave_0: entered promiscuous mode [ 910.918962][T18349] hsr_slave_1: entered promiscuous mode [ 910.938815][T18349] debugfs: 'hsr0' already exists in 'hsr' [ 910.945607][T18349] Cannot create hsr debugfs directory [ 911.532957][T18501] 9pnet_fd: Insufficient options for proto=fd [ 911.539941][T18502] netlink: 'syz.5.3048': attribute type 1 has an invalid length. [ 912.821659][T18508] macvlan5: entered promiscuous mode [ 912.874166][T18508] macvlan5: entered allmulticast mode [ 912.890454][T18508] bond9: entered promiscuous mode [ 912.908091][T18508] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 913.049676][T18508] bond9: left promiscuous mode [ 913.157415][ T5974] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 913.260054][T15589] IPVS: stop unused estimator thread 0... [ 913.279733][T18526] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3054'. [ 913.307672][T18526] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 913.338155][T18526] 0ªX¹¦D: entered allmulticast mode [ 913.344218][ T5974] usb 4-1: Using ep0 maxpacket: 32 [ 913.353289][ T5974] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 913.362753][ T5974] usb 4-1: config 0 has no interface number 0 [ 913.370156][T18526] veth0_macvtap: entered allmulticast mode [ 913.381849][T18526] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 913.506073][T18528] pim6reg9: entered allmulticast mode [ 913.620416][ T5974] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 913.653778][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.673501][ T5974] usb 4-1: Product: syz [ 913.690348][ T5974] usb 4-1: Manufacturer: syz [ 913.710925][ T5974] usb 4-1: SerialNumber: syz [ 913.741259][ T5974] usb 4-1: config 0 descriptor?? [ 913.763603][ T5974] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 914.030136][ T5974] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 914.043900][ T5974] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 914.091635][T18349] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 914.310784][T18349] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 914.346332][T18349] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 914.385525][T18349] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 914.456535][T18349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.473087][T18349] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.489771][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.496902][ T9054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.514458][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 914.514880][ T913] usb 4-1: USB disconnect, device number 96 [ 914.535246][ T913] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 914.548028][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.555150][ T9054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.603644][ T30] audit: type=1400 audit(1142.855:2166): avc: denied { egress } for pid=24 comm="kworker/1:0" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 914.604578][ T913] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 914.625535][ T30] audit: type=1400 audit(1142.855:2167): avc: denied { sendto } for pid=24 comm="kworker/1:0" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 914.664563][T18548] netlink: 'syz.4.3058': attribute type 26 has an invalid length. [ 914.775351][T18554] netlink: 'syz.2.3059': attribute type 26 has an invalid length. [ 914.847197][ T913] quatech2 4-1:0.51: device disconnected [ 915.208620][T18349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.244048][T18349] veth0_vlan: entered promiscuous mode [ 915.258617][T18349] veth1_vlan: entered promiscuous mode [ 915.282455][T18349] veth0_macvtap: entered promiscuous mode [ 915.293645][T18349] veth1_macvtap: entered promiscuous mode [ 915.313447][T18349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.332981][T18349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.354414][T15583] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.418510][T15583] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.686569][T15583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.806065][T15583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.820360][T15573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.845883][T15573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.979148][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.047387][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.101257][ T30] audit: type=1400 audit(1144.276:2168): avc: denied { mounton } for pid=18349 comm="syz-executor" path="/root/syzkaller.93SohB/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 916.235488][ T30] audit: type=1400 audit(1144.314:2169): avc: denied { mount } for pid=18349 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 916.258627][ T30] audit: type=1400 audit(1144.314:2170): avc: denied { mounton } for pid=18349 comm="syz-executor" path="/root/syzkaller.93SohB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 916.325012][ T30] audit: type=1400 audit(1144.314:2171): avc: denied { mounton } for pid=18349 comm="syz-executor" path="/root/syzkaller.93SohB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=60003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 916.421744][ T30] audit: type=1400 audit(1144.332:2172): avc: denied { mounton } for pid=18349 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 916.449608][ T30] audit: type=1400 audit(1144.332:2173): avc: denied { mount } for pid=18349 comm="syz-executor" name="/" dev="gadgetfs" ino=7064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 916.476836][ T30] audit: type=1400 audit(1144.332:2174): avc: denied { mounton } for pid=18349 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 916.695949][T12844] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 916.856774][T12844] usb 3-1: Invalid ep0 maxpacket: 64 [ 917.017242][T12844] usb 3-1: new low-speed USB device number 105 using dummy_hcd [ 917.166569][T12844] usb 3-1: device descriptor read/64, error -71 [ 917.284075][T12844] usb usb3-port1: attempt power cycle [ 917.581987][T18583] netlink: 'syz.5.3066': attribute type 1 has an invalid length. [ 917.636430][ T5979] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 917.652411][T18581] macvlan5: entered promiscuous mode [ 917.657881][T18581] macvlan5: entered allmulticast mode [ 917.664898][T18581] bond10: entered promiscuous mode [ 917.670901][T18581] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 917.680204][T12844] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 917.694188][T18581] bond10: left promiscuous mode [ 917.701454][T12844] usb 3-1: device descriptor read/8, error -71 [ 917.839581][ T5979] usb 2-1: Using ep0 maxpacket: 8 [ 917.846361][ T5979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 917.856995][ T5979] usb 2-1: config index 0 descriptor too short (expected 65286, got 36) [ 917.868141][ T5979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.878550][ T5979] usb 2-1: config 0 has no interfaces? [ 917.886396][ T5979] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 917.896705][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.905264][ T5979] usb 2-1: Product: syz [ 917.909656][ T5979] usb 2-1: Manufacturer: syz [ 917.916943][ T5979] usb 2-1: SerialNumber: syz [ 917.932574][ T5979] usb 2-1: config 0 descriptor?? [ 917.957212][T12844] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 917.979264][T12844] usb 3-1: device descriptor read/8, error -71 [ 918.097554][T12844] usb usb3-port1: unable to enumerate USB device [ 918.162161][T12844] usb 2-1: USB disconnect, device number 100 [ 918.202786][T18588] binder: 18587:18588 ioctl c0306201 200000000640 returned -22 [ 918.316986][T18591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3068'. [ 918.491775][ T24] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 918.664647][ T24] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 918.674713][ T24] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 918.683323][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 918.693934][ T24] usb 4-1: config 1 has no interface number 0 [ 918.701670][ T24] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 918.712805][ T24] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 918.725797][ T24] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 918.735090][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.750955][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 919.353136][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 919.393216][T18598] overlayfs: failed to clone