last executing test programs: 10m17.763193792s ago: executing program 32 (id=1242): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r0, r0, 0x0, 0x400000000003f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000000018341b5d4f999f1e9f555cca540aab906de8922452b504bab9966da0494ab2de0f77f908000000000000020000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2b, 0x1, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="400100000000000008000a00", @ANYRES32=r5, @ANYBLOB="140012800a000100767863616e000000040002800800040008000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x7, 0xf7dd, 0x5a7, 0x3, 0xffffffff, 0x0, 0x7}, 0xfffffe87) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000000c0)={0xb, 0x103, 0x1, {0x401, 0x7, 0xec9, 0x2}}) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100005f2a030000000000000003010902120001000000000400000054a60000dba292000000", @ANYRES8=r2, @ANYRESDEC=r6], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) 9m7.073689906s ago: executing program 0 (id=1633): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r0, 0x0, 0x0, 0x1) (async) sendmmsg$unix(r0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006a1000/0x2000)=nil, &(0x7f0000640000/0x3000)=nil, 0x2000, 0x1}) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006a1000/0x2000)=nil, &(0x7f0000640000/0x3000)=nil, 0x2000, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x20000000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="00f67ce69a8b8c65627ebd2240b4e08e470454bf7a4bedcf", @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000007f00000100000000000000001400020002000000e000000200000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000400006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de4b2f3386a6d871e2983d7b4cd07ec3ee777de774fc7987cca41989"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000400006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de4b2f3386a6d871e2983d7b4cd07ec3ee777de774fc7987cca41989"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000400000000000000000100000000000000014100000018001700040004000000006574683a7465616d30000000"], 0x34}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000400000000000000000100000000000000014100000018001700040004000000006574683a7465616d30000000"], 0x34}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') (async) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 9m6.422976596s ago: executing program 0 (id=1639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0xffffffff, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = dup3(r2, r0, 0x80000) landlock_restrict_self(r3, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14, 0x80800) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x464, 0x2c, 0xd27, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x428, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0x2b25, 0x4, 0x3, 0xfffffff8, 0x4, 0x4, 0x80000001, 0x1, 0x4, 0xfffffff8, 0x8000, 0xffffffe0, 0x1, 0x10001, 0x401, 0xffffffff, 0x8, 0x6, 0xbdc, 0x10001, 0x6, 0x2, 0x0, 0x800, 0xb5bb, 0x6, 0x2, 0x2f8, 0x400000, 0x226, 0x2, 0x8, 0x6de2, 0xffffff80, 0x9, 0x81, 0x4, 0x5, 0x0, 0x1, 0xfffff800, 0x0, 0x4, 0x6, 0x81d, 0x9cb, 0x3800, 0x1ff, 0x1be, 0x2, 0xa, 0x18, 0x631, 0x86, 0xde8, 0x0, 0x7, 0x6, 0x8e3, 0x4, 0xcce, 0xfffffffb, 0x9, 0x7ffffffe, 0xffffffaf, 0x7fffffff, 0x0, 0x80000001, 0x8a7, 0x3, 0xc, 0x98e0, 0x1000, 0x9, 0x80000001, 0x7, 0x400, 0x0, 0x8, 0x3, 0x8, 0x1, 0x7, 0x5, 0x9, 0x8, 0x8000, 0x8, 0x67, 0x7, 0xef, 0xb, 0x6, 0x1, 0x9c4, 0x8, 0x5, 0xff, 0x4, 0x9, 0xe, 0x0, 0x7, 0x8001, 0x401, 0xfffffff7, 0x9, 0x7, 0x3ff, 0x81, 0x3, 0x0, 0xd, 0x101, 0x5, 0x8001, 0x800, 0x80000001, 0xfffffff8, 0x8, 0xfff, 0x64, 0xffffffff, 0xfffffff8, 0x6837553b, 0x749, 0xfffffff6, 0x4, 0x2, 0x6, 0x10000, 0x61c, 0x1, 0x200, 0x40000003, 0x5, 0x5ebe765, 0x200, 0x9, 0x0, 0x66, 0x3, 0x6, 0x3, 0x5bc, 0x54c, 0x7f, 0x0, 0xf6, 0x8, 0x8000, 0x0, 0x2, 0xb, 0xc3, 0x9, 0xa, 0x6, 0x8282, 0xffffffff, 0x9, 0x47, 0x2, 0x2, 0x20, 0x8, 0x0, 0xe4, 0x6, 0x9, 0x10000, 0xd405, 0x3c07f4aa, 0x9, 0x6, 0x3ff, 0x8, 0x1, 0xa41, 0xe, 0x10000, 0x7, 0x0, 0x7, 0xffffe000, 0x8, 0x1, 0xd, 0x4f, 0x9, 0x9, 0x6, 0x1, 0x0, 0x4, 0x8, 0xffffffff, 0x9, 0x7f, 0x10000, 0x1, 0xfffffb50, 0x1, 0x6, 0x0, 0x80000000, 0x80, 0xdd, 0x9, 0x5, 0xb, 0x4, 0x4, 0x3ff, 0x3b, 0x9, 0xfffffffd, 0x80, 0x8000, 0x68, 0x1000, 0x8, 0x4, 0x6, 0x6, 0x6, 0x1, 0x4, 0x5, 0x8001, 0x5, 0x5, 0x1, 0x3, 0x0, 0x88c, 0x37db, 0x2, 0x8, 0xe355, 0xc, 0xffffffe5, 0xb, 0x15a, 0x7ff, 0x1, 0x791a04c0, 0x6, 0x7, 0x7, 0x4, 0x8, 0xff, 0x3ff]}]}, @TCA_FW_POLICE={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg0\x00'}, @TCA_FW_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x3fd}]}, 0x464}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m5.352536563s ago: executing program 0 (id=1641): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "6adfce70c970977558bc4b7afe013a50"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x34) r4 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="8a326b5a56959195b3ecbb2e71df61d0ee8694db3a58"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000040)=0x4, 0x4) sendmmsg$inet(r6, &(0x7f0000000f80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}}], 0x1, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x400001, 0x0) ioctl$SNDCTL_SEQ_SYNC(r8, 0x5101) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r10, &(0x7f0000000400)={'#! ', './file0', [{0x20, 'vlan\x00'}], 0xa, "cb68bf42bb4774c32dc1b02e091e318199e4b43fe5c6e2629c750f9002d9531b6c246f1afa564ca13b716bd49af3051d8b68a3a8b101817fcb3239fc3fe13e865ffee9736c6df67b0ffd17165786055d4da3a982d934e5cca5f0e280ab7b5e24cf2b9194abc4edc36d5f563dd3deb05694c85c60627d46643f12c9ee8a11b4525ffcde5b7398229ea0cdf793c8c88b4f923f448b19fd022e40da"}, 0xab) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x600}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xd7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x60}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x40, 0x185, 0x5}, 0x18) mount$9p_rdma(&(0x7f0000001800), &(0x7f0000001840)='./file0\x00', &(0x7f0000001880), 0x2, &(0x7f0000001940)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@privport}]}}) r11 = syz_io_uring_setup(0x90e, &(0x7f0000000380)={0x0, 0x3316, 0x400, 0x801, 0x34e}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x44, 0x0, @fd_index=0x1, 0x7, 0x0, 0xfffffff3, 0x2}) io_uring_enter(r11, 0x47f9, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, r14, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3d}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}]}, 0x28}}, 0x40000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x200002, 0x0) 9m2.185441247s ago: executing program 0 (id=1657): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x3, 0x0, 0x0, 0x80000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000001c80)='.\x00', 0x0) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000340)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = dup(r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) listen(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x0, 0x233}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000001c0)={0xb, 0xf, 0x4, 0xa, 0xbc, 0xff, 0x5, 0x7, 0x7, 0x0, 0x81, 0x80, 0x2, 0x18}, 0xe) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008085) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#.S\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xca) 9m1.166518891s ago: executing program 0 (id=1662): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mount$afs(&(0x7f0000000100), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0xa0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000002c0)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9, 0x0, 0xffffffff}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 9m1.107767548s ago: executing program 0 (id=1664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) listen(r1, 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x80000042b3951a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x15, 0x2, 0x0, "343d1000000000000000000001e6c900fcffffff1000000000000000000800", 0x3132564e}) 9m0.44831126s ago: executing program 33 (id=1664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) listen(r1, 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x80000042b3951a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x15, 0x2, 0x0, "343d1000000000000000000001e6c900fcffffff1000000000000000000800", 0x3132564e}) 8m39.382178962s ago: executing program 5 (id=1754): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000009f00)=@base={0xa, 0x4, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6(0xa, 0x2, 0x80) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000340), 0x22260ac, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@fowner_eq}]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x9801}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) 8m37.834661189s ago: executing program 5 (id=1757): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000d8, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r3, r5, 0x0, 0x1, &(0x7f0000000340)='\x00'}, 0x30) r6 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xffffffffdfffffff, 0x1000}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) 8m31.530662629s ago: executing program 5 (id=1781): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x101}, 0x1c) sendto$inet6(r3, &(0x7f0000000200)="04e77a186965ed57d47cdd019a8eb8498e8cf37162836ec512bc1a634e1033b8ff01354ba2e4acd5cb142e5318e508142d07b548c02509b1fa7532e024b44154b7be22ca12bdcddb6b1098e96e31529f7f8c12c8dd7b84d1b039fb29dc0a036f2510e5d2ab3de811f49527e9374db9972aec3d1d38844b2b6a82f5d12e4f61bf3ba1a07a06389b20def470499c82", 0x8e, 0x20000005, &(0x7f0000000140)={0xa, 0x2, 0x2}, 0x1c) recvfrom$inet6(r3, 0x0, 0xfffffe21, 0x1, 0x0, 0x0) tkill(r2, 0x12) ptrace(0x4208, r2) tkill(r2, 0x12) close(r1) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='generic_add_lease\x00', r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r7, 0x0, 0x14) close_range(r6, 0xffffffffffffffff, 0x0) 8m30.934707072s ago: executing program 5 (id=1785): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x122) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = syz_open_dev$video(&(0x7f0000000440), 0x7ffffffd, 0x4c8402) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xa, 0x0, 0x2, {0x0, 0x1000, 0xffffffff}}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r1 = syz_clone(0x60000100, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(r1, r1) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0xc6000, 0x2a) readlinkat(r6, &(0x7f0000000340)='./file1\x00', &(0x7f0000000480)=""/72, 0x48) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f000086fff4)) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)=0x6) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x8, 0x3) open(&(0x7f00000000c0)='./file1\x00', 0x22000, 0x24) r7 = socket$igmp(0x2, 0x3, 0x2) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r8 = socket(0x22, 0x2, 0x4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20048084) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000240)={0x3, @null, 0xee00}) 8m30.640990858s ago: executing program 5 (id=1788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x2040, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x20, 0xe, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x8044) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004200000040000000c00000000000000adff93157f4b8a5d5517eb5192556b003b263189bd6e19ea4890ca16d0bdafd1f27003996decbbd0a3ec6c24d1592c3bbf8fd651aa813d8b68dc1a84417b4f7e946659e7d3b8f564", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000180), &(0x7f00000002c0)=r2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 8m30.319483788s ago: executing program 5 (id=1792): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCETHTOOL(r3, 0x894a, &(0x7f0000000040)={'vlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000680)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8m30.166283356s ago: executing program 34 (id=1792): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCETHTOOL(r3, 0x894a, &(0x7f0000000040)={'vlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000680)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7m41.980192241s ago: executing program 7 (id=1998): sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="ab", 0x1, 0x26004054, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x806, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000c40)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffffc0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x8, 0x9f8, 0xf9a, 0x3, 0x6, 0x8, 0x3, {0x0, @in={{0x2, 0x4e22, @local}}, 0x0, 0x8, 0xffffffff, 0x3, 0x3}}, &(0x7f0000000040)=0xb0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x85, 0x0, &(0x7f00000000c0)) 7m41.346674801s ago: executing program 7 (id=1999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) 7m40.926699131s ago: executing program 7 (id=2000): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0x76) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000dc0)={0x400, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x3e000000}, {}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x3, 0x4002, 0xffffffff, 0x0, 0x2, 0x16, 0x0, 0x0, 0xa}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r7, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r8, 0x2}, 0x20) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000000040)={0x14}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf25020000040000000002462bd2ea0fbf56f81f922bedd66e08000000df4076e04f334f0db4f60d6f0915491c8bdce142f02f1248d2c11ebb31f53fb8f5a9e2402068248facf639a4bed522165c"], 0x24}}, 0x40) 7m39.984074114s ago: executing program 7 (id=2003): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) unshare(0x20000000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 7m38.188316703s ago: executing program 7 (id=2012): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000003880)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa000000000000f0000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000004000000000540000000000000000000000000000000a0000000000000000000000804000000000000000000800000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000000000000003000000000000000000000000000047d392ba3fabd6be5938ad762892e4d9c55777d2f9e6904c4024e99965d385640a5d07c91bf28927162472007af52e857f1ede627c863cd82a2fc63f2f2d6344e6564141724bb09d8cbaa9b5c5c2378e728b7767a3d634f2ed45673c4e886ef75f747672f06b2f56b94dabb28ac3b3b0f3aa2507788be59fa2e4cf257a77298dbcd0e9ad6a11f0f3c4254d0e067fe14a3a7c2b718adc54b79284abe7f84d25c0ed88bcad4565d3bae698e16facf7a3326cae35fa91936703cd6de6110752e7a5dcef172d55efb5f73e70b47f741e1c7e526f34492a157d9ffdfa487a1e1b770c2f563185fc195ba8ee399585b10c9211dd01ff718431164918b7785c318260ba1cf43ab6b2adbafb62ebaa8288347355e470cd0e59b34764c1795478df563e6ce42f9d69856f5033623cbe21ba2d51e182"], 0xfc}}, 0x0) 7m37.858861793s ago: executing program 7 (id=2014): io_setup(0x401, &(0x7f0000000180)=0x0) r1 = timerfd_create(0x0, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) dup(r4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000004000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000004000000000000000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) read$FUSE(r8, &(0x7f0000000440)={0x2020}, 0x2020) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x40) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000580)={0x4000000001000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x60}]) socket$netlink(0x10, 0x3, 0x14) 7m37.648723221s ago: executing program 35 (id=2014): io_setup(0x401, &(0x7f0000000180)=0x0) r1 = timerfd_create(0x0, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) dup(r4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000004000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000004000000000000000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) read$FUSE(r8, &(0x7f0000000440)={0x2020}, 0x2020) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x40) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000580)={0x4000000001000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x60}]) socket$netlink(0x10, 0x3, 0x14) 7m16.174389508s ago: executing program 8 (id=2016): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x7) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x200801) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/178) r2 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400) r7 = syz_clone(0x200000, &(0x7f0000001000)="9273eddc1aea755f18604af809910aff431bbb4ade2fc8690ed1af2c05370de1f7f679cc41f861fe90caedcf6ebe3db6130aaa58ec5cc9ed8c8b12783f389fd9245e5600a4329b395d34af30de059c77b3492d4b03bf12578a50018ef5b96262f22aedac6ee39713bf337591d43394300eb959a042ba23fb127ddcb04bfda8fc9f5313c80a80b68f7285cbf8050a06d6829804c69af2967f47fd2dd85dd801c8b75343dafcb15b4df13f177f6baad6a55e796a96e77537c0283b4f610f90e6945ef42c60dba6ea83bbcab56686b77b84dae66562", 0xd4, &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)="b572c582d59f05005eba82fdafcb36a4f16cbf9344af7ccb1240f47fda129a3976ac88862effeebdc1ed002a0305d88c99f40ce78a6e1bbf88d81f6a93e312b98060732533d33a37332f5375a2df519cd739819036cb07f46a9246f3cbefa4a68414ba0948a059e599e4fada4fe7b0308184fe9fd20b4c891de2a2eea099764ffe8c548ab8fe888dd688cd8cde4614d5840b8044af31bdca1356f3700c2b83e45292287fe505c3cfcdaf9894ed067279108af9d30c0313a8a9759fde4987ed9635ddbffca0e9245c6d53097beaeab01e4a881b5b808bdeeeb70a5f2bbf29ab94537fda5f8c2e") r8 = geteuid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000018c0)=0x0) statx(r0, &(0x7f0000001900)='./file0\x00', 0x100, 0x8, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000001b00)=[0xee00, 0xee00]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001b40)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}}}, &(0x7f0000001c40)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001cc0)={0x0, 0x0}) r16 = getegid() r17 = accept4$vsock_stream(r0, &(0x7f0000001d40)={0x28, 0x0, 0x2710}, 0x10, 0x80800) r18 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001d80), 0x800, 0x0) r19 = socket(0x8, 0x3, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000002080)={0x8, 0x3, {0x0}, {0xffffffffffffffff}, 0x7, 0x7}) statx(r0, &(0x7f00000020c0)='./file0\x00', 0x1000, 0x8, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r23 = openat$null(0xffffffffffffff9c, &(0x7f0000004240), 0x80, 0x0) r24 = syz_open_dev$hidraw(&(0x7f0000004280), 0xfffffffffffff001, 0x400000) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000004300)=0x0) sendmmsg$unix(r0, &(0x7f0000008700)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="ffb165c152c1ebe7fd06f11df5db89232e2e9f9867e2f5c5dff55fdf83aeef1943330d003e5546103066c85e5029a7218f8d4dc105def2ec65e45fc24e5b4ba7995c017057c8488b60cef424379385dece049e3213bce03d07260b9278f0d1558178c1363aed1fa8aa75fa5848513ea5b139c0ea1e5c82be5735f87d2adbfc35d5b56594e77483814fcab19dc53aba5dfda574c16fa5b4d0b1b12ab2fa0c7d66b82d2518d67cd44a9b", 0xa9}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x20, 0x10}}, {{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000400)="e8961843c85e8ddb59cbd452ab33009bc9a7e60e1ef56c05715a1c2bd9105a363dc8902a5c6e700997afa3986f56e31930470aecb53495ba6b261419c56891a7a6136d1410b03cb90ebcaa45a9dace9902459bcc1402f253c3c646df53feea33ee5b830998f4b4e55c24cdb0db76c240cb1ca8ae7412b91f2dd904068e179510658edd0ddcf3c477ea1578db976a0fd01f81822409e4a8e21e54556f145967a42f091e7f33376bd0caae964c38564e2a39a8b3f3f3", 0xb5}, {&(0x7f00000004c0)="d4bdd8465234ddd9f5e04d13dcad1eddc710be747023c690dbfef3b5d6f4581edeea3388c168a0d6a12ee3c1c2aa", 0x2e}, {&(0x7f0000000500)="83cfc7992172f44569e40376e57e7d7744345c9086c00ecf885ebecef3bcd9559da70e68dd60dec6bf52ec", 0x2b}, {&(0x7f0000000540)="16ff647a8eac17845af4b6b66548d65d55c2127de6456f3877c126c057c55fc9d5d189ff0248930a5054715222d435fee4f0450bb4c6437806be5edf21e0bbd6cf181ff005a2efe519afd9ede51a5d0e47d050d5ad0d30679d6c13c239a19579f38204d2fd1a847674a58d6e6a9a5b10bf104bcee08fb245c3affef6bf02a2d2bad7ca9826cab1ad43dd1fbfd86b1a150fab7da47e1735e8f5f1f00efc71209d4f2f8cfcf298e0f0aa2ba9ff7c3b7f271023f8f56ccc3002e17727f409f319b544e95a89af45c6a53f511239e1d57f9fce18363384c766", 0xd7}], 0x4, 0x0, 0x0, 0x41}}, {{&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000700)="f703739ea46d030897b48ccf958e03de96cec182a973db5fcdc128465a4a73d405b1d665f0e3b65ed9137cc29ffe23695fa45c1d5f6f2b079c2b7b762c5dac8e4b855a5c9d75f4b28ace52c3f9609dd7a2a8806e97309aec729b39a38bafc196e70bda86627fa2ec7caebe6766a465fc3e1fa8129e10a2259c4153fe9ea6bcb07a249f2f157ce5246493492159ebd71d13", 0x91}, {&(0x7f00000007c0)="5be07681104201984aaf8878ecd4da5d6dd9d5f15cf87d0268d75175faa7f12505f974fd3dd8685a20bbc6d358738ff49e55e927ff8383614068705434d1fd", 0x3f}, {&(0x7f0000000800)="59613521195596c4c0d43742c67d62be226da647de2e0b49e4b50b8177ae51cc1098f6e70111f830d10dcc451fc9250905085b5ca2f4c77946d0a4d3b0917c6c7ec27c08d8525f718cf7946cc319a1875e0ee88e29c91dfb785796c85c026e1c6786257234efb7e468076dd58ada9ad6b35f632cb23c85fbe50a4c1a781635f3129cc1f2abb2a1bf20efc3dab657849694157b1fb2bdfe7f6578fb2fe137db24", 0xa0}, {&(0x7f00000008c0)="c11ef7df28cb2653037f72e8709aa128e5d55d4ef2170ed34e599d1405c1f1d92bd7c128184ab73ff4c2460e73006787b332e7b2fa88755d0631e9a53d29aa9f6a28e49fd4eb13af9b3c6a1987fe47fa585cdecfc649353ef2cf9fb3aea0b8088f35c925f06766143773d073686af288ffd2c69973e480ada25cdb8c0d3bc7ecbd7dc723fc39f3b27ca114fe81590d8a8ec7f2bb23d9d08908c446d94802fb74278ca5d63fa03ada98ed66d565c60771c2ce7e91b184c6d869ec63e7b9be9293aff543a3b487c596d9495e6470c51530e8412b", 0xd3}, {&(0x7f00000009c0)="ba60f4cdbf23caeabdcd7a1a36a2078cdc0ebfb91d8439fbaa504dc14140a59eb6bd845c5fcb5ff661d6a3650c0772546b29d294d11b92836c335084bdf502912bcab021dee1137736cda35c02bafb8163942dabf71308b84bbf2beed122c5efec5fbf625977a9607302c057bd9673907080378d9469482aa6595dd18e8905d1293357aedb7bbbad9a894d56fa858b76c359dd22e51b99d3054c51b08eb4fd0d7b6d8476ceb1eaea7b3489981d7621ecd1558700cab461fe98bf6abfe6", 0xbd}, {&(0x7f0000000a80)="339aa3a2a60e737e96e5f3e9e8ae81f7314418fc629cc370017ef888cd0e4694d50cd7507f062fc7fc288b1865435285bb089ee64e210a2764da71de008c876a93470e889a2b7508bbfc32fa3a5be91e8aff7fbef3c829d24619706fe2afe8d731b0bf51368a02fb77b229a021b2cd9c3223", 0x72}, {&(0x7f0000000b00)="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", 0xfd}, {&(0x7f0000000c00)="9c510a6d3a81a731d23793759b0fe486b7a4bc018ee5441037904660c47ce43872b39749922192", 0x27}], 0x8, 0x0, 0x0, 0xc000081}}, {{&(0x7f0000000cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d40)="957ff7c286c79067155e34348afc3d689c4eed354ab4487ff7d54e91aba9c34c2b79dc6166a16e002e77bdaa8d40a4284ad81ff5359e96eb140cd288422ea2255431862307bea8701781651bdaef338465fbd476d7658cb3bc797db28a77dba644c6453c574325ba101347f9d3", 0x6d}, {&(0x7f0000000dc0)="c9ca424276abccf11a2c844e58aed1ec55d99418c9d2c5f928ba5e2f2ed459f4917de13dd7766ffa15c0b28f31fb9a1b688633add2375667fec08f27625caccda23f", 0x42}, {&(0x7f0000000e40)="8cb5262f891a1d2b56634d32f952e6ea8457f29c13825e0590de0996736ce6d198a1238d6e", 0x25}, {&(0x7f0000000e80)="ae7b6f947b8c5bee416aea17eab2c1", 0xf}, {&(0x7f0000000ec0)="e66cb1c45f666bc0bc2dd3de6db5cc155e831e68205febd2611df4d6215c0cb5c45d96ec7aca06917b9b9b3337220d15e648038e28d7a8be47804c600a46411d9eafaa59bd5f06a73c7e3bbc9d95b3e51e66b6b6b0867852", 0x58}], 0x5, &(0x7f0000001280)=[@rights={{0x28, 0x1, 0x1, [r1, r5, r6, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x78, 