last executing test programs: 19m44.15223069s ago: executing program 32 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000002c80)=[{{&(0x7f0000000280)=@ethernet, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000500)=""/154, 0x9a}, 0x80}, {{&(0x7f00000005c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000640)=""/100, 0x64}, {&(0x7f00000006c0)=""/77, 0x4d}], 0x2}, 0x7}, {{&(0x7f0000002800)=@tipc=@name, 0x80, &(0x7f0000000380)=[{&(0x7f0000002880)=""/245, 0xf5}, {&(0x7f0000002980)=""/78, 0x4e}], 0x2}, 0x4}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000007c0)=""/56, 0x38}, {&(0x7f0000002a00)=""/95, 0x5f}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/143, 0x8f}, {&(0x7f0000002b40)=""/78, 0x4e}], 0x5, &(0x7f0000002c40)=""/45, 0x2d}, 0x1}], 0x4, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) syz_pidfd_open(r3, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000feffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000100)={'gre0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="ff00000065ffff0010000008003950163030302e75"], 0x15) r7 = dup(r6) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x81, 0x1005, 0x0, 0x3}}, 0x2d) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='cgroup\x00') syz_fuse_handle_req(r8, &(0x7f0000000800)="e7f268a48728435fc5b6e2d5810a1a1a161fe3559b65ac4a88b40a30486a1a23043a69e0890bb76252e61439a7ccb398196a5800ea9e61977179771119719e88ac4ae4ce6553330d8ff0f726d60e5a106a32f0186fa80ce8c91661cad2cbcadccfb6dfcdbc18e5fa7adeed6e15b67973f82dae57bc723d9ddab1e040f81c35aab7a2cb0672b31c516b1c8a7ee7dfe61a0d0c3750701e574dff72d6689f817bf3fc3452704adb41fdeda712f1de8855c8837dccd693e8c1c6ead92f8b27f7866c1dadb2a95da7ae7102ffe4a32ad806eea7ed0abdbc08abab0c462d0116772aa0c97c0868ba62028ebd8ad901fbd0a30c473e771e9003149a7660e40b574c0af1230dbf7de719cf0c1eacd04cd03e4148e887e15a6695e1ff0ae25ee4dc72e8d534bf9b09c3bf1c8caea097341a92c808e40bfa40cd5690def353e5eef9dce39ba5cf56e208e4aa86b5e3099ff333f57cdd3f95d01486d76236d374f668cfeb2b0d2682f532aa0c66946199437cd9659de42a0d04f9edffb60e62afb3cf735fad9f8adb4d14d2a2f0bc6f2d9ff29ed5eea8dace7c2a0a3bfd21f84c2571789f1043935aebfa108b1998b5a363238e638677edeaec95398985fe3cc711aa374e448f728d8d071210dac842bfc7b819634e3b03249fddb2cae6623221e4dc748681181bcdadf6c9f5432a771a8b321c31d8b649f5d3a0325a69c37d5bb16dbb53d4f08afa7d27042b04ba80a3baa7e01984a29dcf7495a4f96c690238346c51e9f25137c7bcecb271c9fadd82265498c6816a2f709e56b39b4a170ba2ef590884ce7a1bfdb98bdf2ff6670ea71c7124c3d0c18d677c3fe50e994d459462c76511dd6e45e41cf857e59d1818a9f50183ea014af17c1e5bdef4941b9f92e1ae97fc6ad74d0a970fb150529c239b5780820c7918f78ac5eb766a146933814710912782388da834d05e17cbee181e2233cb890a4333acca9406f9542ffa7f762eee6a323d57bba6047b330464ebaadcc824ab47723dca490044afea8ca882b7e3eec41af1070a9752fa043602ecb008c3c38e938e506c3dcc4e17f5b600e0b90cae102e0c09b93fafe12f4811d66f3a3ac384d751bd618e66e8cb15dde90ccbb22e4c363154472d1c4416fb6c4ea6620c723f91e05cf483c5985d7d1028de999e7f3990fd73982a01584259d4f10d9ebffd14cb0df2398dbd9f7aa5574b1afe687c15e6de800b4e960ef22d461e9164a108aef965509f4ab1da56f07f77fd8568e9581ec1e6fb3fdd776ba235b3d3ad74779fe176d28ed8ed9f9044a582119434631db1486ed992a996fc1ff772d2757a060d04c1cd5dbdbaa8c04d9f620e87f21ef79730c529de74a06d8db6c83efc50948b4e5c4b5bb49404314266149f7a5027d14ad14d8ade1ba2346b5aba477456b9dc6df4bf8435a18ef7252f4f12218162d3d226e93b664e5767b0aa5a6304477035881bf7f54e7838672e84d8e71a7288071349df4b68a076c393579cb0c4e5157d883a55f424e0e72a782d8e3283d692f457adad09eb4dbadb87f52ab411b5d057f0d9f346385d5cc205d730a27a5913d1055607706092e8a43426fa06c1de8200b784adf5a0f38f7b5b2f7e53fdb58bfbff302c0c8cfd22a451cd029e521e2f6ac34e318551f379c183aed7a22db5f84619fc738b1ab81d96f8534c9f82b9f734df3eafea1978b8304a648bd599db8ce37c4aa5ea5615a045d8664858100add204288ade384bc6834882d49aaec934cff639c67e26a66e456ce65026b1ffc5ca1e9425b13765585b69e9fdb0158057d3c14fa9df45493b95ae53d4e7245ed0a6c1606d2b3cf6d47ac97aa2ad092f2b2a272dfd69df9caac3dcc1a2fb4b03e1dcf7a5014284bac4f614f3cda5494b3aa2f6e8f44ed471ee41e2c65de96f546652582a71aead53964af9187d5e4c0c0c6fe64f99232f51a8da5d3dc466adc3edeea23c3b796d6495dfd811e32c6b8f02bb8310cccdb11e4098ae7aad6e05f70f41ddb5c25afd1245aa0b47aac9b3cd157bf6837e65c87aa35d39574bb75622acac4530b350049ba32c2ed436d4b08fecfde125f49fe80286ae57669f6ef76a2898549cceaf09c316c90c44f64cec1fa63fbe12983edc1fc280b693c00f61f63322e75362b3fd00af628fc5077979f831a0dea581beebd0c52a4ad1071517b5e1382fee2585aaffc5307f9484cd56464e5a29ddc30b12870dad56260e82620267e01ffbd3a8b31fefcefa3e0b9aa05d81067a1c7dbf243ede1bbbb0a844faa4e8f17242e14798fd6160a4d7b770018581a384c6ce381382da1145aebebd92c31f54e1a5beee1ab2e82bb2aabc461dd6545f133020e20364d0cf1551dcff7abcd6db3f28701f0bbf90e81b775dc59b7f2644cca886510fc8cffe195df2ebd510d2848995b7d1fbae36c3baac61736cf75fccf1b5b7c9693315e67e9e8492f2a8afe8763c055eaf10fa3c615f5bcf4a4019e89b675d976edbfd5bd5ec7eeb6edf064264913aed5e03bbdabba41de2dac18aa4b2ae8c245f7eda1ee7b48f0f95097b7f94c99423566753c9c0938e50b2c07428fcca4cdaf6f50422c6d42a15cdf4284282a4ac0b46e91a56302ac0ad4ba6d26e29e67a0a5f11654ca55a54cd9a66179faa9fcda5248c9a3805a970bdc54278aa311c223690c4930fb489beebded23c5313e1f20b3ee80d939be84bc7dccded4682ef0f8e8ab586b4ed55960749ffa35c042472b59cd86af5c2e2f7163aa55fddb433774490f9f173be7950cd2a01d18e7f4e5723b4a613c91696ac3ef7e170b8c412b8e733a47883f17f130f474ad5f1f93d2f152e0f12fdf851bae021f554330932f9b67cffa998a70ebd61c65991e79e5dc25ab9a47608a380a632a8745afcd5d3070367f160e531f75b7405876dcfd5760e90bff2ab08e32e994f8f81f75c9599698c25dd05bb306ff285caeb68d8b5cb69469e0dbe1077cd1116256423d6651ae3781b1969c0e9f03a32a38ec9c9b18caa671b0e73f501bcc3cec5dc16f6352c5eb975f9a6d5190cce8863b68a988866a1cd2666050294494705321d3c5630d6ed04823c9563c99a6abdda44ae0d326697c2ae6a7470e2f8f03654caf62d6881e3a6e47af426a66b27e1cb1396c210958b0041f25aa64b75e95242aba566554d766ab68eb76967d5544ef20736625e8300d39a1bd03b2ebdc520e59ba9f9322a1f228a0ede384fd54125acf8c0835b7951f5660dd7c51004c448e0ec9e6e9024bec21379a29f56966c8b437b08d4929db502a19ec52b91936ac86b65446f758d3f77c3c5d9299777c18be82f7a6d88aaf8189d2009670a9c2f4cd5d4c3f4301352c8229b69940ce6a88fe53bb698779008318bd6e4157507e304f42e238c683da0f9e5e52d6bb990bc68d8314bbbcfd94fa510d9b37778a76d8158e7ef8762c53198c23a88cbe6ce5f15095a6fcf0aecd233ed9c82d59e8a47b654bca2c7f3bc60f6d403b729cb47b69aac7c6a90cd363708338eb2f9c02718fd3443bdd7ee32cc1bd4d5021f200a51c8348f0ec9484748b552b4125341a3ad310cef4dc9416e018b9910d0cd90c4c50f1088f7be2db4dfbbfae4f4911b36eb8bdafcd674c6d2cde2ff6771963e70c1ee5ac27b1dace74863783732b93602d5647cc433dcf74b74e8b72a22c6aaa4a2b21341674daca4a26d76e6b3c17b5257e3714c5273a07251650846c8b075c7fde59677cc6252026e0c7ca8940d14b31940f430389c7b8e936032fcbc261cd07bf89c61ee090276de50ec90fe108a42e03beacf9de155295575822684f3d77b2d286cb1c0a542cc1bdf96805af08907d484892d20c4d9fe64fd4d476d7cd5c8bceb451e7664449e137c0557f8c8e69f167c66c362afbd2bffbcf1ea53cbf68ebf8cb3bedc463e800ff281d9d7a658770f83d570e53f90354bcae1f817dbedbc617775bafc802fe930bff61d91c3b6910b19da16b65030016bc426ef1bab0c4328a69f71cee71a41d30fe54a0dcd1c27d31499f028c05b23520ee23f90aa9e8a41c77ba336925ff82f1f04975551746fd5884dbd3aa967cbd72c6c451f0396cc8804ec41dfbded0277b772e01bd8b53a10eed234d65c8700c481861f37fa93814e6ccc0d14cb3a2081450ef8285dc98798d75dd0d1638631eea216c5ba95884bcec86b553d168c4d31f2a58b9d9f8006b8030d30a600b8a5943e6b002457e73187b9b04fc59854e23ff0c4316cd274b8ddb10968aaeea1e588096122b3b25992f7eeada28f22790cd11086b551cc736410087493364f0b6028d22d0aa5ce64b78c18de353ff02c7269396774dda6662562b6342872e03c90d004c3ad376d0b6d2bb79634b773966719af42d9e8dbc225305cea5d49bd29e66db7d4e7693dc77de00793a8b9611793d8b4c30482e25e3bbb5eb6c96c88006183b83fe554f626397ee611356b585e4777d21160e62a3a824852f1b2c69680aae5672ee4764a5977286ba15d428343df644cb8c8d87dfd68e5bb210fea0c16bf19486f31bed2f26c39ac28b51e7e0828af5588da8735e7e02f4004cdc8ed98ddb23a496e4c03578dec5e7ac9a2f80326b210d70f0d490af0728bf9e8ec3126f85262ed806789a2f0b16a12e761ad55703674aa6f334df539dee2be3b93d45bde8253371bb93937909c7cba3548891b174fcf52880b3ec6393c15460f0a19ee817fb680c4f1a37f1310a7d4aa9cc78e501cd56ccc761e0c21d9827b08d474af86140b89a6a5df6a71b1f41bc693884d39d8ef91bc8db1a4d6f1c58888d85996636ecabcdad0709ebfa33109b3599c61312189d5d1a90b872153490cc795ab69ca0baec12d0be26d6338e7c4c0a9d0d863aadab13cb192722c9bb25bca2dadb6a5de467c596367084f30616e67a23a0435ce2ddfc4933342c7f48769535e8639df550baa97de2df27fe51b81e48bb5e00095352a5546f14d686cce8351162a08d7a838201ef9a0ca496d4e891eb41661a84d615b15de21014bd80f3af44af7df34125d3a54f4bb89b4024a47fb5210219dd127eed4ab393fffa399bd6036012ebf55aacf86dfe2604df2fc650ba76efc1e7243e7eda7766c4cc41a107f993ead16697df8207ecfb0f4008734fa3b5d7170969ac0db7319437a8a26975215aef8660c05ea377af26920efdffac87904dc0f9cc64f8a8146960165e7698ca3962d3145e5370d3eb478a2d8f98db44b3c0273695e78aa08de17adb023351e7dc3b7462b8fb21a6a790052342f6b153b35418f6a914aff3bb1a2b3adf72acaefa2ab97fe0e0324bab97cb1be15bcd4bbbccdb1a1666c80c218b04ad2e6ce487b1c50d577c41990af907865c40e1bd5d46a096d1460f1089cf719b0049e5e631acac58af0ac9319e8d09d4af7f0b4596253208e99ab37c19aec9bb8f4170800d8eafde3d81a962ae802c72c4e1e6350683927d0c03cb9cccfeae2e2c9ece5413cce574e716fc44f675a671da6e701821ceeaee38b13dd2b6e64099fe6bec2d8de873bf3c3ddb67a14bab9dff7346bdfdb20c638256e8df566312ba54625def4d257864bb61d8b313e0069b6b93a81f64421e63a06b2a1ad2b3ad6523543f26228eab2168ef2f51e89634fc991dbf9d8a6cb0d8025bd3c4fdc0f4ff227bcb8436ec198a05a177c2b6fca6155f4a7aa746740d3cd21c3dfbc3041dac00acaed52802576d950628378733f7bf922a7a7681953800bb038f0cb2311bd04282fd839738b0fd7b380ba647f95364a1162f5f0ad2ef083a8c071264d3ba891c2615412efac22758a443315ff9d6c80c485fb93c6c8fb9318f27fdd1c257b23ead16f898a6100d018f04bb36d8a34503152fb9957ae7694afdc75a27078a64f2ce1db5c79fc12c140b568d1e6f8281bda2eaa14f8f0150d2bb2a251b344aa5d79a49491d109d01be2e4e55de7c68f2ea1ab218653ce75f88fae0b32a7aa4d3dd0c9aa1b24f1385fb80ed3107cec3ed6d97a4e2dbfaa5b58b15fce6837ccedd9f0292e0f879f2109961ff4b73245302fd2127521484ad12566a9a20d7205cbd73d6e345e0a848229a258c11e60a8e4b3c9987f288e82a8e027d90c8c469add3c1c67b6253bd099ab9b72535b443373e1338345037eb51a7a790e8fe6161258d4413c3dd59358c6ee91bbf52befb9ed56a78f460fcfbd6dc3ebf6d5052eafd83f6792ce76a017ae735732831f7d848b3f3206a743e383de153119f8d8aa774a38ee8fc616541d29674142e66e730db39e3fd14b4dafaa7abc6c888703ce82b12c22e23f830fe6d3ed27b1dd8a647a60f86bdd050cdaf8da90489cb1a548dab9490b86ec6e44bb1cf75853fd728d1ec7f414d25bc709d3e4c363953a4184867c2595ac431cb4ebae2f2667c9d322e1acd50e5c0909204dc7566814056ae86dfa8655b1175788ce868742f1dae00ddbbc8501bf64788ff0ce88dc5405fc59470b2a07bbfaa813409937d32cf785ff96547f1816405cf03960bf68c7b22f6a84259badebc6b3d507657481f539efb087685d8bfba095267715e8a26168256dca89f81184e1c6354686be367f7f4834aa990ad71efae7da20235eac580db6312a88b36f0a402acef36b81a5fb7e686de0c16b9be480634544a0c227b279339a1b9f860f83e42af9d22004f0af9e76912b0375a22e75f65bfb89fcdfa79ef9bfdfae5bd9db569f6debc8f38094502f3f7d2aeaac0710440cbb5fccc3ddf66deb235de4d5f03ed5b32c953588dc672149ac9246444fb13c1cc9f8c9d1d8c98d27dd3f1689a2edda02f069aa4b4d71fd31678c9c2187377b15fec716354e24828a5b099d5ebbda9979c8407697bf6472d8982de49445d9aa427e995a87a1852f52dd6044a83615d7fc1142f6df5d8ef464aab407be230d0efea63ccc1e3402abf58c5e95bbb049bb29a8a0c841738fc8de527e438090bd6048de26be87430bb5d311e6b5729d4436b863cbbec0ffb341e9a51bcc36a41dbeefe96de49025d1848ac6c51297c9ba23bc0c33327e2cee68ed877247055593b3d857a60bfbc5a4bd16795a7b0860a5161e0a7ee12f62b70c7e4b1ee052711f4a133bf10a0d897cfa9679a6096a622d74612612911fba4c797baec19dc6113dee702dd901be0fd035a3fac8c52873d2c122e0b7208bbf632df788c5aaf39ebfc8d2ed90b246fcf2bac7eab098131de57c3632e62f6a22c0a1a1524f2e6faa72e46d5e8bb40bc1f0e8f944bdb380d7529e95e0adcfb25184b800ffb27e90a14f4615b377ab1ad4b867625f2119b8d57a95dd753d7fbdf9140087b20160552038c9abe8317d1c476fd90fe97c75ff7b38c0a0e20609db8ec90b5c3790fecbc2ea346019232486832f1dc61f40c9a80d67e2c6455defd9ca15920be314510e485ee09ad1f4d5a3e6425c23678f93cbf71bd8fa6f15dc8b6b1de967bf84218a03487f3641591b392d28f83706fe8dfaa2abee3d8ecda6f58bf1eaeb67d531edead572b901f84a5398edd6950b24c121ba3c37b09022d9a14c767150b7707af3ae7a2ebcaced96c81aa9130da5e49f765a2e1da4abd12156971c2237e2c55caf3361f227860fb9fd5090abc4ff47151e9e7036010284048072e34a959b9af20342037f588eba8fa88bdeac8540164c218e8b42468f6db2f89cc1e9defefb4290e0509084948b62cdd28b9e6b814f501c3fb9a281ec6ec93c80ba48612dce00cbd9258b4f4a4c8dbb60ae2bd8bc7c4924e19ae655a31ff282058783b88a270efcb51c5688f3016c23dc760b1e6a88c01157f388894baa365923af20ae91bb0024895764a7212dad1f8720f10b4e6506bece4a00d301f02a1afc6f12ad52d3352208618bc79b735dccc7107ca1b08a7d0ba80e918efc44766731f1cb6e07523a16b57e148f56ac2eaf56099cfabb3288eb98b488293b9e0d097f27275e1c86471095944159a5a5eeaac391b2abddfc2fcedca7c3284a272f6439da0c5a968d1d365c8cf053ea04321460b897356e50c375d60326601faf463f0ba9c6355aeb19dad1475e3fd741b4bfeb4799c49f870e60765c86d37ab3f5958e842cf0aabfbefa9f1416f11d907a9b2d79b39d2ee14ee82e77bb7bed0a0edf3018af2b9b3b1cfa7427b099cd5e2ad73a7ce9e2e993dfd4674ae9dbb672cf6537ecfdcd1fcadde04a21af60cab8c67db90cbf0a2b17ba8b6d5a0856ad2af92be8827d289c3d20c9a8f2ba2a063686bd3a1a3531ee1c7b4289eb27c1158b5d27e2691c6fb60198c56a98a96373c1f85cb99e1532ed9b2e21328e6883a5332799bd3f614c8edcbc9c3407fac98246c72a22675e3e5c9a70e9bc73d1d0274c9b6aacbe8d2a711fea1a944f60d520847ab842106f178f57aed772843d8086b3b58e8ae2095ea5d95461fff4cfd34db66760d82ea76c19fa6163f8eefbfa10f8a85bdc0d8f7c99ec3631c278841cd324b156263a592c37cfce5d7ad51529852220fd8e780f5f2820e490eb9dd04a366ca28aaddcadef31d75cab75b66e40078046b7a9244bd8de2c24b02507df8e671930a1e0d6588f0c7fe70da9fcb38bcf93f54738017decc83bd393b0f89942933ad669ca046b39a4d56202648f586d3a08b88c34cdc2cf58ed09205ee0742ad281af399ded7786e88612f0c8e321e51daa1b2c0bda4cb6fdfdcfa788973589a14242bebaae3abfa1859b8ad634eb0cc9bc61c3994504a10181cc895b484b7d438519627b29503da4fe2b922925ce5d2996fbbcaa1d8e7669b97e64459713843ca5530b8817dcb4813ec4ed26882dfb614abfe6880f8cc3f2510b07084a4891afffa36bfd8ea96d78b9bb02d98590de43f298eb202284efa944f62ada6b290f2dc73691a615ad7dbffb96ba9411fdefe97c9bbe347401f8da5bb22df2d3e64581cc30320f32f8eb6fec9cab1cabdb4a325caecf260dc7034ebb7a8611c0fdd12c4a2f22c0fb9e9cde1713f20b6c64765c921a168279200664c1cfd63a152915bb54dff3092ea0bc5328c1707b48bc2a9da1e6e7269baa9741c6766d126853ecadd427d438cae467cea8893cf180fde2b4aa6e3b3137d6d6ecd25f448d805ef14350699bddde76f2cd7cc45664731950f890acfbcb9789163f4dc3862ac289321f11f3a54acf506c1187eaa0f2ae1ab8c7543f104af9546b914dcaf8f52141b0423874e25de63dd95e633ac77ada1a6fde3b6a402a7ab92a7d52d44f424a5ab162bebadb0b9f3a0447581c78bf07fbbfc2d345c173af645357046d96bf53f53b9650dd73dcebe02be33bbfab1ceeddf74e2a180c3f8ebf82d7961e5f23a0c8be7ef3a2d4f98f2a0ec31d08e55b36ea72f35d37bd9ad04ac6bdb2a80f9fdbb69ad2ff2cb7e3206861ddc16d459c98653096021c892755078ed887e8e6784ac71343ce43c7bd7f2ab70728c41059d5f42370932b5fd5a6a7bca3a23c3a258ad3911d9b04384fac718bbc4ed4c3d3d5ed88f9fbecae59a09ddfefd6ad2336d8adebd2a7da4ad9331e71ac523e8c694cb796ec3a4dff8f87764e69d12f73482837cc0b1a02f9ce85a905e13cc8913dd03e1b6ca3fc1e2752873f6b2aec860fb6475de4e79de5698ab86e28a8f4fd65109774585e7b54f88a0593cdb5cc620fc29c285515eeddd95063f5821be1941edd4f66864647657369afd27cee42b7f555707df6f196159ae8ec284c8298f7e4b47f0cb107eec2f78e6ed353c937e3508446184a29eeddc3484dfab2547d4c218dcba0177ead513bf51932bd8fef502982edf6fcd6342bcc1030776b753305925395096ff29d79d58472697281bee5d157a7106dafb5ec4b744375c3b7a437a68a01202327a186a17fa2e64d8c151ee90cfb98edd9fee5dd0a5cf108a147286bf3033b9dc99ef0e683da603822bf40f4cd39657b041e76ba63ff44e6f30e2104361aec6669454431955c95d8407156118cc1716bd64fc9ecae5554bc3f71510929174ffe91e3697cf2a0e7abec2f2fcffe52b6964c03c61448f6172bb866bf001a8b538c943629d73dbc05335d14e6b5609d919efb28954bb1430e35b7b5cd920fc55eb96141c0804403698b20c1eb324f75d1cb6be2ea523192b63b7031e6eb4c3408eb8feb628d379ba4ff2feb2c9026b951f0f4e28a3d1c10fc7e7d3afc3ef78a3c2114e273aa7ba3080d89c456b65b0203fd02c786f8ff8345768b770a2ccbca9a7d955d50cc863b01387bc734136d24e41f5fef94a709d170a7bac1a1b74e3d91ab0a53163ae4993588f187cf6333064709d1914c60014ae1990c331926e8e0ba089663f42d621092e7233d23bbd7d728877aa184e0b32108d4bd04553c0f15cb7d4884996a7a7e352b6962b839a704f9f7c8ecccac9b744d49da68987c77953ee0d43b835d9a976fe85b3baee747e6866d9f9df4af7033ad31fbee42b6f37bfa359b095ff7d2f0ae29223dc583d96dba364746bb4b38b23c02701e270bd9b3ce3046c0db7467d5607bf7d231b97774992eda6dc4c2e12d2db0e0b3fa09ef8d3fa8386a65e3ecee8deab1352051bf75712db72a7d5c96a3ff8aa681a91b2567c30bebd5cf1567d2d70ebe6ec78e62d404c46c6320991a80fd65a5c7f8b1df0d4c52cca12b99c04c9f00971afb3495353a67df262f367b5c04aabbf71a13084c7639974b66c0e27abd6347f21460ce094e59be82af6860e7e45a9b6ad3bdbcf7fa502901430483a96e84f9cbed52279803956c3e51a3b77b86d67281deab3ce2a2b386c9c340770bac6ff91b6d55a5dd00430f5af5f74cdf7e52f67c3fe4f2245cffb2d3cf99fc061bfdb3520fdf8864e7c07554f5fe4d27bced9a8346ee9b195c5c29b0c3adec205e18319fde255e805a1a340ce5247a7ef128d2b6d25c34db012d54f435028ee6607ac5c7795a97812c3ad0dda61726fb2435907ec730270e2ed26f87bac160002f105c91c3f89107232efec637f0a81e0e4740a54a13c26bcf94bfdee06824bf701d40d2581f7b310e414546ee37aabcbb1c4b8359f2bec1565f5a52d09ae973698e6f12bd75250c4989011e44564427f138ea421ed03b6876d3b70f4f35a372106021cf7e40e2a1175a4fcdb85ce604412956ab732b8fb9431df87279363cecf4785e31f501a173ec7454c329d49b6894b8a3124246365fd5a6a6f3785807efc6a1902a3807bc2abbd79147c482bb04eac8f2088e0ee543d230451ecf707c7253165042bcfdf395112538e65d5f12396a2880da0c45ba9d712e45c75a7fcbea675c5481ae2a42cb3890bb49a3a5363c285c69088e6cd691b6b74420c58907d514567365f2a09dd14476191ac2f3739c12af2e739d9dac6f4769ffda4a9fd61889f629825ec1985b8a99f28491d195526060d14aec47acbad946abbb3adb2638a77c417be509682fef1d79c7bf673ed90e0010183de2dcf818256ec033bc392b26bfa7a1d081a4403ce336e79859c690d7c6281a815d4e3ef3e3fb6b5788997514e83441d00860ca11223417b8e4924197b07f78550d4e27bd73cfbb940c5f48cbdcaac773004f84b99429566be93ffc3a520c73e7f50fb68ae4d8e44c482c2999e484df6aa5a6f8e94e6ea6c286ec0358c5a82efde9d0965897eef", 0x2000, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m19.914351938s ago: executing program 33 (id=897): r0 = socket$inet(0x2, 0x1, 0x100) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000020c0)={0x0, 0x3ff}, &(0x7f0000002100)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000002c0)={r2, 0x64, 0x4}, 0x8) (async) pipe2$9p(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) (async) creat(&(0x7f0000000300)='./file0\x00', 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000002140)=[{0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x200000d4}, {0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000480)="77a03c5a926cafd4a6e137785998ac8ca911e9e668ed51b7848a4ae9196c956fe5", 0x21}, {&(0x7f0000000540)="a9f2301ff0ae8c31a9922774f7f302d95ed869def2f0aa7869394ef55562c076e0ae81ff85e5fa7377d9b3d586be045aeb4f98268089d095e68b0e3043d2a4869e3ddd993cddc2bce536fedc05c4c6a339e316062ff98c22bf0d9fbdd27625cb9042a0e401c3a2982ac4c2e2968704d9c7fd1038c5e11c77d2fd4209b46d715dcce23aa92c0a8e14c95272df735cba3d0889c4c47769e402194713b2bd188f52bdc07a9e6a6b0d9927f3ab9fe335eb4dcb433fe33a2d1cfb9ec1098bac66324196394a90953a25f5d6873ca6f96af865acde789267d4ba1d1759c5870c1b", 0xde}, {&(0x7f0000000640)="dc5e0faf3b161f048ce66c7b73547f74918b0066991aa351", 0x18}, {&(0x7f0000000980)="a7beba0f243da309175a2dd96e0e78631fd18040b5bd39cd2f425ce919bff62b7a43232164a817d5855e3331430bea06a5bcab35e475bfad287bddf9f2f7e82ed135e93d3dd0d155d872290af5b1a09cf62cf43c2763ce3f2a67a54fb64ee56dcc78a234f70acd2986d2cf121f92c56062ac48eee60ea8da2df255bd56d1122b7ea2546d27f98af36ddc7c61d35a3885eb509a02cd1da66bcbf5d1d1a182e716fd46fdbf4762a84aa2129a0ddf0f65838304a9fc4ac2b4e235decf8f27d3060b8f9e33d7cd45a9a19ed16cdc8ff014208cc8d846bfed0e291d416ad6d5e64fe6d8228d6b6b1271d702cb784cc124ab688d45322e6f538fd4", 0xf8}, {&(0x7f0000000cc0)="af19cac08993816126b6de8ec194a7f5d42d96221a3138d72cf24ca6aeb05cccebfc41cbc1f66ea0d1c7f8a9aa4c882929e3729e55102db117adb957337f2d677f79c22d61a7e1163ea2944a658f5ff436929e84913fba1c522b8f8702e0235c43778b2086bf0f0b9d2f5882beedb7984fe1dec3dc60ce51000c60e9c01a304b394b6e881bc22223289c670d2dbf2766cc970aa799e983fc40bdbf1f0a7d3e7162ece28b7c578fd638abb7e2488db1b708a05fecdac4ea37a35e69d7432f345a1b7fcc37f9a8cf3a3feba6b6a5d876f953eab69d929477fad5de7d6f83bb4900", 0xe0}, {&(0x7f0000000dc0)="fac98dfd26a528f9963a34ab56342947c5c243936096f52fd6e841e6ce9193d5d768811d98f0efeaf1f93f4e6108a2c569a4bf7ecf2d6af6c2c9efb1a294953622ce8164796d663cdc3be8d552a27239e8c42cefd34db0408b107e06a54182a8faab70851ec9f40bc8066f954c6b0b602ea8d5fb618acf2d95b1feaa0346cc3d972b50faca4190cf999eb10efdca52efee40583f50c05b6825b20049a0b10ed8093d2084f0b5a924356f1e4d628f4435752dd76e58079e5b1535a99d2159c47f3878cfd3c139108e15f87da64967138d7f81a94cccfe9c0eeae24aeedc6805ed0e2b657cf8e2427188efaa134154ece1df2fe44197b648e7c6d4a8fa95cccb6515343fe7019ef45fd1eb4bff1d1d991257e5192700f3c2cf65612f067df8b6105ec3094153a7f89d7a79fbdcf4aea1f9585a6c2a19e3b2a3cc27d80edd89dca9d1f942f2569c721397619a5b8d3184a956ae975aaa385b7466fa7d53ac2789c120c1e7ba5b3e5f22188ddcf65367652d1087f1a3b48e1d83df09cf50456635cce9c22a372118695eee2958f47e30ddee58c9632727bc8d377d49fb7df9fa0c1db1e5aef81117b90412723a2a728424ad2d1a6ad29c9d6f0058b59c86ccdb5172971c0feeacfa9ce8c1a4959ed4b3f748117733eb26ecc897e5f51bdaeac0f234143e91b5e9fb561ecdd799e33ebe47c8ca6ffab67d05422b31a220f64c8dc374fca251076a331e561586fb0fc62dd672fffeb83b27be5e136a4e29bd6209ff248eae74f060419e79b2aeeee1bd859915fd3988f479f7056275bea930360f2d6e3152033c6558cf595971ff4e0830739246648db9ed2b7af0821b1de39a67037f72e4acbdffd332f1af9aa5d487d56f4e8464544751506e360a5a74ab88e63c3c9592a58a94a3780f7d1f573058e82c9f70a841f9648c0f2b27dddbfb881366ffbdd92ddd958df86a73661f4d206c34f5e1ded48245c25845149079e06cf42c1e599ea0889b90a93707c74be9f1d73b801a6c1771787c27319abf4f98e4a0f18f746172fd2db6bc6136960319a53cb0e1746c7de17644637bd1ce2139944d965106ebf3ea6c2729779b4fef828591c338a1d410a90f088f338bbe231c688aad0feaced27975374d730ce7f5732476977fa638fa40eefc4f885cfd9ccb4ac373a84162b680d6bb688d5120d1ea8523f00c9d15949af3ae40952d026c951bd39689c7864b8f58e28a4cdbce1a3a00337a5a648b0bacb1c1a29752dfa023cd3ee5cd128ea6a8ee49eee9af063668592adf959702bcbe6d46464537562d35ba3591fd98b29b9796d79fa78cc139682d0dbdbdad5434d716f0015e64f0b9cb75a92e55b6c9992fc1a4e470d3f187cc47d1223da64b415417b9148941d617904f27a4244245a43989e2da165bf3b3cdc8c28f4958d88899b9baee39ab3214fd13b25a62c623648ff9304976ee0bf993bdb9fac36b70bd9088db27812c37d6bc5dd6035a54b1c2bda4abf051d8205cf8d060d3be861dbaf8663ecf336927c2e03316aaabbd37ede43c441a1c60f5e0db89928c3e173b18338619e7993071161e784897edafef1cfece1104551b291233c3f24695887fc2724eb6f5f49b058b7c4400580909d97c6bed4f3b554541c15da96654e3079a831f9ff4ac63a759366d77869910e89a3f22173da0a0b737a436652ec7d861256c89c311c722c2aaa5d4d0318c2fa15a1133aa48e1b1f90ac541a0e5f8b3b90b10ea7f2fdaefca479c10b3840eb8cf4bd5d5f790c892a8990670787cc614cd833e08c5980e02f436ee3ce12fc14c2385b51e26b224619fca80356947a73c419aa5aa5151755e0767ec6588ead754610cf9592031132e497720c79498561ec76c223b3acbdd8b1027b94198c1ef4720f91be7af22a005c96d40671de4f71f183b1863299fc0ecea812e75281fe392290b26855baf9082e920f39baf3b8139c2c0992c065e4490143f467abe710131645af837a99c2a01dc9078aff2db7ffe41041a6a683dd89752e20c0c211c0f9645bd1b5ada0882fd837943bb90679336267c3432d057d2cea323cdc00afcb78f5eacb5c46b4d5da3f1dce4a6084a8bf1bbad07c3f54de03490992d928086b30b425fb3ff346d198af501aff63a931aa5bb8c09431c3ed5ffe8d6cec1a50a795ec6691bd4df643f9bc32e9f1b499eed6fa0575ccc0f281188515995f5de989c5d05dac9664e35c2484f8f333436ab277d9fa360111235ba5404610870ef38bd99636ba5ac1e14e2387ec4f58203280b471fa992d4a29d5b4b38de6a54197746be437dca11937316aef8e414ec2e22e24f02e79bae618331bdbabfdc5171b395d6ea857d3dd7f7af1db0703716db912f874f1f535e7579cf94299f71acc69d873c352ee956af835a388d33bd959ead5a26d15ef1a173c2a2b36f9a97bc0428554326427b0243d4adeef7b55790b250923f0e201f037a6142f8a97c5928a6605395cb3719f41231a3267551f7d6f9d569baa5c57f53f4e0d1c0e32b6e267dd4a30240faae2181bdde8c378d0c34ef6de2db8432f2dee5a68702456902704dd6ce8fc9b28b0714f1d90a92179b36dbd74b566815c4499629248c90ec9fe7b84563f7c8757957a1dbc763ee0bd180ecb54c8b1ca2746a452c17d66f6c01d7b2c5742fcdd5c7b986c6fefb16b813d49cc1b38758e8271c6309d11d16e4499dd70577445bfc40bce074b17b35da8770e9c8d25d420dc0b709b582c0456ab2d0d8cad950816a070281157f99016a068e90bebc9f784e9113f6706f45babca8e5b4813f8432f8e44c5104448cd3633547f785611703c06e82618865c12d3d301501b382f6990757c89fa5621f89212c4b03265e959ae6a28132ebc9f508815e18f2086baf77c11f595c76de553927e7ff8e110bca7f742d7f79538b82b0044d1630a7fd40883af75d2c434a78de290f0abbd8c8893dd0758155f5256aa3c0a91bbc8ee28db61c15f8b7b0b3198e3fe3da7ad3eb1e83d2b9969677dbb039bccd778a661413f4387653cf85c8db040f884a769f3415872aa1d6e1974f5055abaef26c391eb962224f7651255221ac4a188048fe8317e8bb0d52f19bc9b6dc3e4b77a8a76136c9e8b9dfccebee00843aecb6f8e312f9f9133fa9a0dd61b7776cbe2005d77cff1d426025860d1f6729cfa8d70897d1426bcda745cf83c2fe4cafb4a7fb8d5c4c9c80fe467910a5153264540ba7313bd116ed66cd426e398cbefacef2e88b6394c3833d52048c245629c617fcc54d2e3d0d6862931cfe294defd1e3eb27e354310dfa777154264283370795ff67c3e60c61a73d71be6f3bf3f53752b66a0f6e93c157c588b2f81b9bbc9b96a2f126488853356f09d988709745fd6660ae1ed52b1932f33a537403123d46f1bce56d429946e6175cfa57870d44067fd521442ffec81231b6c7bba2e267f0e289cab89087cf266be69f76b2e20e4c31d1c5acf64b8c6113af2eb8ffb7c2aebf382cf5327ed83d53fe0ce3c25d6d85129f7b6c12dfcec1ccc56f9ed8776f8b405be1b95fd4e8445ec32e572a354c726c7fdd7fdb2c3eac8988ba81fef8d9d3209d6fcdeb9e5a5d3808fbfcd0ea80e5352cd68082bc3b1defe7e3c1073bf6c5885fb1a52bdbe2559634c274d1de12d2accb7e05d26035f2b4b397608afdb02519db7189fb57f27b7cd8fab9e76fc1681d97b3e9ba8014b970dd17218ec515218355dcc9a4087a64d8f8747cee241d1ab389aa5cd5c049738fcc7fb7ddaabf2cfcf571b9e854a047b16c8edff7b4168b5c2263e2adcad43d44439f45cf653754113baee9ce6ccf3e9386aced2645a2110c9f17ad4546a3e41f229653904022f126aba4b1cb7a1e46f7a926096938748f254a9f410926b64f912383d4bec76df6d0883fb0829a097098ae5dbfef2d231d7dad940072c1f737bab0e88079d78064f2b57e6096c3e74cff7b238338da36254ac944d104b487133c05f4eafd55256c9b2d10e87a7bcf7bc68fc444787fa7b5e58e362da4481e437b1d41e1dbfbadbba9b4624f473e2edc3784365a5fd6ac65cc1468cdd698d8f0c2f6e9a0cf1ad41673c4c9eebad06d7a86b24c50ad4dc0e3146be1405d678cb7b6dd8498d217eb341679d7d999e328ab06abcaa904cd7ca31723d8c5ebf54f18b80593d0632ebcab8bc4e54aef0e7211af03b2db38c49d890a7b4a1d7d8fc495c6467ec888e2e138b3fdc56035997c13edf8ab07ebd53d8852d4ca7adde5ad11814b1e2a1ba77e654c0bb7e1db4f0dcdab8c7a0ae203ceedcbf2cc6eaf4aac3b275f6affa1571e05a64865248741e8631e5a279b638723b136b86275ac2325fbfb2d33223bfa89f55d77be774fddf2da1149e9b6476adb370c179a23c8483c9c40362e9dbce70ae711c64895028d8d7d06a9756c17276d1a3b86343e7b86eab864f105355239aacd033ce2536c30f510f8bef2b98a4fff09434a454baaf6ed5c626a73548ba4124942c5110c1b40bd23ec78525677e5e99700957ea93aced5dd5f9e0c55a7b5f2957e88add41ddd71cbf1b2bf7b402597d9423ead9fca03c7e2efc62441a04ee620dfe745ee25f8f39c8d3bc26ceca6fc94c25e599b207f0c0cdf6db089b1aa023a7dc38eb2cf7e2c5f7e0f2b15de3232db87b0ee65acaf8d51114ad14a701a57df287adb9adb7e8840c1d34d904543682aa4bef5ab6b2a260886b4adb7db85784a5dda6a2defca6a1da421369d5baf8aae3ffdb9c89d052c83fd951da87db561abbf4bc71cbdd2b9d44a9ef51ecbdf058894a5c6ba57f9c5472eef2aee43978c60d0bae7cb0263d2e93388753d0f885ef596480de608f3433216eca8ef0fb0bc9a375433bfc67a71b4ec27afebd3325af7d779f2b5553a8338402d5a2e5225a0934c62e4c5e768ab0d6196f86c2c541bbeaae755836cf5cd34c1da528e95143b0b9e0b2c686f377e4e953b17d28e6131fa8cc028a256b2afaa7a12d39584d8da130e9937f37f492b13b8aa17b5562e4d195e568979a71e97e56412df8f449bdebd9f6cfbdd741ec13d54c426090f0da3625a7397592a9f134f87409bd672267c1b276a1e2a44e73e130131bb988d190eca1f275547129ddceb69c24b5244da14d7baf6de9517abd3d70f789f00ab4ba22c9d8cb976676a0de034b59e9775e9e5acd0f9ca4efc3f5de3a1558a8e756749c218322f93ee285ece1667abb038987dbc6d55bf5cc3facd557b00a3f05aeae8c8b1d177fb080317b2eb1bc46bd3de1a6bbe1f0ef543e2b78ae2b59a7256bf40dc1a80a1604bd12010fe67cb4aa5d6211efb8c3ac1b36106c6f2b494dddd951e7f55e357d75f5d94e0b80890a377a1aa74bf9dcd43e313d59c22cc694b7b6d6fdaa88c4371c255268ab2c4ffbe6b48c3cca20b2aa65719ea8897248d20b4db7421fb4d0cc5e13c00b1047905c757f52e8349a061bd511e3ca08a4aac887c6fbb3f7981053eaa51f41d80b1ba6d438f538b8eadda24c63efc5afb94d72a8476b69c88a85b8a44a5fce422e1c20f1a032bcba7792695f5f0abceb38245e4dbdd13896ac5a535782247e3984f0d6613eeb1a69d82601f5e584502ef4c04075fc347bdb9271d5c62f07ecbea99a821a6bb96a81379ee35cdc1d86251e1398f4bd966af1185da66ef0829e5790ca3dd09e21f1096014ba4c31ebb549873a4dad304ccb766087342b5f7941cb39ba4a48e9a3055d388a21e52d012810767f464d6d19982eeb253227d664b15ca7dfabb701b00bb3d8d522bda6d628820aa312b1286076db3f88e979c25", 