lowerpath [ 919.439598][T18598] netlink: 'syz.5.3070': attribute type 1 has an invalid length. [ 919.459517][T18598] 8021q: adding VLAN 0 to HW filter on device bond11 [ 919.599779][T18602] xt_HMARK: proto mask must be zero with L3 mode [ 919.670995][ T24] usb 4-1: USB disconnect, device number 97 [ 919.679217][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 920.703188][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3076'. [ 921.870473][ T30] audit: type=1400 audit(1149.674:2175): avc: denied { write } for pid=18636 comm="syz.5.3081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 922.564435][T18654] netlink: 'syz.2.3084': attribute type 1 has an invalid length. [ 923.039620][T18659] netlink: 'syz.1.3085': attribute type 1 has an invalid length. [ 924.030731][T18674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3089'. [ 924.482590][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 924.634366][T18682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3091'. [ 924.654121][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 924.664987][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 924.678408][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 924.731483][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 924.867681][ T58] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.955126][T18679] vxcan1 speed is unknown, defaulting to 1000 [ 925.001583][ T58] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.096537][ T58] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.398485][ T58] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.662207][T18708] netlink: 'syz.4.3096': attribute type 6 has an invalid length. [ 925.777411][ T30] audit: type=1804 audit(1153.228:2176): pid=18708 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3096" name="cgroup.controllers" dev="tmpfs" ino=2363 res=1 errno=0 [ 925.904176][ T30] audit: type=1800 audit(1153.228:2177): pid=18708 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3096" name="cgroup.controllers" dev="tmpfs" ino=2363 res=0 errno=0 [ 926.969340][ T5862] Bluetooth: hci2: command tx timeout [ 926.988745][T18719] overlayfs: failed to clone lowerpath [ 927.032120][T18719] netlink: 'syz.5.3099': attribute type 1 has an invalid length. [ 927.120918][T18719] 8021q: adding VLAN 0 to HW filter on device bond12 [ 927.138472][ T58] batman_adv: batadv0: Interface deactivated: gretap1 [ 927.268739][ T913] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 927.452624][ T913] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 927.478887][ T913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.524915][ T913] usb 4-1: config 0 descriptor?? [ 927.581332][ T913] usb 4-1: selecting invalid altsetting 3 [ 927.591489][ T913] comedi comedi5: could not set alternate setting 3 in high speed [ 927.610197][ T913] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 927.691594][ T913] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 927.783850][T18722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.800465][ T58] batman_adv: batadv0: Removing interface: gretap1 [ 927.808119][T18722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.847365][ T24] usb 4-1: USB disconnect, device number 98 [ 927.865254][T18730] 9pnet_fd: Insufficient options for proto=fd [ 929.101729][ T58] bridge0 (unregistering): left promiscuous mode [ 929.240964][ T5862] Bluetooth: hci2: command tx timeout [ 929.341106][T18744] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 929.358477][T18745] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 929.446594][ T30] audit: type=1400 audit(1156.755:2178): avc: denied { map } for pid=18748 comm="syz.3.3107" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 929.496729][ T58] bond0 (unregistering): Released all slaves [ 929.543534][ T58] bond1 (unregistering): Released all slaves [ 929.567714][ T58] bond2 (unregistering): Released all slaves [ 929.584103][ T58] bond3 (unregistering): Released all slaves [ 929.596354][ T58] bond4 (unregistering): Released all slaves [ 929.607309][ T58] bond5 (unregistering): Released all slaves [ 929.618620][ T58] bond6 (unregistering): Released all slaves [ 929.630531][ T58] bond7 (unregistering): Released all slaves [ 929.753854][ T24] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 