0x10}}, {{&(0x7f0000001300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001380)="59f6fc11b6231818e92a963d356c075ac67bd289e0f988f70e02ea43f8bd2dd5e7384630da609cab83c165df33d57347a32803cfa4a73fd52144698b0bca129e47ec4c8825b2e65d257e3f56460c49fb8105a0de4c9c7f2343511dd03835f4294d5c9efaba4a0b9e4c3a11a40df151c12d51f0fd5db05690cbbb83ebaf17ed9f82c18f938c1aa489d7bc75dd3f93dc3071b469caab0b4d6d3d4d24e4e3e35c164e54c30085e1b942edd9623c669c160c4c4c3cb381ced4f6de", 0xb9}, {&(0x7f0000001440)="d093116e2c7eeec0d4219d37c7eeaac376d4d91ce975454050aa354dd72d0c43a812b250f16061234a3300927b4780a824f39fb4c3390de7e4881f14d8c30c7dd6da2d7d88af2d21294f720bc0e878593f0114bd91b6cefdda6e765bf3e5dbf18b26ab1ed93225a82e3f72f28ef578210321f97c36f7c82cc43954c90c5e685062efa029ad29e07f", 0x88}, {&(0x7f0000001500)="a438f62b1ffdd14ce73d4dedaa43a7af96285c2230c206a08dabfdd1b31e401c5936de8b937dc0bc22293c1a60e7bb750fa325c7aa991ad8dc2f491079d57c1bea73de74044c233c2072bdf9c2c2e08f466829594d16c02313fb78a9d45df1fe195ce1f4a8f89eeca4b6a8395de580bb092a9d0ae4c0643ce91798d5599623bc7590553db815241dc96cb50bc5", 0x8d}, {&(0x7f00000015c0)="7b7ddbc42ecef619884ea73f5897441a41785a125ed5d1929855b4302fd2e3c8ed99edc090331ec6abb7d7e1b75d8366699cc65a425b95d6cd66ac0b9b7532cb5df67106c2e25b5c944970a48607399936859e7a2f706586374d684c4bef681a77b8131e5843db34e78d75dfb1f8c6490e55d2a5d0f7147f494cc97cac5a5a79db2afab7e4378e8aa5dd395ea4ce5bc098c0be9a579cc96066097d87b2aca7382a5c20218350aa95a35b6f6cf5c0", 0xae}, {&(0x7f0000001680)="d00805fa800c617b053319b52015523c2edd6980cf5ec1840dbe451e75a93db4c4a87fa05a5fbba5199c56f570dc15416a79b22cdeecc73a0054a2f4a8f01e08443b4218d51226693b07953309ecb488311441edd003c3a08bfb4898dfee2b8538f3b803c2ab268a3db771eb63e5b1578f9c3ef54132e7e1ec19b5b6108b26b6c7fc2a272d4a2a12f8f38b6385317a4556564f2ad66d03034c546de0bd136a924ba0347d97bb78460a8eb0f5303d86706491e2234223b67797af8b967feffb95bf39bc434ce290f8219a5cc33918db21d262507bab249107f97aeba5fccc6639c3a353f7e64c4c1c5cac37391344b7b37e9cb0257e48e83a", 0xf8}, {&(0x7f0000001780)="b5f21f9ac720d54225a44a26cc9b249b312e154d7256395868ea21350fa5e5b36c34adb98a33", 0x26}, {&(0x7f00000017c0)="521b46ffd1fb6989c624406611e7d841a7faed67a2ea4f75368c364c20f50d2fed9a0ff0761ab58ab01dffc22e0be6dc32adef56b34b806bb025d72766a5188e100d23365d84be0b796e3493ae9241cec3e5be2202e68bcfdd62fe0e39844537932ed79d8a2676", 0x67}], 0x7, &(0x7f0000001dc0)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r12}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xffffffffffffffff, r16}}}, @rights={{0x24, 0x1, 0x1, [r1, r17, r18, r0, r19]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r1]}}], 0xc8}}, {{&(0x7f0000001ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001f40)="339b2e7f8ad7bf59dcfcabf3a46988ebb023235b69d7f22d1b1e8a55d4d98c96eab6feb2d36e4a4101570e3bcad8", 0x2e}, {&(0x7f0000001f80)="df671294c26c01f1f8a4adf1c7db261291ae9b3b817e60354b2deca30e9c096c32eadbb6a825e17eefe9a0fda590aea7f7398c25863b5b66d7ecc1e6d8cd37567a1914853e4b21e4d374425a74fddf48fdf1cb89eb253df6637bf91ddfce341c0e44417c17e62f7cfa0419a2568c96837a6991d1534e9e3d0fadd299f6059678b5", 0x81}], 0x2, &(0x7f00000044c0)=[@cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @rights={{0x38, 0x1, 0x1, [r23, r24, r1, r1, r1, r0, r25, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r26}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}], 0xb0, 0x840}}, {{&(0x7f0000004580)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005680)=[{&(0x7f0000004600)="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", 0x1000}, {&(0x7f0000005600)="af81b5eee3ec76aab4c3386f72d3ff1e504a674bf5a7acb15f80d0afc53873b0576d3ac2bb979ad4c27f9b185acc9d1e92cb152585ebee77a9da7dfccca750c9668088dd435afcdd32b5fe27d0662b06b3c6088e", 0x54}], 0x2, &(0x7f0000007d40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xa0, 0x48000}}, {{&(0x7f0000007e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008280)=[{&(0x7f0000007e80)="789f036fd64be0256fc7262f184d386b9d526929f8c03d527ddeac9724ce9a54d834a8b008ecdeb95007f8194eaa9834a49a612a292e319e733c2b266fdbde3c61672a1f3b780ece66590926ebc8813e94a569a0", 0x54}, {&(0x7f0000007f00)="ce58183e0381005927a2ab88c0370fb830ad38b202c53108093f7a19fc25e9021b745a040ba7d083b1ecf317b037e7466dafc1ec5e14a7f13fb3f37c21380859ef6765270835f5", 0x47}, {&(0x7f0000007f80)="789ac2ee65f50b6647e503f253dbaa97b9ea307942c6407c639855f9df773f5bc81aa7226d6702328365b420c43d41", 0x2f}, {&(0x7f0000007fc0)="d4c227190197d298033eeaca64806ea2e058be1aed169d017660393468ed495f5e5fd13b441da628bfedc33dc19ef0fdcaa03ffd07c93dd4d000da56b6685c64379a09a4bc1671983c9011d6622cae168ba87fe5e1df28ab60ba8bf0d488d9d120cf8a5389af79367fdb1745f121a40718204a92a30cd891f3b0297fbbc135251b33c3c9", 0x84}, {&(0x7f0000008080)="4cd17268ef2acd40a05e35f8c6bffa6760ca43dafb5c1a548ca437c5590d63bdf839ecc406a7534ec243eed280f87130289a050efc79f42410a564e00bf6a7ab41806c3472cd7b947c143a9114d4399de9b28faed9ac607312b6c1fbbc8fe2c4445c66bf88c93118bf6c9ae4fd183aa05742587580645fe4023a4cfdb44db6f0", 0x80}, {&(0x7f0000008100)="25005de438d6764587cb7d5b227fa0b08c2f0de1786f9853cd4d3f1a0bfa0e5b558c7420ab1df1f8031c61844f90aea1c86c111a52fe3f80795246ea449ae99e2b1a051862f2781332ad379f61e75e314c06edbeba6efdfa9bc65e34ee8966f8c968bbc38012dc0bc10ad984f00aaffb468d93a98f7524954edfa66de878a877d17df75bc4a4fc6713e8380b50af641fabd38c7c3669991f734a449da6ff8499dd2fd390c3049591157fa9145cd646e385f9aa42b579ec7220", 0xb9}, {&(0x7f00000081c0)="9d579876e34b5de01f444c1e72ae7150b1d12c48ed720672e4347327825f6ded77a16bb3e9d57b58e83349c57a2c6ac795c7098d6e", 0x35}, {&(0x7f0000008200)="4b14e5559c0071723eacfe13db266d5877943a21926a640fa34ef771aa64b350615a0f7f9e7733e2832ab5968ed85e867b3a5efe49d8b487ff0eed613600232e0bdc9734", 0x44}], 0x8, 0x0, 0x0, 0x40000}}, {{&(0x7f0000008300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008580)=[{&(0x7f0000008380)="bbaddc6d974b9c36b59f2d33450937652648fcb0865c619ac7bc1488dcfb3665eaa02c31550522df72ad47062880adb0f87339072b83a65915639355a8e442b87982cd87e654bffc3f050bcffeaaa38c4076f50dff3a93c2121804542a6d4907ba1089b2b8ad61e3d31fe59f2f234bdcb25d29761a4e4acd993704c47dcdc69007c1f59f0c92063b770fe7b6d8f29c82449437183f4713436a6bee415ad54d42e445ae45f0cfe48d6a0f1f879027c0ceb3ce93161d17078e03b7d69571a29bd8b20c10551a91691df81a2d89120f5023bb2be478df47cc7595a19473b0d1cc35ba636f3b38d29832fb5abbd8bb78cb5b74ace900323bed7777", 0xf9}, {&(0x7f0000008480)="7e3a1b60fefe0e7d67acdb70451f61353175ac1ab3e0ae3951d021137b3c6baa8f6789d715b3770a91ffccfaed940954a2e8f644c1402ca051002214d775caa88b78105b51c0df4a227e82e5da8eb6da3fed7f2b57a49cd3a04847371071b2436f5f9202be8c7de3ccb9a991bcaede638919f6b0ff8378447538c03eef952abe23202dfad7f8ebbc1fa9c46e63e716ab3165466f07d93fedfad13702a28af720c228a101a2ef68c49575b1ac62ddb632de00d5d2dcc27482d6b3d47a1e808fc89cedfe06b238c73e58d290f3012328caca0ff9334e9658", 0xd7}], 0x2, 0x0, 0x0, 0x4000084}}, {{&(0x7f00000085c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000086c0)=[{&(0x7f0000008640)="37e8a339ea932105e2f7758725a0503fd5e9e276b2447d50d2cc137ba34abce71a74d9257bd5df411592d88ac545d4c4a48c5d44628ab22a31931ab39f8c12923e6da48bd6900d392bf9376dbedba2f6e3a5f84050cf5dddb94897b9646da91e9aea6ac8a8235877a492c20a3ca48ee73ad9", 0x72}], 0x1, 0x0, 0x0, 0x8090}}], 0xa, 0x20000000) 7m15.965459215s ago: executing program 8 (id=2094): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_open_dev$video4linux(0x0, 0x92e2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100), 0x10) mmap$xdp(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x400000a, 0x811, r5, 0x100000000) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x4000010) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000000029078ac1e0001ac14c94fce17e2b71ff70002ea55fc7e5dc8702fe619c990c582357de2ae698591d6905043975d9b316468e43a06d54e444a68222a5a6fa6f84710cd70bfcf7cf134e2593cb0423c81d125f3ca8a3e1439217a683c1ebb344a8049afb71c2fb919d55b2549169b73e66b0069a1c3cfcbb366b6b9ea1e5ffd"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x18) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=no%e') socket$inet6_sctp(0xa, 0x5, 0x84) 7m13.932181345s ago: executing program 8 (id=2101): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x13, 0x5, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x24000}}, 0x20}}, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603, 0x3000000}) 7m13.883511621s ago: executing program 8 (id=2102): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x108, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xe8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x742b}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002d0001000000000000600000010100800c0000000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d6c8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c212623"], 0x114}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x44801) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001280), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) socket$nl_route(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x7000) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000200)=0xfffffffffffffd7f) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000440)={0x14, &(0x7f00000005c0)={0x20, 0x8, 0x96, {0x96, 0xe, "27e315e486904ddf8aba4b0a2220a01982e81478716c7d5ff7157463e318befb195131f363b94d6091c81560b446ced6413aeaad97fc149e0076853ff4574293c9cd9aa1b3d49b5527db4c184bb2ac7f1f674bd5c0720a091f65717da1653bb6304752665485f0348b4cad3a2194b6202e5b2e6e740fb200221ddd9d8e24e5d162c77a293a7e9894241aba9e0e9230e41172ba2c"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x1c, &(0x7f0000000680)={0x20, 0x3, 0xe1, "feb53701a40e8271fa975f085e9ec2949081b63951a6a0f6250be9205f323cf647384eff09fc97d4bb7b4100bdde965aa6a7b723313be3e5d3b3a6c3d38ccf800d2b27a947ffdcfc4536387fc75f10037437e8b75d8489056dc9f08989672ce0684919de7f4f01c0c6f5a3ed7da89d2e3d77e6f92f4f436e2dc589c28702b1b10aa7d82b66ab542d7e0fca2ee3745d67057e45faa314637bfa518111313ec8e7f22124491ced52de5f2e73120eae50219da378b6cf0abded8d6c67c51abacad5a2cac5563fc1037294ee923db1c90ef32dc454cae227010cdd90351fea3cde35c5"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7c}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') 7m11.266358098s ago: executing program 8 (id=2109): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}}, 0x0) 7m9.790677331s ago: executing program 8 (id=2116): setresuid(0x0, 0xee00, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000800000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0fdffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m9.55516827s ago: executing program 36 (id=2116): setresuid(0x0, 0xee00, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000800000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0fdffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m47.985005884s ago: executing program 1 (id=3244): memfd_create(&(0x7f00000002c0)='$)^/\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x114, &(0x7f0000000100)={0x0, 0xfffffffc, 0x8, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES64], 0x18}, 0x0, 0x4000010, 0x1}) io_uring_enter(r1, 0x414, 0x80ffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0xf11, &(0x7f0000000180)={0x0, 0xa26d, 0x2, 0x1, 0x341}, &(0x7f0000000040), &(0x7f0000000280)) 2m47.721824158s ago: executing program 1 (id=3247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8930, &(0x7f00000003c0)={'veth0_to_batadv\x00', @ifru_addrs=@isdn={0x22, 0x2, 0x2, 0x2, 0x40}}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x1a) 2m47.652790683s ago: executing program 1 (id=3249): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x4000010) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000000029078ac1e0001ac14c94fce17e2b71ff70002ea55fc7e5dc8702fe619c990c582357de2ae698591d6905043975d9b316468e43a06d54e444a68222a5a6fa6f84710cd70bfcf7cf134e2593cb0423c81d125f3ca8a3e1439217a683c1ebb344a8049afb71c2fb919d55b2549169b73e66b0069a1c3cfcbb366b6b9ea1e5ffd"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x18) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=no%e') socket$inet6_sctp(0xa, 0x5, 0x84) 2m45.875298374s ago: executing program 1 (id=3251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0x3ff, 0x0, "1db5086296a6fd05"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xa) poll(0x0, 0x0, 0x5) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r5 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000feff0000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r8, 0x3}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 2m44.881445656s ago: executing program 1 (id=3255): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}, 0x1, 0x0, 0x0, 0x80ffffff}, 0x40080) 2m43.918356177s ago: executing program 1 (id=3258): r0 = syz_io_uring_setup(0x1111, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x50, 0x0, 0x0, 0x0, 0x23456}) (async, rerun: 32) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) 2m28.720190447s ago: executing program 37 (id=3258): r0 = syz_io_uring_setup(0x1111, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x50, 0x0, 0x0, 0x0, 0x23456}) (async, rerun: 32) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) 1m42.958643842s ago: executing program 3 (id=2958): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021240011800b000100736f636b6574000014000280080003000000004208000300000000f808000f4000000003080003"], 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x7fff}}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000c40004801500010062726f6164636173742d6c696e6b"], 0xf4}}, 0x0) timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x1}, &(0x7f0000000700)=0x0) timer_gettime(r7, &(0x7f0000000040)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8}]}, 0x40}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m19.464102995s ago: executing program 3 (id=2958): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021240011800b000100736f636b6574000014000280080003000000004208000300000000f808000f4000000003080003"], 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x7fff}}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000c40004801500010062726f6164636173742d6c696e6b"], 0xf4}}, 0x0) timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x1}, &(0x7f0000000700)=0x0) timer_gettime(r7, &(0x7f0000000040)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8}]}, 0x40}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 57.081450199s ago: executing program 3 (id=2958): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021240011800b000100736f636b6574000014000280080003000000004208000300000000f808000f4000000003080003"], 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x7fff}}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000c40004801500010062726f6164636173742d6c696e6b"], 0xf4}}, 0x0) timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x1}, &(0x7f0000000700)=0x0) timer_gettime(r7, &(0x7f0000000040)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8}]}, 0x40}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 34.378653555s ago: executing program 3 (id=2958): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021240011800b000100736f636b6574000014000280080003000000004208000300000000f808000f4000000003080003"], 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x7fff}}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000c40004801500010062726f6164636173742d6c696e6b"], 0xf4}}, 0x0) timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x1}, &(0x7f0000000700)=0x0) timer_gettime(r7, &(0x7f0000000040)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8}]}, 0x40}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.038014796s ago: executing program 3 (id=2958): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021240011800b000100736f636b6574000014000280080003000000004208000300000000f808000f4000000003080003"], 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x7fff}}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000c40004801500010062726f6164636173742d6c696e6b"], 0xf4}}, 0x0) timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x1}, &(0x7f0000000700)=0x0) timer_gettime(r7, &(0x7f0000000040)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8}]}, 0x40}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.668941948s ago: executing program 4 (id=3698): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x48, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x48}}, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x64b40, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) unlink(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 9.664104773s ago: executing program 2 (id=3699): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, 0x0, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) lseek(r3, 0x81, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e1d, 0x0, @mcast1, 0xffff}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@remote, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x4}}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b80ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 8.445204697s ago: executing program 2 (id=3704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000400)={0x0, 'vxcan1\x00', {0x4}, 0x7}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020085ffffffffffffff0000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 7.791533534s ago: executing program 9 (id=3705): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x17870ff385e2b156, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'macvlan1\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000090}, 0x4c000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x7, 0x8, 0x0, 0x377, {{0x35, 0x4, 0x3, 0xf, 0xd4, 0x67, 0x0, 0xff, 0x29, 0x0, @multicast1, @private=0xa010102, {[@timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x2, [{@loopback, 0x2}, {@multicast2, 0x2}, {@empty, 0x6}, {@multicast1}]}, @rr={0x7, 0xb, 0x75, [@private=0xa010102, @local]}, @timestamp_prespec={0x44, 0x1c, 0xd, 0x3, 0x5, [{@multicast2, 0x6}, {@loopback, 0x70}, {@broadcast}]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x2, 0x12, "d83e0949b46395be1423a603614b2c35"}]}, @generic={0x89, 0x6, "e0b7fc3a"}, @generic={0x7, 0x9, "6eeb40e85bc812"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x48, 0x3, [{0x2, 0x11, "3ab9d9c86864690acf9fb9f710b942"}, {0x6, 0xe, "2c2a79d2958bacf83b4041bf"}, {0x5, 0x9, "387892c4e5046d"}, {0x5, 0x5, "ac842a"}, {0x2, 0x3, "97"}, {0x6, 0xa, "0ce33052423806c7"}, {0x7, 0x2}, {0x1, 0x6, "18480d28"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000780)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @alu={0x4, 0x1, 0xc, 0x9, 0x2, 0x10, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xb08}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000840)='syzkaller\x00', 0x1000, 0x16, &(0x7f0000000880)=""/22, 0x41000, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x5, 0x7, 0xd, 0xf1}, 0x10, 0x1c5af, 0xffffffffffffffff, 0x8, &(0x7f0000000900)=[0x1, r0], &(0x7f0000000940)=[{0x4, 0x2, 0xf, 0xb}, {0x4, 0x4, 0x7, 0x3}, {0x1, 0x2, 0x5, 0x2}, {0x1, 0x5, 0x10, 0xa}, {0x4, 0x1, 0x5, 0x8}, {0x3, 0x4, 0x8, 0x1}, {0x2, 0x4, 0x1, 0xb}, {0x5, 0x5, 0x8, 0xf}], 0x10, 0x7, @void, @value}, 0x94) r7 = syz_io_uring_complete(0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00', 0x0, 0x8}, 0x18) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0xffffffffffffffff, 0x7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xb, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x2, 0x64, &(0x7f0000000280)=""/100, 0x41100, 0x0, '\x00', r3, @fallback=0xac749a96c18dcf3f, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x0, &(0x7f0000000b40)=[r7, r8, r9], 0x0, 0x10, 0xfffffffa, @void, @value}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r7) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000f80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x26c, r12, 0x520, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(\xa4\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',:{,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']\\(.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}]}]}]}, @ETHTOOL_A_WOL_MODES={0x130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2f, 0x4, "60da2105a38805b06b03b53a1d2446b150149e1460dde7c004de6be40ce356cb99cddb951abf439ef027bb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe5, 0x5, "3b8b3b6f21753a955dd9cd8f153240971f3d5875cb57f20268d5729e795d4cea920543ed648e95c337354666ba7032c17b51abf9023b1fcbff52d1d07f945f6a99b92037b582d9ed8f24b020dea42fb5c8d2052fee24f1aaed6644a63cb74d199bb054ed96cd94e3af15280613ff32cb5bbe790297b7f29f27a29f9f3c70e445fddef5a8938e9238c424a5de6bdbd58b42374c0138bf8a318438c2ab8af5f1f8357ae79cbce94e899206a0d669ea2f4bd210fd7958310316687cc4757a22623661e5a71d744d8042b3bd9e1ae48ba837a39e97c690e6af29c65881d16862d73f6f"}]}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40180}, 0x40800) r13 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000fc0), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r13, &(0x7f0000001000)={0x31, 0x6, 0x0, {0x0, 0x2, 0x8, 0x0, 'ethtool\x00'}}, 0x31) r14 = fcntl$dupfd(r6, 0x0, r10) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x4, 0x12, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @map_val={0x18, 0x4, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0xffff24cc}]}, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x5b, &(0x7f0000001140)=""/91, 0x41100, 0x20, '\x00', r3, @fallback=0x28, r7, 0x8, &(0x7f00000011c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)=[r8, r14, r9, r9, r9], &(0x7f0000001240)=[{0x4, 0x3, 0xe}, {0x1, 0x1, 0x3, 0x6}, {0x3, 0x4, 0x5, 0x1}, {0x0, 0x1, 0x0, 0x2}, {0x1, 0x3, 0xc, 0xb}, {0x2, 0x3, 0xe, 0xb}, {0x5, 0x1, 0x3, 0x9}, {0x0, 0x2, 0xc, 0x8}], 0x10, 0xfffffff9, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000001380)={0x0, 0x40a}, &(0x7f00000013c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000001400)={r16, 0xfffffffd}, 0x8) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480), r7) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000001640)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x10c, r17, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x84c3a76, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc378}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3175}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd95b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2a8}]}]}, 0x10c}}, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r11, 0xc0184800, &(0x7f0000001680)={0x9, r6, 0x2}) setsockopt$inet6_MCAST_LEAVE_GROUP(r18, 0x29, 0x2d, &(0x7f00000016c0)={0xffffff7f, {{0xa, 0x4e24, 0x0, @mcast1, 0x9}}}, 0x88) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001780)={r15, r3, 0x25, 0x1, @void}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) 7.558514202s ago: executing program 9 (id=3706): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000040000000000000000000000180100002064001000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_generic(0x11, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfd9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x100, 0xe000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @local}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2400b091}, 0x3000c81c) 7.517135797s ago: executing program 2 (id=3707): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) r2 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000200)="4630dbbc5711426b3875d3eea672165c66f8c9eeb2312e0a1424febedd802a3cdbe51bf0cf5e54cf59704e1ac4812415433af4f995cd3f9d026e1599f708d90d23ce61cfccc377635391013f461322b94c5e6670968e7498c4734993a5306d9715c83904d1499d95c3b2d34228f844e006b423d7c4764f98db8abee77c3e63037127890923bfc2fbb5037bed164d3826642c0f80", 0x94}, {&(0x7f0000000a80)}], 0x2) mkdir(&(0x7f0000005800)='./bus\x00', 0x6b76f27452643c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000580)={0x0, 