0x1000}, {&(0x7f00000006c0)="ffff23b4f0e6122d28b67bfd5f8a95ed1c4b942889f0bb4c7142b86f01c8b7b35edf30605683c9d8b1758488d565acc79866109b90a9b2e21827c142f9d1724b030b06da623455098386cfa906e251a849ead21dbd65863e3ed25135083f322f4e58b7", 0x63}, {&(0x7f0000001dc0)="3bf389f0e91db736481453e89b7f21b8d0cef2ca72bc3a44aec53b9f48e1749a02b498bc350836c88e438a99546d49e83434cdf055a0dba10d17ef78af78308536a8dbd4d7a54cebcb3a049b194553a53843c5953acc21ecd1bb4424dc7351c0390d2565373d824c0f1c568cfe8e7662e2274a84aa216983fd9ccbd3c842f13d58a2fca7960435f12dcb64ef507ab0f81a3cdfed9efdfb7e61efebf5d60233a402faedba41f9a2eb3f60f8c890b9536f3cf5840015d9913f439e7dbfc335d2feaf5911b526cb449dea841ca95a9ecf312c561c2337d9af5f1771c756d1595f5c4cbd0dbf7e9b2de5bb85fafad8f73a8330a31548670ca9b7e7", 0xf9}, {&(0x7f0000000a80)="42c74c41af26a0fb246f71a9ca7cbbd6", 0x10}, {&(0x7f0000001ec0)="9773bcf9c89a3b11d4b7facfc12b2bd3ad477ea81790b1b8953f439d6623bf971023ab102301db041beb6f0599b35798148fae5b62e5454ba9558f5cd3538c8bb9f0fc4d104dfaed2f831a486aae07f7f943baa3e4f4931124dc1ebf4b839fbb0e7a602a82c827bb4d37a8c57732ba251f765b1580526bfacbd5ded65b1ea1a8a04fde7c63021a66b92b86979e2e1a6a3a6e42f9339ac18e1c8783b1bcb84f16d594c6c8daceeb0a0b6d306f398dbf9edb0e0000000000000098a252e6eb1247aa93e19694cf", 0xfffffffffffffc5e}], 0xa, &(0x7f0000002080), 0x30, 0x80}], 0x2, 0x40800) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0xff}}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28000000dd3e019d09c0b37fc6e88cf348f8413f95b50e8261982d0c9a96ed373db46ed302cd98f7793234a4d09452f5875a8f5a604cfb05e1052d0b48841266806b150e09dc2ad593b351229da11b9c0ee5668120abb182e5bdf52d3855684e1ee64bf4f3a69b7f4c47b2a7098fc2ea71ad6e4877aba0f41ef271236f1fa8d198de0cac0f73ae878ee3c2c6b306558300d5a8df0c5b0a24c64233368326131ec9108fbd5f7f61e1933eaeb8615670415acfbc52582b026799a092d0acb28813e516be5fe40a749e75b470", @ANYRES16=r10, @ANYRESDEC=r0, @ANYBLOB="08793df788ba4207804620f7fab07dc768692c307eb065c919d23c216516de8df14e7b633ac52f8ccb2e2dbc8e3eaae8d2ba001f6b77fb3f9fee59fcb3431aff1e5092f3396bd93c124c1a15a9263ed5b5b860d6a38f84f50cceb0eb5e27d613469c1051ae5de8156403054c301e8b4a", @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x854}, 0x10) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022dbd7000ffdbdf253100000008000300", @ANYRES32=0x0, @ANYBLOB="081c01002e0000000800030029b9af170c6a28399df55941594736d90e4b96bafb7a19cdd90c762280ff322faafe905f9ee3f3606dd82ae247961e9c71caec010def87056d20e94157dedec5d7d70b5b2b3f91c9a37818862e82caf40338acf21ff34ffd1743ae687f1d6b50", @ANYRES32=r11, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x240400d0}, 0x40c4) 10m48.055719216s ago: executing program 34 (id=1927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) setrlimit(0x7, &(0x7f0000000040)={0xfffffffffffffc94, 0x7fffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r3) ptrace(0x11, r3) r4 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r3) ptrace(0x11, r3) ptrace(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x20000011) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 7m16.286137062s ago: executing program 35 (id=2678): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3a) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0x7e) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x111001, 0x0) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(0x0, &(0x7f0000000780)='./file0\x00') accept4(r2, &(0x7f0000000400)=@ieee802154, &(0x7f0000000380)=0x80, 0x80000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0xf4f33cb2eb568791, 0x0, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x40, 0xf7, 0x7f}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f00000004c0)=ANY=[@ANYRES8], 0x7b}) 7m16.110850273s ago: executing program 36 (id=2680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10000002}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0x10}, {0x1, 0x9}, {0x8, 0xffe3}}}, 0x24}}, 0x20040054) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) fallocate(0xffffffffffffffff, 0x3, 0x5, 0x8) r5 = getpid() r6 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x182002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r5, 0x0, 0x7fff, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r6, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x184, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x10, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@TCA_STAB={0x160, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xb, 0xda, 0x100, 0x2, 0x4, 0x0, 0x5}}, {0xe, 0x2, [0x77d9, 0x9, 0x8, 0x401, 0x18]}}, {{0x1c, 0x1, {0x1, 0x8, 0x7, 0x7, 0x0, 0x9, 0x487e, 0x6}}, {0x10, 0x2, [0x0, 0x9, 0x800, 0x5, 0xb, 0xafa]}}, {{0x1c, 0x1, {0x0, 0x40, 0xfffe, 0x7, 0x1, 0x5, 0x8, 0x9}}, {0x16, 0x2, [0x4, 0x1, 0xb6, 0x9, 0x2, 0x7, 0x4, 0xff, 0x8]}}, {{0x1c, 0x1, {0x6, 0x8, 0xb, 0x8, 0x1, 0x5, 0x8564, 0x3}}, {0xa, 0x2, [0xfc00, 0x6, 0xfff9]}}, {{0x1c, 0x1, {0xe, 0x2, 0x6a7, 0x5, 0x2, 0xe3, 0x7, 0x3}}, {0xa, 0x2, [0x1, 0xfb6a, 0x3]}}, {{0x1c, 0x1, {0x7, 0x5, 0x2bc, 0x19, 0x0, 0x9, 0x3, 0x4}}, {0xc, 0x2, [0x8, 0x8001, 0x4, 0xb606]}}, {{0x1c, 0x1, {0x8, 0xd, 0x7ff, 0x30000000, 0x2, 0x0, 0x4, 0x2}}, {0x8, 0x2, [0x0, 0x9]}}, {{0x1c, 0x1, {0xff, 0x85, 0x2, 0x3, 0x1, 0xffffffff, 0x6, 0x9}}, {0x16, 0x2, [0x9, 0x5, 0x8, 0x0, 0x4, 0xe288, 0x4, 0xfff8, 0x8]}}]}]}, 0x184}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0xfff2, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040824}, 0x0) 7m15.905624349s ago: executing program 37 (id=2682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) read(r2, &(0x7f0000000180)=""/170, 0xaa) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x54663aafb2d54055, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x1, 0x400) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x67d94) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x31, 0xfffffffffffffffc) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) syncfs(0xffffffffffffffff) 7m15.795856641s ago: executing program 38 (id=2684): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) ioctl$FIONREAD(r1, 0x8924, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0x20, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffff8}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x10000}, 0x94) 2m42.848947467s ago: executing program 0 (id=3658): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0xf9}}}, 0xd) unshare(0x2c020400) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x1b, 0x4a, 0x1}, 0x1c}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r1) 2m41.848927906s ago: executing program 0 (id=3660): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0xffffffffffffffff}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) setresuid(r0, 0xee00, 0x0) setfsuid(0xee01) 2m40.698948428s ago: executing program 0 (id=3665): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket(0xa, 0x2, 0x0) (async) r2 = socket(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) syz_usb_control_io(r0, 0x0, &(0x7f0000001440)={0x84, &(0x7f00000001c0)={0x40, 0x0, 0x2, "0600"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x40, 0x1e, 0x1, 0xe}, 0x0}) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000006ffc)=0x4000000000000200, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xcb47f0b37d3315e9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0xffffffffffffff99) (async) r6 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0xffffffffffffff99) sendto$inet6(r6, &(0x7f0000000600)="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", 0x180, 0x880, 0x0, 0x0) 2m37.520055037s ago: executing program 0 (id=3676): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x14048841) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0xff8e}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m37.231998984s ago: executing program 0 (id=3679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000380)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2521}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) dup3(r7, r6, 0x0) (async) dup3(r7, r6, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0xdfff, 0x5, 0x0, 0x6, 0x7ff, 0x3, 0x5, 0x5, r4}, 0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e24, 0xb, @private1, 0x6}}}, 0x84) 2m35.981764336s ago: executing program 0 (id=3683): syz_open_dev$vim2m(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xb) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000280), &(0x7f0000000200), 0x0, 0x0, 0x82}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x4, 0x5, 0x2, @loopback, @loopback, 0x7800, 0x8000, 0x205, 0xca6}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xfc, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x60, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x78, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r5, r5, 0x0, 0x9) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x2842, 0x108) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 2m34.021687799s ago: executing program 39 (id=3638): openat$fb0(0xffffffffffffff9c, &(0x7f00000005c0), 0x101000, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000180)=[0x1002, 0xa, 0xf909, 0x200005, 0x80, 0x1, 0x7, 0x10, 0xfffffe01, 0x4d, 0x4, 0x2, 0x88, 0x8811, 0x2], 0x1, 0x4000007}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x1f, 0x0, "4a349800000000806913220909000909000a48"}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000400)=[{r1, 0x1}], 0x1, 0xa) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0x0, 0xb86, 0xc84e, 0x87fb, 0x0, 0x8001}) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x9) r4 = syz_io_uring_setup(0x77ba, &(0x7f0000000480)={0x0, 0x1b32, 0x100, 0x2, 0x335}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x3a, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)={0x254, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x100, 0x35}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xd4, 0x2a, [@measure_req={0x26, 0xce, {0x4, 0x1, 0x8, "86c23fe20003c5f4d8ff1be1540a96c1228ef5a35ddfabbd63a68f69665d02338629493ccbe8c274f9acf588f80b88aff041edb6b8f7ab769f2eb434d6a05a511be120b0f86eb983441f1088c370fbdbdafa1490337710f6df0a716e21b90ff6bb9762d5e2dfc171bf2307aec1000d28756dd0faad715361f6b203ff914a7d88935cc36637e73e1159ef6c1055e038445dfe43296469cb888db5a11fd770286f00889b1be53343549a92275dcc4ea7a49955b322af84e6c1a3d65315d170b9ea18b05efa05dd898e7886dd"}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x8, 0x34, @random="6ed9e236"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xec, 0x2a, [@erp={0x2a, 0x1}, @ssid={0x0, 0x1f, @random="da8102f29379390b66d471afc23d91715192b08c0861b6c27cfbc566976aee"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x4, @device_a, 0x6, @value=@broadcast, 0x5, 0x5, @broadcast, 0x2}}, @ibss={0x6, 0x2, 0xd36}, @random={0x40, 0x97, "de7eadd3b9548d5b154a1bee493ae332f06af4eb6d8cbb37e8884fd91876098d04538f97a2e274d94df3d3d7eceeefc4d9715965146798d6b828e1168c911a44239ca34bdca7169026062ccd57606dbd85ccb41022a5005a7e8e82db1b94824a1a7cb25158cfe3f9b922b067b6ce418f70cef00bc6b5f2644561d80079507a0ef89ad445c37fc3a81f4c776a5ce1972c9c49a63a1a23e4"}]}, @NL80211_ATTR_IE={0x2d, 0x2a, [@random={0x9, 0x27, "fe46e0a93e56441de0c13597e6e500490b2c6145ea5fe33789ff6ec09a6cbe8651f3f10b9f6764"}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m24.443819264s ago: executing program 3 (id=3718): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt(r1, 0xffffffff, 0x4, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x800455ca, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x3, "270500007a0000006451b3f79f985d1d00"}) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x7, 0x0, r4, &(0x7f0000000100)="bc", 0x1, 0xfffffffffffffffc, 0x0, 0x2}]) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x141800, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x1) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000240)='.\x00', &(0x7f0000002280)='ext4\x00', 0x8000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0004aabd7000fcdbdf25020000000c00020008000000000000000c000300010400000000000008000116000000000800010000000000a1853fea844e6b367fd819c92ca2a361d4ff0db0c488d04ad5e696a190ff30713cb04b49e4455e811f274d556747ddea9b636df5c9c94df4086085f141fd3c755744df9ef0bc72a4107608da8336aa26883a57c665d6137dacdec49fe33d31acd8827de8eeeae0eb3ba333560a01bf973f5c638dd1d4d77415b7f1a1e995eb94249bbdcb2623303e1dbeef4f14120c7e4f2ada3766606fe221c312e19e05cf3be1f2aed794aa00555919bd2224c660f6a5495d476ddad5cff389544d9a76b9883bbafae722206c412979ab077cfce358c945b4f21bd64ed41542a9a04198b55634b74c91f5c810b2d80fd40c067ee97f12c40fac3d6b9c4f026c5c194161cc9f44178acde8b9cc0b192602db968a8138b986935a77e0ca3eb92505ac10ee068ae56b2c19e536dd66dbb8cf23e1f6de34258683e910123e0c1a87fd96777470e221c970e28d1eb3e9f45c59416156bed4dea7fdc905f5c51dd09de45c534ce41024d03e0541"], 0x3c}, 0x1, 0x0, 0x0, 0x40004004}, 0x8010) 2m24.061776711s ago: executing program 3 (id=3719): r0 = socket(0x8, 0x800000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c9892f", 0xe}, {&(0x7f0000000000)="e3bec8b74fef", 0x6}], 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) writev(r2, &(0x7f0000000080)=[{0x0}], 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x50012, r0, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000000500)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x80) getdents64(r5, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x20000000f800, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}, @IFLA_EXT_MASK={0x8, 0x1d, 0xfffffff1}]}, 0x44}, 0x1, 0xba01, 0x0, 0x20000000}, 0x40080) ioctl$SIOCPNENABLEPIPE(r0, 0x541b, 0x1000000000000) 2m22.944251952s ago: executing program 3 (id=3722): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200180002"], 0x70}, 0x1, 0x7}, 0x0) 2m22.67300685s ago: executing program 3 (id=3724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000c"], 0x50) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@float={0x5, 0x0, 0x0, 0x10, 0x8}, @float={0xb, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x56]}}, &(0x7f0000000a00)=""/4096, 0x33, 0x1000, 0x0, 0xffffffff}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) fsopen(&(0x7f0000000700)='affs\x00', 0x1) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc48b}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xca}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c860) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0}], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) 2m22.343078451s ago: executing program 3 (id=3726): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x8001, '\x00', &(0x7f0000000040)=0x4}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffe}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb7d3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r1) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40015}, 0x20000804) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000400)={0x0, 0x4, 0xda, "40ef1cd33d8ab62c1c26f51931166e2c0244fff0772e4647c5c717b768dbae9236123a716185ede59b9930173ddb8c22b616d45f68428af44fd11c03b2baeee8fe2bc7ce3d6cbd6c8d0bad9a23c2e8a22dd619e3ec07b0a7cfaf5dd780027198b8f675b4c02d04f5488658b09f235a481b63817f26570eb4ea8d42e59475596891259afcb27d5a838eab8ee2cc5ed91202ec36130c3226416f9636ecf98241028631c51ba603c0d862d434659b00d6b87848a30cf381853c3b26a52db117f7e10ca4f460cea29d1f865859340d4b6bf26151d32fad831d8dc36f"}, 0xe2) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000500)) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000540)={0x0, "9a322401eb6042630d0900b849f6bfec"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000001540)={0x0, 0x91, 0x1, [0x7, 0x8, 0x6b3ea356, 0x3, 0x81], [0x22a, 0x7, 0x9, 0x8b, 0x2, 0xb0, 0x0, 0x1ff, 0x0, 0x4, 0x9, 0xf, 0x4363df13, 0x8000000000000001, 0x7, 0x560, 0xd6, 0x5, 0x0, 0xffffffffffffffff, 0x401, 0x9, 0x8, 0xa, 0x6, 0x5, 0x6, 0x7, 0x5, 0x6, 0x5, 0x100, 0x3, 0x2, 0xd, 0x1, 0x4, 0x6, 0x3, 0x3ff, 0x4, 0x3ff, 0x355, 0x6, 0x9, 0x476, 0x8, 0x4, 0xe3ce, 0x7ff, 0x2, 0x1, 0x2, 0x101, 0x4, 0xb, 0x5da9, 0x100000000, 0x4, 0x1, 0xe5ff, 0xffff, 0x5, 0x7, 0x10001, 0x1ef, 0x5472, 0xf, 0x100000000, 0x3, 0x0, 0xa493, 0x1, 0x10000, 0x1, 0x5, 0x1, 0x8, 0x8, 0x1, 0x6, 0x9, 0x80, 0x0, 0x5, 0x2400000000000, 0xfffffffffffffffa, 0xffffffffffffd1d4, 0x9, 0x7, 0x40, 0x8000, 0x6, 0x1000, 0x3, 0x6641f5f6, 0x9, 0x7fffffffffffffff, 0x6, 0x9, 0xa, 0x2, 0xc0e, 0x4a905b11, 0x2, 0x3, 0x0, 0x7, 0x6, 0xfffffffffffffffa, 0xe, 0x2, 0x7, 0x6, 0x80000000, 0x3, 0x0, 0x7, 0x8, 0x5, 0x4]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001980)={0x6, 0x6, {0x7, @struct={0x71e}, r5, 0x7667, 0x5, 0x7f, 0x3, 0x84, 0x0, @struct={0xaa57, 0x80000000}, 0xd, 0x2, [0x1, 0xf, 0x6, 0x1, 0x9, 0x1]}, {0xefc, @usage=0x9, 0x0, 0x2, 0x7ff, 0x2, 0x2, 0xaa, 0x53, @struct={0x9, 0x8}, 0x13, 0xff, [0x1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8]}, {0x100, @usage=0x4, r6, 0x6, 0x2, 0xffffffffffffffff, 0x3, 0x2, 0x1, @usage=0x42, 0x7ff, 0x5, [0x1, 0x8, 0x4, 0x200, 0xc]}, {0x3, 0x7fffffff, 0x7}}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000001e80)={&(0x7f0000001d80), 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x60, 0x1405, 0x300, 0x70bd26, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendfile(r4, r0, 0x0, 0x675) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x7, 0xf, 0x7, 0xfffa}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r9 = syz_clone(0x80021000, &(0x7f0000002000)="0cb41ec1bdbbb98852daa9038a7d24a091b1fe078b4a1d61a23026e50ee4ff0dc0a53cbda0e229f30e75572841bb0ca003d310355b5f02497043ec430f1e2ee1bc105a8b5d7e00d9b48e2a1ea63bda3bc610124252d585c7b571bc98768d99cb19cc8b5380d8783297eff7c8d1aeb1d029807ea3e990408959f8de2410", 0x7d, &(0x7f0000002080), &(0x7f00000020c0), &(0x7f0000002100)="7980247cb9156ac8dce98fa5d0b4a6a636c434bc8a8e41de90382ab333f42fea67cc4af88230eb43008e08c5978e6916bb0f81663c433cc8983ab949003073f695fd8f4c2a48715d7ddf11e506de8c0cb0486d078a2adcf6e5a223d39faf8a87dfd6807591c326fd023e96a70330b912644e9252") sched_setscheduler(r9, 0x6, &(0x7f0000002180)=0x80) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000021c0), 0x402, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r10, 0xc0189376, &(0x7f0000002200)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), r11) sendmsg$NL80211_CMD_ADD_TX_TS(r12, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x60, r13, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r11, 0xc0189377, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r4, {0x4, 0x4}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r14, 0xc01064c8, &(0x7f0000002440)={0x8, 0x0, &(0x7f0000002400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000024c0)=0x4) 2m21.752056902s ago: executing program 3 (id=3728): r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e2}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000000400000004"], 0x20) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 2m20.088373397s ago: executing program 40 (id=3683): syz_open_dev$vim2m(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xb) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000280), &(0x7f0000000200), 0x0, 0x0, 0x82}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x4, 0x5, 0x2, @loopback, @loopback, 0x7800, 0x8000, 0x205, 0xca6}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xfc, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x60, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x78, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r5, r5, 0x0, 0x9) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x2842, 0x108) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 2m6.074472905s ago: executing program 41 (id=3728): r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e2}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000000400000004"], 0x20) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 2m3.311529889s ago: executing program 7 (id=3731): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00010400442139d5aa2e8b2d"], 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) syz_io_uring_setup(0x110, &(0x7f00000001c0)={0x0, 0x10, 0x0, 0x3, 0x80}, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') close(0x3) lseek(r4, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000016000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2], 0x18}}], 0x1, 0x0) 2m3.125368974s ago: executing program 7 (id=3770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000480)=0x1000000) socket$unix(0x1, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r6, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r6, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) (async) close(r4) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x1) (async) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000480)=0x1000000) (async) socket$unix(0x1, 0x1, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) (async) setresuid(0x0, r6, 0x0) (async) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r6, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) 2m2.280264562s ago: executing program 7 (id=3774): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200001402"], 0x70}, 0x1, 0x7}, 0x0) 2m1.995992991s ago: executing program 7 (id=3777): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x20, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x20, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) syz_emit_vhci(0x0, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7d}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000001140)="fba2fd68dfbaea5a726f1fa86ab86bc3f9097bc10f99050ba32f2149eb2d054a4756157ca77357bc72ff279a9dfc85e503a04a7bcb57d657fd643c263dc0048f75f856875ab2d71c2e7bd8321973db1fd7c979c846790e5a833cd108b6c88c2ab335f97a6d2f9cad321ab9eea5858bb7cee5d90ada898418d6fd37a8a68550d1e32133a94905cbca3be9f330e27e3995444e906dfd1d0cdc7a0c8e8e0c5805cdb89bfb71f4b1faed27c85a8cc5167dc098d47c12dd33f35c20a37a3bd55df8c2f2cd62817ba330e3823add1063911c726dc4988308f83e731ff25f3706c4c140d9ba7ef44b51d2dc8f7dd9d4fe630205a1bb25849bbc", 0xf6) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000001140)="fba2fd68dfbaea5a726f1fa86ab86bc3f9097bc10f99050ba32f2149eb2d054a4756157ca77357bc72ff279a9dfc85e503a04a7bcb57d657fd643c263dc0048f75f856875ab2d71c2e7bd8321973db1fd7c979c846790e5a833cd108b6c88c2ab335f97a6d2f9cad321ab9eea5858bb7cee5d90ada898418d6fd37a8a68550d1e32133a94905cbca3be9f330e27e3995444e906dfd1d0cdc7a0c8e8e0c5805cdb89bfb71f4b1faed27c85a8cc5167dc098d47c12dd33f35c20a37a3bd55df8c2f2cd62817ba330e3823add1063911c726dc4988308f83e731ff25f3706c4c140d9ba7ef44b51d2dc8f7dd9d4fe630205a1bb25849bbc", 0xf6) 1m58.341078025s ago: executing program 7 (id=3789): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xf8, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0xe6, 0x3dff, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb"]}]}, 0xf8}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) 1m58.246622025s ago: executing program 7 (id=3790): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x17, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x31a8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x76, 0x21c) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) syz_open_dev$vbi(0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000300)='./file0\x00') setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') 1m42.356094416s ago: executing program 42 (id=3790): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x17, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x31a8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x76, 0x21c) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) syz_open_dev$vbi(0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000300)='./file0\x00') setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') 1m38.774214734s ago: executing program 6 (id=3841): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xc, 0xa}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_to_bond\x00', 0x4000}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="03000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8040) (async) socket$netlink(0x10, 0x3, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) (async) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1bb25059e55ae3f014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb5", 0x87}], 0x1}, 0x44850) (async) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff}, 0x6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f0000000380)=@ethtool_gstrings={0x1b, 0x2}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4, [0xfffffffd, 0x0, 0x0, 0xffffffff]}}) 1m33.711542078s ago: executing program 6 (id=3853): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), 0xffffffffffffffff) openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@can_newroute={0x2c, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "457175da814aad13"}, 0x7}}]}, 0x2c}}, 0x40) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @multicast}]}) syz_open_dev$MSR(&(0x7f0000000180), 0x1000, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x22, 0x4, 0x6}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, 0x0, 0x10103, 0xc574450d1af299b9}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r4, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r6}, 0x20) r7 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0xffffffff, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x8}}}}}, 0x0) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x400006a, 0x40001140, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x200) io_setup(0x60, 0x0) 1m33.071814969s ago: executing program 6 (id=3857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@redirect_dir_off}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f0000000040)={0x24, @long={0x3, 0xfffd, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r9, 0x29, 0x42, 0x0, 0x0) r10 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) preadv(r8, &(0x7f0000000180)=[{0x0, 0xed}], 0x1, 0x6, 0x6) 1m30.39993727s ago: executing program 6 (id=3867): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000180)) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x44c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x11, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x4, 0x9, 0x735152a5, 0x6, 0x2a9, 0xa7, 0x25, 0xcb8, 0x3, 0x7894, 0xffffffff, 0x7, 0x2, 0x100, 0x8, 0x1, 0x3, 0x0, 0x40000000, 0xff, 0x6, 0x7db0, 0x5, 0x3, 0x3, 0x4, 0x7, 0x3b4c, 0xc1fc, 0x4, 0x10000, 0x4, 0x5, 0x1, 0x57a, 0x65530070, 0x6, 0x7, 0x0, 0x8, 0x3, 0x3, 0xb2a, 0x8001, 0x1, 0x7, 0xa, 0x6a8, 0x5, 0x3, 0x8000, 0x7, 0x6, 0x10000, 0x1, 0x4, 0x7, 0x1, 0x4, 0x8, 0x6, 0x9, 0xffff7fff, 0x2, 0x0, 0x36, 0x4, 0x80, 0x5, 0xc6, 0x5, 0x4e5, 0xfffff169, 0x7ff, 0x9, 0x6343, 0x81, 0x7, 0x7, 0x2cc, 0x9, 0xb, 0x200, 0x8, 0x4, 0xff, 0xffffff80, 0x4, 0x8, 0x0, 0x1000000, 0x3, 0x1, 0x1, 0x10000, 0x10, 0x5, 0xa10c, 0x83, 0x8001, 0x800, 0xfffffffe, 0x497, 0xffffbc00, 0x140, 0xfffffeff, 0x7c, 0x5202, 0x9, 0x3e, 0x3, 0x1, 0x8, 0x10, 0x10000, 0x2, 0x8001, 0x1, 0x2, 0x200009, 0x6, 0x3, 0x999, 0xa, 0x1ad, 0x2, 0x4, 0x8001, 0x801ff, 0x5, 0x5, 0x10001, 0x6, 0x8a8, 0xcea, 0x6, 0x1, 0x1, 0x5, 0x8000004, 0x8000, 0x6, 0x8, 0xfffffff8, 0x0, 0x9, 0x80, 0x1, 0x650e, 0x1, 0xffff, 0x4, 0x5, 0x8001, 0x401b525b, 0xffff, 0x7f, 0x0, 0xf7, 0x0, 0xff, 0x7c, 0xeae1, 0x5, 0xfffffffa, 0x4, 0x7fff, 0x3, 0x9, 0xf8d, 0x9, 0x8, 0x9, 0x813c, 0x1, 0x5, 0x5, 0x7, 0xb, 0xaec, 0x0, 0x40, 0x2, 0xaec, 0x800, 0x8021, 0x8, 0x6, 0x7, 0x8e7, 0x101, 0x522b, 0x9, 0x77f, 0xffffffff, 0x8000, 0xffff, 0x7fff, 0x20001, 0x5, 0x24, 0xd, 0xc, 0x1, 0x101, 0x9, 0x1, 0x1ff, 0xc5, 0x6, 0x3ff, 0x190, 0xd, 0xc, 0x0, 0x2, 0x10001, 0x3ff, 0x24cb, 0x8, 0x2, 0x6bed, 0x3, 0x1000, 0xfffffffe, 0x7, 0x72, 0x5, 0x3, 0xe328, 0x9, 0x7, 0x6, 0xe, 0x9, 0x5, 0xffffffff, 0x0, 0x68ec, 0x8, 0x5, 0x1000, 0xfffffc2f, 0x4, 0x4, 0x5, 0x3, 0x8, 0x3, 0x4, 0xfffffa03, 0x1ff, 0x10, 0x8, 0x9]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x44c}}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010000000000000000000218"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000d80)=""/190, 0xbe}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)=""/226, 0xe2}], 0x5}, 0x3}], 0x1, 0x40010001, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000002190a0104000000000000007800000000"], 0x14}}, 0x8004) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001080)=@o_path={&(0x7f0000000480)='./file0/../file0/../file0/../file0/file0\x00', 0x0, 0x4018, r4}, 0x18) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r10, 0xaece) close_range(r5, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x2, 0x2, 0x5) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000340)="18000000010003", 0x7) sendmmsg$inet(r4, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="0c1874268c0000bd3f4c2ee4c3e4fdfea05e8e04a1a42a60557fb65e7388442bcb546079b365311561bb95fb1aff7128184ea4ca0f437142f62b8f3200e2eb47d44e67968ef5a2b24506d380fd62fac61aa99133d75de2774168ed1224dee2e650791e490c7c3f514a1b39c61d40894d45c2205a1d988b31cd6dc9ba0908fb6e4cd35d064b5085cd470e8282240c64159ba4b6b084446629f37ec8700db7d6dea32c10c93f7f19f2de78816ca02e67b7ab59f59fdf2bea3156f5938df17892e404e8ae", 0x6e}], 0x1, 0x0, 0x0, 0x2000000}}], 0x800000000000369, 0x44000) 1m30.042282828s ago: executing program 6 (id=3868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1f, 0x1, 0x9, 0x2, 0x0, 0x1}, 0x50) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)="19515c3cd29133c3f5bba33f98c1bc72ee65a986c3436c59046d2d9d30b5182783621e60dc058e683d47448400a82dd0feaed61969a36a0075acbca593bc70f0ae7183e2d406f0c8e81e457abd0ed7c31ed6d40296fa843685a58b86bc6996443a50a8c7e6e51b1ad47c92", 0x6b}, {&(0x7f00000002c0)="16f5bf8178b8856a5c0f3c9177afa1b91b220a6e5aecb6b2a4e2b429a6988c", 0x1f}, {&(0x7f00000003c0)="564e157bb5252c3cd5b733e429e78eb8e3c3696241eb979166c23b7ee12eb1183a05874dca66f1c229ca17de52b7ff343e1ff520c24a03ccf74e63dfbc09d4a22642b2377a4a03670e17291d30f76a021a659f572f4d510c8862d74d52bd807df533f0d769c86c86c7a4", 0x6a}, {&(0x7f0000000440)="9f6a27f14b3bf7d9248125de4654ef50cac73d49ef33be06908b7dbd6b5575f26d4840e23af3921edfe6a0e3f371d062e036bd6d2bcb7ecc611ad52b562d757e98a3a4a6ec951004dab049e1d68a6200659f1f8c6c458a182ab390e3545d4790c2548803adf786aa6d8043c4e71e4d2fee89fa93fcbeebae589fd2a0be6d1d44464962b80c37db4ea274a0b7e1d1f1ed36b5cdb62044562d65f29c21157ff7f045af732961a341bf6d3bb7977cf6a1392a19dc7a41a28d55698f1ba6deebd2d2", 0xc0}], 0x4, &(0x7f0000000940)=[{0xc8, 0x107, 0x16b, "c0dfcbe2f4b0aeb28a3b942ecef9a1ada8d377528531d00f3350efe4bf49f8b1cbe711867930dcae43b45d06e495255fbf4ee948b5a2bc6ecc184fca23eee7a21746054fd79b16b8b132e2605f45afefd07b061ed0563e9ecfc7bc2f4a4c596d51c4332faf274089655490ea2056ce94c3c2cf9cce37e7c453e5255e02eebc22c834d99bcdd0b8fac5300b019c127718c7d1b871e9a8181b4ceea94c8794f5084d3443edad34bbc917c784b1f1844e0348"}, {0xf0, 0x1, 0x2, "19e4426ec5721648108f26a07fb9a2e94c738664ae5e27643e3902185d1d2ddbba67903d05c809ce49fd633a3b43a3c15c2202b20bd06e532c2209887270836498385ca4f1e8395ebb701855685c9675dcf5eceb67cce2ea393ce06761576cf0bdd46785f6ee1229c56700e7f53b7025a717a372e04084cad4efdb72c845d51a1f4263775410d788efcf036c23608f4219e202409fa14c842545f85d60bb7d2930c43e02b8c472a249d108d088a136d5d359687d51d753df98cf06578edb71dcf3c16da88b1541b8028da6a1af31d9acc9db3eae5c8df02624d6c4aa"}, {0xf0, 0x104, 0x1, "051ba7a4a7afa9a7c9ab14a1fc8663518d177de03f529ab0b8aa7722c1e72f39058438273028fd0a12ec33475ac0066916bc34a69f2a7b2f0384c0d6d686ca4d7eb4d084c31b4311ae112f18ae21ff5a510d7c41830ea8bc8767a87a7032a194cb0250ea0eb7e1124224220655a0eb3b4bf16af24b66f8ddfc4d56aee6da221c99980a7d930dcc53f38e063dcc58cba6623b8b69a8c05431f207a29db9dd9cf91dfe0c777c30db57607bf80b1435bbf34acfe8bfcd03f35bab0d7f638fb3017f6c2e78d5f4aae89c50acf82a65ecab8c3bc4277aa11704d9911a941d521a48"}], 0x2a8}, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000002000000040000000400000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000532ec49b60ba45000000000000000000000028cbaeb690b891c7f19061d7aa3dceebcaa2af5eee1dd7b906ec7cb032cf949befa7835ecb3c5614670bfa5c334e116d9169cabf6ecb966350e2435c49ff7fb03fe186670a"], 0x50) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0xc06c4124, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x102, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x7, 0xfffffff8]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000000000000089e7cc68daff896da449146dc880a4cfb8c2e0c6a29240fec0ed7d5b0f5e4b6e98057c32bde623ebfee3457e7063f9f660fa6ad72784bdc6a521c9b7ef41a2cbcef156abf108a1526f0ff57ce23070ee21047c893b42b18a055e9aefab3a0520d24e"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r4, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000c00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0], 0x0, 0x27, &(0x7f0000000cc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f00)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0xe9d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1d, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000002000200ff95000000000000000000000000000000f504dfc7edb6669a1e66a567fc01993c9c3f4cbce3188dbf579d0b016d70ae3811049167533262e36fd8a9eb7c79faffd889dce21cac83d41248aaa86539eb5db1052a21d4271567b8345f"], &(0x7f0000000680)='syzkaller\x00', 0x10, 0xd5, &(0x7f0000000780)=""/213, 0x41100, 0x43, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x1, 0x9, 0xffffffff}, 0x10, r5, 0xffffffffffffffff, 0x6, &(0x7f0000000f80)=[r1, 0xffffffffffffffff, r6], &(0x7f0000000fc0)=[{0x0, 0x5, 0x3, 0x8}, {0x1, 0x2, 0x7, 0x5}, {0x3, 0x2, 0xa, 0x4}, {0x1, 0x5, 0x9, 0xa}, {0x5, 0x4, 0x9, 0x5}, {0x3, 0x4, 0xa, 0x7}], 0x10, 0x7}, 0x94) getpid() r7 = socket$kcm(0x10, 0x2, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001180)={0x28, 0x0, &(0x7f0000001100)=[@clear_death={0x400c630f, 0x3}, @release={0x40046306, 0x1}, @decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x1}], 0x17, 0x0, &(0x7f0000001140)="af780d7e86a7fa5eb20e0d95039bba5f2775cc0b4a7426"}) setresuid(0x0, 0xee00, 0x0) sendto$inet(r8, &(0x7f0000000580)="5ca7bb8fde0ce88fa02d07eec0fa3052b3b19477a8440b3167a4cd48bed723681afe25e1ee1d5875477d31cc830ebc626b5f3b365ce4bbef89520e9868956159a16ec3360589", 0x3d5bb649f2c3467, 0x40000d5, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="390000001400810010003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r10 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x6009, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) renameat(r9, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r9, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00') r11 = socket(0x15, 0x5, 0x4) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, 0x0, 0x0) 1m29.572497722s ago: executing program 6 (id=3869): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="34000000000000000000ffff0700000083"], 0x38}}], 0x2, 0x80) 1m29.167126322s ago: executing program 43 (id=3869): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="34000000000000000000ffff0700000083"], 0x38}}], 0x2, 0x80) 1m7.616562952s ago: executing program 4 (id=3934): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@datasec={0x6, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x2, 0x2}], "8f54b7"}, @datasec={0xd, 0x1, 0x0, 0xf, 0x20, [{0x3, 0x800, 0xffff}], '\x00'}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2f}, 0x28) 1m7.260012624s ago: executing program 4 (id=3935): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_usb_connect(0x5, 0xc1, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x5f, 0x47, 0x68, 0x8, 0x19d2, 0x1062, 0xa83c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x1, 0x1, 0x7, 0x20, 0x5, [{{0x9, 0x4, 0xd4, 0x81, 0x4, 0xff, 0xff, 0xff, 0x10, [], [{{0x9, 0x5, 0xd, 0x1, 0x10, 0x6, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb1, 0x3}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x7a, 0x12, 0x1, [@generic={0x3, 0x22, "02"}, @generic={0x68, 0xc, "b792ffdbf6fc2a9ae71ac6c48f67d37a4181c6195a85b7e96cf96ea5329d0c22ab20bcca3add5a3faf0b1f40aac0f6a743fcb4d0f5836a779806dd14ca767e4d177e705eba3bef971fc3a457f8e874bc86a1b94754284e295b8398e09189ffe3d161e39308fa"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x9d, 0x1, 0xb}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x9, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xf31}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x5, 0x6, 0x0, 0xff, 0x8}, 0xfb, &(0x7f0000000540)={0x5, 0xf, 0xfb, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "3d23fb5db71c76063217fa458bdc02e1"}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0x0, 0x9, [0x0, 0xff00, 0xc000, 0x3f3f, 0x7f80c0]}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "f5bc2b84912b65dffaa19a5a056ed5ad"}, @generic={0xa1, 0x10, 0x4, "1b14a2c5346b83a84735df17278258eebef8fd1fbe53075abc454790e51afba3a422edb1e719a6c31cc3b2aac014c5b690cf1eacbd5ce9c35acab28ec59cd323e8f1b7f9d0263ea6b593d54d68074c9b19159d2a0a5002a3347b581a2f160837d550c21187f2f532cfb5ea5b8feae738167cec7c66fca30e97bccbaf8fdcf0e8d6debdc9bab459a0415a3f3a0248c2f2ed58904f9ffba9bc493bb01fb9a5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x8, 0xd}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x459}}, {0x49, &(0x7f0000000680)=@string={0x49, 0x3, "df4b37a6f3026065e366c06f1e128d0dd9eaec8e2399192cc460b34c3ba3ef385e683618152cc9272ffeb96560086b878fa4464a55bbcdb374e21c201ec85b64231fbb40eaccfd"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x410}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r2 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f00000008c0)=[{&(0x7f0000000840)=""/73, 0x49}, {&(0x7f00000007c0)=""/77, 0x4d}], 0x2, 0x8001, 0x0) syz_pidfd_open(r2, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) open$dir(0x0, 0x400000, 0x100) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) shutdown(r4, 0x1) recvfrom(r4, 0x0, 0x0, 0x61, 0x0, 0x0) 1m2.942227064s ago: executing program 4 (id=3946): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), 0xffffffffffffffff) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x22, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r2, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r3}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x7fff) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000040)={0x2, 0x200, '\x00', 0x1, 0xf}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140ff"], 0xc0}, 0x1, 0x0, 0x0, 0xc844}, 0xc4) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 1m1.840182182s ago: executing program 4 (id=3951): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x100, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0xed, 0x3dff, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x100}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) 1m1.612436117s ago: executing program 4 (id=3953): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000240)) r3 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) r6 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000080)={0x4, @raw_data="8394cca43e8bbf57d85ae099f79e1b3f885435515dd6e52d6c1d39ca185a6d426073826786e07cfaafdf020be0ca83939f62141324bd7d84929d53802fe47caca35fbec246350af6ca05ccb65c6ad4d62f77a0cb88654b8a107d73311f5eba05bb7534f92b56c17569298eb4a7030e64fb83ba10623a6eba96c9595eaa253aec5abdb0dd7bf20b24bae8abffe0495d2bc601f492b119107602cca79bcedb7e4f56d27d1057e57f285709224def8df1d2c15d32f1ba8ee3953519b6d980b946e686f70f661f2cce36"}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0xfffffffffffffe7a) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000000c0)={0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x8000) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@nfs_export_on}]}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 57.579975308s ago: executing program 4 (id=3959): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sync() (async) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x10) (async) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0090780000000000"], 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r8, 0x4008941a, &(0x7f0000000180)=0x2) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400001, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 42.487713896s ago: executing program 44 (id=3959): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sync() (async) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x10) (async) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0090780000000000"], 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r8, 0x4008941a, &(0x7f0000000180)=0x2) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400001, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 37.276123512s ago: executing program 2 (id=4015): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xc01c2, 0xc2) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000000280), &(0x7f0000000340)=""/218}, 0x20) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)=':*#\x00', 0xffffffffffffffff) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000240)={0xa, 0x4e23, 0x2000, @private2, 0x1}, 0x1c) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) fsopen(&(0x7f0000000100)='msdos\x00', 0x0) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) 36.315062652s ago: executing program 2 (id=4022): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d40)={@map=r1, 0x7, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) capset(0x0, &(0x7f0000000080)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in=@rand_addr=0x64010102, 0x0, 0xfffd, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in=@empty, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0x3f9}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r2, &(0x7f0000000180), 0x0, 0x2400fe52) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) r6 = socket(0x10, 0x3, 0x0) fremovexattr(r6, &(0x7f0000000180)=@known='security.apparmor\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) r8 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r8, r8, 0x24) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x5, 0x7ff, 0x4, 0x2400, r1, 0x9926042a, '\x00', r9, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x2}, 0x50) prlimit64(r8, 0x0, &(0x7f0000000080)={0x2, 0x7}, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) 32.551897705s ago: executing program 2 (id=4030): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108e0102030109022400010000100009040002020083ec0009050602000202000a09058202000200011000"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000980)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000040)=0x405, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r6, 0x154e, 0x0, 0x41, 0x0, 0x0) shutdown(r2, 0x1) syz_usb_control_io$uac1(r1, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000300)=0xe) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000340)={0x0, 0x1, 0x3, "640de63f8210b38bdfa65d2ed7b7728103a87cda8d537858abf95403e26dd96a", 0x50424752}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000100)=0x2) pread64(r0, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) 29.375823472s ago: executing program 2 (id=4041): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300)) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x4014, &(0x7f0000000600)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e3a332f", @ANYRESOCT]) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x4014, &(0x7f0000000600)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e3a332f", @ANYRESOCT]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x20050800) 28.991915992s ago: executing program 2 (id=4043): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xfffffffffffffcf8, 0x0, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r3, 0x0, 0x2) socket(0x1e, 0x4, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) keyctl$read(0x20, r2, 0x0, 0x0) sendmsg$AUDIT_USER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000040)=ANY=[]) 26.870790689s ago: executing program 2 (id=4051): sysinfo(&(0x7f0000000340)=""/193) r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x49}, 0x10) listen(r1, 0x3) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x40000102, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x20000000008, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d0000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0xfea2, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x40) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x1, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x2b}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8801}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00'}, 0x10) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) mkdir(0x0, 0x32) syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) 11.668546346s ago: executing program 45 (id=4051): sysinfo(&(0x7f0000000340)=""/193) r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x49}, 0x10) listen(r1, 0x3) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x40000102, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x20000000008, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d0000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0xfea2, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x40) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x1, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x2b}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8801}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00'}, 0x10) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) mkdir(0x0, 0x32) syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) 11.319539402s ago: executing program 8 (id=4100): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) write$snapshot(r1, 0x0, 0x0) close(0x3) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}}}, 0x10) 10.84865029s ago: executing program 8 (id=4102): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="30704b000d0a010800000000000000000a0000010900020073797a31000000000900020073797a32000000a4652f5f358a2ea5be2ef70bf4c00004000380"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x14141, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0xb8}}, 0x4000040) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x40001) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x565201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.474401491s ago: executing program 8 (id=4103): fanotify_init(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf250a0000000c009900040000001f000000090007004274e10ad400000038005080110001004573423a66b52879b9aaa8aea900000005000900000000001000040063ab779f3ed393349d9877cb0800030005ac0f0048005080090001002c9c62f04800000009000100c8f0e8899f0000000500090001000000090001008d6cc839b1000000050009000000000004000500040006000800088004000100"], 0xac}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000082000040"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) close(r5) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xb, 0x0, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x10000000}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 8.082341445s ago: executing program 5 (id=4107): mq_open(&(0x7f0000000200)='cbc(camellia)\x00', 0x40, 0x20, &(0x7f0000000240)={0x2, 0x80000001, 0x81, 0x48171c8d}) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000340)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000ffff25bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="09000000877b00000000000000007a158ced0000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) syz_pidfd_open(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x1254, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x42, 0x3f, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x1000400) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x8600, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x20010, 0xffffffffffffffff, 0x3c98d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 7.915912514s ago: executing program 8 (id=4109): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0xd0800) syz_usb_disconnect(r0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149882, 0x60) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000300)={0x7fff, 0x6}, &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(&(0x7f000070c000/0x4000)=nil, 0x4000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r5, &(0x7f0000000480), 0x0, 0x0, 0x3) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = dup2(r7, r7) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x11, 0x10, 0x0, &(0x7f0000002f00)) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) close(r6) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) 6.968298568s ago: executing program 5 (id=4111): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x442) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000680)={0xa, 0x4e23, 0x5, @private2}, 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'veth0_macvtap\x00', {0x2, 0x4e24, @multicast1}}) 6.716534984s ago: executing program 1 (id=4113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000280)='#', 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0xde, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0xe4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2c6b8ffe}]}, @CTA_TUPLE_MASTER={0x94, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x810) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) r7 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r7, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000180)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 6.655576879s ago: executing program 5 (id=4114): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_usb_connect(0x5, 0xc1, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x5f, 0x47, 0x68, 0x8, 0x19d2, 0x1062, 0xa83c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x1, 0x1, 0x7, 0x20, 0x5, [{{0x9, 0x4, 0xd4, 0x81, 0x4, 0xff, 0xff, 0xff, 0x10, [], [{{0x9, 0x5, 0xd, 0x1, 0x10, 0x6, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb1, 0x3}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x7a, 0x12, 0x1, [@generic={0x3, 0x22, "02"}, @generic={0x68, 0xc, "b792ffdbf6fc2a9ae71ac6c48f67d37a4181c6195a85b7e96cf96ea5329d0c22ab20bcca3add5a3faf0b1f40aac0f6a743fcb4d0f5836a779806dd14ca767e4d177e705eba3bef971fc3a457f8e874bc86a1b94754284e295b8398e09189ffe3d161e39308fa"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x9d, 0x1, 0xb}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x9, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xf31}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x5, 0x6, 0x0, 0xff, 0x8}, 0xfb, &(0x7f0000000540)={0x5, 0xf, 0xfb, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "3d23fb5db71c76063217fa458bdc02e1"}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0x0, 0x9, [0x0, 0xff00, 0xc000, 0x3f3f, 0x7f80c0]}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "f5bc2b84912b65dffaa19a5a056ed5ad"}, @generic={0xa1, 0x10, 0x4, "1b14a2c5346b83a84735df17278258eebef8fd1fbe53075abc454790e51afba3a422edb1e719a6c31cc3b2aac014c5b690cf1eacbd5ce9c35acab28ec59cd323e8f1b7f9d0263ea6b593d54d68074c9b19159d2a0a5002a3347b581a2f160837d550c21187f2f532cfb5ea5b8feae738167cec7c66fca30e97bccbaf8fdcf0e8d6debdc9bab459a0415a3f3a0248c2f2ed58904f9ffba9bc493bb01fb9a5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x8, 0xd}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x459}}, {0x49, &(0x7f0000000680)=@string={0x49, 0x3, "df4b37a6f3026065e366c06f1e128d0dd9eaec8e2399192cc460b34c3ba3ef385e683618152cc9272ffeb96560086b878fa4464a55bbcdb374e21c201ec85b64231fbb40eaccfd"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x410}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r2 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f00000008c0)=[{&(0x7f0000000840)=""/73, 0x49}, {&(0x7f00000007c0)=""/77, 0x4d}], 0x2, 0x8001, 0x0) syz_pidfd_open(r2, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) open$dir(0x0, 0x400000, 0x100) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) shutdown(r4, 0x1) 5.926361411s ago: executing program 9 (id=4115): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="30704b000d0a010800000000000000000a0000010900020073797a31000000000900020073797a32000000a4652f5f358a2ea5be2ef70bf4c00004000380"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) open(0x0, 0x14141, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0xb8}}, 0x4000040) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x40001) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x565201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.144055095s ago: executing program 8 (id=4116): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) r2 = accept$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) recvmmsg(r2, 0x0, 0x0, 0x10040, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000001bc0)=""/4110, 0x100e}, {&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f0000000700)=""/139, 0x8b}, {&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f0000000280)=""/168, 0xa8}, {0x0}, {&(0x7f0000000080)=""/136, 0x88}], 0x8}, 0x10001}], 0x1, 0x0, 0x0) close(r0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) read$char_usb(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x3}}, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) 4.455204464s ago: executing program 9 (id=4117): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="0dcf5f5fa91f87c7ff7800f0e5c28d3bdc19624755591c06ea9e412d9217f533bb84926c413265df80e8857894f664fe011dc7ce143a26fd77e33669d4a715b9d1f99faadf4454db74e2db67eccaffbb9ed24bd0aabfa8272e5ed7fc35f8be59dba5adf13a2c53d8543759cc13acc150a7babb7633018969ef4487e8d6d5fe3c5071dfb992ed71276300e3d3de1b7a52ab2ca849b5418cd59e3c88e921d9a89b38b968ce62cbec0de97c3a26de274108157cb905de2a6edbff94601ddd8bbbe0bef89e19dbd494", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0xf90d) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 3.975280158s ago: executing program 9 (id=4118): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) pipe(&(0x7f0000000080)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) (async) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x4c0, 0x1b1, 0x20}, 0x18) (async) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v1={0x1000000, [{0x0, 0xfffffffc}]}, 0xc, 0x3) (async) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) 3.722487583s ago: executing program 9 (id=4119): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f810000000b00000003000000090000050000002e0061"], &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000}, 0x28) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x5) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) 3.657067927s ago: executing program 1 (id=4120): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200000081, 0x60200) r1 = dup3(0xffffffffffffffff, r0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24f407000008000f", 0x8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c200310"], 0xf) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000084) write$dsp(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1100000004000000040000000400010014000000", @ANYRES32, @ANYBLOB="0000000000000000e83feaa9455d27f900000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000700"/28], 0x50) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="2b63707573650720f35a654bc945148ecd3b89a757ca17a3a95e82efe6d651f4a6566b2f5274e60e38c4da2fd4eadd0dcfe37436f6dda222bf2b66c778dd818f4cb590905acabc288cdacb8436d6454e3c23172fddd94782e12c168491e4da2f92187426229c8b206cee35e61aa84bba9f6886f6d5c15defb0ad58704ca38ecd1269d5c436c410f13a920e1290b66c49038926082875a75930e395db5a1be7616cbb03d8e05314eeae99d0d5463da9ddf2147d748d0e60bab9c120c7189fd7e562e8e1d77ca72d5ffd977250ecfa68244aeb0074dcbae54a4e63b0602c1fb5d4350e130db81e7929c658adeb18f0"], 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x1}, 0x0, 0x1}) socket$igmp6(0xa, 0x3, 0x2) getgroups(0x3ffffffffffffc57, &(0x7f0000001200)=[0x0, 0xee01, 0x0]) connect$nfc_raw(r3, &(0x7f0000001080)={0x27, 0x0, 0x0, 0x6}, 0x10) 3.021988483s ago: executing program 1 (id=4121): r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async, rerun: 64) r3 = semget$private(0x0, 0x4000000009, 0x0) (rerun: 64) semop(r3, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) unshare(0x2040400) semtimedop(r3, &(0x7f00000000c0)=[{0x4, 0x40, 0x1800}], 0x1, 0x0) (async) semctl$IPC_RMID(r3, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async) fadvise64(r2, 0x1, 0x0, 0x2) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r4, 0x0, 0x200002) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f0000000140)=""/52, &(0x7f0000000180)=0x34) 2.825560768s ago: executing program 9 (id=4122): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) r7 = dup3(r5, r1, 0x80000) ioctl$NBD_DO_IT(r7, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2b, 0x6, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010000104000001000076b9ce39f91fcf96b53b0673880000000002000029d6db6b38736eaa98a35ca9cbf789323a7f739d7a03d5585e3446283b6bcc69ed3c7ee6d2299fbc6723d5ab5244f8449bf27ce3fde679fa722c7dd931982ac1c4b4ab0a297a4cea4b1582ea9ef4b2665c1d0debcaeb91090000002372324c4c456ce80e5fcca971328c7f30266a827af3e4e3c58e43cca0385df3d44361e50a7612549a0b46f495a157399fa6e83b3a44b071fc30b80a889c2dd994d4fc405ce2ad4bb0ee0389340bf30227c3ae", @ANYRES32=0x0, @ANYBLOB="c14d0000000000002000128008000100687372001400028008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x200400}) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004f0033d487277b9b108b", @ANYRES32], 0x4394) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r12 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) r13 = syz_usb_connect(0x1, 0x5c, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0xd6, 0x41, 0x49, 0x8, 0xdb0, 0x822c, 0x37d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0xce, 0x2, 0x0, 0x65, 0xaa, 0xb7, 0x0, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "8acf0effb9d9"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x426a, 0x1, 0x1, 0x6}, {0x6, 0x24, 0x1a, 0x4, 0x26}, [@dmm={0x7, 0x24, 0x14, 0xaa, 0x4}, @obex={0x5, 0x24, 0x15, 0x4}]}, @hid_hid={0x9, 0x21, 0x1, 0x39, 0x1, {0x22, 0x60d}}]}}]}}]}}, 0x0) syz_usb_control_io(r13, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_BINARY(r12, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0x1) 2.453994453s ago: executing program 8 (id=4123): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000540)={0x4, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e20, @remote}}}, 0x11c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) sendto$inet(r1, 0x0, 0xffffff0a, 0x24000050, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sysinfo(&(0x7f0000000000)=""/196) r4 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000140)={0xfc35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r1, &(0x7f00000098c0), 0x0, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x57, 0x0, 0x8, 0x8000}]}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x0, 0x4048805) recvmmsg(r1, &(0x7f0000000140), 0x0, 0x12062, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 2.449182844s ago: executing program 1 (id=4124): socket$kcm(0x10, 0x5, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000400016803c0001800c000500f9ffffff3f060004280001"], 0x68}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r4 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r4) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=r1, @ANYRES64=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x800, 0x70bd2c, 0x25dfdbff, {0xa, 0x10, 0x20, 0x4, 0xfe, 0x3, 0xfe, 0x2, 0x2100}, [@RTA_PRIORITY={0x8, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c009900f400000017000000080026007f1700000800270001"], 0x40}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) preadv(r7, &(0x7f0000004800)=[{&(0x7f00000032c0)=""/89, 0x59}, {&(0x7f0000003340)=""/164, 0xa4}, {&(0x7f0000003400)=""/205, 0xcd}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/1, 0x1}, {&(0x7f0000004540)=""/71, 0x47}, {&(0x7f00000045c0)=""/135, 0x87}, {&(0x7f0000004680)=""/39, 0x27}, {&(0x7f00000046c0)=""/7, 0x7}, {&(0x7f0000004700)=""/228, 0xe4}], 0xa, 0x97, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="24040000", @ANYRES16=r6, @ANYBLOB="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"/1226], 0x424}, 0x1, 0x0, 0x0, 0x4000}, 0x14) r9 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r10 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r10, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r9, 0xc1007c01, &(0x7f0000000500)={r11}) 2.269702773s ago: executing program 5 (id=4125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x8c, r1, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4b0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c9e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1.28824771s ago: executing program 5 (id=4126): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x1010, r0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c050000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200c2a4032dba4f5f8e0000040000000000210010000600000000002000000000000000"], 0x24, 0x0) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x11) sendfile(r0, r0, 0x0, 0x40008) 1.013492187s ago: executing program 1 (id=4127): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) r6 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) lseek(0xffffffffffffffff, 0x851, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)) 724.569224ms ago: executing program 9 (id=4128): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x45) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYBLOB="34f25f77e04959c23dc01e93e1d69a5432fc81dc1767c16df7ee0817b1e75b4da3f38962e594c6dec520ff5008a645e0a5e66f82e89ab95089633b14c20f72b2a2eb71818f047b547b7c4cb8e6274788d355845733c89b3a2919563bf2de79f6ca950b5539894e94867ea8056195", @ANYBLOB="00000000efb77e1cb3358bb00000000000000000", @ANYRESOCT=r1, @ANYRES16=r0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x14, &(0x7f0000000480)=ANY=[@ANYRES64=r2, @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00002000bfa200000000000007020000f8b39b34ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x4044090) prlimit64(0x0, 0x8, &(0x7f0000000280)={0x5, 0x3}, 0x0) openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x10fe83, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r5 = getpid() sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0xa) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x2010, 0xffffffffffffffff, 0x869db000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x142) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0/../file0/../file0/../file0\x00', 0x89901) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) move_mount(r8, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x221) fanotify_init(0xc, 0x80000) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) tee(r7, r9, 0x80000000, 0xd) 664.151639ms ago: executing program 5 (id=4129): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001040)=ANY=[], 0x1f4}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000084) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$NBD_DISCONNECT(r0, 0xab08) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0xfffffffffffffca6}}, 0xfffffe64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c030002180000", 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x4, 0x2}}}}}]}}]}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x20000000) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r1, 0x8b32, &(0x7f0000000040)) 0s ago: executing program 1 (id=4130): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000000000000040000000000000000000000210000000000010000000000000200"], 0x70}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a01010000000000000000010000003c000000090a01040000000000000010e33c7cfc204f1a04da28000100000008000a40000000000900020073797a30000000000900010073797a30000000000800054000000016140000000c0a01030000001e0000000001000000140000001000010000000000000000000000400a"], 0x8c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x100, 0x5, 0x1, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5, 0x400}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) kernel console output (not intermixed with test programs): T811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3698'. [ 1143.986347][T18983] Bluetooth: hci4: command tx timeout [ 1144.310428][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1144.468050][ T9] usb 4-1: device descriptor read/64, error -71 [ 1144.595176][ T727] chnl_net:caif_netlink_parms(): no params data found [ 1144.954259][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1145.500439][ T9] usb 4-1: device descriptor read/64, error -71 [ 1145.612575][ T9] usb usb4-port1: attempt power cycle [ 1145.668602][ T727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.687072][ T727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.782425][ T727] bridge_slave_0: entered allmulticast mode [ 1145.791209][ T727] bridge_slave_0: entered promiscuous mode [ 1145.798394][ T727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.822369][ T727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.847484][ T727] bridge_slave_1: entered allmulticast mode [ 1145.861230][ T727] bridge_slave_1: entered promiscuous mode [ 1146.040496][T18983] Bluetooth: hci4: command tx timeout [ 1146.060198][T20311] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1146.175563][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1146.246601][T20311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1146.303527][T20311] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1146.334065][ T727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.391363][T20311] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1146.442011][ T727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.521120][T20311] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1146.594093][T20311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1146.635502][T20311] usb 3-1: Product: syz [ 1146.639694][T20311] usb 3-1: Manufacturer: syz [ 1146.656303][T20311] usb 3-1: SerialNumber: syz [ 1146.732733][ T727] team0: Port device team_slave_0 added [ 1146.811321][ T727] team0: Port device team_slave_1 added [ 1146.893520][ T9] usb 4-1: device descriptor read/8, error -71 [ 1146.930308][T20311] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1146.955858][ T727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.974839][ T727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.005557][ T727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.046186][ T727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.065274][ T727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.150543][ T727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.186513][T20297] usb 3-1: USB disconnect, device number 75 [ 1147.243099][T20297] usblp0: removed [ 1147.258082][ T1132] overlay: Unknown parameter '/' [ 1147.294200][ T727] hsr_slave_0: entered promiscuous mode [ 1147.331667][ T727] hsr_slave_1: entered promiscuous mode [ 1147.337987][ T727] debugfs: 'hsr0' already exists in 'hsr' [ 1147.344228][ T727] Cannot create hsr debugfs directory [ 1147.549091][ T1185] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3706'. [ 1147.655982][ T1193] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3706'. [ 1148.072791][ T1223] netlink: 'syz.3.3709': attribute type 1 has an invalid length. [ 1148.120731][T18983] Bluetooth: hci4: command tx timeout [ 1148.232688][ T1223] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3709'. [ 1148.360759][T20311] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1148.520520][T20311] usb 3-1: Using ep0 maxpacket: 32 [ 1148.605565][T20311] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1148.624631][T20311] usb 3-1: config 0 has no interface number 0 [ 1148.657402][T20311] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1148.981803][ T30] audit: type=1400 audit(1756040635.193:2343): avc: denied { write } for pid=1293 comm="syz.3.3715" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1149.238573][T20311] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1149.311654][T20311] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1149.417480][T20311] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1149.556593][T20311] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1149.585365][T20311] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1149.598523][T20311] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1149.610530][T20311] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1149.651602][T20311] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1149.666361][T20311] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1149.695051][T20311] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1149.710266][T20311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.808643][T20311] usb 3-1: Product: syz [ 1150.029626][T20311] usb 3-1: Manufacturer: syz [ 1150.037237][T20311] usb 3-1: SerialNumber: syz [ 1150.114452][T20311] usb 3-1: config 0 descriptor?? [ 1150.121211][ T1238] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1150.130062][T20311] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1150.173824][T20311] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1150.203654][T18983] Bluetooth: hci4: command tx timeout [ 1150.247739][T20311] scsi host1: microtekX6 [ 1150.304427][T17324] microtek usb (rev 0.4.3): error -90 submitting URB [ 1150.330701][T17324] microtek usb (rev 0.4.3): error -90 submitting URB [ 1150.348997][T20311] usb 3-1: USB disconnect, device number 76 [ 1150.375327][ T97] microtek usb (rev 0.4.3): error -19 submitting URB [ 1150.420538][ T97] microtek usb (rev 0.4.3): error -19 submitting URB [ 1150.720790][ T30] audit: type=1400 audit(1756040636.943:2344): avc: denied { create } for pid=1358 comm="syz.3.3719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1150.793335][ T727] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1150.891015][ T727] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1151.021557][ T727] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1151.088731][ T1379] fuse: Bad value for 'user_id' [ 1151.101558][ T727] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1151.128252][ T1379] fuse: Bad value for 'user_id' [ 1151.147226][ T1368] lo speed is unknown, defaulting to 1000 [ 1151.200625][ T1361] geneve2: entered allmulticast mode [ 1151.415054][ T1368] lo speed is unknown, defaulting to 1000 [ 1151.974574][ T1430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3723'. [ 1152.121017][T20297] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 1152.195170][ T727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.317177][T20297] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1152.332901][ T727] 8021q: adding VLAN 0 to HW filter on device team0 [ 1152.390441][T20297] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1152.415628][T17324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.422797][T17324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1152.464552][T20297] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1152.683632][ T30] audit: type=1400 audit(1756040638.783:2345): avc: denied { mounton } for pid=1451 comm="syz.2.3725" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1152.730467][T20297] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1152.763595][T20297] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1152.774640][T20297] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.792135][T20297] usb 9-1: Product: syz [ 1152.800078][ T30] audit: type=1400 audit(1756040639.023:2346): avc: denied { append } for pid=1449 comm="syz.3.3726" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1152.851483][T20297] usb 9-1: Manufacturer: syz [ 1152.876037][T17324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.883199][T17324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.892157][T20297] usb 9-1: SerialNumber: syz [ 1152.954898][T20297] usb 9-1: config 0 descriptor?? [ 1153.059406][ T1463] vivid-006: disconnect [ 1153.080642][T20297] usb 9-1: selecting invalid altsetting 0 [ 1153.834712][ T1462] vivid-006: reconnect [ 1154.311121][T17351] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.438868][T17351] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.506195][ T727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1154.560452][T17351] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.749829][T17351] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.911252][ T727] veth0_vlan: entered promiscuous mode [ 1154.981184][ T727] veth1_vlan: entered promiscuous mode [ 1155.019486][T20311] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 1155.055571][T20311] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1155.256485][ T1522] fido_id[1522]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1155.274975][ T727] veth0_macvtap: entered promiscuous mode [ 1155.355050][T20297] usb 9-1: USB disconnect, device number 35 [ 1155.453566][ T727] veth1_macvtap: entered promiscuous mode [ 1155.585651][T17351] bridge_slave_1: left allmulticast mode [ 1155.592100][T17351] bridge_slave_1: left promiscuous mode [ 1155.599953][T17351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.621411][T17351] bridge_slave_0: left allmulticast mode [ 1155.627110][T17351] bridge_slave_0: left promiscuous mode [ 1155.636219][T17351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.407531][T17351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1156.452497][T17351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1156.467975][T17351] bond0 (unregistering): Released all slaves [ 1156.499664][T17351] bond1 (unregistering): Released all slaves [ 1156.585883][T23042] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1156.600467][T23042] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1156.610356][T23042] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1156.618725][T23042] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1156.633089][T23042] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1156.750988][ T727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1156.810060][ T727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.898161][ T1543] lo speed is unknown, defaulting to 1000 [ 1156.909687][T17352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.925594][ T1621] netlink: 'syz.8.3736': attribute type 10 has an invalid length. [ 1156.934051][ T30] audit: type=1400 audit(1756040643.153:2347): avc: denied { setopt } for pid=1620 comm="syz.8.3736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1156.955900][T17352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.988606][ T1621] hsr0: entered promiscuous mode [ 1157.019158][ T1621] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1157.040583][ T54] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1157.044651][ T1621] bond0: (slave hsr0): Error -95 calling set_mac_address [ 1157.078202][T17352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.116172][T17352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.222033][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.263174][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.296691][ T54] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1157.323602][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.423150][ T54] usb 3-1: config 0 descriptor?? [ 1157.482459][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.493062][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.522806][ T1543] lo speed is unknown, defaulting to 1000 [ 1157.531283][ T1663] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3737'. [ 1157.573018][ T1663] gretap0: entered promiscuous mode [ 1157.589582][ T1672] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3737'. [ 1157.699622][ T1672] 0{X: renamed from gretap0 [ 1157.799895][ T1672] 0{X: left promiscuous mode [ 1157.805663][ T1672] 0{X: entered allmulticast mode [ 1157.823678][ T1672] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1157.864595][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.875381][ T54] kye 0003:0458:0153.002D: unknown main item tag 0x0 [ 1157.924875][ T54] kye 0003:0458:0153.002D: unknown main item tag 0x0 [ 1157.933431][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.948230][ T54] kye 0003:0458:0153.002D: unknown main item tag 0x0 [ 1157.977625][ T54] kye 0003:0458:0153.002D: unknown main item tag 0x0 [ 1157.991352][ T54] kye 0003:0458:0153.002D: unknown main item tag 0x0 [ 1158.007349][ T54] kye 0003:0458:0153.002D: unknown main item tag 0x0 [ 1158.015995][ T54] kye 0003:0458:0153.002D: unknown main item tag 0x0 [ 1158.073122][ T54] kye 0003:0458:0153.002D: hidraw0: USB HID v10.00 Device [HID 0458:0153] on usb-dummy_hcd.2-1/input0 [ 1158.194206][ T54] usb 3-1: USB disconnect, device number 77 [ 1158.209601][ T30] audit: type=1400 audit(1756040644.433:2348): avc: denied { ioctl } for pid=1686 comm="syz.1.3686" path="socket:[82070]" dev="sockfs" ino=82070 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1158.347449][ T1684] fido_id[1684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1158.682999][T23042] Bluetooth: hci2: command tx timeout [ 1158.833506][ T1734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3739'. [ 1158.983854][T17351] hsr_slave_0: left promiscuous mode [ 1158.995703][ T30] audit: type=1400 audit(1756040645.223:2349): avc: denied { lock } for pid=1729 comm="syz.2.3738" path="socket:[82124]" dev="sockfs" ino=82124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1159.033553][T17351] hsr_slave_1: left promiscuous mode [ 1159.039791][T17351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.060303][T17351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.088902][T17351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.096603][T17351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.189326][T17351] veth1_macvtap: left promiscuous mode [ 1159.208350][T17351] veth0_macvtap: left promiscuous mode [ 1159.227283][T17351] veth1_vlan: left promiscuous mode [ 1159.286484][T17351] veth0_vlan: left promiscuous mode [ 1160.760746][T23042] Bluetooth: hci2: command tx timeout [ 1161.557628][T17351] team0 (unregistering): Port device team_slave_1 removed [ 1161.622536][T17351] team0 (unregistering): Port device team_slave_0 removed [ 1162.255496][ T1543] chnl_net:caif_netlink_parms(): no params data found [ 1162.870464][ T1926] lo speed is unknown, defaulting to 1000 [ 1163.223847][ T1926] lo speed is unknown, defaulting to 1000 [ 1163.375673][T23042] Bluetooth: hci2: command tx timeout [ 1163.454062][ T30] audit: type=1400 audit(1756040649.673:2350): avc: denied { getopt } for pid=1914 comm="syz.2.3744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1163.624834][ T1543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.655703][ T1543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.675978][ T1543] bridge_slave_0: entered allmulticast mode [ 1163.688072][ T2004] raw_sendmsg: syz.2.3747 forgot to set AF_INET. Fix it! [ 1163.701832][ T1543] bridge_slave_0: entered promiscuous mode [ 1163.753670][ T1543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.768625][ T2013] netlink: 'syz.8.3748': attribute type 6 has an invalid length. [ 1163.935451][ T1543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.945189][ T1543] bridge_slave_1: entered allmulticast mode [ 1163.953757][ T1543] bridge_slave_1: entered promiscuous mode [ 1164.275009][ T1543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.335583][ T1543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.511779][ T1543] team0: Port device team_slave_0 added [ 1164.525693][ T1543] team0: Port device team_slave_1 added [ 1164.699102][ T1543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.873469][ T1543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.901010][ T1543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.913931][ T1543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.924183][ T1543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.126426][ T2120] tmpfs: Bad value for 'mode' [ 1165.204599][ T1543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.408640][ T1543] hsr_slave_0: entered promiscuous mode [ 1165.421823][T18983] Bluetooth: hci2: command tx timeout [ 1165.429352][ T1543] hsr_slave_1: entered promiscuous mode [ 1165.439886][ T1543] debugfs: 'hsr0' already exists in 'hsr' [ 1165.455187][ T1543] Cannot create hsr debugfs directory [ 1165.778961][ T2201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1166.120721][ T30] audit: type=1326 audit(1756040652.343:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3778ebe9 code=0x7ffc0000 [ 1166.190197][ T30] audit: type=1326 audit(1756040652.373:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3778ebe9 code=0x7ffc0000 [ 1166.223019][ T30] audit: type=1326 audit(1756040652.373:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb3778ebe9 code=0x7ffc0000 [ 1166.247280][ T30] audit: type=1326 audit(1756040652.373:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3778ebe9 code=0x7ffc0000 [ 1166.280955][T20306] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1166.286899][ T30] audit: type=1326 audit(1756040652.373:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3778ebe9 code=0x7ffc0000 [ 1166.628273][ T30] audit: type=1326 audit(1756040652.373:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb3778ebe9 code=0x7ffc0000 [ 1166.712953][ T30] audit: type=1326 audit(1756040652.373:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3778ebe9 code=0x7ffc0000 [ 1166.737236][ T30] audit: type=1326 audit(1756040652.373:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb3778ebe9 code=0x7ffc0000 [ 1166.768455][ T30] audit: type=1326 audit(1756040652.373:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3778ebe9 code=0x7ffc0000 [ 1166.794656][T20306] usb 9-1: Using ep0 maxpacket: 16 [ 1166.803714][T20306] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.815497][T20306] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.826074][T20306] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1166.839314][T20306] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1166.848707][T20306] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.402895][T20306] usb 9-1: config 0 descriptor?? [ 1167.594730][ T2277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3759'. [ 1167.964201][T20306] usbhid 9-1:0.0: can't add hid device: -71 [ 1167.982623][T20306] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1168.008608][T20306] usb 9-1: USB disconnect, device number 36 [ 1168.022168][T20297] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1168.031252][ T54] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1168.058824][ T1543] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1168.078537][ T1543] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1168.091760][ T1543] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1168.104009][ T1543] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1168.192888][T20297] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1168.196455][ T54] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1168.213409][T20297] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1168.226463][T20297] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1168.227506][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.252405][T20297] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1168.266011][ T1543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.274615][ T54] usb 3-1: Product: syz [ 1168.278777][ T54] usb 3-1: Manufacturer: syz [ 1168.289901][T20297] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1168.299385][ T54] usb 3-1: SerialNumber: syz [ 1168.301606][ T54] usb 3-1: config 0 descriptor?? [ 1168.312882][ T54] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1168.321292][T20297] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1168.328946][ T1543] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.346176][T20297] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1168.355871][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.358274][ T54] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1168.362993][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.365021][T20297] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1168.397867][T20297] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1168.409783][T20297] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1168.413014][ T54] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 1168.422203][T20297] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1168.438513][T20297] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1168.450013][T20297] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1168.452170][T17351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.463711][T17351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.465968][T20297] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1168.494585][T20297] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1168.514886][T20297] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1168.532390][T20297] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1168.545454][T20297] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1168.554192][ T1543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1168.574072][T20297] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1168.595706][T20297] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1168.641739][T20297] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1168.673532][T20297] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1168.843196][T20297] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1168.852759][T20297] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1168.880173][T20297] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1168.892065][T20297] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1168.922235][T20297] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1169.025616][T20297] usb 2-1: Product: syz [ 1169.065743][T20297] usb 2-1: Manufacturer: syz [ 1169.118498][T20297] usb 2-1: SerialNumber: syz [ 1169.219852][T20297] usb 2-1: config 0 descriptor?? [ 1169.339966][ T6618] block nbd0: Possible stuck request ffff8880266ee1c0: control (read@0,1024B). Runtime 90 seconds [ 1169.343983][T20297] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1169.353232][ T6618] block nbd0: Possible stuck request ffff8880266ee380: control (read@1024,1024B). Runtime 90 seconds [ 1169.369358][ T6618] block nbd0: Possible stuck request ffff8880266ee540: control (read@2048,1024B). Runtime 90 seconds [ 1169.380880][ T6618] block nbd0: Possible stuck request ffff8880266ee700: control (read@3072,1024B). Runtime 90 seconds [ 1169.439808][ T1543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.863529][ T1543] veth0_vlan: entered promiscuous mode [ 1169.874983][ T1543] veth1_vlan: entered promiscuous mode [ 1170.012078][ T2373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1170.429097][ T5962] usb 2-1: USB disconnect, device number 72 [ 1170.441289][ T5962] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1170.507311][T23042] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1170.533705][T23042] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1170.581629][T23042] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1170.594735][T23042] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1170.614587][T23042] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1170.663381][ T1543] veth0_macvtap: entered promiscuous mode [ 1170.687807][ T1543] veth1_macvtap: entered promiscuous mode [ 1170.737372][ T2385] lo speed is unknown, defaulting to 1000 [ 1170.754078][ T1543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.782403][ T1543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.804432][ T5962] usb 3-1: USB disconnect, device number 78 [ 1170.854075][T17352] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.881646][T17352] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.894509][T17352] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.904659][T17352] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.006968][ T2434] mkiss: ax0: crc mode is auto. [ 1171.156907][T17348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.179459][T17348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.238586][T17324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.243739][ T2385] lo speed is unknown, defaulting to 1000 [ 1171.268809][T17324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.399807][ T2478] fuse: Unknown parameter 'obj_type' [ 1171.448803][ T2481] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3731'. [ 1171.608505][ T2491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1171.625964][ T2494] tipc: Started in network mode [ 1171.637262][ T2494] tipc: Node identity 8a027293b18d, cluster identity 4711 [ 1171.646933][ T2494] tipc: Enabled bearer , priority 0 [ 1171.655325][ T2494] syzkaller0: entered promiscuous mode [ 1171.678159][ T2494] syzkaller0: entered allmulticast mode [ 1171.706273][ T2501] tipc: Enabling of bearer rejected, already enabled [ 1171.846818][ T2501] tipc: Resetting bearer [ 1171.885667][ T2501] tipc: Disabling bearer [ 1171.960554][T20289] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1172.035569][ T2555] vlan0: entered promiscuous mode [ 1172.045291][ T2555] bond0: entered promiscuous mode [ 1172.120524][T20289] usb 9-1: Using ep0 maxpacket: 16 [ 1172.127193][T20289] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1172.135660][T20289] usb 9-1: config 0 has no interface number 0 [ 1172.141993][T20289] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1172.180520][T20289] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1172.191904][T20289] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1172.201384][T20289] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1172.209550][T20289] usb 9-1: Product: syz [ 1172.214508][T20289] usb 9-1: SerialNumber: syz [ 1172.223397][T20289] usb 9-1: config 0 descriptor?? [ 1172.232034][T20289] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 1172.246976][T20289] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input41 [ 1172.483661][ T2605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.541923][ T2605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.568131][ T2605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.638601][ T2605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.643322][ T2511] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3771'. [ 1172.682019][T23042] Bluetooth: hci5: command tx timeout [ 1172.698173][ T2511] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3771'. [ 1173.413026][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1173.422594][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1173.429734][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1173.436865][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1173.440409][T20311] usb 9-1: USB disconnect, device number 37 [ 1173.443802][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1173.793898][T20311] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1173.805429][ T2385] chnl_net:caif_netlink_parms(): no params data found [ 1173.865449][ T2703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1174.059140][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1174.059155][ T30] audit: type=1400 audit(1756040660.283:2371): avc: denied { append } for pid=2719 comm="syz.1.3780" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1174.267165][ T2385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.294795][ T2385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.311472][ T2385] bridge_slave_0: entered allmulticast mode [ 1174.336574][ T2385] bridge_slave_0: entered promiscuous mode [ 1174.370883][ T2385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.398371][ T2385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.434375][ T2385] bridge_slave_1: entered allmulticast mode [ 1174.481513][ T2385] bridge_slave_1: entered promiscuous mode [ 1174.760549][T23042] Bluetooth: hci5: command tx timeout [ 1174.818805][ T2385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.891542][ T2385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.035893][ T2385] team0: Port device team_slave_0 added [ 1175.092756][ T2385] team0: Port device team_slave_1 added [ 1175.778480][ T2385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.817616][ T2385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.946399][ T2385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.050018][ T2385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.068795][ T2385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.147256][ T2385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1176.506171][ T2385] hsr_slave_0: entered promiscuous mode [ 1176.581637][ T2385] hsr_slave_1: entered promiscuous mode [ 1176.599666][ T2385] debugfs: 'hsr0' already exists in 'hsr' [ 1176.701992][ T2385] Cannot create hsr debugfs directory [ 1176.910552][T23042] Bluetooth: hci5: command tx timeout [ 1176.984063][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.995430][ T30] audit: type=1107 audit(1756040663.203:2372): pid=2970 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='I' [ 1177.539757][ T30] audit: type=1400 audit(1756040663.713:2373): avc: denied { unmount } for pid=23028 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1178.921061][T23042] Bluetooth: hci5: command tx timeout [ 1180.329491][ T2385] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1180.379289][ T2385] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1180.413324][ T2385] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1180.525139][ T2385] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1181.061650][ T2385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.458340][ T2385] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.579731][T17331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.586818][T17331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.677648][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.684804][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.131767][ T3126] tipc: Started in network mode [ 1182.180231][ T3126] tipc: Node identity e258a4bd54b6, cluster identity 4711 [ 1182.210365][ T3126] tipc: Enabled bearer , priority 0 [ 1182.248498][ T3126] syzkaller0: entered promiscuous mode [ 1182.276005][ T3126] syzkaller0: entered allmulticast mode [ 1182.541997][ T3126] tipc: Resetting bearer [ 1182.563758][ T2385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.595828][ T3125] tipc: Resetting bearer [ 1182.654123][ T3125] tipc: Disabling bearer [ 1182.820572][ T5962] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1182.990443][ T5962] usb 9-1: Using ep0 maxpacket: 32 [ 1183.006947][ T5962] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1183.026840][ T5962] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.032191][ T2385] veth0_vlan: entered promiscuous mode [ 1183.052473][ T5962] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1183.070482][T20311] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1183.078695][ T5962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.108993][ T5962] usb 9-1: Product: syz [ 1183.119085][ T5962] usb 9-1: Manufacturer: syz [ 1183.129175][ T5962] usb 9-1: SerialNumber: syz [ 1183.129345][ T2385] veth1_vlan: entered promiscuous mode [ 1183.262475][T20311] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 1183.283809][T20311] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 1183.284350][ T2385] veth0_macvtap: entered promiscuous mode [ 1183.299274][T20311] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 1183.333541][T20311] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 1183.357640][ T5962] usb 9-1: Not enough endpoints found in device, aborting! [ 1183.366089][T20311] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1183.403850][ T2385] veth1_macvtap: entered promiscuous mode [ 1183.414967][T20311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.455263][ T3167] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1183.459795][ T2385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.536716][ T2385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.606197][T20289] usb 9-1: USB disconnect, device number 38 [ 1183.621308][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.669572][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.694126][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.698173][ T30] audit: type=1400 audit(1756040669.923:2374): avc: denied { connect } for pid=3208 comm="syz.1.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1183.729299][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.828914][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.856878][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.917999][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.936410][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.056579][ T3234] netlink: 'syz.6.3762': attribute type 4 has an invalid length. [ 1184.185975][ T3235] netlink: 'syz.6.3762': attribute type 4 has an invalid length. [ 1184.204157][ T3236] netlink: 'syz.6.3762': attribute type 4 has an invalid length. [ 1184.480270][T20289] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1184.527495][T20311] ath6kl: Failed to submit usb control message: -110 [ 1184.557681][T20311] ath6kl: unable to send the bmi data to the device: -110 [ 1184.585139][T20311] ath6kl: Unable to send get target info: -110 [ 1184.604625][T20311] ath6kl: Failed to init ath6kl core: -110 [ 1184.628165][T20311] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 1184.666463][T20289] usb 9-1: config 0 has an invalid interface number: 134 but max is 0 [ 1184.706321][T20289] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.735761][T20289] usb 9-1: config 0 has no interface number 0 [ 1184.748206][T20289] usb 9-1: config 0 interface 134 has no altsetting 0 [ 1184.772144][T20289] usb 9-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1184.807368][T20289] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.832634][T20289] usb 9-1: config 0 descriptor?? [ 1184.861875][T20289] smsusb:smsusb_probe: board id=8, interface number 134 [ 1185.053070][ T3241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.074283][ T3241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.193285][ T3278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3809'. [ 1185.346997][ T5962] usb 9-1: USB disconnect, device number 39 [ 1185.838072][T20305] usb 3-1: USB disconnect, device number 79 [ 1186.784840][T20305] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1186.811362][ T3329] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3815'. [ 1186.820495][ T3329] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3815'. [ 1186.985222][T20305] usb 3-1: device descriptor read/64, error -71 [ 1187.241576][T20305] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1187.390224][T20305] usb 3-1: device descriptor read/64, error -71 [ 1187.800843][T20305] usb usb3-port1: attempt power cycle [ 1188.540761][T20305] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1188.572049][T20305] usb 3-1: device descriptor read/8, error -71 [ 1188.930052][T20305] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1188.999785][T20305] usb 3-1: device descriptor read/8, error -71 [ 1189.161556][T20305] usb usb3-port1: unable to enumerate USB device [ 1189.351867][ T3400] netlink: 'syz.2.3824': attribute type 1 has an invalid length. [ 1189.529530][ T3400] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1192.561030][ T3490] siw: device registration error -23 [ 1193.896705][T18983] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1193.910507][T18983] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1193.920253][T18983] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1193.955633][T18983] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1193.967168][T18983] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1194.501769][ T3524] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3838'. [ 1194.813582][ T3513] lo speed is unknown, defaulting to 1000 [ 1195.321935][ T3524] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3838'. [ 1195.379005][ T3544] lo speed is unknown, defaulting to 1000 [ 1196.072540][T18983] Bluetooth: hci6: command tx timeout [ 1197.496668][ T3513] lo speed is unknown, defaulting to 1000 [ 1198.286973][T23042] Bluetooth: hci6: command tx timeout [ 1198.640841][ T3544] lo speed is unknown, defaulting to 1000 [ 1199.149475][ T3692] Invalid ELF header magic: != ELF [ 1199.530535][ T3513] chnl_net:caif_netlink_parms(): no params data found [ 1199.963150][ T6618] block nbd0: Possible stuck request ffff8880266ee1c0: control (read@0,1024B). Runtime 120 seconds [ 1199.980342][ T6618] block nbd0: Possible stuck request ffff8880266ee380: control (read@1024,1024B). Runtime 120 seconds [ 1200.081186][ T3747] FAULT_INJECTION: forcing a failure. [ 1200.081186][ T3747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.113056][ T3747] CPU: 0 UID: 0 PID: 3747 Comm: syz.8.3848 Not tainted syzkaller #0 PREEMPT(full) [ 1200.113073][ T3747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1200.113081][ T3747] Call Trace: [ 1200.113085][ T3747] [ 1200.113089][ T3747] dump_stack_lvl+0x16c/0x1f0 [ 1200.113106][ T3747] should_fail_ex+0x512/0x640 [ 1200.113122][ T3747] _copy_from_user+0x2e/0xd0 [ 1200.113138][ T3747] copy_msghdr_from_user+0x98/0x160 [ 1200.113151][ T3747] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1200.113165][ T3747] ? kfree+0x24f/0x4d0 [ 1200.113181][ T3747] ? __lock_acquire+0x62e/0x1ce0 [ 1200.113200][ T3747] ___sys_recvmsg+0xdb/0x1a0 [ 1200.113212][ T3747] ? __pfx____sys_recvmsg+0x10/0x10 [ 1200.113231][ T3747] ? __pfx___might_resched+0x10/0x10 [ 1200.113247][ T3747] do_recvmmsg+0x2fe/0x750 [ 1200.113261][ T3747] ? __pfx_do_recvmmsg+0x10/0x10 [ 1200.113275][ T3747] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1200.113292][ T3747] ? __fget_files+0x20e/0x3c0 [ 1200.113307][ T3747] __x64_sys_recvmmsg+0x22a/0x280 [ 1200.113321][ T3747] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1200.113337][ T3747] do_syscall_64+0xcd/0x4c0 [ 1200.113350][ T3747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.113362][ T3747] RIP: 0033:0x7f41e558ebe9 [ 1200.113371][ T3747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1200.113382][ T3747] RSP: 002b:00007f41e37f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1200.113393][ T3747] RAX: ffffffffffffffda RBX: 00007f41e57b6090 RCX: 00007f41e558ebe9 [ 1200.113400][ T3747] RDX: 000000000400006a RSI: 0000200000000040 RDI: 0000000000000009 [ 1200.113406][ T3747] RBP: 00007f41e37f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.113412][ T3747] R10: 0000000040001140 R11: 0000000000000246 R12: 0000000000000001 [ 1200.113419][ T3747] R13: 00007f41e57b6128 R14: 00007f41e57b6090 R15: 00007ffd9b527378 [ 1200.113432][ T3747] [ 1200.363271][T23042] Bluetooth: hci6: command tx timeout [ 1200.489681][ T6618] block nbd0: Possible stuck request ffff8880266ee540: control (read@2048,1024B). Runtime 120 seconds [ 1200.500954][ T6618] block nbd0: Possible stuck request ffff8880266ee700: control (read@3072,1024B). Runtime 120 seconds [ 1200.749366][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.759715][ T30] audit: type=1400 audit(1756040686.966:2375): avc: denied { write } for pid=3756 comm="syz.1.3851" path="socket:[86202]" dev="sockfs" ino=86202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1200.791106][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.804987][ T3513] bridge_slave_0: entered allmulticast mode [ 1200.816371][ T3513] bridge_slave_0: entered promiscuous mode [ 1200.841405][ T3763] tipc: Enabled bearer , priority 0 [ 1200.855246][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.899015][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.939818][ T3513] bridge_slave_1: entered allmulticast mode [ 1201.021938][ T3513] bridge_slave_1: entered promiscuous mode [ 1201.463120][ T3513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.490027][ T3756] tipc: Disabling bearer [ 1201.548788][ T3513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.875761][ T3513] team0: Port device team_slave_0 added [ 1201.995285][ T3513] team0: Port device team_slave_1 added [ 1202.258621][ T3513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.281517][ T3513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.363926][ T3893] FAULT_INJECTION: forcing a failure. [ 1202.363926][ T3893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.387643][ T3893] CPU: 0 UID: 0 PID: 3893 Comm: syz.1.3860 Not tainted syzkaller #0 PREEMPT(full) [ 1202.387668][ T3893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1202.387678][ T3893] Call Trace: [ 1202.387685][ T3893] [ 1202.387690][ T3893] dump_stack_lvl+0x16c/0x1f0 [ 1202.387706][ T3893] should_fail_ex+0x512/0x640 [ 1202.387722][ T3893] _copy_from_user+0x2e/0xd0 [ 1202.387737][ T3893] copy_msghdr_from_user+0x98/0x160 [ 1202.387750][ T3893] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1202.387764][ T3893] ? kfree+0x24f/0x4d0 [ 1202.387781][ T3893] ? rcu_is_watching+0x12/0xc0 [ 1202.387797][ T3893] ___sys_recvmsg+0xdb/0x1a0 [ 1202.387808][ T3893] ? __pfx____sys_recvmsg+0x10/0x10 [ 1202.387828][ T3893] ? __pfx___might_resched+0x10/0x10 [ 1202.387845][ T3893] do_recvmmsg+0x2fe/0x750 [ 1202.387859][ T3893] ? __pfx_do_recvmmsg+0x10/0x10 [ 1202.387874][ T3893] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1202.387892][ T3893] ? __fget_files+0x20e/0x3c0 [ 1202.387909][ T3893] __x64_sys_recvmmsg+0x22a/0x280 [ 1202.387924][ T3893] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1202.387940][ T3893] do_syscall_64+0xcd/0x4c0 [ 1202.387954][ T3893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.387966][ T3893] RIP: 0033:0x7feb3778ebe9 [ 1202.387975][ T3893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1202.387986][ T3893] RSP: 002b:00007feb385fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1202.387997][ T3893] RAX: ffffffffffffffda RBX: 00007feb379b6090 RCX: 00007feb3778ebe9 [ 1202.388004][ T3893] RDX: 000000000400006a RSI: 0000200000000040 RDI: 0000000000000009 [ 1202.388011][ T3893] RBP: 00007feb385fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1202.388017][ T3893] R10: 0000000040001140 R11: 0000000000000246 R12: 0000000000000001 [ 1202.388024][ T3893] R13: 00007feb379b6128 R14: 00007feb379b6090 R15: 00007ffd4c16a0b8 [ 1202.388038][ T3893] [ 1202.389964][ T3513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.440685][T23042] Bluetooth: hci6: command tx timeout [ 1203.141438][ T3925] befs: (nullb0): invalid magic header [ 1203.201284][ T3513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.208332][ T3513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.291532][ T3513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.509433][ T3513] hsr_slave_0: entered promiscuous mode [ 1203.561638][ T3513] hsr_slave_1: entered promiscuous mode [ 1203.575620][ T3513] debugfs: 'hsr0' already exists in 'hsr' [ 1203.604648][ T3513] Cannot create hsr debugfs directory [ 1203.830669][T20297] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1204.027875][T20297] usb 2-1: Using ep0 maxpacket: 16 [ 1204.045772][T20297] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1204.069070][T20297] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.109810][T20297] usb 2-1: config 0 has no interface number 0 [ 1204.135531][T20297] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice=81.28 [ 1204.153498][T20297] usb 2-1: New USB device strings: Mfr=0, Product=27, SerialNumber=3 [ 1204.182336][T20297] usb 2-1: Product: syz [ 1204.186530][T20297] usb 2-1: SerialNumber: syz [ 1204.205511][T20297] usb 2-1: config 0 descriptor?? [ 1204.232488][T20297] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1204.260441][T20306] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1204.279513][T20297] usb 2-1: No valid video chain found. [ 1204.326237][ T4048] netlink: 'syz.6.3867': attribute type 1 has an invalid length. [ 1204.361351][ T4048] netlink: 75 bytes leftover after parsing attributes in process `syz.6.3867'. [ 1204.422176][T20306] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1204.431969][T20311] usb 2-1: USB disconnect, device number 73 [ 1204.433794][ T30] audit: type=1400 audit(1756040690.646:2376): avc: denied { create } for pid=3946 comm="syz.1.