929.876353][ T30] audit: type=1400 audit(1157.157:2179): avc: denied { accept } for pid=18750 comm="syz.3.3108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 929.940300][ T24] usb 2-1: config index 0 descriptor too short (expected 12343, got 441) [ 929.952160][ T24] usb 2-1: config 53 has too many interfaces: 57, using maximum allowed: 32 [ 929.975263][ T24] usb 2-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 929.995717][ T58] bond8 (unregistering): Released all slaves [ 930.002501][ T24] usb 2-1: config 53 has 0 interfaces, different from the descriptor's value: 57 [ 930.019382][ T58] bond9 (unregistering): Released all slaves [ 930.043192][T18742] bridge0: entered promiscuous mode [ 930.049337][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 930.049602][T18742] macsec1: entered promiscuous mode [ 930.058385][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.142964][T18743] macsec6: entered promiscuous mode [ 930.278316][ T58] tipc: Left network mode [ 930.321367][ T24] usb 2-1: string descriptor 0 read error: -71 [ 930.355548][ T24] usb 2-1: USB disconnect, device number 101 [ 930.365585][T18679] chnl_net:caif_netlink_parms(): no params data found [ 930.488873][T18679] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.528777][T18679] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.598578][T18679] bridge_slave_0: entered allmulticast mode [ 930.614020][T18679] bridge_slave_0: entered promiscuous mode [ 930.670983][T18763] netlink: 'syz.4.3109': attribute type 26 has an invalid length. [ 930.753941][T18679] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.764156][T18679] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.783918][T18679] bridge_slave_1: entered allmulticast mode [ 930.811462][T18679] bridge_slave_1: entered promiscuous mode [ 930.946214][ T24] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 930.998594][T18679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.024215][T18679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.099572][T18768] netlink: 'syz.5.3110': attribute type 26 has an invalid length. [ 931.131912][T18679] team0: Port device team_slave_0 added [ 931.143196][T18679] team0: Port device team_slave_1 added [ 931.152530][ T24] usb 2-1: config index 0 descriptor too short (expected 12343, got 441) [ 931.199304][ T24] usb 2-1: config 53 has too many interfaces: 57, using maximum allowed: 32 [ 931.212062][ T58] hsr_slave_0: left promiscuous mode [ 931.234095][ T24] usb 2-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 931.245742][ T58] hsr_slave_1: left promiscuous mode [ 931.251110][ T24] usb 2-1: config 53 has 0 interfaces, different from the descriptor's value: 57 [ 931.298790][ T58] veth1_macvtap: left promiscuous mode [ 931.306077][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 931.316258][ T58] veth0_macvtap: left allmulticast mode [ 931.323762][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.335908][ T58] veth0_macvtap: left promiscuous mode [ 931.369449][ T58] veth1_vlan: left promiscuous mode [ 931.416890][ T5862] Bluetooth: hci2: command tx timeout [ 932.126474][ T30] audit: type=1400 audit(1159.252:2180): avc: denied { getopt } for pid=18771 comm="syz.4.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 932.277716][ T30] audit: type=1400 audit(1159.402:2181): avc: denied { name_bind } for pid=18771 comm="syz.4.3111" src=65535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 933.301248][T18782] 9pnet_fd: Insufficient options for proto=fd [ 933.408112][ T24] usb 2-1: USB disconnect, device number 102 [ 933.644823][ T5862] Bluetooth: hci2: command tx timeout [ 934.275263][ T30] audit: type=1400 audit(1161.273:2182): avc: denied { bind } for pid=18788 comm="syz.4.