0x14, 0x1, "f7"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x20, 0x18, 0x9, "9f1c3076a3cee6c4dd"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, 0x0}) 6.716939369s ago: executing program 4 (id=3708): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f29100000000000100000000000000009500000040000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0xe, &(0x7f00000001c0)=""/196) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r3, 0x0, 0x0}, 0x10) 6.554711931s ago: executing program 6 (id=3709): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x58f}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@mcast2}, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000040)=0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) sendto$inet6(r4, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000000c0)={0xc, r6}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) ioctl$IOC_PR_REGISTER(r8, 0x401870c8, &(0x7f0000000300)={0x1, 0x7fdd}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) getdents(r2, &(0x7f0000000280)=""/29, 0x1d) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x40, r11, 0x1, 0x70bd28, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xec}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x61}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x0) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000480)=0xffffffffffffffff) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000100)={0xc}) socket$nl_netfilter(0x10, 0x3, 0xc) 6.522551412s ago: executing program 9 (id=3710): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1fc, &(0x7f0000000380)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newtaction={0xac, 0x30, 0x100, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x48, 0x2, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "f012cce541ffadff28d576863f4a34be"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x4c, 0x801, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r4) write$UHID_INPUT(r0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r10, r10], 0x2, r8, r9, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) 6.435323089s ago: executing program 4 (id=3711): pipe(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) syz_usb_connect$uac1(0x2, 0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="12010102000000087a1d01014000010203010902720003010200104504000000010300000a24010600040201020c240205ff01047fff0f060007240888000ef204fc06761d0205000609040100000102000009040101010102000009050109ff03038004"], &(0x7f0000000680)={0x0, 0x0, 0x5, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r2, 0x8, 0x4) clock_gettime(0x2, &(0x7f0000000200)) 5.573258758s ago: executing program 6 (id=3712): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x9, "b2938f8d"}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "000f0200"}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}, @global]}}, 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa200, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa200, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000100)=""/95) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b"], 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xfffffff7}}, './file0\x00'}) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000001340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x6, 0x62, 0xa}}}}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x250, 0x1, 0x9, 0x5, 0xff, 0x5}, 0x5, &(0x7f00000013c0)={0x5, 0xf, 0x5}, 0x9, [{0x76, &(0x7f0000001400)=ANY=[@ANYBLOB="760386663b9c8de4159d9c14d72aaf05003fe03a1fc9ca59e642a60c402a08d3cef7ab49e60706e0f63620d5047d91778b3a00000000496bf570b21935ac3c6291e8071a6f797275d9485778eaf4d6bd5e925507484818eb5774a2e0386bfd027facd53f056d24940459173c61cdba6cd8c3ee9cfee4"]}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x827}}, {0x27, &(0x7f00000014c0)=@string={0x27, 0x3, "b0bd4496d45e31e0bba1a35c617f6a5386c71e64b5254c87faaab899201e7503895d851823"}}, {0x10, &(0x7f00000017c0)=ANY=[@ANYBLOB="10038da5298f66ace875746457385eb17427f035514d459321"]}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x3c01}}, {0xa0, &(0x7f0000001580)=@string={0xa0, 0x3, "c73324f59ed590ab76b908bdbe780755e3309621cda15e06172ed80fd6c445eb13df89bcf9c2f352eb5565c3cae947ce98d7ecf950b2bed39a6171408ec78a802f0b42164d610265e686cb8507d5924c4bf070c525a9bdf4e10f303609c2c22d2b7d49ab0bd013c08655164c08e1077be97dba4d8baaca9cf6890cfb5606ad4beb83588eb640d18e8b0f1fb9091c97fc6f19a2ad433c08ec7f802ee9a627"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x1009}}, {0xa6, &(0x7f0000001800)=@string={0xa6, 0x3, "23244d3afc45e0f4221eaba945ef66218d8d4e7bcfa171c8f04d8a840e287d446468a3430348fc69eea2187206eb36c88b2c2b797d85066a80f361abae4cc7a5b56243a924391c24710f5174850d623ef8fe4c8d4f5f18c846f2739114ec5317509fd059a1b9cee9e9dbe4c905675b69559805bd444d4adfa0938645a77a2c38b310d1fa4cb76892731913494a86f9e3ce3287bfa7a0597c88229578abbcb5d400c5a1e2"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x43f}}]}) (async) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000001340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x6, 0x62, 0xa}}}}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x250, 0x1, 0x9, 0x5, 0xff, 0x5}, 0x5, &(0x7f00000013c0)={0x5, 0xf, 0x5}, 0x9, [{0x76, &(0x7f0000001400)=ANY=[@ANYBLOB="760386663b9c8de4159d9c14d72aaf05003fe03a1fc9ca59e642a60c402a08d3cef7ab49e60706e0f63620d5047d91778b3a00000000496bf570b21935ac3c6291e8071a6f797275d9485778eaf4d6bd5e925507484818eb5774a2e0386bfd027facd53f056d24940459173c61cdba6cd8c3ee9cfee4"]}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x827}}, {0x27, &(0x7f00000014c0)=@string={0x27, 0x3, "b0bd4496d45e31e0bba1a35c617f6a5386c71e64b5254c87faaab899201e7503895d851823"}}, {0x10, &(0x7f00000017c0)=ANY=[@ANYBLOB="10038da5298f66ace875746457385eb17427f035514d459321"]}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x3c01}}, {0xa0, &(0x7f0000001580)=@string={0xa0, 0x3, "c73324f59ed590ab76b908bdbe780755e3309621cda15e06172ed80fd6c445eb13df89bcf9c2f352eb5565c3cae947ce98d7ecf950b2bed39a6171408ec78a802f0b42164d610265e686cb8507d5924c4bf070c525a9bdf4e10f303609c2c22d2b7d49ab0bd013c08655164c08e1077be97dba4d8baaca9cf6890cfb5606ad4beb83588eb640d18e8b0f1fb9091c97fc6f19a2ad433c08ec7f802ee9a627"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x1009}}, {0xa6, &(0x7f0000001800)=@string={0xa6, 0x3, "23244d3afc45e0f4221eaba945ef66218d8d4e7bcfa171c8f04d8a840e287d446468a3430348fc69eea2187206eb36c88b2c2b797d85066a80f361abae4cc7a5b56243a924391c24710f5174850d623ef8fe4c8d4f5f18c846f2739114ec5317509fd059a1b9cee9e9dbe4c905675b69559805bd444d4adfa0938645a77a2c38b310d1fa4cb76892731913494a86f9e3ce3287bfa7a0597c88229578abbcb5d400c5a1e2"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x43f}}]}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000001300)={&(0x7f0000002000)={[{&(0x7f0000000180)="e36f87988b83f92f8e96f5ffbc39dfa0fa2b544b32aef15159e4d776568156514fbf419361d72b54e8121be61815e7e08f056b795628b09f9378dfbbf35dc8ef5ef360a2d54b16476499ebf5a9c320cc8e1c4f39ceb81a9655f034f530d4ed601c289eb6af87896c745625d23585ad3fdaff6859c807f4e8d84c5ccb0ad37005cf43d4bd64968c42424902ceb91744919f26f6d965a2888b69a1f005fb749aa344478ce452a9d881800d9b8cb04af8603657acefc19147cf0dfe8d6c1f385b6e90c93148c949c8543eda693ef072518a8dc8d39cfe5b2bdd25c9f4b08156044d5dc13b1c3d8ce11331231a403d4becd94f36c1f364b13acacdba1a814bc0eed1c896e37d9e86a32385f150af9fcd5f15f6032de4dfbbd636b07a564019ed6cf6273d2eea27a7a5c0ed2b45a6edca94759f7ea1817f0c4e1156336ae67675746cd5cdc3387ce35c3aad90a4b80c50389c79c628479050e39b6e3ab69e2c31574a2fff70c47b250310fa8742ea89f2ecf7d671c8cb10b074314db30abc61c9c78d12f417f3d004213d215c76c6824a3422722c3f65431c7dc7d5479348572649a7300769a86b8df31c2b3a716aab7489a76262f96e6abbe084e49cdd5b62cd6084001700b9e332f414c27147cd11f376290841cb1305385fdbe2f0a72c6b406af3b3cbe96ac7e2811f029c4dde34e048206cfaa855449b6904c9d639dea7a2195db5a64a8bf98bca76716d9e67b421aefc9dea86ab0a0408aca55c515c4595062616ca6fd961818390cb6b7d09daf9e38a389fe4a564584cee3852531838e67a0f3eb22ef3e016db1bd1dbc2f3c5fd8658c76abd27dae27de2f0292aad40002d1b0c005eb4cb897f7232643a73d70cd25175844aa2726d775cf4d2fd996bdf433bb7170429a33c045d44689922d149aa56927d6d6d1c80a4b5b501186a234b399316d2ce14b05a64e261c03d3c0c78f2d7c47f4038608624480d602fa13f99d5a6cf0018a9f6f42854db096f12e1100c3a836870c8c0d71bcd601e3d51a082f8466dddff2fa9917aa125e5bf6144afd20919aaa44e0d506eebc0f3a24853cf848c68f9defafe1d1de9116562e929a0024fb561960c1d415ad774fedabea010903fc6ce334ff4d25847870f9b42cf971f94eeea666d348c5ea959bf1bff60df46404c74bc2131456b7d125293906425bfca45ffa593a41ae1a8d5ec5c0db4b4ce4eefaae75cad7d0502d441d8ca7b9f16231f3ae53e70a1c02fec89a554604402fa8fa46e714a172d64883a79ea630055e3b958988336f24d5b90ae4f109746b57f2456b6e95178bb51455aba24bb5ce8b2593e195e6493f6d21d185e6a6d64c222d63443bc5e63961ecf4f4bb8932b90ab1797cc295a6b257507e5c6d1dca89d1f2f9a5c41cce2143d29d7e5c09bd5a46a72ac42424b27594fe9b82e16888e570210835210dc006d9a26315d4dbddd76e6ee616849b6dea10186eec0c5b689240367b51a793f11551d49bbccecb1173a998191e2388854ae3b382e3c0682398ad35fd8552e50b6ab6046a69e50dfa800b33bf4c901bd9a4a35534b303b327e837570908b9f1e6e9052167453112f63b06c397555f160b62aab5f259d1e5f82c62dee8e1346bff4318b9b6a92804d44cf3b9a7349d3ca960666b7db52b2d1de0f9396e84c789a110e1f3652a2140e1d9e7ce9e17d90cbce5bac7a7008fa25e877f4b3b8f3e4e8e3062937578c367640b637a721d7b529d5c08bf1cde9b798d76747c21bc170655ec869dea108971b86ff2f9c9c0879c27198ca3e4141080bd568ba3d40c0f39db00abb0f26f43a8e7a651b8251bbb29600487bfa56d39de6928345e6070a5f3dde337d0bf601a2d5c3c4a86cd87ddb515adfb63b870d6d6eaa5da77680c08cca02f5d320f79081b55542a37d0327627ebfa26c53e8eff120633468ac19efc71edb845b9ab6345adb35ce38d6079ca8e079460551f132f421bfa2763b6cc54ac3b9fdb1bafa686cb57e16b41754fc47d21d9e8b4ab769f25f94841caf56957b19361318b84a6bb7d790a855933b7bf0937bbae30b936057c8dd6c8d27d03e2b0ed1d130ed533a849a3c0c962f98f66386a813f2b2dcaced7b783a45db159322cd573948c56ab84cb7edba20a05b9ff763b3ba59182db2a0ded1062386528659f27dc2dd25f966fc64f488c1f9569f2487938327d36e91629f509d3c50c50d19162d1f18cb450f67c8773d9addb33164ca63543b63d1c7dd4b72e2f343c8194abe6597098d2147a9421215cf53b9c30cb32451df8b4f0d180f0c575326d0140362ec59c89eb135acce964a23ca1462a5a6c0dd0a4a5b7bebe3ff3835edf181dcba36968fc01ddde40b5c5824081da54d9e71f435e0f700eaa63f52758d6c824cfe7e7de432e908499a5f48c01179575316636b6663e9859e355a0619e51edb9a5f24ced1575ea590ba7949a5037dc29ee1387d30558b719906616afa2542deb557b834ae5c445cf9314bb3d4b825e95db8d3bdf024181c892bc7815008ecd4390971d2f1abbb42c0be7c4eef0503e352284d2a3d4e2df38ce5dce93b7aed3b87088dbcba7f5fa507a25588445d287b37eed7b810e5b4fca73e30bf00b69e2396c393cc33dc6c69e3644aa27f8f4b42dbbb5630d64bce29537eabcd520f13ac60bcbddf610680899b927427d9a4e283aa04ab67531e724e1b3e52dc312ad574a083da3de8014bfd50afa7a7a40d6bcdd23699ecd216ce8b4b8e6803cfa4c8a96f509444152c7078b53fe8e2d079b4cf010ca0ebd1cc21da28adcec8f4d90041762e9abf061d984361d40392dc2082c6bb14a6291fc28a53c74f5df08412c9c78557deea382abdf826181c16814f228ab1d3f5437e66c636bc8eb667632b4ea10293cbeb763b90cff41ad31c148c84dd67b5c354dd840b120b9d2b0a75c0432ff123f97d189188b28ec9f17318d47050c22f1b806e972b4d207fdd9a645af14a488f28207d7b9d01b394f9505f5b559586497dece5608e0c47b46a6d28d216a434597e3455cfb2cb8e47076dc6a9af3834f43fe5b3d097e328ec30b1789fb2fb9ad823c432982dd917937cecb9e45b393e03d815a1bac82948c2929beb6d27b58b38cea379f35e77ce5da437568967d55d94a274d0643a8887c2973c09a08db732ed65698a8201cea9bef7f192093ca5e7360ba50962988327600c387fcea25e81f1ab35e93d9f6e5e23a881f8a1b71766f64c14cb2f2aa89e656b92a3eed26e893051da76686e10d01cd67679dc82a1b766ff324f5fc02e044e20ed0233681e3d8b8395ac3c2a9ccc84e7d10ef282e11029a02ad3a30322b8f033ec985bb326a87a63caddb3f4247e6c33b25389434e021c4c19449598262c7a154a594c308f9ef81b6f98a0a34fcbc40259722cb568cc8284bc8283c33eb06b3042e7b4e43640c1b0fa6413759e867e74740fa01ae9ea719034a9e694d51847527ca25808f2fdd2d00bf20d24ac8d9365122b36b00271e168a4ee481db2f67a2bf6476a35c8911b73037a51eed51bfcea70e0eb2438bcdd54b887fcd01d0dfb9a291c677ddd29c174f4a75560e833cf08b146eb9b74951add7d4cb8c8eafdc6267826c14b2768fa3b61403ca7e0e886483b0b57bdd37b291b22a6984296bd9fe4cb50791df9d05225064fe7a3210208e1fd0e85fa2432e3b4a257368ff1eb2a756be3d8ba0839ef14d854919b2a3bd506b53cbae564f99ebee230a3e9b0b334d496dda12a46e2ce08c254d4658c40ff972ad7dd2a9744624cf9f3a4b2afedf6ce781ab65ba68bc6009c4d0b355208a2de49175805a7665b411f918f60961e6318d8cf00ea637813910eb047e748691197b2d8f7ee8f3b7bbfb56c80196c60f7008de441dbe45cf015be74a013acf9fde7f29ff6a269bcd10027d3123417c14cad621092e7be10e0a18651b5d6e8b089e7540d78a1bce001d715af6f7ea9abc56af31f6da126ac64be5771aa2f9748a1fe7d018d96a8bb0a6f0cc67ac52fa37fc251dc990fefc1e092a5a4a766ec54b59177d48d1f052fdcf82f68e86bca820f4161cbb0e37b16dd199edff7a5ed1594ac6d0d9bef21ff8503e0087f3a398fa667a9a30e296e944a78344a9eb4bacc8aaa4d736043e2ade200572215036ada61ed995d3ffb6723c7f8f8351e407f33d4c7dd6b9d986bd02cf0d43f512eee423b8f77a4ca7ead21ca251fd385b4de0252156b62134fec7fc52cd5a4486d13c27f5bf0fe08878d8757ea58550fd0e530635173b999a9a867e0ac974237dfc4172a40cfa6842de22b6ccb653a49b1ba9536c1bc022a7cd22fa1144b6de68aee2f03058aad166b9f8fb10cc922d41c0b3c10d7952acf7012081509ac9f8f5c2611739746e7375527c32f0dea5db450e12b8df0a33d00d1cccd16991aa275c573e7efdeaedf526a48c7a3d09f84c8d09e9a8bc0874c67247996f45b6557a8e2a2b43b0cd22f58c2571b3ae7431caf6022c0d8e2730161e2a598b06c1fcd8d34715ab155fbc690591334d2e8503ec6370572bb5efb1e57632e4ad8694f2fc50f2ca9a940abb525a5d15ae5054566da7b69c348f0cb328a2f774cdfad55c2bd366813d6e8f30d8c5a32ba888881aa09d4ae1359a933cd28a0cbf0d350defc07bebddbffdb6b291540346f677cfaa3788ae767f5745727ab2b933e6d8c5df49adfd01ead0e90bded8ef4e5c1b0c592542ef400c7b5dd829ba5a71b4e66784a3c407c023d9ebbd606b4cd021dd47d4cb23b5623f865373d89a112f9c456e1fc92cb122dd9ef003524bee2ac6f9cebd0795e76fccf44ec27800e4b499eb8800f02717c64047fe0f5ed8dd1dd544bcd0f87402a44b2b90e60c5017d628b47adbee1df03a2832abe0c1151a3852b5611c734798927ec292a88e59589f02c025139aa91ba15b31d2aab02d2790c63774947d4b224c155174d46a546a4575ec50dc5a0140b102af294d95cf9c4c1c514f8f4767703f2be235b53506e0715bbdfab96ad73af1000f30772c990c392e8cc86fc3d87f292a3dd4708c28110615f3cbc4bd166cc22f76d1822a6594d5d638c5fe3a978e122331970a30dd90eba1297540d0068f0745cb8b4e609282cfe05a6bc881a2171df53b0585580ae1badafb516b52c77528163c80bbc6a6ccc7ec429902aae4c6148ee96f22bb2f6ee84c1bb0ad15b688d7a0259f10292209efc5667da542b0dae8d3b9aa9af660095e6e700ea5c6cad519edcf9a145b6edc5ac6f75a5620fc30a90922667bededd1fb91f45f8878ca76179059a087cf22d5c2cc0cc861909482b45d63b6991d07c696d68c9cef229776660ce2846a608fd62df3fa2e2bd26c3d4e3f29df3f5bc0191742ee4e28528e8d2b547b9eaecad64a3dafd0c1e71cdb3e66b6efb115ed5f8db9cfc38fb4b0c69319bd24f926cae93dbf566a5a296c73b2a1413c29fa2511da52d0ab94f1c19118cb70a2726fdfd3f94964293415ee2af7b4a1e8f86dd86d418004fe4a3c447d8fd70bbbfda6d95b51d832aa9588e3f13df48f5bbefb7e7fdaa390b221e2a097e6a0f577e53dfbaa6dcaf34864d5eff4f685530dfdb8ca7393bec63ceb11794a70feb2bf770b0633302b3ba644d9d98c2d04a0413362be6c8e689035172372e21f0e480935c8b7dc0898f560a1672e503a430bdf2c1898b3e77fbe541db888b86ac2fc5b631561ea15abdb835d8553254bb191adc880ba7865fee27ec60c49c2965580db0aa04475f87bdca3fab16ffb20fbede7141d0813654d0dc4f45c80288c89a8898a714", 0x1000, 0x3}, {&(0x7f0000001180)="1f9537b352eb3abb746a43abd24b5406a79cfb9c15df6b4202aec6941d034adb667a776c04545075ed29eed292bf7c3d25014f6d4a6700cdd6e0e04b3a6aa14d02c89ceea6167dbfe6f52af50b36d6b50dde9610355b0ec66b05c7a3eba19e28c82261b9c860ee4688944ec6f0c4c40de4c5e5b4d43841931f57cc380587639c834df05e7fe1b268d11a7a15eb44341210cfa097b247abb3937c20848f6adf7a72bf0e826b444a4a60dc71da727da68aaff454", 0xb3, 0x2}, {&(0x7f0000001240)="e8c96f659756b48741bea392450284f29712bb", 0x13, 0x1}, {&(0x7f0000001280)="6f87a7baf87f746f88e16619a703c3c738bd602b1558e6ed34fdde62159c62684f112ecd9ed5f22977909abb6c07e238a8476592f9aff9c69e3516322adc9d31900680b63df2fa9d58fd2e8a0d5024", 0x4f, 0x3}]}, 0x4, 0x2}, 0x1) 5.412402536s ago: executing program 9 (id=3713): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$video(&(0x7f0000000040), 0x485, 0x141100) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x0, {0x0, 0x300, 0x0, 0x80000300}}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create(0x8) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2a020480) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="2f00000004000000000000000000000000000000000000000100000000000000070000000000000000000000000000ef7b12a3c85c46da1d038d2344fc7f57b8a59234938ce594a8fc54edae6674"], 0x2f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4044844) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "00cd83f39500", "7979c06f94e17c45a2b2c7ff1bd557b28d5a73226a963826af565862c10900", '\x00', "dbdf3ad7d6801cf6"}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x11a, 0x4, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file1', [], 0xa, "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"}, 0x100b) 4.400948637s ago: executing program 9 (id=3714): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x808800, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYRESHEX=r1]) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000e33000/0x4000)=nil, 0x4000, 0x4000002, 0x4d031, r1, 0x0) r2 = userfaultfd(0x80001) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f00000001c0)={0x30}) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) (async) r4 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async) r6 = accept$alg(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000007440)=""/67, 0x43}], 0x1}, 0x9}], 0x1, 0x400001c0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3.990605357s ago: executing program 2 (id=3715): r0 = syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000800)={0xa, {0x0, 0x4, 0x102, 0x800002}, {0x20000b, 0x4, 0x0, 0x6}, {0xa93d, 0xfffffffc}}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) r1 = syz_open_dev$usbmon(&(0x7f00000008c0), 0xffffffffffffed40, 0x640) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810}], 0x1, 0x4804) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008f}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r6, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.836469384s ago: executing program 9 (id=3716): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0xc}, {0x3, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}}, 0x20040855) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="110300000000000034001280090001007866726d0000000024000280080001000400000008000200010000000800020004000000080001000100000008000a00", @ANYRES32=0xffffffffffffffff], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8044) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) fsopen(&(0x7f0000000040)='zonefs\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x5, 0x0, 0x0, 0x0, 0x80}, 0x9c) r6 = syz_io_uring_setup(0x466c, &(0x7f0000000680)={0x0, 0x0, 0x10100, 0x0, 0x398}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r9, 0x0, 0x0, r9}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000480)={@private2}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f00000000c0)={0xc, 0x4, 0x1}) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x48, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r11, @ANYBLOB="6b6362b479278345b8eaec738b548a4a3922057b64fbe40c5b18721d72442546183bc067c3080bf3ad252ffca7be856f41771c1a95773afcd11cb55a792c40b3b52f51e7016d941e9f71594a8f992b1ba641", @ANYRESHEX=r10, @ANYRESDEC=r1], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x402, r12}, 0x38) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001640)=""/233, &(0x7f00000002c0), &(0x7f0000000440), 0x5, r12}, 0x38) syz_usb_control_io$uac1(r2, 0x0, 0x0) 3.13986562s ago: executing program 6 (id=3717): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0x76) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000dc0)={0x400, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x2000}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x3, 0x4002, 0xffffffff, 0x0, 0x2, 0x16, 0x0, 0x0, 0xa}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r7, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r8, 0x2}, 0x20) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000000040)={0x14}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf25020000040000000002462bd2ea0fbf56f81f922bedd66e08000000df4076e04f334f0db4f60d6f0915491c8bdce142f02f1248d2c11ebb31f53fb8f5a9e2402068248facf639a4bed522165c"], 0x24}}, 0x40) 2.864052905s ago: executing program 2 (id=3718): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mbind(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}) 1.826819435s ago: executing program 6 (id=3719): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x7000000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.444627332s ago: executing program 4 (id=3720): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x48) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x5, 0xd}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000800000000000000c8ba291b4f1b8d265c2fa4d2ff546c0e059c9ea1c53456220c11673c00857f76984ffba34f3ae7c4ca174f3517919f8a18bd296c2f7f8efdef8d2da4b948a69100020000000000004828916768ca9677ce0b9d16dc064ca3864ed8a27bb206f471c5ebc8f82ea3ed5f4bb1283c1d5bb9623a114c1308294e63171c98bfdcd817e2cd00969a27824f2b856d5d5225dffef26da544e1e4205971f12d26649f4dde9531a836d4dc42e07d38af5e393ba1cbd99b1e4b7041da38db857006647c82b0"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1b86a14636108b94, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='svcrdma_send_err\x00', r5, 0x0, 0x7}, 0x18) setgroups(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x22000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000140)={0x10000000, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000640)={0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x4, 0x400, 0xffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x0, 0x0, "1f7fad6e00d39c4f061702d91d0068e7cfc67a7272f3bf0a71b5d0c1d323a260"}}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r10, 0x4b3a, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, 0x0, &(0x7f0000000140)=r2}, 0x20) ioctl$TCXONC(r10, 0x4b3a, 0x2) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f00000004c0)=ANY=[@ANYRES64=r1], 0x118) 1.297322701s ago: executing program 2 (id=3721): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}) 394.867411ms ago: executing program 6 (id=3722): setresuid(0x0, 0xee00, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000030000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0fdffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 367.949699ms ago: executing program 4 (id=3723): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x40000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 107.59938ms ago: executing program 4 (id=3724): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1fc, &(0x7f0000000380)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newtaction={0xac, 0x30, 0x100, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x48, 0x2, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "f012cce541ffadff28d576863f4a34be"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x4c, 0x801, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r4) write$UHID_INPUT(r0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) mkdir(0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r10, r10], 0x2, r8, r9, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) 43.525768ms ago: executing program 6 (id=3725): socket$nl_generic(0x11, 0x3, 0x10) syz_open_dev$video4linux(0x0, 0x92e2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100), 0x10) mmap$xdp(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x400000a, 0x811, r4, 0x100000000) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x4000010) socket$inet6_mptcp(0xa, 0x1, 0x106) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x18) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=no%e') socket$inet6_sctp(0xa, 0x5, 0x84) 0s ago: executing program 3 (id=2958): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021240011800b000100736f636b6574000014000280080003000000004208000300000000f808000f4000000003080003"], 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x7fff}}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000c40004801500010062726f6164636173742d6c696e6b"], 0xf4}}, 0x0) timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x1}, &(0x7f0000000700)=0x0) timer_gettime(r7, &(0x7f0000000040)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8}]}, 0x40}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 54156][T17339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.781930][ T30] audit: type=1326 audit(1741574788.892:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17546 comm="syz.9.