last executing test programs: 16m18.382653738s ago: executing program 32 (id=999): socket$rxrpc(0x21, 0x2, 0xa) syz_emit_ethernet(0x63, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x2d, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, {[@hopopts={0x89, 0x1, '\x00', [@generic={0x4, 0x7, "6a092bd064beec"}]}], {0x0, 0x0, 0x15, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "00975a95ad972a6476"}}}}}}}, 0x0) fsopen(&(0x7f0000000000)='proc\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0x80049367, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000200)={0x0, &(0x7f0000001300)}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r5, 0xffffffffffffffff, 0x0) 15m44.729635641s ago: executing program 33 (id=1083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x0) pipe(0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0x80049367, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000200)={0x1, &(0x7f0000001300)=[{}]}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) 13m52.520540422s ago: executing program 34 (id=1489): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x4) mount$nfs(&(0x7f0000001080)='@\x00', &(0x7f00000010c0)='./file5\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) 4m29.262307971s ago: executing program 0 (id=3252): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000005b000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a140e1e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b619a82c4706531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc80a7a56eeb25ed0adfb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000400)={{0x107, 0x7, 0xf, 0xa, 0x6b, 0x3, 0x7e, 0x4}, "aa797ea5dc2185eb40a3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x72a) (async) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e22, 0x7fffd, @mcast2, 0xfffffffd}, 0x1c, 0x0}, 0x20040091) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000730118000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m29.065014617s ago: executing program 7 (id=3253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x30881, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'gretap0\x00', @random="95ca5174afc0"}) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000340)='\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xd3}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b0001200000050009"], 0x44}}, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) unshare(0x2040600) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r6) keyctl$clear(0x7, r6) ustat(0x6, &(0x7f00000002c0)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r7, 0x0, 0x31, 0x0, &(0x7f0000000280)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="8fab9835558154e8d3c59536621f77840e844f6e04093b2e8b7bd15dd223fa7519327c4f65add771b34265962c087b08ff34767ede99efed1ef46851826f02fc1e3e7bd8c8cd1767c1a6c7db3f62de33944d76a832667c411f2458d0b55cae81d98b5f161ef76924", 0x68, r8) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xc}, &(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, 0xf602, 0x8000000000000}, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r9 = syz_open_procfs(r3, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r9, &(0x7f0000004300)={0x2020}, 0x2020) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x500, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 4m28.826423982s ago: executing program 3 (id=3255): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_le_read_def_data_len={{0x9}, {0x55, 0x5, 0xf3b7}}}}, 0xb) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x40000, 0x0, 0xfffffffc, 0x238}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x300000000000000, 0x0, 0x0) 4m28.826121437s ago: executing program 0 (id=3256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0xd40, 0xd2) setfsgid(0x0) close(r3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000045c0)={'tunl0\x00', &(0x7f0000004580)=@ethtool_link_settings={0x26, 0x1, 0x1, 0x7f, 0x81, 0x8, 0x0, 0xf, 0xb, 0xe1, [0x674, 0x5, 0x2, 0x2, 0x7fffffff, 0x7, 0x80, 0x3]}}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r8 = dup3(r6, r7, 0x80000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000780)={0xfffffffffffffebf, 0x0, &(0x7f0000000900)=[@free_buffer], 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x80}}, 0x0) sendmsg$key(r4, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x404404c) 4m28.036051738s ago: executing program 3 (id=3257): mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x2, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x104, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = socket(0x10, 0x803, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mkdir(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000340), r2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_usb_connect(0x2, 