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 934.298730][T18679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.307139][T18679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.334350][T18679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.347896][T18679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.355170][T18679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.438187][T18679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.510593][ T30] audit: type=1400 audit(1161.497:2183): avc: denied { create } for pid=18796 comm="syz.5.3119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 934.887111][T18679] hsr_slave_0: entered promiscuous mode [ 934.932979][T18679] hsr_slave_1: entered promiscuous mode [ 934.942014][T18812] netlink: 'syz.1.3121': attribute type 26 has an invalid length. [ 935.117303][ T58] IPVS: stop unused estimator thread 0... [ 935.428061][T18818] macsec3: entered promiscuous mode [ 935.488770][T18818] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 935.681407][T18821] netlink: 'syz.5.3125': attribute type 13 has an invalid length. [ 937.190497][ T30] audit: type=1400 audit(1163.910:2184): avc: denied { execute } for pid=18831 comm="syz.5.3129" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 937.226406][T18679] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 937.246359][T18679] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 937.282137][T18679] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 937.301747][T18679] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 937.534610][T18679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.553057][ T913] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 937.557626][T18679] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.579780][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.586885][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.602811][ T6467] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.610091][ T6467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.624444][ T30] audit: type=1400 audit(1164.406:2185): avc: denied { unmount } for pid=18349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 937.788450][ T913] usb 4-1: Using ep0 maxpacket: 16 [ 937.795439][ T913] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 937.806416][ T913] usb 4-1: config 0 has no interface number 0 [ 937.816584][ T913] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 937.825887][ T913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.970659][T18863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3135'. [ 938.334580][ T913] usb 4-1: Product: syz [ 938.350138][ T913] usb 4-1: Manufacturer: syz [ 938.356545][ T913] usb 4-1: SerialNumber: syz [ 938.374163][ T913] usb 4-1: config 0 descriptor?? [ 938.388550][ T913] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 938.445378][T18679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 938.531396][T18679] veth0_vlan: entered promiscuous mode [ 938.553975][T18871] macsec4: entered promiscuous mode [ 938.565959][T18679] veth1_vlan: entered promiscuous mode [ 938.568322][T18871] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 938.647933][T18837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.701621][T18837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.722807][T18872] netlink: 'syz.5.3136': attribute type 26 has an invalid length. [ 938.761583][T18679] veth0_macvtap: entered promiscuous mode [ 938.776046][T18679] veth1_macvtap: entered promiscuous mode [ 938.798072][T18679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 938.812930][T18679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 938.832626][ T9051] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.865756][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.879353][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.929597][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.971411][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.979439][ T5979] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 938.990134][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.021720][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.032906][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.274875][ T5979] usb 2-1: Using ep0 maxpacket: 8 [ 939.309601][ T5979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 939.319225][ T5979] usb 2-1: config 4 interface 0 has no altsetting 0 [ 939.332560][ T5979] usb 2-1: string descriptor 0 read error: -22 [ 939.346410][ T5979] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 939.388614][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.565757][ T5979] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 939.576627][ T5979] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 939.595387][ T5979] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 