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada298d169 code=0x7ffc0000 [ 842.806303][T17339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.836511][T17339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.868472][ T30] audit: type=1326 audit(1741574788.892:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17546 comm="syz.9.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada298d169 code=0x7ffc0000 [ 842.892826][T17339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.909537][T17339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.934894][ T30] audit: type=1326 audit(1741574788.902:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17546 comm="syz.9.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fada298d169 code=0x7ffc0000 [ 842.958626][ T5867] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 842.967684][T17339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.989237][T17339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.012936][T17339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.059237][ T30] audit: type=1326 audit(1741574788.902:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17546 comm="syz.9.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada298d169 code=0x7ffc0000 [ 843.095565][T17339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.119240][T17339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.129264][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 843.134843][ T30] audit: type=1326 audit(1741574788.902:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17546 comm="syz.9.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada298d169 code=0x7ffc0000 [ 843.159995][T17339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.168289][ T30] audit: type=1326 audit(1741574788.902:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17546 comm="syz.9.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fada298d169 code=0x7ffc0000 [ 843.211585][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.222583][ T5867] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 18 [ 843.231653][ T5867] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 843.241149][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.257123][ T975] libceph: connect (1)[c::]:6789 error -101 [ 843.293736][ T5867] usb 5-1: config 0 descriptor?? [ 843.304440][ T975] libceph: mon0 (1)[c::]:6789 connect error [ 843.308622][T17339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.376633][T17339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.430774][T17339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.465575][T17339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.493938][T17339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.543189][T17339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.588982][T17339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.589844][T11752] libceph: connect (1)[c::]:6789 error -101 [ 843.617345][T11752] libceph: mon0 (1)[c::]:6789 connect error [ 843.638133][T17339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.675622][T17339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.710751][T17339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.756569][T17339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.772286][T17556] ceph: No mds server is up or the cluster is laggy [ 843.787176][T17339] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.796079][T17339] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.806172][T17339] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.815263][T17339] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.835847][T11752] usb 5-1: USB disconnect, device number 47 [ 844.039921][T17566] sg_write: data in/out 1184723571/34 bytes for SCSI command 0x4d-- guessing data in; [ 844.039921][T17566] program syz.4.3361 not setting count and/or reply_len properly [ 845.441933][ T7661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.030770][ T7661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.082188][T17576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3363'. [ 846.174652][ T7632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.220235][ T7632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.516272][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3367'. [ 846.700983][T17586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3367'. [ 846.955976][T17586] team0: entered promiscuous mode [ 846.982001][T17586] team_slave_0: entered promiscuous mode [ 847.022780][T17586] team_slave_1: entered promiscuous mode [ 847.030359][T16711] Bluetooth: hci1: command tx timeout [ 847.075100][T17586] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 847.699362][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 847.699380][ T30] audit: type=1326 audit(1741574793.752:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17577 comm="syz.4.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058dd8d169 code=0x7fc00000 [ 847.814653][ T7651] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.001603][ T7651] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.117925][ T7651] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.265105][ T7651] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.460257][ T7651] bridge_slave_1: left allmulticast mode [ 848.465930][ T7651] bridge_slave_1: left promiscuous mode [ 848.492304][ T7651] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.501601][ T7651] bridge_slave_0: left allmulticast mode [ 848.507271][ T7651] bridge_slave_0: left promiscuous mode [ 848.520041][ T7651] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.929243][ T975] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 849.101980][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.125618][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 849.131565][ T975] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 849.142145][ T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.149364][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 849.157014][ T975] usb 7-1: config 0 descriptor?? [ 849.169452][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 849.178699][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 849.190312][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 849.197537][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 849.691501][T17621] bad cache= option: no%e [ 849.691501][T17621] [ 849.698065][T17621] CIFS: VFS: bad cache= option: no%e [ 850.804524][ T7651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.830476][ T7651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.852933][ T7651] bond0 (unregistering): Released all slaves [ 850.909331][T17611] lo speed is unknown, defaulting to 1000 [ 851.242431][T17611] wlan0 speed is unknown, defaulting to 1000 [ 851.271748][ T5832] Bluetooth: hci4: command tx timeout [ 851.515287][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3379'. [ 851.599854][T17646] bridge2: entered promiscuous mode [ 851.664735][ T7651] hsr_slave_0: left promiscuous mode [ 851.694512][ T7651] hsr_slave_1: left promiscuous mode [ 851.809240][ T30] audit: type=1400 audit(1741574797.912:1076): avc: denied { ioctl } for pid=17647 comm="syz.4.3380" path="socket:[64483]" dev="sockfs" ino=64483 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 851.836479][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.844586][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.868345][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.876002][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.959438][ T7651] veth1_macvtap: left promiscuous mode [ 851.965123][ T7651] veth0_macvtap: left promiscuous mode [ 851.971896][ T7651] veth1_vlan: left promiscuous mode [ 851.977187][ T7651] veth0_vlan: left promiscuous mode [ 852.386458][T17661] netlink: 'syz.4.3384': attribute type 4 has an invalid length. [ 852.464150][T17662] netlink: 'syz.4.3384': attribute type 4 has an invalid length. [ 853.339375][ T975] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 853.350071][ T5832] Bluetooth: hci4: command tx timeout [ 853.505019][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 853.520008][ T975] usb 3-1: unable to get BOS descriptor or descriptor too short [ 853.554276][ T975] usb 3-1: config 2 has an invalid interface number: 237 but max is 0 [ 853.569950][ T975] usb 3-1: config 2 has no interface number 0 [ 853.576148][ T975] usb 3-1: config 2 interface 237 has no altsetting 0 [ 853.603555][ T975] usb 3-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.8e [ 853.619305][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.636680][ T7651] team0 (unregistering): Port device team_slave_1 removed [ 853.637106][ T975] usb 3-1: Product: syz [ 853.650303][ T975] usb 3-1: Manufacturer: syz [ 853.655235][ T975] usb 3-1: SerialNumber: syz [ 853.768101][ T7651] team0 (unregistering): Port device team_slave_0 removed [ 853.836003][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3387'. [ 853.872510][T17674] openvswitch: netlink: Message has 3 unknown bytes. [ 855.431646][ T5832] Bluetooth: hci4: command tx timeout [ 855.533818][ T975] usb 3-1: Found UVC 0.00 device syz (19ab:1000) [ 855.542443][ T5868] usb 7-1: USB disconnect, device number 43 [ 855.552326][ T975] usb 3-1: No valid video chain found. [ 855.655965][ T975] usb 3-1: USB disconnect, device number 30 [ 855.713605][T17611] chnl_net:caif_netlink_parms(): no params data found [ 855.897306][ T30] audit: type=1400 audit(1741574802.022:1077): avc: denied { read } for pid=17699 comm="syz.9.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 856.061082][ T5868] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 856.125818][T17611] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.156805][T17611] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.174811][T17611] bridge_slave_0: entered allmulticast mode [ 856.182461][T17611] bridge_slave_0: entered promiscuous mode [ 856.235179][ T5868] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 856.270022][T17611] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.303531][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.306937][T17611] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.445793][T17611] bridge_slave_1: entered allmulticast mode [ 856.609649][T17715] bad cache= option: no%e [ 856.609649][T17715] [ 856.616220][T17715] CIFS: VFS: bad cache= option: no%e [ 856.980454][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.997042][ T5868] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 857.014163][ T5868] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 857.019423][T17611] bridge_slave_1: entered promiscuous mode [ 857.029352][ T5868] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 857.037545][ T5868] usb 7-1: Manufacturer: syz [ 857.108496][ T5868] usb 7-1: config 0 descriptor?? [ 857.385738][T17611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.421438][T17611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.478637][T17611] team0: Port device team_slave_0 added [ 857.486302][T17611] team0: Port device team_slave_1 added [ 857.524502][ T5832] Bluetooth: hci4: command tx timeout [ 857.557822][T17611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.594333][T17611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.672989][ T5868] usbhid 7-1:0.0: can't add hid device: -71 [ 857.679006][ T5868] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 857.684499][T17611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.770782][ T5868] usb 7-1: USB disconnect, device number 44 [ 858.169271][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3397'. [ 858.178644][T17611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.185644][T17611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.229460][T17611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.413659][T17611] hsr_slave_0: entered promiscuous mode [ 858.420018][T17611] hsr_slave_1: entered promiscuous mode [ 858.658706][T17733] bad cache= option: no%e [ 858.658706][T17733] [ 858.665307][T17733] CIFS: VFS: bad cache= option: no%e [ 860.989391][T11752] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 861.117564][T17611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 861.178140][T17611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 861.189982][T11752] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 861.202251][T11752] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.221076][T17611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 861.230073][T11752] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.239995][T11752] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 861.253611][T17611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 861.272130][T11752] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 861.281550][T11752] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 861.299608][T11752] usb 10-1: Manufacturer: syz [ 861.325320][T11752] usb 10-1: config 0 descriptor?? [ 861.589465][T17761] bad cache= option: no%e [ 861.589465][T17761] [ 861.596026][T17761] CIFS: VFS: bad cache= option: no%e [ 861.640581][T17762] SELinux: failed to load policy [ 861.877490][T11752] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 861.895937][T11752] appleir 0003:05AC:8243.0019: No inputs registered, leaving [ 861.906056][T11752] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 861.921199][T17611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.984628][T17611] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.002642][ T7651] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.009810][ T7651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.059890][ T7651] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.067013][ T7651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.177125][T17611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 862.198254][T17611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 862.228654][ T5867] usb 10-1: USB disconnect, device number 23 [ 862.451206][ T5868] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 862.464165][T17773] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 862.564528][T17611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.610671][ T5868] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 862.637707][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 862.668892][T17611] veth0_vlan: entered promiscuous mode [ 862.681461][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 862.697588][T17611] veth1_vlan: entered promiscuous mode [ 862.711797][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 862.748139][T17611] veth0_macvtap: entered promiscuous mode [ 862.764353][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 862.775563][T17785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3413'. [ 862.795112][T17611] veth1_macvtap: entered promiscuous mode [ 862.801170][T17785] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3413'. [ 862.812269][ T5868] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 862.834842][T17611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.848505][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.866332][T17611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.880088][ T5868] usb 5-1: config 0 descriptor?? [ 862.891878][T17768] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 862.901278][T17768] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 862.908484][T17611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.939680][T17611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.963523][T17611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.985670][T17611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.011746][T17611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.049226][T17611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.069216][T17611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.102271][T17611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.120286][T17611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.150525][T17611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.249193][T17611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.259061][T17611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.274154][T17611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.284589][T17611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.295413][T17611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.315921][T17611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.343948][T17611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.360415][ T5868] hid-u2fzero 0003:10C4:8ACF.001A: unknown main item tag 0x0 [ 863.369652][ T5868] hid-u2fzero 0003:10C4:8ACF.001A: unknown main item tag 0x0 [ 863.377062][ T5868] hid-u2fzero 0003:10C4:8ACF.001A: unknown main item tag 0x0 [ 863.389433][T17611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.416900][ T5868] hid-u2fzero 0003:10C4:8ACF.001A: unknown main item tag 0x0 [ 863.425484][T17611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.440637][ T5868] hid-u2fzero 0003:10C4:8ACF.001A: unknown main item tag 0x0 [ 863.448886][T17611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.460870][T17795] bad cache= option: no%e [ 863.460870][T17795] [ 863.467737][T17795] CIFS: VFS: bad cache= option: no%e [ 863.493081][ T5868] hid-u2fzero 0003:10C4:8ACF.001A: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 863.587227][ T5868] hid-u2fzero 0003:10C4:8ACF.001A: U2F Zero LED initialised [ 863.615445][ T5868] hid-u2fzero 0003:10C4:8ACF.001A: U2F Zero RNG initialised [ 863.654850][ T5868] usb 5-1: USB disconnect, device number 48 [ 863.837244][T17611] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.858699][T17611] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.877954][T17611] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.895481][T17611] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.859408][T17808] tipc: Started in network mode [ 864.873255][T17808] tipc: Node identity 1, cluster identity 4711 [ 864.880621][T17808] tipc: Node number set to 1 [ 865.197077][T17814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3421'. [ 865.324709][ T7627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.352381][ T7627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.904507][T17817] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 865.957470][ T7672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.976433][ T7672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.355618][T17826] netlink: 'syz.2.3422': attribute type 4 has an invalid length. [ 866.519640][T17826] netlink: 'syz.2.3422': attribute type 4 has an invalid length. [ 866.590016][T17825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3424'. [ 867.099252][ T30] audit: type=1326 audit(1741574813.212:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17832 comm="syz.2.3427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81e738d169 code=0x0 [ 867.414153][ T7672] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.444378][ T30] audit: type=1400 audit(1741574813.572:1079): avc: denied { watch_sb } for pid=17830 comm="syz.9.3426" path="/246" dev="tmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 867.466624][ C1] vkms_vblank_simulate: vblank timer overrun [ 867.581454][T17831] SELinux: policydb magic number 0xf97c002e does not match expected magic number 0xf97cff8c [ 867.600447][ T7672] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.625681][T17831] SELinux: failed to load policy [ 867.733677][ T7672] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.802558][ T7672] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.955564][ T7672] bridge_slave_1: left allmulticast mode [ 867.965728][ T7672] bridge_slave_1: left promiscuous mode [ 867.973679][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.003750][ T7672] bridge_slave_0: left allmulticast mode [ 868.009497][ T7672] bridge_slave_0: left promiscuous mode [ 868.015147][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.612569][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3432'. [ 868.681446][T17853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 868.845352][ T976] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 868.882896][ T7672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.906264][ T7672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.933763][ T7672] bond0 (unregistering): Released all slaves [ 869.018772][ T976] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.028890][ T976] usb 3-1: config 0 interface 0 has no altsetting 0 [ 869.061190][ T976] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 869.098806][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.128089][ T976] usb 3-1: config 0 descriptor?? [ 869.757044][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.763512][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.775215][ T7672] hsr_slave_0: left promiscuous mode [ 869.783181][ T7672] hsr_slave_1: left promiscuous mode [ 869.794140][ T7672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.826721][ T976] uclogic 0003:145F:0212.001B: interface is invalid, ignoring [ 869.836517][ T7672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.980364][ T7672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.007262][ T7672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.007977][T16711] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 870.015936][T17866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3435'. [ 870.033608][T15585] usb 3-1: USB disconnect, device number 31 [ 870.044127][T16711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 870.056048][T16711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 870.073057][T16711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 870.081624][T16711] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 870.086735][ T7672] veth1_macvtap: left promiscuous mode [ 870.095855][T16711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 870.163793][ T7672] veth0_macvtap: left promiscuous mode [ 870.170578][ T7672] veth1_vlan: left promiscuous mode [ 870.175793][ T7672] veth0_vlan: left promiscuous mode [ 870.802749][T17873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 871.758359][ T30] audit: type=1400 audit(1741574817.882:1080): avc: denied { nlmsg_write } for pid=17882 comm="syz.4.