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1204.469712][T20306] usb 3-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 1204.508461][T20306] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1204.518736][ T30] audit: type=1400 audit(1756040690.646:2377): avc: denied { bind } for pid=3946 comm="syz.1.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1204.540340][T20306] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 1204.552583][T20306] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1204.565463][T20306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.616166][T20306] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1204.655883][T20306] usb 3-1: invalid MIDI out EP 0 [ 1204.837211][T20306] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1204.861904][T20306] usb 3-1: USB disconnect, device number 84 [ 1205.312880][T17352] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.514233][T17352] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.756281][T17352] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.846613][ T3513] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1205.986905][T17352] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.034149][ T3513] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1206.059205][ T3513] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1206.086351][ T3513] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1206.105059][T18983] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1206.121340][T18983] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1206.139311][T18983] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1206.149410][T18983] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1206.162959][T18983] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1206.192472][T20297] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1206.485833][T20297] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1206.494022][T20297] usb 3-1: can't read configurations, error -61 [ 1206.515346][ T3513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.538126][ T4156] lo speed is unknown, defaulting to 1000 [ 1206.566608][ T4192] netlink: 'syz.8.3875': attribute type 10 has an invalid length. [ 1206.670221][T20297] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1206.747224][ T4185] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3875'. [ 1206.771175][ T4192] bond0: (slave team0): Releasing backup interface [ 1206.815755][ T4192] batman_adv: batadv0: Adding interface: team0 [ 1206.822447][ T4192] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.865086][ T4192] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1206.877323][T20297] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1206.888918][T20297] usb 3-1: can't read configurations, error -61 [ 1206.906260][T20297] usb usb3-port1: attempt power cycle [ 1206.939745][ T3513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.024340][T17352] bridge_slave_1: left allmulticast mode [ 1207.075181][T17352] bridge_slave_1: left promiscuous mode [ 1207.110310][T17352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.186342][T17352] bridge_slave_0: left allmulticast mode [ 1207.197473][T17352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.291113][T20297] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1207.405978][T20297] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1207.413771][T20297] usb 3-1: can't read configurations, error -61 [ 1207.566618][T20297] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1207.604375][T20297] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1207.613723][T20297] usb 3-1: can't read configurations, error -61 [ 1207.622379][T20297] usb usb3-port1: unable to enumerate USB device [ 1207.888827][ T4219] svc: failed to register nfsdv3 RPC service (errno 111). [ 1207.900923][ T4219] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1207.983570][T17352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1207.997515][T17352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1208.009075][T17352] bond0 (unregistering): Released all slaves [ 1208.025797][ T4156] lo speed is unknown, defaulting to 1000 [ 1208.035259][ T4218] tipc: Enabling of bearer rejected, media not registered [ 1208.068657][T17331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.075835][T17331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.157172][T17331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.164345][T17331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.200229][T23042] Bluetooth: hci5: command tx timeout [ 1209.439680][ T3513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1210.150250][ T30] audit: type=1400 audit(1756040696.336:2378): avc: denied { map } for pid=4304 comm="syz.1.3886" path="socket:[86797]" dev="sockfs" ino=86797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1210.280291][T23042] Bluetooth: hci5: command tx timeout [ 1210.361623][ T4399] siw: device registration error -23 [ 1210.747426][T17352] hsr_slave_0: left promiscuous mode [ 1210.778582][T17352] hsr_slave_1: left promiscuous mode [ 1210.805755][T17352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1210.850094][T17352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.907058][T17352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1210.940102][T17352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1211.043995][T17352] veth1_macvtap: left promiscuous mode [ 1211.059752][T17352] veth0_macvtap: left promiscuous mode [ 1211.077365][T17352] veth1_vlan: left promiscuous mode [ 1211.098238][T17352] veth0_vlan: left promiscuous mode [ 1211.162414][ T4427] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.360476][T23042] Bluetooth: hci5: command tx timeout [ 1212.840487][T20297] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1213.010870][T20297] usb 3-1: Using ep0 maxpacket: 16 [ 1213.019033][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3891'. [ 1213.391442][ T4458] mmap: syz.1.3894 (4458): VmData 26103808 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data. [ 1214.018707][T17352] team0 (unregistering): Port device team_slave_1 removed [ 1214.104779][T17352] team0 (unregistering): Port device team_slave_0 removed [ 1214.445145][T23042] Bluetooth: hci5: command tx timeout [ 1214.630239][ T9] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 1214.759512][ T4156] chnl_net:caif_netlink_parms(): no params data found [ 1214.799773][ T9] usb 9-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1214.820354][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.854893][ T9] usb 9-1: Product: syz [ 1214.875004][ T9] usb 9-1: Manufacturer: syz [ 1214.883352][ T9] usb 9-1: SerialNumber: syz [ 1214.913727][ T9] usb 9-1: config 0 descriptor?? [ 1215.064547][ T3513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.255468][ T4156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.291825][ T4156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.316548][ T4156] bridge_slave_0: entered allmulticast mode [ 1215.360918][ T4156] bridge_slave_0: entered promiscuous mode [ 1215.398348][ T4156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.412458][ T4156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.429047][ T4156] bridge_slave_1: entered allmulticast mode [ 1215.450246][ T4156] bridge_slave_1: entered promiscuous mode [ 1215.565974][T20297] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1215.612771][T20297] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1215.660757][T20297] usb 3-1: can't read configurations, error -71 [ 1215.679323][ T4156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.764630][ T4156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.882977][ T30] audit: type=1400 audit(1756040702.096:2379): avc: denied { read } for pid=4597 comm="syz.2.3901" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1216.089733][ T4156] team0: Port device team_slave_0 added [ 1216.116962][ T4156] team0: Port device team_slave_1 added [ 1216.344470][ T4156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.466265][ T4156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.524309][ T4156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1216.558844][ T4156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.585017][ T4156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.682679][T20289] usb 9-1: USB disconnect, device number 40 [ 1216.709469][ T4156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1216.951366][ T3513] veth0_vlan: entered promiscuous mode [ 1217.166048][ T4156] hsr_slave_0: entered promiscuous mode [ 1217.232904][ T4156] hsr_slave_1: entered promiscuous mode [ 1217.257297][ T4156] debugfs: 'hsr0' already exists in 'hsr' [ 1217.303098][ T4156] Cannot create hsr debugfs directory [ 1217.330101][ T3513] veth1_vlan: entered promiscuous mode [ 1218.578253][ T3513] veth0_macvtap: entered promiscuous mode [ 1218.826043][ T3513] veth1_macvtap: entered promiscuous mode [ 1218.855229][ T3513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1218.934428][ T3513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1219.107416][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.349260][ T4809] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3908'. [ 1219.358418][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3908'. [ 1220.332405][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.524086][ T4823] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3909'. [ 1220.562326][ T30] audit: type=1400 audit(1756040706.726:2380): avc: denied { getopt } for pid=4811 comm="syz.1.3909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1221.081042][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.108390][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.422699][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.455657][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.619775][T17351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.660238][T17351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.681739][ T4156] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1221.730657][ T4156] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1221.779263][ T4156] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1221.831251][ T4156] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1222.761664][ T4156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.865242][ T4156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.928266][T17352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.935367][T17352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.994283][T17352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.001400][T17352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.640342][ T4921] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1224.566402][ T4156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.852859][ T4156] veth0_vlan: entered promiscuous mode [ 1225.930316][ T4156] veth1_vlan: entered promiscuous mode [ 1226.003917][ T54] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1226.064520][ T4156] veth0_macvtap: entered promiscuous mode [ 1226.088596][ T4992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3931'. [ 1226.106020][ T4156] veth1_macvtap: entered promiscuous mode [ 1226.192146][ T54] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 1226.298578][ T54] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.330331][ T54] usb 3-1: config 0 has no interface number 0 [ 1226.336461][ T54] usb 3-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice= 0.05 [ 1226.786628][ T4156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.812919][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.838209][ T4156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1226.873098][ T54] usb 3-1: config 0 descriptor?? [ 1226.903860][T17352] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.933316][T17352] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.989935][T17352] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.091411][T17352] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.401958][T17352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.439383][T17352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.675151][ T54] usb 3-1: string descriptor 0 read error: -71 [ 1227.688515][T17352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.734925][ T54] usb 3-1: USB disconnect, device number 91 [ 1227.781208][T17352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.970185][ T5962] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1229.000789][ T5962] usb 5-1: Using ep0 maxpacket: 8 [ 1229.474492][ T5962] usb 5-1: config 1 has an invalid interface number: 212 but max is 0 [ 1229.514207][ T5962] usb 5-1: config 1 has no interface number 0 [ 1229.541327][ T5962] usb 5-1: config 1 interface 212 altsetting 129 endpoint 0xF has an invalid bInterval 157, changing to 11 [ 1229.573448][ T5962] usb 5-1: config 1 interface 212 altsetting 129 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1229.610508][ T5962] usb 5-1: config 1 interface 212 has no altsetting 0 [ 1229.762092][ T30] audit: type=1400 audit(1756040715.956:2381): avc: denied { read } for pid=5080 comm="syz.1.3939" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1229.788610][ T5962] usb 5-1: New USB device found, idVendor=19d2, idProduct=1062, bcdDevice=a8.3c [ 1229.802643][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.812726][ T5962] usb 5-1: Product: 䯟꘷˳敠曣激ሞඍ軬餣Ⱉ惄䲳ꌻ㣯桞ᠶⰕ⟉︯方ࡠ蝫꒏䩆뭕돍“젞摛ἣ䂻쳪 [ 1229.826066][ T30] audit: type=1400 audit(1756040715.956:2382): avc: denied { open } for pid=5080 comm="syz.1.3939" path="/64/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1229.855652][ T5962] usb 5-1: Manufacturer: љ [ 1229.880979][ T5962] usb 5-1: SerialNumber: А [ 1229.907414][ T5093] tipc: Started in network mode [ 1229.912710][ T5093] tipc: Node identity ac14140f, cluster identity 4711 [ 1229.919651][ T5093] tipc: New replicast peer: 255.255.255.255 [ 1229.925978][ T5093] tipc: Enabled bearer , priority 10 [ 1229.971699][ T30] audit: type=1400 audit(1756040715.956:2383): avc: denied { ioctl } for pid=5080 comm="syz.1.3939" path="/64/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1229.990148][T20311] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1230.028084][ T5101] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3941'. [ 1230.057553][ T30] audit: type=1400 audit(1756040716.276:2384): avc: denied { write } for pid=5100 comm="syz.8.3941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1230.082171][ T6618] block nbd0: Possible stuck request ffff8880266ee1c0: control (read@0,1024B). Runtime 150 seconds [ 1230.264023][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3941'. [ 1230.300431][T20311] usb 2-1: Using ep0 maxpacket: 16 [ 1230.409462][T20311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49863, setting to 1024 [ 1230.424431][T20311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1230.439176][T20311] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1230.492707][ T6618] block nbd0: Possible stuck request ffff8880266ee380: control (read@1024,1024B). Runtime 150 seconds [ 1230.520208][ T6618] block nbd0: Possible stuck request ffff8880266ee540: control (read@2048,1024B). Runtime 150 seconds [ 1230.532451][T20311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.555648][ T5107] bond1 (unregistering): Released all slaves [ 1230.590569][T20310] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1230.632854][ T6618] block nbd0: Possible stuck request ffff8880266ee700: control (read@3072,1024B). Runtime 150 seconds [ 1230.656122][T20297] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1230.679230][T20311] usb 2-1: config 0 descriptor?? [ 1230.760316][T20310] usb 3-1: Using ep0 maxpacket: 32 [ 1230.767361][T20310] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1230.777335][T20310] usb 3-1: config 0 has no interface number 0 [ 1230.784462][T20310] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1230.839321][T20310] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1230.860471][T20297] usb 6-1: Using ep0 maxpacket: 8 [ 1230.883748][T20297] usb 6-1: config 0 has an invalid descriptor of length 161, skipping remainder of the config [ 1230.895129][T20297] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1230.929228][T20297] usb 6-1: New USB device found, idVendor=16d0, idProduct=18a9, bcdDevice=30.52 [ 1230.943363][T20311] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 1230.951675][ T9] tipc: Node number set to 2886997007 [ 1230.966964][T20297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.999218][T20297] usb 6-1: Product: syz [ 1231.020340][T20310] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1231.033264][T20297] usb 6-1: Manufacturer: syz [ 1231.044958][T20311] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 1231.068328][T20297] usb 6-1: SerialNumber: syz [ 1231.104846][T20310] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1231.115525][T20311] microsoft 0003:045E:07DA.002E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1231.125762][T20297] usb 6-1: config 0 descriptor?? [ 1231.236015][T20310] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1231.267772][T20311] microsoft 0003:045E:07DA.002E: no inputs found [ 1231.330769][T20311] microsoft 0003:045E:07DA.002E: could not initialize ff, continuing anyway [ 1231.358799][T20310] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1231.375358][T20297] usb 6-1: USB disconnect, device number 32 [ 1231.466778][T20311] usb 2-1: USB disconnect, device number 74 [ 1231.473149][T20310] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1231.565454][T20310] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1231.599198][T20310] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1231.626650][T20310] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1231.657096][T20310] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1231.704076][T20310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.723680][ T5962] option 5-1:1.212: GSM modem (1-port) converter detected [ 1231.756383][T20310] usb 3-1: Product: syz [ 1231.762108][T20310] usb 3-1: Manufacturer: syz [ 1231.769135][ T5214] fido_id[5214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1231.770883][T20310] usb 3-1: SerialNumber: syz [ 1231.801406][ T5962] usb 5-1: USB disconnect, device number 84 [ 1231.830770][ T5962] option 5-1:1.212: device disconnected [ 1231.849783][T20310] usb 3-1: config 0 descriptor?? [ 1231.869978][ T5113] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1231.925901][T20310] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1231.996233][T20310] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1232.086077][T20310] scsi host1: microtekX6 [ 1232.092619][ T5269] 8021q: VLANs not supported on ipvlan1 [ 1232.126119][ T3555] microtek usb (rev 0.4.3): error -90 submitting URB [ 1232.139462][ T5269] 8021q: VLANs not supported on ipvlan1 [ 1232.170711][ T6618] microtek usb (rev 0.4.3): error -90 submitting URB [ 1232.195717][T20310] usb 3-1: USB disconnect, device number 92 [ 1232.220221][ T6618] microtek usb (rev 0.4.3): error -19 submitting URB [ 1232.250579][ T6618] microtek usb (rev 0.4.3): error -19 submitting URB [ 1232.390519][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3946'. [ 1232.464489][ T5265] lo speed is unknown, defaulting to 1000 [ 1232.642927][ T5301] fuse: Bad value for 'fd' [ 1232.841212][ T30] audit: type=1326 audit(1756040719.066:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.8.3945" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41e558ebe9 code=0x0 [ 1233.122687][ T5239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1233.191478][T17343] Bluetooth: hci10: Frame reassembly failed (-84) [ 1233.322278][ T30] audit: type=1400 audit(1756040719.546:2386): avc: denied { ioctl } for pid=5312 comm="syz.4.3953" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1234.070863][ T5332] Invalid ELF header magic: != ELF [ 1234.144276][ T5265] lo speed is unknown, defaulting to 1000 [ 1235.260260][T18983] Bluetooth: hci10: command 0x1003 tx timeout [ 1235.268417][T23042] Bluetooth: hci10: Opcode 0x1003 failed: -110 [ 1235.515209][ T5320] mkiss: ax0: crc mode is auto. [ 1236.040662][ T30] audit: type=1400 audit(1756040722.176:2387): avc: denied { read } for pid=5403 comm="syz.1.3957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1236.176948][ T5405] cgroup: fork rejected by pids controller in /syz1 [ 1237.289418][ T5479] bridge_slave_0: left allmulticast mode [ 1237.378531][ T5479] bridge_slave_0: left promiscuous mode [ 1237.543730][ T5479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.610721][ T5479] bridge_slave_1: left allmulticast mode [ 1237.639065][ T5479] bridge_slave_1: left promiscuous mode [ 1237.664975][ T5479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.778692][ T5479] bond0: (slave bond_slave_0): Releasing backup interface [ 1237.862347][ T5479] bond0: (slave bond_slave_1): Releasing backup interface [ 1237.903067][ T5479] team0: Port device team_slave_0 removed [ 1237.941839][ T5479] team0: Port device team_slave_1 removed [ 1237.991185][ T5479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1237.998594][ T5479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.059054][ T5479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1238.076750][ T5479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.300906][T20289] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1238.367783][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.481509][T20289] usb 6-1: Using ep0 maxpacket: 32 [ 1238.501504][T20289] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.547655][T20289] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1238.577075][T20289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.594930][T20289] usb 6-1: Product: syz [ 1238.605035][T20289] usb 6-1: Manufacturer: syz [ 1238.619958][T20289] usb 6-1: SerialNumber: syz [ 1238.624764][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1238.642689][T20289] usb 6-1: config 0 descriptor?? [ 1238.659716][T20289] cdc_ether 6-1:0.0: skipping garbage [ 1238.666935][T20289] usb 6-1: bad CDC descriptors [ 1238.672721][T20306] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1238.692724][T20289] usb 6-1: unsupported MDLM descriptors [ 1238.841575][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1238.868540][ T9] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1238.917285][ T9] usb 2-1: config 0 has no interface number 0 [ 1238.926225][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3962'. [ 1238.936808][T20306] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1238.957133][T20306] usb 9-1: config 0 has no interface number 0 [ 1238.969215][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1238.997380][ T5502] lo speed is unknown, defaulting to 1000 [ 1239.005962][T20306] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.037669][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1239.049531][T20306] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.076218][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1239.092814][ T30] audit: type=1400 audit(1756040725.296:2388): avc: denied { kexec_image_load } for pid=5548 comm="syz.2.