939.602573][ T5979] usb 2-1: media controller created [ 940.136421][ T913] gspca_spca1528: reg_w err -110 [ 940.188187][ T913] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 940.198791][ T5979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 941.035689][ T5979] usb 2-1: USB disconnect, device number 103 [ 941.163722][T18897] overlayfs: failed to clone lowerpath [ 941.582299][ T24] usb 4-1: USB disconnect, device number 99 [ 941.740498][ T30] audit: type=1400 audit(1168.251:2186): avc: denied { bind } for pid=18901 comm="syz.3.3145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 942.128736][ T913] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 942.706573][ T913] usb 3-1: Using ep0 maxpacket: 32 [ 942.713504][ T913] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 942.723714][ T913] usb 3-1: config 0 has no interface number 0 [ 942.732473][ T913] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 942.750137][ T913] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 942.762067][ T913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.776061][ T913] usb 3-1: Product: syz [ 942.783507][ T913] usb 3-1: Manufacturer: syz [ 942.796093][ T913] usb 3-1: SerialNumber: syz [ 942.850399][ T913] usb 3-1: config 0 descriptor?? [ 942.986108][ T913] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 943.002258][ T913] em28xx 3-1:0.132: Video interface 132 found: isoc [ 943.014982][T18924] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3149'. [ 943.240510][ T30] audit: type=1400 audit(1169.654:2187): avc: denied { mounton } for pid=18899 comm="syz.2.3144" path="/3/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 943.258069][T18926] macsec2: entered promiscuous mode [ 943.262291][ C1] vkms_vblank_simulate: vblank timer overrun [ 943.308874][T18929] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 943.317166][ T913] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 943.406321][ T913] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 943.419992][ T913] em28xx 3-1:0.132: board has no eeprom [ 943.531207][ T913] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 943.542891][ T913] em28xx 3-1:0.132: analog set to isoc mode. [ 943.552215][T18922] em28xx 3-1:0.132: Registering V4L2 extension [ 943.665910][ T5979] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 943.676517][T18943] netlink: 'syz.4.3152': attribute type 26 has an invalid length. [ 943.688064][ T913] usb 3-1: USB disconnect, device number 108 [ 943.712279][ T913] em28xx 3-1:0.132: Disconnecting em28xx [ 943.718007][ T30] audit: type=1400 audit(1170.084:2188): avc: denied { bind } for pid=18932 comm="syz.3.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 944.234756][ T5979] usb 2-1: Using ep0 maxpacket: 16 [ 944.242798][ T5979] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 944.266282][ T5979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 944.397806][ T5979] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 944.407515][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.415545][ T5979] usb 2-1: Product: syz [ 944.420560][ T5979] usb 2-1: Manufacturer: syz [ 944.425353][ T5979] usb 2-1: SerialNumber: syz [ 944.490406][T18951] netlink: 'syz.2.3154': attribute type 1 has an invalid length. [ 944.562003][ T5903] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 944.866436][ T5903] usb 4-1: device descriptor read/64, error -71 [ 945.011259][T18954] overlayfs: failed to clone lowerpath [ 945.110413][T18926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.279121][T18922] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 945.286948][T18926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.308847][T18922] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 945.323594][ T5979] usb 2-1: 0:2 : does not exist [ 945.352368][ T5979] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 945.424486][ T5903] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 945.455038][ T5979] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 945.474073][T18922] em28xx 3-1:0.132: No AC97 audio processor [ 945.499477][T18922] usb 3-1: Decoder not found [ 945.504281][T18922] em28xx 3-1:0.132: failed to create media graph [ 945.511659][ T5979] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 