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 871.808660][ T30] audit: type=1400 audit(1741574817.882:1081): avc: denied { map } for pid=17882 comm="syz.4.3440" path="socket:[66941]" dev="sockfs" ino=66941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 871.865649][ T30] audit: type=1400 audit(1741574817.882:1082): avc: denied { read } for pid=17882 comm="syz.4.3440" path="socket:[66941]" dev="sockfs" ino=66941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 871.991352][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3438'. [ 872.151437][T16711] Bluetooth: hci4: command tx timeout [ 873.236742][ T7672] team0 (unregistering): Port device team_slave_1 removed [ 873.520270][ T7672] team0 (unregistering): Port device team_slave_0 removed [ 874.229484][T16711] Bluetooth: hci4: command tx timeout [ 875.138843][T17892] syzkaller0: entered promiscuous mode [ 875.145010][T17892] syzkaller0: entered allmulticast mode [ 875.164182][T17867] lo speed is unknown, defaulting to 1000 [ 875.568115][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3448'. [ 876.279676][T17928] SELinux: policydb magic number 0x64697262 does not match expected magic number 0xf97cff8c [ 876.303296][T17928] SELinux: failed to load policy [ 876.316092][T16711] Bluetooth: hci4: command tx timeout [ 878.390841][T16711] Bluetooth: hci4: command tx timeout [ 879.297347][T17867] wlan0 speed is unknown, defaulting to 1000 [ 879.609452][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'. [ 879.916971][T17867] chnl_net:caif_netlink_parms(): no params data found [ 880.763279][T17867] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.792023][T17867] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.808772][T17867] bridge_slave_0: entered allmulticast mode [ 880.828798][T17867] bridge_slave_0: entered promiscuous mode [ 880.841813][T17867] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.858903][T17867] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.894255][T17966] block device autoloading is deprecated and will be removed. [ 880.915901][T17867] bridge_slave_1: entered allmulticast mode [ 880.940741][T17867] bridge_slave_1: entered promiscuous mode [ 881.090359][T17867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.105392][T17867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.269863][T17971] netlink: 'syz.6.3456': attribute type 4 has an invalid length. [ 881.344533][T17972] netlink: 'syz.6.3456': attribute type 4 has an invalid length. [ 881.497091][T17867] team0: Port device team_slave_0 added [ 881.506445][T17867] team0: Port device team_slave_1 added [ 881.565537][ T976] lo speed is unknown, defaulting to 1000 [ 881.859766][T11752] lo speed is unknown, defaulting to 1000 [ 881.865818][T17867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.875810][T17867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.065046][T17867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.083802][T17867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.091728][T17867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.124418][T17984] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3459'. [ 882.133491][T17867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.313573][T17989] lo speed is unknown, defaulting to 1000 [ 882.373642][T17867] hsr_slave_0: entered promiscuous mode [ 882.408313][T17867] hsr_slave_1: entered promiscuous mode [ 882.709892][ T976] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 882.900385][ T976] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 882.929291][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.985123][ T976] usb 5-1: Product: syz [ 883.001814][ T976] usb 5-1: Manufacturer: syz [ 883.025241][ T976] usb 5-1: SerialNumber: syz [ 883.125323][ T976] usb 5-1: config 0 descriptor?? [ 883.188949][ T976] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 883.198744][T17989] wlan0 speed is unknown, defaulting to 1000 [ 883.618365][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3469'. [ 883.664448][T18021] bridge5: entered promiscuous mode [ 883.801793][T17867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 883.851152][T17867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 883.872782][T17867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 883.909507][ T5868] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 884.088439][T18028] siw: device registration error -23 [ 884.535661][T17867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 884.559928][T18030] netlink: 'syz.2.3471': attribute type 4 has an invalid length. [ 884.603755][T18030] netlink: 'syz.2.3471': attribute type 4 has an invalid length. [ 884.691523][ T5868] usb 10-1: config 0 has an invalid interface number: 117 but max is 0 [ 884.774042][ T5868] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.827947][ T5868] usb 10-1: config 0 has no interface number 0 [ 884.874460][ T5868] usb 10-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 884.953749][ T5868] usb 10-1: config 0 interface 117 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 884.978182][T17867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.987678][ T5868] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 885.136607][T17867] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.163195][ T5868] usb 10-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 885.163691][ T7651] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.183565][ T7651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.197628][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3472'. [ 885.337965][ T7651] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.345072][ T7651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.396414][T17867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 885.407644][T17867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 885.433557][ T5868] usb 10-1: string descriptor 0 read error: -71 [ 885.479920][ T5868] usb 10-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 885.549258][T15585] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 885.556970][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.589748][ T5897] usb 5-1: USB disconnect, device number 49 [ 885.643028][ T5868] usb 10-1: config 0 descriptor?? [ 885.677975][ T5868] usb 10-1: can't set config #0, error -71 [ 885.711549][ T5868] usb 10-1: USB disconnect, device number 24 [ 885.739312][T15585] usb 3-1: Using ep0 maxpacket: 8 [ 885.778704][T15585] usb 3-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 885.801984][T15585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.930220][T15585] usb 3-1: Product: syz [ 885.934460][T15585] usb 3-1: Manufacturer: syz [ 885.939461][T15585] usb 3-1: SerialNumber: syz [ 885.945718][T15585] usb 3-1: config 0 descriptor?? [ 885.953456][T15585] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 886.493091][T15585] gspca_sonixj: reg_w1 err -110 [ 886.523322][T15585] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 886.576932][T17867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.976703][T17867] veth0_vlan: entered promiscuous mode [ 887.047952][T17867] veth1_vlan: entered promiscuous mode [ 887.133680][T17867] veth0_macvtap: entered promiscuous mode [ 887.147370][T17867] veth1_macvtap: entered promiscuous mode [ 887.156961][T17867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.200349][T17867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.241661][ T5897] usb 3-1: USB disconnect, device number 32 [ 887.317265][T17867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.359350][T17867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.431375][T17867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.489345][T17867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.603286][T17867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.652590][T17867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.750728][T17867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.768630][T17867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.784690][T17867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.800507][T17867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.819364][T17867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.845959][T17867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.877636][T17867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.909751][T17867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.920370][T17867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.930240][T17867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.949802][T17867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.959798][T17867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.970324][T17867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.001102][T17867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.011733][T18057] can0: slcan on ptm0. [ 888.015476][T18058] lo speed is unknown, defaulting to 1000 [ 888.072954][T17867] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.129425][T17867] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.249483][T18075] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 888.264460][T18075] Error validating options; rc = [-22] [ 888.675848][T17867] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.707854][T17867] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.079926][T18056] can0 (unregistered): slcan off ptm0. [ 889.194391][T18058] wlan0 speed is unknown, defaulting to 1000 [ 889.220573][ T7651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.228430][ T7651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.328515][T18088] sg_write: data in/out 1184723571/34 bytes for SCSI command 0x4d-- guessing data in; [ 889.328515][T18088] program syz.2.3484 not setting count and/or reply_len properly [ 889.637943][ T7647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.646071][ T5868] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 889.668104][ T7647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.853149][ T5868] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 889.871288][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.907281][ T5868] usb 10-1: Product: syz [ 889.919253][ T5868] usb 10-1: Manufacturer: syz [ 889.939389][ T5868] usb 10-1: SerialNumber: syz [ 889.950013][ T5868] usb 10-1: config 0 descriptor?? [ 890.411588][T18100] bad cache= option: no%e [ 890.411588][T18100] [ 890.418178][T18100] CIFS: VFS: bad cache= option: no%e [ 890.511517][T18087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.623756][T18087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.784937][ T5868] usb 10-1: Firmware: major: 52, minor: 32, hardware type: UNKNOWN (98) [ 890.849890][ T7647] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.989516][ T5868] usb 10-1: Read permanent extended address 00:00:00:00:00:78:00:00 from device [ 891.000971][ T5868] usb 10-1: atusb_probe: initialization failed, error = -524 [ 891.008572][ T5868] atusb 10-1:0.0: probe with driver atusb failed with error -524 [ 891.205659][ T5868] usb 10-1: USB disconnect, device number 25 [ 891.268413][ T7647] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.550835][ T7647] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.631823][ T7647] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.759640][ T7647] bridge_slave_1: left allmulticast mode [ 891.765318][ T7647] bridge_slave_1: left promiscuous mode [ 891.772038][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.836380][ T7647] bridge_slave_0: left allmulticast mode [ 891.842143][ T7647] bridge_slave_0: left promiscuous mode [ 891.847830][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.301982][ T30] audit: type=1400 audit(1741574838.431:1083): avc: denied { bind } for pid=18112 comm="syz.6.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 892.364868][ T30] audit: type=1400 audit(1741574838.481:1084): avc: denied { read } for pid=18112 comm="syz.6.3492" path="socket:[69058]" dev="sockfs" ino=69058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 892.593456][T18124] siw: device registration error -23 [ 892.953384][ T30] audit: type=1400 audit(1741574839.071:1085): avc: denied { recv } for pid=17 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.22 dest=47194 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 893.079215][T15585] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 893.137357][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 893.166580][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 893.178068][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 893.178591][T18131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.213779][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 893.237685][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 893.246888][T15585] usb 7-1: too many configurations: 254, using maximum allowed: 8 [ 893.257592][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 893.291866][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.304805][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.321027][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.331956][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.361509][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.373218][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.402413][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.413394][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.438114][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.449091][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.461063][ T7647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.465269][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.486376][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.486664][ T7647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.502843][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.515826][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.537181][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.550460][ T7647] bond0 (unregistering): Released all slaves [ 893.561400][T15585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.582078][T18113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.591016][T15845] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 893.603631][T18113] bond0: (slave rose0): Enslaving as an active interface with an up link [ 893.635994][T15585] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 893.645344][T15585] usb 7-1: New USB device strings: Mfr=81, Product=155, SerialNumber=118 [ 893.661593][T15585] usb 7-1: Product: syz [ 893.665773][T15585] usb 7-1: Manufacturer: syz [ 893.693551][T18128] lo speed is unknown, defaulting to 1000 [ 893.704521][T15585] usb 7-1: SerialNumber: syz [ 893.742214][T15585] usb 7-1: config 0 descriptor?? [ 893.803463][T15845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 893.844445][T15845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.884102][T15845] usb 3-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 893.901052][T15845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.904772][ T30] audit: type=1400 audit(1741574840.031:1086): avc: denied { ioctl } for pid=18136 comm="syz.4.3498" path="socket:[68604]" dev="sockfs" ino=68604 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 893.936744][T15845] usb 3-1: config 0 descriptor?? [ 894.132371][T18129] lo speed is unknown, defaulting to 1000 [ 894.138230][T18128] wlan0 speed is unknown, defaulting to 1000 [ 894.279263][T11752] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 894.318285][T15845] usbhid 3-1:0.0: can't add hid device: -71 [ 894.339664][T18129] wlan0 speed is unknown, defaulting to 1000 [ 894.339962][T15845] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 894.431120][T15845] usb 3-1: USB disconnect, device number 33 [ 894.440756][T11752] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.468909][T11752] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.535065][T11752] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 894.562828][T11752] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.577759][ T7647] hsr_slave_0: left promiscuous mode [ 894.588559][ T7647] hsr_slave_1: left promiscuous mode [ 894.600551][ T7647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.620471][ T7647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.631685][T11752] usb 10-1: config 0 descriptor?? [ 894.664514][ T7647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.676466][ T7647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.730880][ T7647] veth1_macvtap: left promiscuous mode [ 894.736496][ T7647] veth0_macvtap: left promiscuous mode [ 894.747453][ T7647] veth1_vlan: left promiscuous mode [ 894.755148][ T7647] veth0_vlan: left promiscuous mode [ 894.869562][ T976] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 895.016821][ T976] usb 5-1: device descriptor read/64, error -71 [ 895.143891][T18155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.162259][T18155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.400887][T18158] bad cache= option: no%e [ 895.400887][T18158] [ 895.407490][T18158] CIFS: VFS: bad cache= option: no%e [ 895.418893][T16711] Bluetooth: hci4: command tx timeout [ 895.832283][ T976] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 895.843807][T18160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.852418][T18160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.885521][T11752] hid (null): nested delimiters [ 895.897710][T15585] usbhid 7-1:0.0: can't add hid device: -71 [ 895.898294][T11752] hid-led 0003:27B8:01ED.001C: nested delimiters [ 895.920196][T15585] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 895.960104][T11752] hid-led 0003:27B8:01ED.001C: item 0 1 2 10 parsing failed [ 895.968087][T11752] hid-led 0003:27B8:01ED.001C: probe with driver hid-led failed with error -22 [ 895.975421][T15585] usb 7-1: USB disconnect, device number 45 [ 896.019525][ T976] usb 5-1: device descriptor read/64, error -71 [ 896.252222][ T976] usb usb5-port1: attempt power cycle [ 896.630174][ T976] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 896.664211][ T976] usb 5-1: device descriptor read/8, error -71 [ 896.889437][ T7647] team0 (unregistering): Port device team_slave_1 removed [ 896.910438][ T976] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 896.945215][ T976] usb 5-1: device descriptor read/8, error -71 [ 897.037807][ T7647] team0 (unregistering): Port device team_slave_0 removed [ 897.081106][ T976] usb usb5-port1: unable to enumerate USB device [ 897.429278][T16711] Bluetooth: hci4: command tx timeout [ 897.798320][ T30] audit: type=1400 audit(1741574843.911:1087): avc: denied { read append } for pid=18173 comm="syz.6.3507" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 897.883016][ T30] audit: type=1400 audit(1741574843.911:1088): avc: denied { open } for pid=18173 comm="syz.6.3507" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 897.921841][ T30] audit: type=1400 audit(1741574843.921:1089): avc: denied { map } for pid=18173 comm="syz.6.3507" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 898.026163][ T30] audit: type=1400 audit(1741574843.921:1090): avc: denied { write execute } for pid=18173 comm="syz.6.3507" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 898.600435][ T976] usb 10-1: USB disconnect, device number 26 [ 898.712108][T18129] chnl_net:caif_netlink_parms(): no params data found [ 899.003547][T18197] siw: device registration error -23 [ 899.539835][T16711] Bluetooth: hci4: command tx timeout [ 899.637672][T18199] sg_write: data in/out 1184723571/34 bytes for SCSI command 0x4d-- guessing data in; [ 899.637672][T18199] program syz.4.3511 not setting count and/or reply_len properly [ 899.806836][T18129] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.824217][T18129] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.867167][T18129] bridge_slave_0: entered allmulticast mode [ 899.896358][T18129] bridge_slave_0: entered promiscuous mode [ 900.152699][T18203] sg_write: data in/out 1184723571/34 bytes for SCSI command 0x4d-- guessing data in; [ 900.152699][T18203] program syz.6.3512 not setting count and/or reply_len properly [ 900.282433][T18129] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.325009][T18129] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.351877][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3513'. [ 900.378176][T18129] bridge_slave_1: entered allmulticast mode [ 900.440467][T18129] bridge_slave_1: entered promiscuous mode [ 900.524173][T18129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.544862][T18129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.778142][ T30] audit: type=1400 audit(1741574846.891:1091): avc: denied { create } for pid=18211 comm="syz.9.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 900.825211][T18129] team0: Port device team_slave_0 added [ 900.886530][ T30] audit: type=1400 audit(1741574846.981:1092): avc: denied { setopt } for pid=18211 comm="syz.9.