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1239.120171][T20306] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1239.129222][T20306] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.145606][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1239.158300][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1239.178700][T20306] usb 9-1: config 0 descriptor?? [ 1239.200156][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1239.387988][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1239.560087][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1239.600610][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1239.642190][T20306] usbhid 9-1:0.1: can't add hid device: -71 [ 1239.689844][ T9] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1239.704355][T20306] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 1239.731294][T20306] usb 9-1: USB disconnect, device number 41 [ 1239.734746][ T5502] lo speed is unknown, defaulting to 1000 [ 1239.739967][ T9] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1239.791404][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.911944][ T9] usb 2-1: Product: syz [ 1240.473129][ T9] usb 2-1: Manufacturer: syz [ 1240.487117][ T9] usb 2-1: SerialNumber: syz [ 1240.523182][ T9] usb 2-1: config 0 descriptor?? [ 1240.536980][ T5525] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1240.559777][ T9] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1240.569152][ T9] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1240.612319][ T9] scsi host1: microtekX6 [ 1240.622185][T17343] microtek usb (rev 0.4.3): error -90 submitting URB [ 1240.676585][T17343] microtek usb (rev 0.4.3): error -90 submitting URB [ 1240.700374][ T6618] microtek usb (rev 0.4.3): error -90 submitting URB [ 1240.742257][ T6618] microtek usb (rev 0.4.3): error -90 submitting URB [ 1240.807207][ T9] usb 2-1: USB disconnect, device number 75 [ 1241.646612][ T5673] Invalid ELF header magic: != ELF [ 1241.919645][ T30] audit: type=1400 audit(1756040728.136:2389): avc: denied { create } for pid=5676 comm="syz.1.3971" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 1242.934066][ T5698] bridge0: port 3(gretap0) entered blocking state [ 1242.941951][ T5698] bridge0: port 3(gretap0) entered disabled state [ 1242.948579][ T5698] gretap0: entered allmulticast mode [ 1242.986852][ T5698] gretap0: entered promiscuous mode [ 1242.994016][ T5698] bridge0: port 3(gretap0) entered blocking state [ 1243.000567][ T5698] bridge0: port 3(gretap0) entered forwarding state [ 1243.814798][T20310] usb 6-1: USB disconnect, device number 33 [ 1244.330477][T20306] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1244.460411][T20306] usb 2-1: device descriptor read/64, error -71 [ 1244.700444][T20306] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1244.840423][T20306] usb 2-1: device descriptor read/64, error -71 [ 1245.065904][T20306] usb usb2-port1: attempt power cycle [ 1245.161806][ T5775] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1245.190680][ T5775] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1245.311376][ T5775] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1245.327519][ T5775] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1245.376257][ T5775] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1245.428915][ T5775] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1245.460391][T20306] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1245.494286][ T5775] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1245.506324][T20306] usb 2-1: device descriptor read/8, error -71 [ 1245.629454][ T5775] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1245.639003][ T5775] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1245.649394][ T5775] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1245.679763][ T5775] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1245.791665][T20306] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1245.800884][ T5775] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1245.806979][ T5775] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1245.824629][T20306] usb 2-1: device descriptor read/8, error -71 [ 1245.891434][ T5775] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1245.958534][T20306] usb usb2-port1: unable to enumerate USB device [ 1246.144126][ T5826] netlink: 'syz.5.3985': attribute type 1 has an invalid length. [ 1246.198601][ T5826] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3985'. [ 1246.369882][ T5840] Invalid ELF header magic: != ELF [ 1246.443624][T23042] Bluetooth: hci7: command 0x0c1a tx timeout [ 1247.240939][T23042] Bluetooth: hci9: command 0x0c1a tx timeout [ 1247.321016][T23042] Bluetooth: hci4: command 0x0c1a tx timeout [ 1247.500194][T23042] Bluetooth: hci2: command 0x0c1a tx timeout [ 1247.642320][T23042] Bluetooth: hci6: command 0x0c1a tx timeout [ 1247.880470][T23042] Bluetooth: hci5: command 0x0c1a tx timeout [ 1248.275430][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3991'. [ 1249.400338][T23042] Bluetooth: hci4: command 0x0c1a tx timeout [ 1249.560756][T23042] Bluetooth: hci2: command 0x0c1a tx timeout [ 1249.720200][T23042] Bluetooth: hci6: command 0x0c1a tx timeout [ 1249.960146][T23042] Bluetooth: hci5: command 0x0c1a tx timeout [ 1250.628210][T20305] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1250.803860][T20305] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1250.813735][T20305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.895281][T20305] usb 6-1: Product: syz [ 1250.908254][T20305] usb 6-1: Manufacturer: syz [ 1250.925912][T20305] usb 6-1: SerialNumber: syz [ 1250.955343][T20305] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1250.996417][T20306] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1251.440782][ T9] usb 6-1: USB disconnect, device number 34 [ 1251.488047][T23042] Bluetooth: hci4: command 0x0c1a tx timeout [ 1251.640297][T23042] Bluetooth: hci2: command 0x0c1a tx timeout [ 1251.800631][T23042] Bluetooth: hci6: command 0x0c1a tx timeout [ 1252.040294][T23042] Bluetooth: hci5: command 0x0c1a tx timeout [ 1252.281495][T20306] usb 6-1: Service connection timeout for: 256 [ 1252.287774][T20306] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1252.330650][T20306] ath9k_htc: Failed to initialize the device [ 1252.368951][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 1252.681096][ T6011] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1252.701885][ T6011] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 1253.834777][T18983] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1253.861318][T18983] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1253.870681][T18983] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1253.878564][T18983] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1253.886691][T18983] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1253.951929][ T6024] lo speed is unknown, defaulting to 1000 [ 1254.081348][ T6034] Invalid ELF header magic: != ELF [ 1254.109832][ T6024] lo speed is unknown, defaulting to 1000 [ 1254.440756][ T6044] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1256.291902][T23042] Bluetooth: hci10: command tx timeout [ 1256.465612][ T6024] chnl_net:caif_netlink_parms(): no params data found [ 1257.556066][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.622790][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.630881][ T6024] bridge_slave_0: entered allmulticast mode [ 1257.638835][ T6024] bridge_slave_0: entered promiscuous mode [ 1257.671901][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.682840][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.715643][ T6024] bridge_slave_1: entered allmulticast mode [ 1257.733469][ T6024] bridge_slave_1: entered promiscuous mode [ 1257.965128][ T6024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.036203][ T30] audit: type=1400 audit(1756040750.246:2390): avc: denied { ioctl } for pid=6267 comm="syz.8.4020" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1258.088144][ T6024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.240453][T20306] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1258.328804][ T6291] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1258.360392][T18983] Bluetooth: hci10: command tx timeout [ 1258.430177][T20306] usb 6-1: Using ep0 maxpacket: 8 [ 1258.476131][T20306] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1258.494402][ T6024] team0: Port device team_slave_0 added [ 1258.671054][T20306] usb 6-1: config 0 has no interface number 0 [ 1258.688642][ T6024] team0: Port device team_slave_1 added [ 1258.696196][T20306] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1259.647717][T20306] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1259.660158][T20306] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 120, changing to 10 [ 1259.671546][T20306] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 8312, setting to 1024 [ 1259.690513][T20306] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1259.703703][T20306] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1259.716886][T20306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.735941][T20306] usb 6-1: config 0 descriptor?? [ 1259.758834][T20306] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1259.895003][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.910516][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.994818][ T6024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.056778][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.110141][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1260.155783][ T6618] block nbd0: Possible stuck request ffff8880266ee1c0: control (read@0,1024B). Runtime 180 seconds [ 1260.175617][ T6024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1260.441145][T18983] Bluetooth: hci10: command tx timeout [ 1260.452385][ T6024] hsr_slave_0: entered promiscuous mode [ 1260.458880][ T6024] hsr_slave_1: entered promiscuous mode [ 1260.498589][ T6024] debugfs: 'hsr0' already exists in 'hsr' [ 1260.506392][ T6024] Cannot create hsr debugfs directory [ 1260.520813][ T6618] block nbd0: Possible stuck request ffff8880266ee380: control (read@1024,1024B). Runtime 180 seconds [ 1260.562835][ T6618] block nbd0: Possible stuck request ffff8880266ee540: control (read@2048,1024B). Runtime 180 seconds [ 1260.650251][ T6618] block nbd0: Possible stuck request ffff8880266ee700: control (read@3072,1024B). Runtime 180 seconds [ 1261.004849][ T9] usb 6-1: USB disconnect, device number 35 [ 1261.590590][ T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1261.781936][ T6454] Invalid ELF header magic: != ELF [ 1262.510312][T20289] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1262.530498][T18983] Bluetooth: hci10: command tx timeout [ 1262.880383][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1262.899999][T20289] usb 3-1: Using ep0 maxpacket: 32 [ 1262.913012][T20289] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1262.947022][T20289] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1262.955740][T20289] usb 3-1: can't read configurations, error -61 [ 1262.994757][ T6527] block nbd8: Attempted send on invalid socket [ 1263.003351][ T6527] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 3 [ 1263.015285][ T6527] hfsplus: unable to find HFS+ superblock [ 1263.062255][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1263.080375][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.102011][T20289] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1263.128222][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1263.161139][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.178246][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.199718][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1263.210139][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1263.231305][ T9] usb 6-1: Product: syz [ 1263.254297][ T9] usb 6-1: Manufacturer: syz [ 1263.270152][T20289] usb 3-1: Using ep0 maxpacket: 32 [ 1263.282934][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1263.291743][T20289] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1263.311568][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1263.547040][T20289] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1263.566032][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.572148][T20289] usb 3-1: can't read configurations, error -61 [ 1263.577066][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.621425][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1263.627395][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 1263.672861][T20289] usb usb3-port1: attempt power cycle [ 1263.701622][ T9] usb 6-1: USB disconnect, device number 36 [ 1263.995003][ T6024] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1264.040834][T20289] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1264.091084][T20289] usb 3-1: Using ep0 maxpacket: 32 [ 1264.097570][T20289] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1264.118656][T20289] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1264.142499][ T6024] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1264.188006][T20289] usb 3-1: can't read configurations, error -61 [ 1264.252748][ T6024] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1264.333077][ T6024] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1264.340257][T20289] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1264.391466][T20289] usb 3-1: Using ep0 maxpacket: 32 [ 1264.417761][T20289] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1264.448112][T20289] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1264.461651][T20289] usb 3-1: can't read configurations, error -61 [ 1264.479377][T20289] usb usb3-port1: unable to enumerate USB device [ 1264.646762][ T6606] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4039'. [ 1264.850794][ T6024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.878964][ T6024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.096887][ T6610] netlink: 'syz.5.4039': attribute type 10 has an invalid length. [ 1265.110835][ T6610] team0: Port device wlan1 added [ 1265.148287][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.155457][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.193984][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.201151][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.360497][T20289] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1265.436213][ T6633] tmpfs: Bad value for 'mpol' [ 1265.436315][ T6631] tmpfs: Bad value for 'mpol' [ 1265.520564][T20289] usb 9-1: Using ep0 maxpacket: 16 [ 1265.538753][T20289] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1265.609240][T20289] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1265.683466][T20289] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1265.722542][T20289] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.752979][T20289] usb 9-1: config 0 descriptor?? [ 1265.801865][ T6642] can0: slcan on ttyS3. [ 1265.968055][ T6663] Invalid ELF header magic: != ELF [ 1266.014500][ T6647] can0 (unregistered): slcan off ttyS3. [ 1266.017986][ T6024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1267.103238][ T6024] veth0_vlan: entered promiscuous mode [ 1267.153325][ T6024] veth1_vlan: entered promiscuous mode [ 1267.208844][T20289] usbhid 9-1:0.0: can't add hid device: -71 [ 1267.249659][T20289] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1267.350356][T20289] usb 9-1: USB disconnect, device number 42 [ 1267.404771][ T6024] veth0_macvtap: entered promiscuous mode [ 1267.450981][ T6024] veth1_macvtap: entered promiscuous mode [ 1267.489025][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1267.545148][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1267.612652][T17352] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.667679][T17352] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.713681][T17352] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.752090][T17348] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.909439][ T30] audit: type=1400 audit(1756040760.126:2391): avc: denied { bind } for pid=6726 comm="syz.2.4051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1267.940058][ T6727] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4051'. [ 1268.039594][ T30] audit: type=1400 audit(1756040760.126:2392): avc: denied { listen } for pid=6726 comm="syz.2.4051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1268.116974][ T30] audit: type=1400 audit(1756040760.126:2393): avc: denied { read } for pid=6726 comm="syz.2.4051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1268.172374][T17324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.197278][T17324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.206200][ T6734] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1268.422210][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.455063][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.710710][T20306] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1269.410158][T20306] usb 9-1: Using ep0 maxpacket: 8 [ 1269.417038][T20306] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1269.427173][T20306] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1269.440562][T20306] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.569393][T20306] usb 9-1: Product: syz [ 1269.587874][T20306] usb 9-1: Manufacturer: syz [ 1269.589736][ T6770] overlayfs: conflicting lowerdir path [ 1269.614015][T20306] usb 9-1: SerialNumber: syz [ 1270.000797][T20306] usb 9-1: config 0 descriptor?? [ 1270.031049][ T6771] netlink: 'syz.9.4004': attribute type 10 has an invalid length. [ 1270.039252][ T6771] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4004'. [ 1270.050528][T20306] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1270.064991][T20306] usb 9-1: setting power ON [ 1270.069495][T20306] dvb-usb: bulk message failed: -22 (2/0) [ 1270.082449][T20306] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1270.107251][ T6771] team0: entered promiscuous mode [ 1270.141758][ T6771] team_slave_0: entered promiscuous mode [ 1270.153487][T20306] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1270.170312][ T6771] team_slave_1: entered promiscuous mode [ 1270.180276][ T6771] team0: entered allmulticast mode [ 1270.187515][ T6771] team_slave_0: entered allmulticast mode [ 1270.197192][T20306] usb 9-1: media controller created [ 1270.225189][T20306] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1270.227313][ T6771] team_slave_1: entered allmulticast mode [ 1270.328828][ T6771] bridge0: port 3(team0) entered blocking state [ 1270.335916][T20306] usb 9-1: selecting invalid altsetting 6 [ 1270.350463][ T54] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1270.353279][T20306] usb 9-1: digital interface selection failed (-22) [ 1270.388402][ T6771] bridge0: port 3(team0) entered disabled state [ 1270.392598][T20306] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1270.467059][T20306] usb 9-1: setting power OFF [ 1270.471325][ T6771] bridge0: port 3(team0) entered blocking state [ 1270.478036][ T6771] bridge0: port 3(team0) entered forwarding state [ 1270.480619][T20306] dvb-usb: bulk message failed: -22 (2/0) [ 1270.532675][T20306] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1270.558782][ T54] usb 10-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1270.565461][T20306] (NULL device *): no alternate interface [ 1270.588608][ T54] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.631382][ T54] usb 10-1: Product: syz [ 1270.635898][ T54] usb 10-1: Manufacturer: syz [ 1270.638500][T20306] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1270.642564][ T54] usb 10-1: SerialNumber: syz [ 1270.677949][T20306] usb 9-1: USB disconnect, device number 43 [ 1270.681712][ T54] usb 10-1: config 0 descriptor?? [ 1270.986949][ T6841] syz_tun: refused to change device tx_queue_len [ 1270.997435][ T6784] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1271.009235][ T6784] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1271.017485][ T6841] netlink: 'syz.8.4058': attribute type 1 has an invalid length. [ 1271.034338][ T6784] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1271.041947][ T6841] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4058'. [ 1271.060587][ T6784] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1271.070621][ T6784] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1271.099557][ T6784] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1271.123640][ T6784] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 1271.152902][ T6784] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 1271.183708][ T6784] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 1272.172230][ T54] usb 10-1: f81604_read: reg: 100f failed: -EPROTO [ 1272.296454][ T54] usb 10-1: f81604_read: reg: 200f failed: -EPROTO [ 1272.333814][ T54] usb 10-1: USB disconnect, device number 35 [ 1272.401376][ T6880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1272.428956][ T54] usb 10-1: f81604_read: reg: 100f failed: -ENODEV [ 1272.562121][ T54] usb 10-1: f81604_read: reg: 200f failed: -ENODEV [ 1272.600317][T18983] Bluetooth: hci7: command 0x0c1a tx timeout [ 1272.744136][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4063'. [ 1272.922726][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4064'. [ 1272.998476][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4063'. [ 1273.086313][T23042] Bluetooth: hci2: command 0x0c1a tx timeout [ 1273.086709][ T5854] Bluetooth: hci4: command 0x0c1a tx timeout [ 1273.092380][T23042] Bluetooth: hci9: command 0x0c1a tx timeout [ 1273.092429][T18983] Bluetooth: hci6: command 0x0c1a tx timeout [ 1273.163197][ T6920] Bluetooth: hci5: command 0x0c1a tx timeout [ 1273.169304][ T5854] Bluetooth: hci10: command 0x0405 tx timeout [ 1273.326026][ T30] audit: type=1400 audit(1756040765.546:2394): avc: denied { checkpoint_restore } for pid=6927 comm="syz.9.4065" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1273.347872][ C0] vkms_vblank_simulate: vblank timer overrun [ 1273.431024][ T6935] fuse: Bad value for 'fd' [ 1274.950917][ T6957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4069'. [ 1274.968364][ T6957] vlan0: entered allmulticast mode [ 1274.974002][ T6957] veth1: entered allmulticast mode [ 1275.150335][ T9] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1275.240701][ T5854] Bluetooth: hci10: command 0x0405 tx timeout [ 1275.312728][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.324510][ T9] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1275.364460][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1275.375045][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.446621][ T9] usb 9-1: Product: syz [ 1275.456924][ T9] usb 9-1: Manufacturer: syz [ 1275.466839][ T9] usb 9-1: SerialNumber: syz [ 1275.483422][ T9] cdc_mbim 9-1:1.0: skipping garbage [ 1275.748868][ T6959] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1276.394937][ T6959] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1276.446623][ T30] audit: type=1400 audit(1756040768.616:2395): avc: denied { append } for pid=6973 comm="syz.5.4071" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1276.471329][ T9] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1276.636852][ T9] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 1276.672027][ T9] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 1276.699887][ T9] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 1276.787684][ T9] wwan wwan0: port wwan0mbim0 attached [ 1276.807564][ T9] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, ae:52:66:89:0f:b0 [ 1276.903879][ T9] usb 9-1: USB disconnect, device number 44 [ 1276.942126][ T9] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 1277.104414][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 1277.320449][ T5854] Bluetooth: hci10: command 0x0405 tx timeout [ 1277.333713][ T30] audit: type=1326 audit(1756040769.556:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.8.4073" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41e558ebe9 code=0x0 [ 1278.040784][ T54] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1278.210264][ T54] usb 10-1: Using ep0 maxpacket: 32 [ 1278.226600][ T54] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1278.257195][ T54] usb 10-1: config 0 has no interface number 0 [ 1278.273368][ T54] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1278.295565][ T54] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.307952][ T54] usb 10-1: Product: syz [ 1278.319917][ T54] usb 10-1: Manufacturer: syz [ 1278.338757][ T54] usb 10-1: SerialNumber: syz [ 1278.364754][ T54] usb 10-1: config 0 descriptor?? [ 1278.378472][ T54] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1278.637495][ T7079] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4078'. [ 1278.805814][ T54] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1278.867593][ T54] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1278.968783][ T7099] loop7: detected capacity change from 0 to 7 [ 1278.997339][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1279.006517][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1279.024509][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1279.033722][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1279.070355][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1279.079541][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1279.116157][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1279.125318][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1279.146782][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1279.155943][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1279.164975][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1279.174167][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1279.182394][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1279.191601][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1279.199458][ T7099] ldm_validate_partition_table(): Disk read failed. [ 1279.215002][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1279.224236][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1279.239168][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1279.239201][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1279.243795][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1279.243817][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1279.244456][ T7099] Dev loop7: unable to read RDB block 0 [ 1279.246364][ T7099] loop7: unable to read partition table [ 1279.246530][ T7099] loop7: partition table beyond EOD, truncated [ 1279.246556][ T7099] loop_reread_partitions: partition scan of loop7 (8gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 1279.251561][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1279.252213][ T9] usb 10-1: USB disconnect, device number 36 [ 1279.256038][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1279.276635][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1279.410729][ T7101] ldm_validate_partition_table(): Disk read failed. [ 1279.416864][ T9] quatech2 10-1:0.51: device disconnected [ 1279.472905][ T7101] Dev loop7: unable to read RDB block 0 [ 1279.479160][ T7101] loop7: unable to read partition table [ 1279.494926][ T7101] loop7: partition table beyond EOD, truncated [ 1279.887416][ T7131] netlink: 34 bytes leftover after parsing attributes in process `syz.5.4082'. [ 1280.355906][ T7165] tipc: Enabling of bearer rejected, failed to enable media [ 1280.477620][ T7131] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1280.510209][ T7131] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1280.524317][ T7131] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1280.539827][ T7131] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1280.559318][ T7131] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1280.626782][ T7131] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1280.636575][ T7131] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 1281.002054][ T5962] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1281.171881][ T5962] usb 10-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1281.182588][ T5962] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.229577][ T5962] usb 10-1: config 0 descriptor?? [ 1281.264728][ T5962] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1281.609216][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1281.616735][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1281.694090][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1281.701947][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.733359][ T5962] gspca_sunplus: reg_w_riv err -71 [ 1281.738511][ T5962] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1281.759002][ T5962] usb 10-1: USB disconnect, device number 37 [ 1282.040471][ T5854] Bluetooth: hci7: command 0x0c1a tx timeout [ 1282.532308][ T5854] Bluetooth: hci9: command 0x0c1a tx timeout [ 1282.610643][ T5854] Bluetooth: hci6: command 0x0c1a tx timeout [ 1282.612341][ T6920] Bluetooth: hci2: command 0x0c1a tx timeout [ 1282.616678][T18983] Bluetooth: hci4: command 0x0c1a tx timeout [ 1282.629144][ T5962] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1282.680627][T18983] Bluetooth: hci10: command 0x0405 tx timeout [ 1282.687232][ T5854] Bluetooth: hci5: command 0x0c1a tx timeout [ 1282.782597][ T5962] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1282.797951][ T5962] usb 10-1: New USB device found, idVendor=056a, idProduct=0032, bcdDevice= 0.40 [ 1282.815658][ T5962] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.831653][ T5962] usb 10-1: Product: Ы [ 1282.842202][ T5962] usb 10-1: Manufacturer: 뙤㺉垌䚛ᇴ룝ധ䈿ᗤＹ [ 1282.862158][ T5962] usb 10-1: SerialNumber: syz [ 1283.087442][ T7239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.096633][ T7239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.203717][ T5962] usbhid 10-1:1.0: can't add hid device: -71 [ 1283.216890][ T5962] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1283.245556][ T5962] usb 10-1: USB disconnect, device number 38 [ 1283.452596][ T5854] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1283.467099][ T5854] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1283.479114][ T5854] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1283.494810][ T5854] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1283.508526][ T5854] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1283.554073][ T7272] lo speed is unknown, defaulting to 1000 [ 1283.630992][ T7281] random: crng reseeded on system resumption [ 1283.631136][ T30] audit: type=1400 audit(1756040775.856:2397): avc: denied { append } for pid=7271 comm="syz.8.4100" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1284.032569][ T7272] lo speed is unknown, defaulting to 1000 [ 1284.084670][ T7295] Invalid ELF header magic: != ELF [ 1284.474120][ T7291] siw: device registration error -23 [ 1285.560217][ T5854] Bluetooth: hci11: command tx timeout [ 1285.622023][ T7272] chnl_net:caif_netlink_parms(): no params data found [ 1285.805997][ T30] audit: type=1400 audit(1756040777.916:2398): avc: denied { create } for pid=7411 comm="syz.5.4104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1285.837669][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4104'. [ 1286.032202][ T7418] dummy0: entered promiscuous mode [ 1286.106994][ T7418] dummy0: left promiscuous mode [ 1286.711467][ T7475] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4107'. [ 1286.851457][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.870295][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.877590][ T7272] bridge_slave_0: entered allmulticast mode [ 1286.891905][ T7272] bridge_slave_0: entered promiscuous mode [ 1286.903273][ T7501] siw: device registration error -23 [ 1286.910809][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.922585][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.938528][ T7272] bridge_slave_1: entered allmulticast mode [ 1286.961608][ T7272] bridge_slave_1: entered promiscuous mode [ 1287.169374][ T7272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.234457][ T7272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.502153][ T7272] team0: Port device team_slave_0 added [ 1287.520309][T20310] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1287.553486][ T7272] team0: Port device team_slave_1 added [ 1287.640451][ T5854] Bluetooth: hci11: command tx timeout [ 1287.730155][T20310] usb 9-1: Using ep0 maxpacket: 8 [ 1287.781265][T20310] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1287.797090][T20310] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.841728][T20310] usb 9-1: Product: syz [ 1287.888570][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.899732][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1287.920184][T20310] usb 9-1: Manufacturer: syz [ 1287.940353][T20310] usb 9-1: SerialNumber: syz [ 1287.953992][ T7272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.964023][T20310] usb 9-1: config 0 descriptor?? [ 1288.052639][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.060832][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.114022][ T7272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.586966][ T7272] hsr_slave_0: entered promiscuous mode [ 1288.679151][ T7272] hsr_slave_1: entered promiscuous mode [ 1288.703248][T20311] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1288.780232][ T7272] debugfs: 'hsr0' already exists in 'hsr' [ 1288.809365][T20310] dvb_usb_rtl28xxu 9-1:0.0: chip type detection failed -71 [ 1288.830965][ T7272] Cannot create hsr debugfs directory [ 1288.849450][ T30] audit: type=1400 audit(1756040781.066:2399): avc: denied { accept } for pid=7599 comm="syz.1.4113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1288.876705][T20310] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1288.914366][T20311] usb 6-1: Using ep0 maxpacket: 8 [ 1289.017196][T20311] usb 6-1: config 1 has an invalid interface number: 212 but max is 0 [ 1289.035417][T20310] usb 9-1: USB disconnect, device number 45 [ 1289.126260][T20311] usb 6-1: config 1 has no interface number 0 [ 1289.179028][ T7701] siw: device registration error -23 [ 1289.246031][T20311] usb 6-1: config 1 interface 212 altsetting 129 endpoint 0xF has an invalid bInterval 157, changing to 11 [ 1289.318753][T20311] usb 6-1: config 1 interface 212 altsetting 129 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1289.580721][T20311] usb 6-1: config 1 interface 212 has no altsetting 0 [ 1289.660996][T20311] usb 6-1: New USB device found, idVendor=19d2, idProduct=1062, bcdDevice=a8.3c [ 1289.716359][T20311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.725038][ T5854] Bluetooth: hci11: command tx timeout [ 1289.930127][T20311] usb 6-1: Product: 䯟꘷˳敠曣激ሞඍ軬餣Ⱉ惄䲳ꌻ㣯桞ᠶⰕ⟉︯方ࡠ蝫꒏䩆뭕돍“젞摛ἣ䂻쳪 [ 1289.989178][T20311] usb 6-1: Manufacturer: љ [ 1290.009387][T20311] usb 6-1: SerialNumber: А [ 1290.070158][ T5962] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1290.243575][ T6618] block nbd0: Possible stuck request ffff8880266ee1c0: control (read@0,1024B). Runtime 210 seconds [ 1290.410162][ T5962] usb 9-1: Using ep0 maxpacket: 32 [ 1290.417703][ T5962] usb 9-1: config 0 has an invalid interface number: 146 but max is 0 [ 1290.426362][ T5962] usb 9-1: config 0 has no interface number 0 [ 1290.432576][ T5962] usb 9-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1290.478561][ T5962] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1290.524565][ T5962] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1290.542385][ T6618] block nbd0: Possible stuck request ffff8880266ee380: control (read@1024,1024B). Runtime 210 seconds [ 1290.579135][ T7757] bridge1: entered allmulticast mode [ 1290.585423][ T6618] block nbd0: Possible stuck request ffff8880266ee540: control (read@2048,1024B). Runtime 210 seconds [ 1290.627421][ T5962] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1290.665978][ T5962] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1290.679944][ T6618] block nbd0: Possible stuck request ffff8880266ee700: control (read@3072,1024B). Runtime 210 seconds [ 1290.725401][ T5962] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1290.783474][ T5962] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1290.803771][ T5962] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1290.823955][ T5962] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1290.861040][ T5962] usb 9-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1290.915666][ T5962] usb 9-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1290.925671][ T5962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.970451][ T5962] usb 9-1: Product: syz [ 1290.978616][ T5962] usb 9-1: Manufacturer: syz [ 1291.008026][ T5962] usb 9-1: SerialNumber: syz [ 1291.043779][ T5962] usb 9-1: config 0 descriptor?? [ 1291.049701][ T7736] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1291.079512][ T5962] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1291.093964][ T5962] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1291.122483][ T5962] scsi host1: microtekX6 [ 1291.144073][ T5854] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 1291.365916][ T30] audit: type=1400 audit(1756040783.586:2400): avc: denied { connect } for pid=7782 comm="syz.1.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1291.594636][ T7272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1291.606447][T17351] microtek usb (rev 0.4.3): error -90 submitting URB [ 1291.608123][ T5962] usb 9-1: USB disconnect, device number 46 [ 1291.652278][ T5064] microtek usb (rev 0.4.3): error -19 submitting URB [ 1291.678811][ T7272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1291.690633][ T5064] microtek usb (rev 0.4.3): error -19 submitting URB [ 1291.730846][ T5064] microtek usb (rev 0.4.3): error -19 submitting URB [ 1291.731112][ T7272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1291.812835][ T5854] Bluetooth: hci11: command tx timeout [ 1291.873433][ T7272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1292.082275][ T7819] block nbd9: NBD_DISCONNECT [ 1292.086765][ T7810] block nbd9: shutting down sockets [ 1292.122492][ T7819] block nbd9: Send disconnect failed -32 [ 1292.149553][ T7823] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4122'. [ 1292.232779][ T7810] netlink: 17279 bytes leftover after parsing attributes in process `syz.9.4122'. [ 1292.291686][T20311] option 6-1:1.212: GSM modem (1-port) converter detected [ 1292.328227][T20311] usb 6-1: USB disconnect, device number 37 [ 1292.357409][T20311] option 6-1:1.212: device disconnected [ 1292.540840][T20289] usb 10-1: new low-speed USB device number 39 using dummy_hcd [ 1292.699370][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4124'. [ 1292.709800][ T7847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1292.877767][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4124'. [ 1293.303448][ T7272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.367245][T20289] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1293.380732][T20289] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1293.405427][ T7864] netlink: 'syz.5.4126': attribute type 5 has an invalid length. [ 1293.413594][ T7864] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4126'. [ 1293.413597][T20289] usb 10-1: can't read configurations, error -71 [ 1293.544696][ T7272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.564118][T17343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.571212][T17343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.619026][T17343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.626172][T17343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.539929][ T7885] overlayfs: missing 'lowerdir' [ 1294.588020][ T7885] lo speed is unknown, defaulting to 1000 [ 1294.605655][ T7885] lo speed is unknown, defaulting to 1000 [ 1294.682772][ T31] INFO: task syz.0.3683:667 blocked for more than 144 seconds. [ 1294.693259][ T31] Not tainted syzkaller #0 [ 1294.698194][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1294.733468][ T7885] lo speed is unknown, defaulting to 1000 [ 1294.753261][ T30] audit: type=1400 audit(1756040786.966:2401): avc: denied { write } for pid=5831 comm="syz-executor" path="pipe:[3971]" dev="pipefs" ino=3971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1294.783516][ T31] task:syz.0.3683 state:D stack:27640 pid:667 tgid:666 ppid:23038 task_flags:0x400140 flags:0x00004004 [ 1294.837280][ T31] Call Trace: [ 1294.838962][ T5962] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1294.850854][ T31] [ 1294.853801][ T31] __schedule+0x1190/0x5de0 [ 1294.861743][ T7272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.927736][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1294.943951][ T31] ? __pfx___schedule+0x10/0x10 [ 1295.049079][ T31] ? find_held_lock+0x2b/0x80 [ 1295.070343][ T31] ? schedule+0x2d7/0x3a0 [ 1295.074710][ T31] ? bdev_open+0xa2/0xe40 [ 1295.079462][ T31] schedule+0xe7/0x3a0 [ 1295.100430][ T5962] usb 6-1: Using ep0 maxpacket: 16 [ 1295.150160][ T31] schedule_preempt_disabled+0x13/0x30 [ 1295.155664][ T31] __mutex_lock+0x81b/0x1060 [ 1295.173813][ T31] ? bdev_open+0xa2/0xe40 [ 1295.178194][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1295.195439][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 1295.210304][ T31] ? bdev_open+0xa2/0xe40 [ 1295.214669][ T31] bdev_open+0xa2/0xe40 [ 1295.218845][ T31] bdev_file_open_by_dev+0x182/0x210 [ 1295.240362][ T31] setup_bdev_super+0x78/0x730 [ 1295.245174][ T31] get_tree_bdev_flags+0x363/0x620 [ 1295.258268][ T31] ? __pfx_udf_fill_super+0x10/0x10 [ 1295.265498][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1295.280813][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1295.286404][ T31] ? security_capable+0x7e/0x260 [ 1295.297641][ T31] vfs_get_tree+0x8e/0x340 [ 1295.317493][ T31] path_mount+0x1513/0x2000 [ 1295.323632][ T31] ? __pfx_path_mount+0x10/0x10 [ 1295.328544][ T31] ? kmem_cache_free+0x2d1/0x4d0 [ 1295.334018][ T31] ? putname+0x154/0x1a0 [ 1295.338366][ T31] ? putname+0x154/0x1a0 [ 1295.343853][ T31] ? __x64_sys_mount+0x28d/0x310 [ 1295.348814][ T31] __x64_sys_mount+0x28d/0x310 [ 1295.353657][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 1295.366752][ T31] do_syscall_64+0xcd/0x4c0 [ 1295.375023][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.390438][ T31] RIP: 0033:0x7ff4ded8ebe9 [ 1295.394914][ T31] RSP: 002b:00007ff4dfc30038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1295.418261][ T7885] infiniband sz1: set active [ 1295.424861][ T7885] infiniband sz1: added lo [ 1295.431879][ T7885] sz1: rxe_create_cq: returned err = -12 [ 1295.437650][ T7885] infiniband sz1: Couldn't create ib_mad CQ [ 1295.440114][ T31] RAX: ffffffffffffffda RBX: 00007ff4defb5fa0 RCX: 00007ff4ded8ebe9 [ 1295.444389][ T7885] infiniband sz1: Couldn't open port 1 [ 1295.463204][ T31] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 00002000000003c0 [ 1295.476703][ T31] RBP: 00007ff4dee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1295.497926][ T31] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 1295.513604][ T31] R13: 00007ff4defb6038 R14: 00007ff4defb5fa0 R15: 00007ffcdcdc4a08 [ 1295.521932][ T31] [ 1295.527484][ T31] [ 1295.527484][ T31] Showing all locks held in the system: [ 1295.538515][ T7885] RDS/IB: sz1: added [ 1295.547529][ T31] 2 locks held by kworker/u8:0/12: [ 1295.555409][ T31] #0: ffff88801f7e6148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1295.567087][ T31] #1: ffffc90000117d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1295.660447][ T31] 4 locks held by kworker/u8:1/13: [ 1295.665615][ T31] 1 lock held by khungtaskd/31: [ 1295.670700][ T7885] smc: adding ib device sz1 with port count 1 [ 1295.676869][ T7885] smc: ib device sz1 port 1 has pnetid [ 1295.719447][ T31] #0: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1295.760295][ T31] 4 locks held by kworker/u8:2/36: [ 1295.765483][ T31] 3 locks held by kworker/u8:6/3555: [ 1295.790877][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1295.820062][ T31] #1: ffffc9000ca1fd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1295.872916][ T31] #2: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1295.930389][ T31] 2 locks held by getty/5603: [ 1295.935132][ T31] #0: ffff88803628c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1296.073544][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1296.110699][ T31] 5 locks held by kworker/1:6/5962: [ 1296.115957][ T31] #0: ffff8881442b3548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1296.170498][ T31] #1: ffffc9000477fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1296.192292][ T31] #2: ffff888145b7a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 1296.210182][ T31] #3: ffff888145b7d518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 1296.239181][ T31] #4: ffff888145b98468 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 1296.253208][ T31] 3 locks held by kworker/u8:32/17343: [ 1296.258712][ T31] #0: ffff88814d3f8948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1296.270211][ T31] #1: ffffc9001f047d10 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1296.282569][ T31] #2: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 1296.292177][ T31] 4 locks held by kworker/0:9/20297: [ 1296.297470][ T31] #0: ffff88814529b948 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1296.309045][ T31] #1: ffffc9000d9c7d10 ((work_completion)(&work->work)#3){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1296.320552][ T31] #2: ffff8880250f1290 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0xf1/0x330 [ 1296.330639][ T31] #3: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x117/0xb50 [ 1296.340111][ T31] 3 locks held by kworker/0:14/20306: [ 1296.345501][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1296.356161][ T31] #1: ffffc9000ebbfd10 ((work_completion)(&smcibdev->port_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1296.370397][ T31] #2: ffff8880250f1290 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0xf1/0x330 [ 1296.380208][ T31] 3 locks held by kworker/1:0/20310: [ 1296.385484][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1296.396217][ T31] #1: ffffc9000d88fd10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1296.406036][ T31] #2: ffffffff8e5cc7b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1296.416567][ T31] 1 lock held by udevd/23026: [ 1296.421614][ T31] #0: ffff8881437fa358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1296.431086][ T31] 2 locks held by syz.0.3683/667: [ 1296.436105][ T31] #0: ffff8880328280e0 (&type->s_umount_key#105/1){+.+.}-{4:4}, at: alloc_super+0x235/0xbd0 [ 1296.446450][ T31] #1: ffff8881437fa358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 1296.456296][ T31] 1 lock held by syz.7.3790/2982: [ 1296.461550][ T31] #0: ffff8880448f2428 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 1296.471626][ T31] 2 locks held by syz.5.3993/5939: [ 1296.476726][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1296.486204][ T31] #1: ffffffff8e5cc7b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1296.496303][ T31] 4 locks held by syz-executor/7272: [ 1296.501764][ T31] #0: ffff88808a0dcdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1296.512058][ T31] #1: ffff88808a0dc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 1296.522256][ T31] #2: ffffffff905eb368 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 1296.532320][ T31] #3: ffff888079459338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 1296.542195][ T31] 1 lock held by syz.8.4123/7826: [ 1296.547254][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1296.556545][ T31] 6 locks held by syz.9.4128/7885: [ 1296.561762][ T31] #0: ffffffff9b19d9d8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 1296.572448][ T31] #1: ffffffff8ffb1df0 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x2e6/0x680 [ 1296.581981][ T31] #2: ffffffff8ff9dbd0 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0x103/0x3f0 [ 1296.592149][ T31] #3: ffffffff8ff9d950 (rdma_nets_rwsem){++++}-{4:4}, at: enable_device_and_get+0x2cb/0x3f0 [ 1296.603349][ T31] #4: ffff8880250f0f98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x7d0 [ 1296.614777][ T31] #5: ffff8880250f1290 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0xf1/0x330 [ 1296.624477][ T31] 1 lock held by syz.5.4129/7888: [ 1296.629489][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1296.638731][ T31] 1 lock held by syz.1.4130/7896: [ 1296.643900][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1296.652968][ T31] [ 1296.657191][ T31] ============================================= [ 1296.657191][ T31] [ 1296.669677][ T31] NMI backtrace for cpu 1 [ 1296.669694][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1296.669713][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1296.669723][ T31] Call Trace: [ 1296.669728][ T31] [ 1296.669736][ T31] dump_stack_lvl+0x116/0x1f0 [ 1296.669758][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1296.669779][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1296.669800][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1296.669826][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1296.669851][ T31] watchdog+0xf0e/0x1260 [ 1296.669874][ T31] ? __pfx_watchdog+0x10/0x10 [ 1296.669889][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1296.669908][ T31] ? __kthread_parkme+0x19e/0x250 [ 1296.669932][ T31] ? __pfx_watchdog+0x10/0x10 [ 1296.669949][ T31] kthread+0x3c2/0x780 [ 1296.669965][ T31] ? __pfx_kthread+0x10/0x10 [ 1296.669982][ T31] ? rcu_is_watching+0x12/0xc0 [ 1296.670001][ T31] ? __pfx_kthread+0x10/0x10 [ 1296.670018][ T31] ret_from_fork+0x5d7/0x6f0 [ 1296.670032][ T31] ? __pfx_kthread+0x10/0x10 [ 1296.670053][ T31] ret_from_fork_asm+0x1a/0x30 [ 1296.670084][ T31] [ 1296.785225][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.793081][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1296.798651][ C0] NMI backtrace for cpu 0 [ 1296.798665][ C0] CPU: 0 UID: 0 PID: 17348 Comm: kworker/u8:36 Not tainted syzkaller #0 PREEMPT(full) [ 1296.798682][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1296.798692][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1296.798715][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 1296.798736][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 db 5e 95 f5 cc [ 1296.798749][ C0] RSP: 0018:ffffc9000c34f670 EFLAGS: 00000202 [ 1296.798760][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc9000c350000 [ 1296.798771][ C0] RDX: ffffc9000c34fa01 RSI: ffffc9000c34faf0 RDI: ffffc9000c34faf0 [ 1296.798780][ C0] RBP: ffffc9000c34faf0 R08: 0000000000000001 R09: 0000000000000000 [ 1296.798794][ C0] R10: 0000000000000004 R11: 00000000000866da R12: ffffc9000c34f738 [ 1296.798802][ C0] R13: ffffc9000c34f6e8 R14: ffffc9000c34fb10 R15: ffffc9000c34f71c [ 1296.798811][ C0] FS: 0000000000000000(0000) GS:ffff8881246b9000(0000) knlGS:0000000000000000 [ 1296.798825][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1296.798835][ C0] CR2: 00007f0396215e9c CR3: 000000000e380000 CR4: 00000000003526f0 [ 1296.798844][ C0] Call Trace: [ 1296.798849][ C0] [ 1296.798853][ C0] unwind_next_frame+0x15d5/0x20a0 [ 1296.798872][ C0] ? skb_free_head+0x114/0x210 [ 1296.798894][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1296.798916][ C0] arch_stack_walk+0x94/0x100 [ 1296.798933][ C0] ? skb_release_data+0x795/0x9e0 [ 1296.798948][ C0] stack_trace_save+0x8e/0xc0 [ 1296.798964][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1296.798982][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 1296.799002][ C0] kasan_save_stack+0x33/0x60 [ 1296.799016][ C0] ? kasan_save_stack+0x33/0x60 [ 1296.799027][ C0] ? kasan_save_track+0x14/0x30 [ 1296.799040][ C0] ? kasan_save_free_info+0x3b/0x60 [ 1296.799059][ C0] ? __kasan_slab_free+0x60/0x70 [ 1296.799072][ C0] ? kfree+0x2b4/0x4d0 [ 1296.799089][ C0] ? skb_free_head+0x114/0x210 [ 1296.799121][ C0] kasan_save_track+0x14/0x30 [ 1296.799134][ C0] kasan_save_free_info+0x3b/0x60 [ 1296.799151][ C0] __kasan_slab_free+0x60/0x70 [ 1296.799164][ C0] kfree+0x2b4/0x4d0 [ 1296.799184][ C0] ? skb_free_head+0x114/0x210 [ 1296.799203][ C0] ? devlink_trap_report+0x1d3/0x700 [ 1296.799221][ C0] skb_free_head+0x114/0x210 [ 1296.799241][ C0] skb_release_data+0x795/0x9e0 [ 1296.799256][ C0] consume_skb+0xbf/0x100 [ 1296.799271][ C0] nsim_dev_trap_report_work+0x8bd/0xcf0 [ 1296.799292][ C0] process_one_work+0x9cf/0x1b70 [ 1296.799310][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1296.799327][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1296.799343][ C0] ? assign_work+0x1a0/0x250 [ 1296.799356][ C0] worker_thread+0x6c8/0xf10 [ 1296.799374][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1296.799388][ C0] kthread+0x3c2/0x780 [ 1296.799401][ C0] ? __pfx_kthread+0x10/0x10 [ 1296.799414][ C0] ? rcu_is_watching+0x12/0xc0 [ 1296.799430][ C0] ? __pfx_kthread+0x10/0x10 [ 1296.799444][ C0] ret_from_fork+0x5d7/0x6f0 [ 1296.799458][ C0] ? __pfx_kthread+0x10/0x10 [ 1296.799471][ C0] ret_from_fork_asm+0x1a/0x30 [ 1296.799492][ C0] [ 1297.116703][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.155559][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1297.162442][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1297.171555][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1297.181599][ T31] Call Trace: [ 1297.184863][ T31] [ 1297.187776][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1297.192358][ T31] vpanic+0x6e8/0x7a0 [ 1297.196327][ T31] ? __pfx_vpanic+0x10/0x10 [ 1297.200824][ T31] panic+0xca/0xd0 [ 1297.204533][ T31] ? __pfx_panic+0x10/0x10 [ 1297.208934][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1297.214291][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1297.220440][ T31] ? watchdog+0xd78/0x1260 [ 1297.224849][ T31] ? watchdog+0xd6b/0x1260 [ 1297.229246][ T31] watchdog+0xd89/0x1260 [ 1297.233475][ T31] ? __pfx_watchdog+0x10/0x10 [ 1297.238133][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1297.243319][ T31] ? __kthread_parkme+0x19e/0x250 [ 1297.248342][ T31] ? __pfx_watchdog+0x10/0x10 [ 1297.253027][ T31] kthread+0x3c2/0x780 [ 1297.257099][ T31] ? __pfx_kthread+0x10/0x10 [ 1297.261675][ T31] ? rcu_is_watching+0x12/0xc0 [ 1297.266425][ T31] ? __pfx_kthread+0x10/0x10 [ 1297.270994][ T31] ret_from_fork+0x5d7/0x6f0 [ 1297.275564][ T31] ? __pfx_kthread+0x10/0x10 [ 1297.280132][ T31] ret_from_fork_asm+0x1a/0x30 [ 1297.284900][ T31] [ 1297.288157][ T31] Kernel Offset: disabled [ 1297.292467][ T31] Rebooting in 86400 seconds..