945.515197][T18922] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 945.578332][T18922] em28xx 3-1:0.132: Remote control support is not available for this card. [ 945.606744][ T5979] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 945.645879][ T5903] usb 4-1: device descriptor read/64, error -71 [ 945.646173][ T5979] usb 2-1: USB disconnect, device number 104 [ 945.706379][ T913] em28xx 3-1:0.132: Closing input extension [ 945.719397][ T913] em28xx 3-1:0.132: Freeing device [ 945.820054][ T5903] usb usb4-port1: attempt power cycle [ 946.629349][ T5903] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 946.729688][ T5903] usb 4-1: device descriptor read/8, error -71 [ 946.871875][T18977] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.3163'. [ 946.924688][T18975] binder: 18974:18975 ioctl c0306201 200000000080 returned -14 [ 946.946740][T18975] binder: 18974:18975 ioctl 542e 200000000040 returned -22 [ 947.199764][T18986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3165'. [ 947.545267][ T30] audit: type=1400 audit(1173.685:2189): avc: denied { connect } for pid=18988 comm="syz.2.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 947.546592][T18989] 9pnet_fd: Insufficient options for proto=fd [ 947.617862][ T30] audit: type=1400 audit(1173.741:2190): avc: denied { write } for pid=18988 comm="syz.2.3166" path="socket:[62256]" dev="sockfs" ino=62256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 947.643670][ T30] audit: type=1400 audit(1173.779:2191): avc: denied { bind } for pid=18984 comm="syz.1.3165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 947.983020][T18995] netlink: 'syz.1.3167': attribute type 1 has an invalid length. [ 948.079466][T18994] macvlan2: entered promiscuous mode [ 948.085082][T18994] macvlan2: entered allmulticast mode [ 948.094126][T18994] bond1: entered promiscuous mode [ 948.101816][T18994] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 948.140579][T18994] bond1: left promiscuous mode [ 948.987363][T19008] overlayfs: failed to clone lowerpath [ 949.015032][T19006] netlink: 'syz.4.3170': attribute type 26 has an invalid length. [ 949.074638][T19011] 9pnet_fd: Insufficient options for proto=fd [ 949.092856][T19009] netlink: 'syz.5.3172': attribute type 1 has an invalid length. [ 949.122997][T19009] 8021q: adding VLAN 0 to HW filter on device bond13 [ 949.690492][T19022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3173'. [ 950.897863][ T30] audit: type=1400 audit(1176.828:2192): avc: denied { ioctl } for pid=19023 comm="syz.2.3176" path="socket:[63279]" dev="sockfs" ino=63279 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 950.956244][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3176'. [ 951.234955][T19042] pim6reg: entered allmulticast mode [ 951.269542][T19042] pim6reg: left allmulticast mode [ 951.286113][ T30] audit: type=1400 audit(1177.184:2193): avc: denied { create } for pid=19043 comm="syz.3.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 951.355061][ T6465] ------------[ cut here ]------------ [ 951.360836][ T6465] WARNING: CPU: 1 PID: 6465 at io_uring/io_uring.c:2980 io_ring_exit_work+0x3fc/0x10f0 [ 951.370475][ T6465] Modules linked in: [ 951.374560][ T6465] CPU: 1 UID: 0 PID: 6465 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 951.384122][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 951.394193][ T6465] Workqueue: iou_exit io_ring_exit_work [ 951.399763][ T6465] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 951.405550][ T6465] Code: 0f 85 0a 0b 00 00 48 8b 05 a1 8a 48 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 cf 0e e3 fc 4d 85 f6 79 12 e8 55 13 e3 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 43 13 e3 fc 48 8b 74 24 60 [ 951.425245][ T6465] RSP: 0018:ffffc9000d1e7a90 EFLAGS: 00010293 [ 951.431374][ T6465] RAX: 0000000000000000 RBX: ffff88807440c6c8 RCX: ffffffff84d88771 [ 951.439366][ T6465] RDX: ffff8880353d0000 RSI: ffffffff84d8877b RDI: 0000000000000007 [ 951.447356][ T6465] RBP: ffffc9000d1e7c50 R08: 0000000000000007 R09: 0000000000000000 [ 951.455333][ T6465] R10: fffffffffffffff9 R11: 0000000000000000 R12: ffff88807440c000 [ 951.463299][ T6465] R13: dffffc0000000000 R14: fffffffffffffff9 R15: ffff88807440c040 [ 951.471253][ T6465] FS: 