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 900.912555][T18129] team0: Port device team_slave_1 added [ 901.070050][T18218] kvm: vcpu 0: requested 228 ns lapic timer period limited to 200000 ns [ 901.114961][T18218] wg1: entered promiscuous mode [ 901.158282][T18129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.171840][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.199392][ T5869] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 901.263614][T18129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.283136][T18129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.290237][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.360618][ T5869] usb 7-1: Using ep0 maxpacket: 16 [ 901.376542][ T5869] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.394007][T18129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.462050][ T30] audit: type=1400 audit(1741574847.581:1093): avc: denied { write } for pid=18219 comm="syz.4.3518" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 901.573265][ T5869] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.589613][T16711] Bluetooth: hci4: command tx timeout [ 901.650462][ T5869] usb 7-1: config 0 interface 0 has no altsetting 0 [ 901.657333][ T5869] usb 7-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 901.668430][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.697744][ T5869] usb 7-1: config 0 descriptor?? [ 901.809851][ T30] audit: type=1400 audit(1741574847.701:1094): avc: denied { ioctl } for pid=18219 comm="syz.4.3518" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 901.879543][T18129] hsr_slave_0: entered promiscuous mode [ 901.969081][T18129] hsr_slave_1: entered promiscuous mode [ 902.273951][ T30] audit: type=1400 audit(1741574847.881:1095): avc: denied { egress } for pid=18219 comm="syz.4.3518" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 902.352962][T18224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3516'. [ 902.370762][T18221] lo speed is unknown, defaulting to 1000 [ 902.446091][ T30] audit: type=1400 audit(1741574847.881:1096): avc: denied { sendto } for pid=18219 comm="syz.4.3518" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 902.583326][ T5869] usbhid 7-1:0.0: can't add hid device: -71 [ 902.602114][ T5869] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 902.659287][ T5869] usb 7-1: USB disconnect, device number 46 [ 902.885794][T18221] wlan0 speed is unknown, defaulting to 1000 [ 902.956492][ T30] audit: type=1400 audit(1741574849.081:1097): avc: denied { read write } for pid=18225 comm="syz.2.3519" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 903.050524][ T30] audit: type=1400 audit(1741574849.081:1098): avc: denied { open } for pid=18225 comm="syz.2.3519" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 903.131059][T18230] veth0_vlan: entered allmulticast mode [ 903.171086][ T30] audit: type=1400 audit(1741574849.081:1099): avc: denied { ioctl } for pid=18225 comm="syz.2.3519" path="/dev/video1" dev="devtmpfs" ino=931 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 903.351055][ T30] audit: type=1400 audit(1741574849.471:1100): avc: denied { read } for pid=18236 comm="syz.9.3520" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 903.455233][T18241] netlink: 'syz.9.3520': attribute type 4 has an invalid length. [ 903.468689][T18241] netlink: 'syz.9.3520': attribute type 4 has an invalid length. [ 903.735654][ T30] audit: type=1400 audit(1741574849.471:1101): avc: denied { open } for pid=18236 comm="syz.9.3520" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 903.861332][ T30] audit: type=1400 audit(1741574849.581:1102): avc: denied { ioctl } for pid=18236 comm="syz.9.3520" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 904.713860][T18129] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 905.429216][T18129] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 906.163186][T18256] sg_write: data in/out 1184723571/34 bytes for SCSI command 0x4d-- guessing data in; [ 906.163186][T18256] program syz.6.3525 not setting count and/or reply_len properly [ 906.321263][T18129] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 906.585587][T18129] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 907.559297][ T30] audit: type=1400 audit(1741574853.631:1103): avc: denied { ioctl } for pid=18270 comm="syz.6.3529" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 907.761508][T18129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.813592][T18129] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.842223][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.849330][ T7672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.903368][T18129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 907.936140][T18129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 907.982727][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.989836][ T7672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.010353][ T976] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 908.190949][ T976] usb 7-1: Using ep0 maxpacket: 8 [ 908.353971][ T976] usb 7-1: config 0 has an invalid interface number: 240 but max is 0 [ 908.392882][ T976] usb 7-1: config 0 has no interface number 0 [ 908.469410][ T976] usb 7-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=a3.31 [ 908.508902][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.539593][ T976] usb 7-1: Product: syz [ 908.543791][ T976] usb 7-1: Manufacturer: syz [ 908.548386][ T976] usb 7-1: SerialNumber: syz [ 908.591588][ T976] usb 7-1: config 0 descriptor?? [ 908.615380][ T976] kl5kusb105 7-1:0.240: KL5KUSB105D / PalmConnect converter detected [ 908.665438][ T976] usb 7-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 908.698432][T18129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.778756][T18298] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3536'. [ 908.903679][T18129] veth0_vlan: entered promiscuous mode [ 909.449666][T18129] veth1_vlan: entered promiscuous mode [ 909.524426][T18129] veth0_macvtap: entered promiscuous mode [ 909.565304][T18129] veth1_macvtap: entered promiscuous mode [ 909.571964][ T976] usb 7-1: USB disconnect, device number 47 [ 909.674466][ T976] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 909.677130][T18129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.722539][T18129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.732866][ T976] kl5kusb105 7-1:0.240: device disconnected [ 909.753307][T18129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.790079][T18129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.833419][T18129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.849220][T18129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.870167][T18129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.888814][T18129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.909038][T18129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.929798][T18129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.947644][T18129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.018047][T18129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.039647][T18129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.058516][T18129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.076295][T18129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.115376][T18129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.149865][T18129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.160390][T18129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.180556][T18129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.199564][T18129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.213496][T18129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.383994][T18129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.430849][T18129] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.501409][T18129] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.779059][T18129] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.809274][T18129] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.473880][ T7672] bond0: (slave bond_slave_0): interface is now down [ 912.077794][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3545'. [ 912.109341][ T7672] bond0: (slave bond_slave_1): interface is now down [ 912.128464][ T7672] bond0: (slave netdevsim0): interface is now down [ 912.202809][ T7672] bond0: now running without any active interface! [ 912.235208][ T7672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.331222][T18345] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3550'. [ 912.414128][ T7672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.493795][ T30] audit: type=1400 audit(1741574858.611:1104): avc: denied { setopt } for pid=18349 comm="syz.9.3551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 912.579248][ T933] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 912.591715][ T7662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.609694][ T7662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.763689][ T933] usb 5-1: Using ep0 maxpacket: 16 [ 912.789437][ T52] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 912.801155][ T933] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 912.870923][ T933] usb 5-1: config 0 has no interface number 0 [ 912.924535][ T933] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 912.956302][ T933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.964642][ T933] usb 5-1: Product: syz [ 912.979888][ T933] usb 5-1: Manufacturer: syz [ 912.980128][ T52] usb 10-1: Using ep0 maxpacket: 16 [ 912.984513][ T933] usb 5-1: SerialNumber: syz [ 913.005321][ T933] usb 5-1: config 0 descriptor?? [ 913.054410][T18360] Bluetooth: MGMT ver 1.23 [ 913.106623][ T52] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 913.171119][ T933] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 913.190584][ T52] usb 10-1: config 0 has no interface number 0 [ 913.259635][ T52] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 913.314651][ T52] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 913.338675][ T52] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 913.371752][T18352] dlm: no local IP address has been set [ 913.377654][T18352] dlm: cannot start dlm midcomms -107 [ 913.387814][ T52] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 913.412510][ T52] usb 10-1: Product: syz [ 913.425539][ T52] usb 10-1: SerialNumber: syz [ 913.453521][ T52] usb 10-1: config 0 descriptor?? [ 913.490417][ T7651] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.502661][ T52] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 913.543148][ T52] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input56 [ 913.700623][ T7651] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.800780][ T7651] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.206054][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 914.206339][T11752] usb 10-1: USB disconnect, device number 27 [ 914.213104][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 914.256879][T11752] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 914.290656][ T7651] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.491574][ T7651] bridge_slave_1: left allmulticast mode [ 914.500376][ T7651] bridge_slave_1: left promiscuous mode [ 914.506249][ T7651] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.515855][ T7651] bridge_slave_0: left allmulticast mode [ 914.522354][ T7651] bridge_slave_0: left promiscuous mode [ 914.528070][ T7651] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.129978][T11752] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 915.147575][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 915.167222][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 915.176533][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 915.196865][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 915.207559][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 915.219980][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 915.379591][T11752] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 915.416299][T11752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.436746][T18346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.439557][T11752] usb 3-1: Product: syz [ 915.445284][T18346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.614701][ T30] audit: type=1400 audit(1741574861.741:1105): avc: denied { write } for pid=18366 comm="syz.9.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 915.743898][ T933] gspca_spca1528: reg_r err -71 [ 915.748827][ T933] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 915.749876][T18377] SELinux: policydb magic number 0x64697262 does not match expected magic number 0xf97cff8c [ 915.768156][T11752] usb 3-1: Manufacturer: syz [ 915.776940][ T933] usb 5-1: USB disconnect, device number 54 [ 915.783427][T11752] usb 3-1: SerialNumber: syz [ 915.811067][T11752] usb 3-1: config 0 descriptor?? [ 915.838694][T18377] SELinux: failed to load policy [ 916.051486][T18369] netlink: 'syz.2.3556': attribute type 4 has an invalid length. [ 917.280743][ T5832] Bluetooth: hci4: command tx timeout [ 917.301454][ T7651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.330664][ T7651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.356552][ T7651] bond0 (unregistering): Released all slaves [ 917.461060][ T52] usb 3-1: USB disconnect, device number 34 [ 917.495300][T18374] lo speed is unknown, defaulting to 1000 [ 917.900595][T18374] wlan0 speed is unknown, defaulting to 1000 [ 918.573105][T18404] netlink: 'syz.9.3563': attribute type 4 has an invalid length. [ 919.122204][T18417] bad cache= option: no%e [ 919.122204][T18417] [ 919.128793][T18417] CIFS: VFS: bad cache= option: no%e [ 919.611798][ T5832] Bluetooth: hci4: command tx timeout [ 919.725964][T15585] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 919.971376][T18374] chnl_net:caif_netlink_parms(): no params data found [ 920.165807][T15585] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.196269][T15585] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.209250][T15585] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 920.222316][T15585] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 920.231684][T15585] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.293474][T15585] usb 10-1: config 0 descriptor?? [ 920.445757][ T7651] hsr_slave_0: left promiscuous mode [ 920.455803][ T7651] hsr_slave_1: left promiscuous mode [ 920.461565][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.469577][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.478161][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.485732][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.576221][ T7651] veth1_macvtap: left promiscuous mode [ 920.605421][ T7651] veth0_macvtap: left promiscuous mode [ 920.619320][ T7651] veth1_vlan: left promiscuous mode [ 920.634790][ T7651] veth0_vlan: left promiscuous mode [ 920.724094][T15585] plantronics 0003:047F:FFFF.001D: unknown main item tag 0xd [ 920.762538][T15585] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 920.777167][T18423] dlm: no local IP address has been set [ 920.795971][T18423] dlm: cannot start dlm midcomms -107 [ 920.803502][T15585] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 920.854540][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3570'. [ 920.881075][T18439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3570'. [ 920.890197][ T30] audit: type=1400 audit(1741574867.011:1106): avc: denied { getopt } for pid=18440 comm="syz.2.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 920.941447][ T30] audit: type=1400 audit(1741574867.041:1107): avc: denied { shutdown } for pid=18440 comm="syz.2.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 921.054021][T18406] netlink: 'syz.9.3563': attribute type 4 has an invalid length. [ 921.299330][T15585] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 921.759112][T16711] Bluetooth: hci4: command tx timeout [ 921.992803][T15585] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 922.016440][T15585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.050576][T15585] usb 3-1: Product: syz [ 922.075315][T15585] usb 3-1: Manufacturer: syz [ 922.080035][T15585] usb 3-1: SerialNumber: syz [ 922.098094][T15585] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 922.107020][ T5867] usb 10-1: reset high-speed USB device number 28 using dummy_hcd [ 922.127305][ T52] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 922.160928][T16711] Bluetooth: hci0: command 0x0406 tx timeout [ 922.168553][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 922.397368][ T5867] usb 10-1: device descriptor read/64, error -32 [ 922.571748][ T976] usb 3-1: USB disconnect, device number 35 [ 922.661486][ T5867] usb 10-1: reset high-speed USB device number 28 using dummy_hcd [ 922.841357][ T5867] usb 10-1: device descriptor read/64, error -32 [ 922.931838][ T7651] team0 (unregistering): Port device team_slave_1 removed [ 923.094821][ T7651] team0 (unregistering): Port device team_slave_0 removed [ 923.110448][ T5867] usb 10-1: reset high-speed USB device number 28 using dummy_hcd [ 923.186782][ T5867] usb 10-1: device descriptor read/8, error -32 [ 923.369113][ T52] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 923.376448][ T52] ath9k_htc: Failed to initialize the device [ 923.468057][ T976] usb 3-1: ath9k_htc: USB layer deinitialized [ 924.270358][ T5832] Bluetooth: hci4: command tx timeout [ 924.339069][ T5867] usb 10-1: reset high-speed USB device number 28 using dummy_hcd [ 924.347074][ T30] audit: type=1400 audit(1741574870.461:1108): avc: denied { write } for pid=18454 comm="syz.6.3574" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 924.401135][ T5867] usb 10-1: device descriptor read/8, error -32 [ 924.432284][T18463] bad cache= option: no%e [ 924.432284][T18463] [ 924.438811][T18463] CIFS: VFS: bad cache= option: no%e [ 924.551851][ T5867] raw-gadget.0 gadget.9: failed to queue suspend event [ 924.574152][ T5869] usb 10-1: USB disconnect, device number 28 [ 924.621873][ T5869] raw-gadget.0 gadget.9: failed to queue reset event [ 924.735877][ T5869] raw-gadget.0 gadget.9: failed to queue resume event [ 924.819849][ T5869] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 924.827866][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 924.840210][ T5869] raw-gadget.0 gadget.9: failed to queue reset event [ 924.920360][ T5869] raw-gadget.0 gadget.9: failed to queue resume event [ 924.987301][ T5869] usb 10-1: device descriptor read/64, error -32 [ 925.114104][ T5869] raw-gadget.0 gadget.9: failed to queue suspend event [ 925.124526][ T5869] raw-gadget.0 gadget.9: failed to queue reset event [ 925.206118][ T5869] raw-gadget.0 gadget.9: failed to queue resume event [ 925.287645][ T5869] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 925.295590][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 925.303053][ T5869] raw-gadget.0 gadget.9: failed to queue reset event [ 925.383854][ T5869] raw-gadget.0 gadget.9: failed to queue resume event [ 925.430768][T18374] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.438213][T18374] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.449501][ T5869] usb 10-1: device descriptor read/64, error -32 [ 925.456049][T18374] bridge_slave_0: entered allmulticast mode [ 925.470483][T18374] bridge_slave_0: entered promiscuous mode [ 925.496989][T18374] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.506780][T18374] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.514131][T18374] bridge_slave_1: entered allmulticast mode [ 925.530664][T18374] bridge_slave_1: entered promiscuous mode [ 925.579218][ T5869] raw-gadget.0 gadget.9: failed to queue suspend event [ 925.613579][ T5869] usb usb10-port1: attempt power cycle [ 925.626602][T18467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3577'. [ 925.642970][ T5869] raw-gadget.0 gadget.9: failed to queue disconnect event [ 925.652583][T18444] raw-gadget.0 gadget.9: failed to queue disconnect event [ 925.663102][T18374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.747125][T18374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.896369][T18471] sg_write: data in/out 1184723571/34 bytes for SCSI command 0x4d-- guessing data in; [ 925.896369][T18471] program syz.6.3579 not setting count and/or reply_len properly [ 926.102076][T18374] team0: Port device team_slave_0 added [ 926.288995][T18374] team0: Port device team_slave_1 added [ 926.401572][ T5869] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 926.416019][T18474] PKCS7: Unknown OID: [4] 0.38.11253.7578(bad) [ 926.434525][T18474] PKCS7: Only support pkcs7_signedData type [ 926.435263][ T5869] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 926.462830][ T5869] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.523136][ T5869] usb 10-1: Product: syz [ 926.523865][T18374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.536988][ T5869] usb 10-1: Manufacturer: syz [ 926.546009][ T5869] usb 10-1: SerialNumber: syz [ 926.576450][ T5869] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 926.599062][ T5867] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 926.689189][T18374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.792461][T18374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.813624][T18374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.840816][T18374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.919984][T18374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.062638][ T5869] usb 10-1: USB disconnect, device number 31 [ 927.211236][T18483] siw: device registration error -23 [ 927.448783][T18374] hsr_slave_0: entered promiscuous mode [ 927.574452][T18374] hsr_slave_1: entered promiscuous mode [ 927.832816][ T5867] usb 10-1: Service connection timeout for: 256 [ 927.839221][ T5867] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 927.851936][T18486] bad cache= option: no%e [ 927.851936][T18486] [ 927.858479][T18486] CIFS: VFS: bad cache= option: no%e [ 927.876530][ T5867] ath9k_htc: Failed to initialize the device [ 927.898767][ T5869] usb 10-1: ath9k_htc: USB layer deinitialized [ 928.019223][T15585] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 928.161953][T15585] usb 7-1: device descriptor read/64, error -71 [ 928.420964][T18374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 928.439636][T15585] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 928.451633][T18374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 928.484331][T18374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 928.516478][T18374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 928.822115][T18502] bad cache= option: no%e [ 928.822115][T18502] [ 928.828680][T18502] CIFS: VFS: bad cache= option: no%e [ 929.103172][T15585] usb 7-1: device descriptor read/64, error -71 [ 929.134740][T18374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.152860][T18374] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.181584][ T7661] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.190473][ T7661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.209698][ T7661] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.216768][ T7661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.234385][T15585] usb usb7-port1: attempt power cycle [ 929.529267][T18511] netlink: 'syz.4.3591': attribute type 4 has an invalid length. [ 929.589718][T15585] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 929.610993][T15585] usb 7-1: device descriptor read/8, error -71 [ 929.619758][ T976] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 929.633853][T18511] netlink: 'syz.4.3591': attribute type 4 has an invalid length. [ 929.958405][ T976] usb 3-1: config 0 has an invalid interface number: 187 but max is 0 [ 929.967072][ T976] usb 3-1: config 0 has no interface number 0 [ 930.002247][ T976] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 930.014503][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.159443][T15585] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 930.185960][T15585] usb 7-1: device descriptor read/8, error -71 [ 930.220057][ T976] usb 3-1: Product: syz [ 930.235534][ T976] usb 3-1: Manufacturer: syz [ 930.250470][ T976] usb 3-1: SerialNumber: syz [ 930.276306][ T976] usb 3-1: config 0 descriptor?? [ 930.289070][ T976] peak_usb 3-1:0.187 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 930.324240][ T976] peak_usb 3-1:0.187: unable to read PCAN-USB serial number (err -22) [ 930.481863][T15585] usb usb7-port1: unable to enumerate USB device [ 930.634663][T18523] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 930.694212][T18523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3594'. [ 930.704286][T18523] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 931.022785][ T976] peak_usb 3-1:0.187: probe with driver peak_usb failed with error -22 [ 931.053107][T18374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.074271][ T976] usb 3-1: USB disconnect, device number 36 [ 931.193874][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.200323][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.225178][T18374] veth0_vlan: entered promiscuous mode [ 931.315318][T18374] veth1_vlan: entered promiscuous mode [ 931.451672][T18374] veth0_macvtap: entered promiscuous mode [ 931.501627][T18374] veth1_macvtap: entered promiscuous mode [ 931.508932][ T30] audit: type=1400 audit(1741574877.631:1109): avc: denied { bind } for pid=18532 comm="syz.4.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 931.724334][T18534] 8021q: VLANs not supported on tunl0 [ 931.748074][T18374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.768591][T18374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.781476][T18541] bad cache= option: no%e [ 931.781476][T18541] [ 931.788009][T18541] CIFS: VFS: bad cache= option: no%e [ 932.007655][T18374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.018226][T18374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.032413][T18374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.044091][T18374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.065536][T18374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.332993][T18374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.342956][T18374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.379019][T18374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.430340][T18374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.550922][T18374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.832164][T18374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.957854][T18374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.450777][ T5832] Bluetooth: hci4: command tx timeout [ 933.700325][T18374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.710759][T18374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.721936][T18374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.731862][T18374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.750140][T18374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.807094][T18374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.820994][T18374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.845749][T18374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.872428][T18374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.917867][T18374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.949181][T18374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.957931][T18374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.048340][ T7658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.071031][ T7658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.132052][ T7658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.155192][ T7658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.241759][T15845] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 934.938959][T18572] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3608'. [ 935.004705][T18572] netlink: 'syz.9.3608': attribute type 4 has an invalid length. [ 935.239261][T15845] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 935.270688][T15845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.315316][T15845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.332293][T15845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 935.392080][T15845] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 935.450879][T15845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.471966][T15845] usb 5-1: config 0 descriptor?? [ 935.492440][T15845] usb 5-1: can't set config #0, error -71 [ 935.519437][T15845] usb 5-1: USB disconnect, device number 55 [ 935.764872][T18587] lo speed is unknown, defaulting to 1000 [ 935.834538][T18592] sg_write: data in/out 1184723571/34 bytes for SCSI command 0x4d-- guessing data in; [ 935.834538][T18592] program syz.9.3617 not setting count and/or reply_len properly [ 936.293703][T15845] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 936.364841][ T7672] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.436730][T18596] netlink: 'syz.6.3616': attribute type 4 has an invalid length. [ 936.530610][T15845] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.589213][T15845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 936.637222][T15845] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 936.649448][T15845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 936.692396][T15845] usb 3-1: SerialNumber: syz [ 936.694856][ T7672] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.741163][T18587] wlan0 speed is unknown, defaulting to 1000 [ 936.842319][ T7672] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.954533][ T7672] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.974011][T15845] usb 3-1: 0:2 : does not exist [ 937.000222][T15845] usb 3-1: USB disconnect, device number 37 [ 937.178670][ T7672] bridge_slave_1: left allmulticast mode [ 937.184793][ T7672] bridge_slave_1: left promiscuous mode [ 937.199519][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.211449][T18107] udevd[18107]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 937.228807][ T7672] bridge_slave_0: left allmulticast mode [ 937.236014][ T7672] bridge_slave_0: left promiscuous mode [ 937.242762][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.793201][ T7672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.807642][ T7672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.821687][ T7672] bond0 (unregistering): Released all slaves [ 939.643665][T16711] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 939.658623][T16711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 939.668205][T16711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 939.676650][ T7672] hsr_slave_0: left promiscuous mode [ 939.689249][T16711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 939.707293][T16711] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 939.714774][T16711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 939.757992][ T7672] hsr_slave_1: left promiscuous mode [ 939.799983][ T7672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.807415][ T7672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.857487][ T7672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.859809][ T30] audit: type=1326 audit(1741574885.981:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18635 comm="syz.6.3627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca84d8d169 code=0x0 [ 939.885227][ T7672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.994533][ T7672] veth1_macvtap: left promiscuous mode [ 940.025406][ T7672] veth0_macvtap: left promiscuous mode [ 940.046283][ T7672] veth1_vlan: left promiscuous mode [ 940.062444][ T7672] veth0_vlan: left promiscuous mode [ 941.293028][T18650] sg_write: data in/out 1184723571/34 bytes for SCSI command 0x4d-- guessing data in; [ 941.293028][T18650] program syz.6.3631 not setting count and/or reply_len properly [ 941.751713][T16711] Bluetooth: hci4: command tx timeout [ 942.079034][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3632'. [ 942.342521][ T933] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 942.974180][ T7672] team0 (unregistering): Port device team_slave_1 removed [ 943.000856][ T933] usb 5-1: Using ep0 maxpacket: 32 [ 943.010684][ T933] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 943.029433][ T933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.060511][ T933] usb 5-1: config 0 descriptor?? [ 943.073244][ T7672] team0 (unregistering): Port device team_slave_0 removed [ 943.484602][ T933] wacom 0003:056A:0045.001E: Unknown device_type for 'HID 056a:0045'. Assuming pen. [ 943.520492][ T933] wacom 0003:056A:0045.001E: hidraw0: USB HID v0.00 Device [HID 056a:0045] on usb-dummy_hcd.4-1/input0 [ 943.546671][ T933] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0045.001E/input/input57 [ 943.831135][T16711] Bluetooth: hci4: command tx timeout [ 944.234158][T18632] lo speed is unknown, defaulting to 1000 [ 944.234174][T18667] sp0: Synchronizing with TNC [ 944.255351][ T5869] usb 5-1: USB disconnect, device number 56 [ 944.279102][T18667] [U] è [ 944.448462][T18632] wlan0 speed is unknown, defaulting to 1000 [ 944.475610][ T5867] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 944.611607][ T933] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 944.655340][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 944.685918][ T5867] usb 7-1: unable to get BOS descriptor or descriptor too short [ 944.705908][ T5867] usb 7-1: config 255 has an invalid interface number: 81 but max is 0 [ 944.721131][ T5867] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 944.740290][ T5867] usb 7-1: config 255 has no interface number 0 [ 944.746684][ T5867] usb 7-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 944.760017][ T933] usb 3-1: device descriptor read/64, error -71 [ 944.778808][ T5867] usb 7-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 944.794751][T18632] chnl_net:caif_netlink_parms(): no params data found [ 944.799164][ T5867] usb 7-1: config 255 interface 81 has no altsetting 0 [ 944.820877][ T5867] usb 7-1: string descriptor 0 read error: -22 [ 944.827234][ T5867] usb 7-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 944.843704][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.994563][ T5867] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:255.81/input/input60 [ 945.090676][T18693] bad cache= option: no%e [ 945.090676][T18693] [ 945.097233][T18693] CIFS: VFS: bad cache= option: no%e [ 945.106538][ T933] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 945.224050][T18632] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.240452][ T933] usb 3-1: device descriptor read/64, error -71 [ 945.300150][T18632] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.343506][T18632] bridge_slave_0: entered allmulticast mode [ 945.399495][T18632] bridge_slave_0: entered promiscuous mode [ 945.430004][ T933] usb usb3-port1: attempt power cycle [ 945.451381][T18632] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.472607][T18632] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.500169][ T5867] usb 7-1: USB disconnect, device number 52 [ 945.514715][T18632] bridge_slave_1: entered allmulticast mode [ 945.536020][T18632] bridge_slave_1: entered promiscuous mode [ 945.599337][ T52] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 945.777326][T18632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.799246][ T933] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 945.830662][T18632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.840348][ T933] usb 3-1: device descriptor read/8, error -71 [ 945.849602][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 945.862546][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.881594][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.900721][ T52] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 945.913642][T16711] Bluetooth: hci4: command tx timeout [ 945.940632][ T52] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 945.949758][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.959383][ T52] usb 5-1: config 0 descriptor?? [ 945.965906][T18632] team0: Port device team_slave_0 added [ 945.992700][T18632] team0: Port device team_slave_1 added [ 946.064527][ T5867] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 946.099915][ T933] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 946.117476][T18632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.125439][T18632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.170608][ T933] usb 3-1: device descriptor read/8, error -71 [ 946.176829][T18632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.189014][T18632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.196017][T18632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.226516][ T7672] Bluetooth: hci6: Frame reassembly failed (-84) [ 946.233204][T18632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.259565][ T5867] usb 10-1: Using ep0 maxpacket: 8 [ 946.280198][ T933] usb usb3-port1: unable to enumerate USB device [ 946.289509][ T5867] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.310218][ T5867] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 946.349526][ T5867] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.386791][ T52] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.001F/input/input61 [ 946.407444][ T5867] usb 10-1: config 0 descriptor?? [ 946.426080][ T5867] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 946.464110][T18632] hsr_slave_0: entered promiscuous mode [ 946.480796][T18632] hsr_slave_1: entered promiscuous mode [ 946.498387][ T52] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.001F/input/input62 [ 946.543097][ T52] kye 0003:0458:5011.001F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 946.598004][ T52] usb 5-1: USB disconnect, device number 57 [ 946.722595][ T5867] gspca_vc032x: reg_r err -71 [ 946.727349][ T5867] vc032x 10-1:0.0: probe with driver vc032x failed with error -71 [ 946.785878][ T5867] usb 10-1: USB disconnect, device number 32 [ 947.210841][T18632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 947.256606][T18632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 947.277505][T18632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 947.291481][T18706] could not open pipe file descriptor [ 947.297196][T18707] could not open pipe file descriptor [ 947.307782][T18632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 947.424104][T18632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.514578][T18632] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.514981][T18710] SET target dimension over the limit! [ 947.602545][ T7661] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.609805][ T7661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.795797][ T7651] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.802995][ T7651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.992940][T17399] Bluetooth: hci4: command tx timeout [ 948.134488][T18721] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3651'. [ 948.230199][T17399] Bluetooth: hci6: command 0x1003 tx timeout [ 948.236903][T16711] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 948.418152][T18632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.480580][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3655'. [ 948.517481][T18632] veth0_vlan: entered promiscuous mode [ 948.537046][T18632] veth1_vlan: entered promiscuous mode [ 948.603350][T18632] veth0_macvtap: entered promiscuous mode [ 948.629629][T16711] Bluetooth: hci1: command 0x0406 tx timeout [ 948.643298][T18632] veth1_macvtap: entered promiscuous mode [ 948.688024][T18632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.699887][T18632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.726941][T18632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.742707][T18632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.753421][T18632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.764090][T18632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.774632][T18632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.785258][T18632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.795627][T18632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.839659][T18632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.875931][T18632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.913219][T18632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.930571][T18742] input: syz1 as /devices/virtual/input/input63 [ 948.960251][ T933] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 948.968254][ T30] audit: type=1400 audit(1741574895.071:1111): avc: denied { connect } for pid=18738 comm="syz.4.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 949.003065][T18632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.028007][ T30] audit: type=1400 audit(1741574895.081:1112): avc: denied { write } for pid=18738 comm="syz.4.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 949.058946][T18632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.085341][T18632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.107413][T18632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.136301][T18632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.150203][ T933] usb 7-1: Using ep0 maxpacket: 8 [ 949.168047][T18632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.191923][ T933] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 949.208652][T18632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.220946][ T933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.253276][ T933] usb 7-1: Product: syz [ 949.257553][T18632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.276343][ T933] usb 7-1: Manufacturer: syz [ 949.294623][ T933] usb 7-1: SerialNumber: syz [ 949.300367][T18632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.328548][T18632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.340770][ T933] usb 7-1: config 0 descriptor?? [ 949.884571][ T30] audit: type=1400 audit(1741574896.001:1113): avc: denied { recv } for pid=18749 comm="syz.2.3660" saddr=10.128.0.169 src=41800 daddr=10.128.0.22 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 949.889292][ T933] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 949.922110][T18632] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.941313][T18632] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.970421][T18632] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.982279][T18632] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.114861][ T30] audit: type=1400 audit(1741574896.241:1114): avc: denied { prog_load } for pid=18753 comm="syz.4.3661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 950.391400][ T30] audit: type=1400 audit(1741574896.301:1115): avc: denied { map_create } for pid=18753 comm="syz.4.3661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 950.475780][ T30] audit: type=1400 audit(1741574896.301:1116): avc: denied { map_read map_write } for pid=18753 comm="syz.4.3661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 950.622595][ T30] audit: type=1400 audit(1741574896.321:1117): avc: denied { egress } for pid=7662 comm="kworker/u8:52" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 950.626061][T18765] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3663'. [ 950.676854][ T7656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.691766][ T7656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.724161][ T7656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.732785][ T7656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.264720][ T30] audit: type=1400 audit(1741574897.301:1118): avc: denied { getopt } for pid=18772 comm="syz.9.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 951.284499][ T933] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 951.302274][ T933] usb 7-1: USB disconnect, device number 53 [ 951.346779][T18782] netlink: 'syz.2.3668': attribute type 4 has an invalid length. [ 951.556838][ T30] audit: type=1400 audit(1741574897.681:1119): avc: denied { prog_run } for pid=18780 comm="syz.4.3669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 951.697790][T18785] veth1_to_hsr: entered promiscuous mode [ 951.764840][ T30] audit: type=1400 audit(1741574897.881:1120): avc: denied { write } for pid=18783 comm="syz.4.3670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 951.788691][T18773] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 951.809971][T18773] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 951.867665][T18773] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 951.878196][T18773] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 951.910647][T18773] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 951.931562][T18773] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 952.290797][T18792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49132 sclass=netlink_route_socket pid=18792 comm=syz.6.3672 [ 952.943634][ T7656] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.045504][T18783] veth1_to_hsr: left promiscuous mode [ 953.222939][ T7656] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.344249][ T7656] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.470754][ T7656] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.589749][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 953.748301][ T7656] bridge_slave_1: left allmulticast mode [ 953.778591][ T7656] bridge_slave_1: left promiscuous mode [ 953.785604][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.821399][ T7656] bridge_slave_0: left allmulticast mode [ 953.827131][ T7656] bridge_slave_0: left promiscuous mode [ 953.883957][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.912230][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 953.937386][T18777] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 953.989577][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 955.289597][T16711] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 955.301373][T16711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 955.319989][T16711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 955.348380][T16711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 955.409656][T16711] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 955.422332][T16711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 955.573723][T18822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3680'. [ 955.588404][ T7656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.639757][ T7656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.670842][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 955.686201][ T7656] bond0 (unregistering): Released all slaves [ 955.748160][T18818] lo speed is unknown, defaulting to 1000 [ 955.930176][T18818] wlan0 speed is unknown, defaulting to 1000 [ 955.989170][T16711] Bluetooth: hci0: command 0x0406 tx timeout [ 956.070306][T16711] Bluetooth: hci1: command 0x0406 tx timeout [ 956.509634][T18818] chnl_net:caif_netlink_parms(): no params data found [ 956.740304][ T7656] hsr_slave_0: left promiscuous mode [ 956.765220][ T7656] hsr_slave_1: left promiscuous mode [ 956.778883][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.808848][ T7656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.859378][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.916827][ T7656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.256559][ T7656] veth1_macvtap: left promiscuous mode [ 957.291202][ T7656] veth0_macvtap: left promiscuous mode [ 957.296785][ T7656] veth1_vlan: left promiscuous mode [ 957.319046][ T7656] veth0_vlan: left promiscuous mode [ 957.697206][T18855] dlm: no local IP address has been set [ 957.715566][T18855] dlm: cannot start dlm midcomms -107 [ 957.750963][T16711] Bluetooth: hci4: command tx timeout [ 958.030254][T18865] siw: device registration error -23 [ 958.128175][T16711] Bluetooth: hci0: command 0x0406 tx timeout [ 958.900510][ T7656] team0 (unregistering): Port device team_slave_1 removed [ 958.966538][ T7656] team0 (unregistering): Port device team_slave_0 removed [ 959.829250][T16711] Bluetooth: hci4: command tx timeout [ 960.270393][T18818] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.420888][T18818] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.445725][T18818] bridge_slave_0: entered allmulticast mode [ 960.481318][T18818] bridge_slave_0: entered promiscuous mode [ 960.502872][T18818] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.520790][T18818] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.537385][T18818] bridge_slave_1: entered allmulticast mode [ 960.566690][T18818] bridge_slave_1: entered promiscuous mode [ 960.776999][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3696'. [ 960.959267][T15845] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 961.292378][ T30] audit: type=1400 audit(1741574907.421:1121): avc: denied { node_bind } for pid=18886 comm="syz.2.3699" saddr=ff01::1 src=19997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 961.293853][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3699'. [ 961.329644][T18818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.402916][T18818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.441909][T15845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.462940][T15845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.522871][T15845] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 961.525653][T18818] team0: Port device team_slave_0 added [ 961.574311][T15845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.582097][T18818] team0: Port device team_slave_1 added [ 