0000000000000000(0000) GS:ffff8881247b1000(0000) knlGS:0000000000000000 [ 951.480207][ T6465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.486823][ T6465] CR2: 00002000002fe030 CR3: 0000000022bfb000 CR4: 00000000003526f0 [ 951.494789][ T6465] Call Trace: [ 951.498048][ T6465] [ 951.500957][ T6465] ? do_raw_spin_lock+0x12c/0x2b0 [ 951.505980][ T6465] ? __pfx_io_ring_exit_work+0x10/0x10 [ 951.511416][ T6465] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 951.517290][ T6465] ? debug_object_deactivate+0x1ec/0x3a0 [ 951.522913][ T6465] ? rcu_is_watching+0x12/0xc0 [ 951.527688][ T6465] process_one_work+0x9cc/0x1b70 [ 951.532641][ T6465] ? __pfx_process_one_work+0x10/0x10 [ 951.538100][ T6465] ? assign_work+0x1a0/0x250 [ 951.542684][ T6465] worker_thread+0x6c8/0xf10 [ 951.547309][ T6465] ? __kthread_parkme+0x19e/0x250 [ 951.552345][ T6465] ? __pfx_worker_thread+0x10/0x10 [ 951.557455][ T6465] kthread+0x3c2/0x780 [ 951.561523][ T6465] ? __pfx_kthread+0x10/0x10 [ 951.566088][ T6465] ? rcu_is_watching+0x12/0xc0 [ 951.570860][ T6465] ? __pfx_kthread+0x10/0x10 [ 951.575425][ T6465] ret_from_fork+0x56a/0x730 [ 951.580040][ T6465] ? __pfx_kthread+0x10/0x10 [ 951.584608][ T6465] ret_from_fork_asm+0x1a/0x30 [ 951.589373][ T6465] [ 951.592380][ T6465] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 951.599633][ T6465] CPU: 1 UID: 0 PID: 6465 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 951.609150][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 951.619215][ T6465] Workqueue: iou_exit io_ring_exit_work [ 951.624748][ T6465] Call Trace: [ 951.628008][ T6465] [ 951.630913][ T6465] dump_stack_lvl+0x3d/0x1f0 [ 951.635486][ T6465] vpanic+0x6e8/0x7a0 [ 951.639442][ T6465] ? __pfx_vpanic+0x10/0x10 [ 951.643920][ T6465] ? io_ring_exit_work+0x3fc/0x10f0 [ 951.649108][ T6465] panic+0xca/0xd0 [ 951.652802][ T6465] ? __pfx_panic+0x10/0x10 [ 951.657194][ T6465] ? check_panic_on_warn+0x1f/0xb0 [ 951.662293][ T6465] check_panic_on_warn+0xab/0xb0 [ 951.667219][ T6465] __warn+0xf6/0x3c0 [ 951.671096][ T6465] ? io_ring_exit_work+0x3fc/0x10f0 [ 951.676275][ T6465] report_bug+0x3c3/0x580 [ 951.680584][ T6465] ? io_ring_exit_work+0x3fc/0x10f0 [ 951.685755][ T6465] handle_bug+0x184/0x210 [ 951.690063][ T6465] exc_invalid_op+0x17/0x50 [ 951.694543][ T6465] asm_exc_invalid_op+0x1a/0x20 [ 951.699367][ T6465] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 [ 951.705146][ T6465] Code: 0f 85 0a 0b 00 00 48 8b 05 a1 8a 48 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 cf 0e e3 fc 4d 85 f6 79 12 e8 55 13 e3 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 43 13 e3 fc 48 8b 74 24 60 [ 951.724731][ T6465] RSP: 0018:ffffc9000d1e7a90 EFLAGS: 00010293 [ 951.730779][ T6465] RAX: 0000000000000000 RBX: ffff88807440c6c8 RCX: ffffffff84d88771 [ 951.738725][ T6465] RDX: ffff8880353d0000 RSI: ffffffff84d8877b RDI: 0000000000000007 [ 951.746670][ T6465] RBP: ffffc9000d1e7c50 R08: 0000000000000007 R09: 0000000000000000 [ 951.754627][ T6465] R10: fffffffffffffff9 R11: 0000000000000000 R12: ffff88807440c000 [ 951.762575][ T6465] R13: dffffc0000000000 R14: fffffffffffffff9 R15: ffff88807440c040 [ 951.770526][ T6465] ? io_ring_exit_work+0x3f1/0x10f0 [ 951.775706][ T6465] ? io_ring_exit_work+0x3fb/0x10f0 [ 951.780886][ T6465] ? do_raw_spin_lock+0x12c/0x2b0 [ 951.785892][ T6465] ? __pfx_io_ring_exit_work+0x10/0x10 [ 951.791325][ T6465] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 951.797108][ T6465] ? debug_object_deactivate+0x1ec/0x3a0 [ 951.802721][ T6465] ? rcu_is_watching+0x12/0xc0 [ 951.807462][ T6465] process_one_work+0x9cc/0x1b70 [ 951.812379][ T6465] ? __pfx_process_one_work+0x10/0x10 [ 951.817726][ T6465] ? assign_work+0x1a0/0x250 [ 951.822301][ T6465] worker_thread+0x6c8/0xf10 [ 951.826869][ T6465] ? __kthread_parkme+0x19e/0x250 [ 951.831874][ T6465] ? __pfx_worker_thread+0x10/0x10 [ 951.836962][ T6465] kthread+0x3c2/0x780 [ 951.841005][ T6465] ? __pfx_kthread+0x10/0x10 [ 951.845571][ T6465] ? rcu_is_watching+0x12/0xc0 [ 951.850317][ T6465] ? __pfx_kthread+0x10/0x10 [ 951.854883][ T6465] ret_from_fork+0x56a/0x730 [ 951.859456][ T6465] ? __pfx_kthread+0x10/0x10 [ 951.864043][ T6465] ret_from_fork_asm+0x1a/0x30 [ 951.868797][ T6465] [ 951.871999][ T6465] Kernel Offset: disabled [ 951.876300][ T6465] Rebooting in 86400 seconds..