961.623447][T15845] usb 5-1: config 0 descriptor?? [ 961.706248][T18818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.730438][ T5869] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 961.741960][T18818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.899392][ T5869] usb 7-1: Using ep0 maxpacket: 16 [ 961.911437][T16711] Bluetooth: hci4: command tx timeout [ 961.925504][ T5869] usb 7-1: config 0 has an invalid interface number: 68 but max is 0 [ 961.942999][T18818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.953817][ T5869] usb 7-1: config 0 has no interface number 0 [ 961.966922][ T5869] usb 7-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.998245][ T5869] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 962.037681][T18904] 8021q: VLANs not supported on vxcan1 [ 962.074262][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.123561][T18818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.146450][T18818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.189348][ T5869] usb 7-1: Product: syz [ 962.211014][ T5869] usb 7-1: Manufacturer: syz [ 962.231175][ T5869] usb 7-1: SerialNumber: syz [ 962.261188][T18818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.272485][ T5869] usb 7-1: config 0 descriptor?? [ 962.305695][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 962.314327][T15845] usbhid 5-1:0.0: can't add hid device: -71 [ 962.320371][T15845] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 962.360347][ T5869] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 962.417218][T15845] usb 5-1: USB disconnect, device number 58 [ 962.447671][T18818] hsr_slave_0: entered promiscuous mode [ 962.464859][T18818] hsr_slave_1: entered promiscuous mode [ 962.551491][T18896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.560086][T18896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.575174][ T7662] usb 7-1: Failed to submit usb control message: -71 [ 962.575731][ T5869] usb 7-1: USB disconnect, device number 54 [ 962.598144][ T7662] usb 7-1: unable to send the bmi data to the device: -71 [ 962.641643][ T7662] usb 7-1: unable to get target info from device [ 962.648008][ T7662] usb 7-1: could not get target info (-71) [ 962.657216][ T7662] usb 7-1: could not probe fw (-71) [ 962.811672][T16711] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 963.799257][ T933] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 964.006395][T16711] Bluetooth: hci4: command tx timeout [ 964.391580][ T933] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 964.406268][ T933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.416196][ T933] usb 3-1: config 0 descriptor?? [ 964.427887][ T933] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 964.479527][T11752] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 964.616778][T18818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 964.645164][T18818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 964.670110][T18818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 964.680028][T18818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 964.729540][ T933] gp8psk: usb in 128 operation failed. [ 964.744058][T11752] usb 5-1: unable to get BOS descriptor or descriptor too short [ 964.752615][T11752] usb 5-1: not running at top speed; connect to a high speed hub [ 964.761521][T11752] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.771800][T11752] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.797979][T11752] usb 5-1: New USB device found, idVendor=1d7a, idProduct=0101, bcdDevice= 0.40 [ 964.887067][T18818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.974215][ T933] gp8psk: FW Version = 48.28.159 (0x301c9f) Build 2206/163/118 [ 964.979428][T18818] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.982325][T15845] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 964.996271][T11752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.004485][T11752] usb 5-1: Product: syz [ 965.008694][T11752] usb 5-1: Manufacturer: syz [ 965.013550][T11752] usb 5-1: SerialNumber: syz [ 965.025175][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.032324][ T7656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.062397][ T7656] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.069522][ T7656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.179263][T15845] usb 7-1: Using ep0 maxpacket: 16 [ 965.200067][T15845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.292950][ T933] gp8psk: usb in 149 operation failed. [ 965.338947][ T933] gp8psk: failed to get FPGA version [ 965.477514][ T933] gp8psk: usb in 138 operation failed. [ 965.499764][T15845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.540066][ T933] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 965.557200][T18818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 965.590805][T15845] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 965.609322][ T933] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 965.620080][T18818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 965.640254][T15845] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 965.659024][ T933] usb 3-1: USB disconnect, device number 42 [ 965.666582][T15845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.776214][T15845] usb 7-1: config 0 descriptor?? [ 966.042692][T15845] HID 045e:07da: Invalid code 65791 type 1 [ 966.048740][T18818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.110141][T15845] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0020/input/input64 [ 966.141415][T15845] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 966.180020][T18818] veth0_vlan: entered promiscuous mode [ 966.225432][T18818] veth1_vlan: entered promiscuous mode [ 966.242753][T18943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.251541][T18943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.330907][T15845] usb 7-1: USB disconnect, device number 55 [ 966.330921][T18818] veth0_macvtap: entered promiscuous mode [ 966.360574][T18818] veth1_macvtap: entered promiscuous mode [ 966.387310][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.409382][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.436192][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.460623][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.489642][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.519152][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.549904][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.597307][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.654898][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.729286][ T975] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 966.738570][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.822989][T18818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.889418][ T975] usb 10-1: Using ep0 maxpacket: 8 [ 966.914570][ T975] usb 10-1: config 0 has an invalid interface number: 52 but max is 0 [ 966.952900][T18961] xfrm1: entered promiscuous mode [ 966.968969][T18961] xfrm1: entered allmulticast mode [ 966.969221][ T975] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.023321][ T975] usb 10-1: config 0 has no interface number 0 [ 967.062670][ T975] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 967.093831][ T975] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 967.142861][ T975] usb 10-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 967.285976][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.357697][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.427610][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.550125][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.691853][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.739143][ T975] usb 10-1: config 0 interface 52 has no altsetting 0 [ 967.761697][ T975] usb 10-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 967.785153][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.789882][ T975] usb 10-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 967.827736][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.828074][ T975] usb 10-1: Manufacturer: syz [ 967.890055][ T975] usb 10-1: config 0 descriptor?? [ 967.930020][T11752] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 967.958741][T11752] usb 5-1: MIDIStreaming interface descriptor not found [ 967.988562][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.998675][T18818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.010231][T18818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.021398][T18818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.032576][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3717'. [ 968.133489][T18974] siw: device registration error -23 [ 968.435334][T18818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.592423][T18818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.621031][T11752] usb 5-1: USB disconnect, device number 59 [ 968.681000][T18818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.691866][T18818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.001813][T18141] udevd[18141]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 969.047248][ T7656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.069837][ T7656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.288007][ T7662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.303045][ T975] synaptics_usb 10-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 969.314229][ T7662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.373151][T18988] siw: device registration error -23 [ 969.482863][ T975] synaptics_usb 10-1:0.52: probe with driver synaptics_usb failed with error -5 [ 970.103758][ T975] usb 10-1: USB disconnect, device number 33 [ 970.873405][ T31] INFO: task syz.1.3258:17144 blocked for more than 143 seconds. [ 970.909197][ T31] Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 970.916851][ T31] Blocked by coredump. [ 970.941744][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 970.965900][ T31] task:syz.1.3258 state:D stack:25392 pid:17144 tgid:17141 ppid:15621 task_flags:0x400448 flags:0x00024002 [ 971.016985][ T31] Call Trace: [ 971.042031][ T31] [ 971.049989][ T31] __schedule+0xf43/0x5890 [ 971.074048][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 971.089342][ T31] ? __pfx___schedule+0x10/0x10 [ 971.104382][ T31] ? schedule+0x298/0x350 [ 971.108732][ T31] ? __pfx_lock_release+0x10/0x10 [ 971.122424][ T31] ? lock_acquire+0x2f/0xb0 [ 971.129680][ T31] ? schedule+0x1fd/0x350 [ 971.134027][ T31] schedule+0xe7/0x350 [ 971.139845][ T31] schedule_timeout+0x244/0x280 [ 971.145149][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 971.154988][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 971.174711][ T31] __wait_for_common+0x3e1/0x600 [ 971.179767][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 971.185150][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 971.191467][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 971.197306][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 971.202614][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 971.208433][ T31] io_wq_put_and_exit+0x232/0x8a0 [ 971.213628][ T31] ? __pfx_xa_find_after+0x10/0x10 [ 971.218749][ T31] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 971.237449][ T31] ? __pfx___might_resched+0x10/0x10 [ 971.255660][ T31] io_uring_clean_tctx+0x10e/0x190 [ 971.260875][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 971.371304][T19003] bad cache= option: no%e [ 971.371304][T19003] [ 971.377846][T19003] CIFS: VFS: bad cache= option: no%e [ 971.389176][ T31] ? percpu_counter_add_batch+0x174/0x1e0 [ 971.394931][ T31] io_uring_cancel_generic+0x67d/0x8f0 [ 971.764360][ T31] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 971.785620][ T31] ? do_exit+0x313/0x2d70 [ 971.806058][ T31] ? __pfx_lock_release+0x10/0x10 [ 971.826390][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 971.837580][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 971.852541][ T31] ? io_uring_unreg_ringfd+0xbc/0x130 [ 971.868986][ T31] do_exit+0x53c/0x2d70 [ 971.877202][ T31] ? get_signal+0x8f7/0x26c0 [ 971.882872][ T31] ? __pfx_do_exit+0x10/0x10 [ 971.887470][ T31] ? do_raw_spin_lock+0x12d/0x2c0 [ 971.900347][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 971.905736][ T31] do_group_exit+0xd3/0x2a0 [ 971.926610][ T31] get_signal+0x24ed/0x26c0 [ 971.931492][ T31] ? __pfx_get_signal+0x10/0x10 [ 971.936362][ T31] ? __do_sys_io_uring_enter+0x60f/0x1670 [ 971.946626][ T31] arch_do_signal_or_restart+0x90/0x7e0 [ 971.952388][ T31] ? do_user_addr_fault+0xe50/0x13f0 [ 971.957682][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 971.968410][ T31] ? rcu_is_watching+0x12/0xc0 [ 971.973365][ T31] syscall_exit_to_user_mode+0x150/0x2a0 [ 971.983572][ T31] do_syscall_64+0xda/0x250 [ 971.988124][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.995090][ T31] RIP: 0033:0x7f0ce878d169 [ 972.001388][ T31] RSP: 002b:00007f0ce9536038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 972.010520][ T31] RAX: 0000000000002000 RBX: 00007f0ce89a6080 RCX: 00007f0ce878d169 [ 972.018504][ T31] RDX: 0000000000000000 RSI: 00000000000047fa RDI: 0000000000000003 [ 972.026696][ T31] RBP: 00007f0ce880e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 972.034859][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.042976][ T31] R13: 0000000000000001 R14: 00007f0ce89a6080 R15: 00007ffda34b3468 [ 972.051101][ T31] [ 972.054268][ T31] [ 972.054268][ T31] Showing all locks held in the system: [ 972.062114][ T31] 1 lock held by khungtaskd/31: [ 972.067056][ T31] #0: ffffffff8e1bd0c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 972.075324][ T7662] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.099379][ T31] 3 locks held by kworker/u8:6/3561: [ 972.104803][ T31] #0: ffff888031d77148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 972.121731][ T31] #1: ffffc9000d637d18 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 972.141068][ T31] #2: ffffffff8fef7ea8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x121/0x14e0 [ 972.160968][ T31] 2 locks held by getty/5578: [ 972.165866][ T31] #0: ffff8880329960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 972.175838][ T31] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 972.186053][ T31] 3 locks held by kworker/u8:37/7647: [ 972.197047][ T31] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 972.208327][ T31] #1: ffffc900037e7d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 972.230212][ T31] #2: ffffffff8fef7ea8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 972.239441][ T31] 7 locks held by kworker/u8:52/7662: [ 972.250714][ T31] #0: ffff88801beeb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 972.269884][ T31] #1: ffffc90003447d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 972.284364][ T31] #2: ffffffff8fee2190 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30 [ 972.299311][ T31] #3: ffff8880314580e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12d/0x2b0 [ 972.313403][ T31] #4: ffff888031459250 (&devlink->lock_key#26){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x137/0x2b0 [ 972.325089][ T31] #5: ffffffff8fef7ea8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x9d/0x710 [ 972.334969][ T31] #6: ffffffff8e1c8538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 972.345154][ T31] 1 lock held by iou-wrk-17144/17158: [ 972.351440][ T31] 1 lock held by syz.6.3725/19002: [ 972.356644][ T31] #0: ffffffff8fef7ea8 (rtnl_mutex){+.+.}-{4:4}, at: xsk_bind+0x1e3/0x13c0 [ 972.371430][ T31] [ 972.373770][ T31] ============================================= [ 972.373770][ T31] [ 972.383673][ T31] NMI backtrace for cpu 0 [ 972.383684][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 972.383702][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 972.383711][ T31] Call Trace: [ 972.383716][ T31] [ 972.383723][ T31] dump_stack_lvl+0x116/0x1f0 [ 972.383749][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 972.383766][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 972.383787][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 972.383803][ T31] watchdog+0xf62/0x12b0 [ 972.383829][ T31] ? __pfx_watchdog+0x10/0x10 [ 972.383851][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 972.383872][ T31] ? __kthread_parkme+0x148/0x220 [ 972.383887][ T31] ? __pfx_watchdog+0x10/0x10 [ 972.383909][ T31] kthread+0x3af/0x750 [ 972.383928][ T31] ? __pfx_kthread+0x10/0x10 [ 972.383951][ T31] ? __pfx_kthread+0x10/0x10 [ 972.383969][ T31] ret_from_fork+0x45/0x80 [ 972.383990][ T31] ? __pfx_kthread+0x10/0x10 [ 972.384009][ T31] ret_from_fork_asm+0x1a/0x30 [ 972.384037][ T31] [ 972.384042][ T31] Sending NMI from CPU 0 to CPUs 1: [ 972.497042][ C1] NMI backtrace for cpu 1 [ 972.497056][ C1] CPU: 1 UID: 0 PID: 19002 Comm: syz.6.3725 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 972.497072][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 972.497080][ C1] RIP: 0010:__lock_acquire+0xebe/0x3c40 [ 972.497103][ C1] Code: 00 00 00 00 48 8b 84 24 e8 00 00 00 65 48 2b 04 25 28 00 00 00 0f 85 93 22 00 00 48 81 c4 f0 00 00 00 89 d0 5b 5d 41 5c 41 5d <41> 5e 41 5f c3 cc cc cc cc 41 83 fe 01 c7 04 24 00 00 00 00 0f 87 [ 972.497115][ C1] RSP: 0018:ffffc90003a07248 EFLAGS: 00000086 [ 972.497128][ C1] RAX: 0000000000000001 RBX: 1ffff92000740e52 RCX: 00000000a72c6400 [ 972.497137][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffffffff96ec7ae8 [ 972.497145][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2dd8b98 [ 972.497153][ C1] R10: ffffffff96ec5cc7 R11: 0000000000000002 R12: 0000000000000000 [ 972.497161][ C1] R13: ffffffff8e1bd0c0 R14: 0000000000000003 R15: ffff8880268aaf80 [ 972.497170][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 972.497183][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 972.497192][ C1] CR2: 0000001b2de1cff8 CR3: 0000000036e9a000 CR4: 00000000003526f0 [ 972.497200][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 972.497212][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 972.497220][ C1] Call Trace: [ 972.497225][ C1] [ 972.497230][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 972.497245][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 972.497262][ C1] ? nmi_handle+0x1ac/0x5d0 [ 972.497280][ C1] ? __lock_acquire+0xebe/0x3c40 [ 972.497297][ C1] ? default_do_nmi+0x6a/0x160 [ 972.497309][ C1] ? exc_nmi+0x170/0x1e0 [ 972.497321][ C1] ? end_repeat_nmi+0xf/0x53 [ 972.497341][ C1] ? __lock_acquire+0xebe/0x3c40 [ 972.497357][ C1] ? __lock_acquire+0xebe/0x3c40 [ 972.497376][ C1] ? __lock_acquire+0xebe/0x3c40 [ 972.497392][ C1] [ 972.497396][ C1] [ 972.497401][ C1] lock_acquire.part.0+0x11b/0x380 [ 972.497418][ C1] ? __lruvec_stat_mod_folio+0xa4/0x370 [ 972.497438][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 972.497455][ C1] ? rcu_is_watching+0x12/0xc0 [ 972.497468][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 972.497483][ C1] ? __lruvec_stat_mod_folio+0xa4/0x370 [ 972.497500][ C1] ? lock_acquire+0x2f/0xb0 [ 972.497515][ C1] ? __lruvec_stat_mod_folio+0xa4/0x370 [ 972.497533][ C1] __lruvec_stat_mod_folio+0xb8/0x370 [ 972.497550][ C1] ? __lruvec_stat_mod_folio+0xa4/0x370 [ 972.497569][ C1] filemap_unaccount_folio+0x1d0/0x860 [ 972.497586][ C1] filemap_remove_folio+0xf1/0x250 [ 972.497603][ C1] truncate_inode_folio+0x49/0x70 [ 972.497617][ C1] shmem_undo_range+0x36e/0x1170 [ 972.497636][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 972.497653][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 972.497675][ C1] ? mark_lock+0xb5/0xc60 [ 972.497691][ C1] ? hlock_class+0x4e/0x130 [ 972.497703][ C1] ? mark_lock+0xb5/0xc60 [ 972.497725][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 972.497740][ C1] ? hlock_class+0x4e/0x130 [ 972.497752][ C1] ? percpu_counter_add_batch+0xb5/0x1e0 [ 972.497772][ C1] shmem_evict_inode+0x3a3/0xba0 [ 972.497789][ C1] ? find_held_lock+0x2d/0x110 [ 972.497802][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 972.497818][ C1] ? evict+0x3c8/0x960 [ 972.497833][ C1] ? __pfx_lock_release+0x10/0x10 [ 972.497850][ C1] ? lock_acquire+0x2f/0xb0 [ 972.497868][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 972.497885][ C1] evict+0x409/0x960 [ 972.497899][ C1] ? __pfx_evict+0x10/0x10 [ 972.497917][ C1] iput+0x52a/0x890 [ 972.497931][ C1] ? __pfx_generic_delete_inode+0x10/0x10 [ 972.497951][ C1] dentry_unlink_inode+0x29c/0x480 [ 972.497966][ C1] __dentry_kill+0x1d0/0x600 [ 972.497982][ C1] dput.part.0+0x4b1/0x9b0 [ 972.497997][ C1] dput+0x1f/0x30 [ 972.498012][ C1] __fput+0x51c/0xb70 [ 972.498028][ C1] task_work_run+0x14e/0x250 [ 972.498045][ C1] ? __pfx_task_work_run+0x10/0x10 [ 972.498061][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 972.498075][ C1] do_exit+0xad8/0x2d70 [ 972.498089][ C1] ? get_signal+0x8f7/0x26c0 [ 972.498107][ C1] ? __pfx_do_exit+0x10/0x10 [ 972.498120][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 972.498132][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 972.498145][ C1] do_group_exit+0xd3/0x2a0 [ 972.498159][ C1] get_signal+0x24ed/0x26c0 [ 972.498176][ C1] ? xsk_bind+0x258/0x13c0 [ 972.498195][ C1] ? __pfx_xsk_bind+0x10/0x10 [ 972.498216][ C1] ? __pfx_get_signal+0x10/0x10 [ 972.498234][ C1] ? fput+0x67/0x440 [ 972.498249][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 972.498264][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 972.498280][ C1] ? rcu_is_watching+0x12/0xc0 [ 972.498294][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 972.498311][ C1] do_syscall_64+0xda/0x250 [ 972.498326][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.498344][ C1] RIP: 0033:0x7fca84d8d169 [ 972.498354][ C1] Code: Unable to access opcode bytes at 0x7fca84d8d13f. [ 972.498360][ C1] RSP: 002b:00007fca85b76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 972.498372][ C1] RAX: ffffffffffffffed RBX: 00007fca84fa6160 RCX: 00007fca84d8d169 [ 972.498381][ C1] RDX: 0000000000000010 RSI: 0000400000000100 RDI: 0000000000000008 [ 972.498389][ C1] RBP: 00007fca84e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 972.498397][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.498405][ C1] R13: 0000000000000000 R14: 00007fca84fa6160 R15: 00007ffe0343da68 [ 972.498417][ C1] [ 973.049194][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 973.056069][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 973.066579][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 973.076637][ T31] Call Trace: [ 973.079909][ T31] [ 973.082838][ T31] dump_stack_lvl+0x3d/0x1f0 [ 973.087433][ T31] panic+0x71d/0x800 [ 973.091848][ T31] ? __pfx_panic+0x10/0x10 [ 973.096260][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 973.101638][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 973.107617][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 973.112992][ T31] ? watchdog+0xdcc/0x12b0 [ 973.117414][ T31] ? watchdog+0xdbf/0x12b0 [ 973.121835][ T31] watchdog+0xddd/0x12b0 [ 973.126086][ T31] ? __pfx_watchdog+0x10/0x10 [ 973.130765][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 973.135964][ T31] ? __kthread_parkme+0x148/0x220 [ 973.140986][ T31] ? __pfx_watchdog+0x10/0x10 [ 973.145668][ T31] kthread+0x3af/0x750 [ 973.149737][ T31] ? __pfx_kthread+0x10/0x10 [ 973.154330][ T31] ? __pfx_kthread+0x10/0x10 [ 973.158925][ T31] ret_from_fork+0x45/0x80 [ 973.163343][ T31] ? __pfx_kthread+0x10/0x10 [ 973.167935][ T31] ret_from_fork_asm+0x1a/0x30 [ 973.172706][ T31] [ 973.175902][ T31] Kernel Offset: disabled [ 973.180205][ T31] Rebooting in 86400 seconds..