0x24, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3050}}, {0x86, &(0x7f0000000b80)=ANY=[@ANYBLOB="86038aa05464d715e1cff722b32eec4b304acdcd36967012552dbd9f45207068ce57c771f9ae5b252899e8ff67ed3199095187be66f5c1775212cab36147f8493faecc5d3b8b11e7ddd4b648d4615d109b51255d52ed8ac6de375a37c62855d93dfd2f64bdf535434f62c0aeca2bbd73b11de5a56619b3dd2457344cc87b5ba2216ad84984d157b90c170231be45515177df3c19d2026ae625310c109a32e24199381769ba2c6abb9c68a15dfac7d536960186ad5177728fa6aba606af030e270fd0be2271234affe85242e111d9e659dc6a978ca57eb02e"]}]}) 4m27.890348023s ago: executing program 2 (id=3259): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) symlink(&(0x7f0000000180)='./file0\x00', 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1}) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r0, 0x1, 0x28, 0x0, 0x0) r2 = dup(r0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) 4m27.870868753s ago: executing program 0 (id=3260): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000090) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000080f1e57d92e3e5fb00000000000000fbffffff8978483f39ec21909670e784346223f8280efaca024f269f07"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x775, 0x0, 0x0, 'queue0\x00'}) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfec6, 0x1000, 0x0, 0x8e}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/tty/drivers\x00', 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000500)={'veth1_to_bridge\x00', {0x2, 0x0, @local}}) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000005c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) 4m27.851390404s ago: executing program 7 (id=3261): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x6, 0x2}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010058a67000fedbdf250800000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x8840) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x132, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004c080}, 0x4040800) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4m27.176368632s ago: executing program 7 (id=3264): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={0x100, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8d}, @NL80211_ATTR_CSA_IES={0xdc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x5, 0x6, 0x8000, 0x2, 0x4b, 0x9, 0xae5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0xffff]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0xbc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xa5, 0x3, "081e492cd08c88e67951c9e0a5d3d9b5ae2a47cc062d39976be7de0f99c78612a9fcad3a74fbf5eb9cfadec1ec3732a00f53409e1a614719929bb5b7b9de7511afd9b4c2c56def0374f06d2cad184c90cac91c30ef3e11e26af5fdce3f7d4b41608ff56d9eba22b8881b5834e1eb0b4662787c956d491f1a03cf258cdec8429bf3886d311089a62ea9f7317ecdf635705d844fd46f0f7e303e55d0d1f1857e6000"}, @NL80211_FTM_RESP_ATTR_LCI={0xd, 0x2, "abf83c359c1b709d19"}]}]]}]}, 0x100}, 0x1, 0x0, 0x0, 0x9}, 0x4000004) 4m26.189110548s ago: executing program 3 (id=3266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b"], 0x0, 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac14140008000800"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write$tun(r0, &(0x7f0000000340)={@void, @val={0x3, 0x2, 0x7fff, 0x4736, 0x101, 0x6}, @mpls={[{}, {0x3ff, 0x0, 0x1}], @ipv6=@gre_packet={0x1, 0x6, "0458b1", 0x55d, 0x2f, 0x1, @private2, @loopback, {[@hopopts={0x2b, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x80000000}, @calipso={0x7, 0x20, {0x3, 0x6, 0x55, 0x401, [0x5, 0x8235, 0x0]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x9, 0x2c, "4b8bc29ce6edd7d6fa692a8bd8ae2440c6c9e397029748f03ab916a79443c8b0387b26020450314c51770537"}]}, @hopopts={0x6, 0x2, '\x00', [@ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @ra={0x5, 0x2, 0x8}]}, @dstopts={0x89, 0x1, '\x00', [@ra={0x5, 0x2, 0x6}, @pad1, @pad1]}, @dstopts={0x0, 0x6, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0xb, "37536482d9e3302fff4edf"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo]}, @dstopts={0x62, 0x22, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xa}}, @ra={0x5, 0x2, 0x9}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3f}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x43, 0x2aa, [0x2]}}, @generic={0x4, 0xd0, "91649126567969262a44162bd537332b15c6b751fb9a53ebdfe75bd7500d81cc0558df92f46f70a6f6c2c96123fc86e24820a6f4c36fcaf2bcd5baa3e1197dd5dac3985e9f02397031fb9d90cf2aeca49db12d107b8f4ed2e4633e10b708a76845bd9100cd9e16f9392d73e80f44bf33e44cec2676c241ccda0aefc5d65535c60b292151567fa3bcf6a92992bd0f0d81d84320a8552c345a9cc7b9915ff35bb79500826e2805b700e7985fbc6038fe18f800cf0e1957a8b5db2a61bd4fa4e4759da6220a606fb8e7727cd9b2d7ff8b8a"}, @pad1]}, @fragment={0x67, 0x0, 0x0, 0x1, 0x0, 0x18, 0x66}, @hopopts={0x3a, 0x21, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x58, {0x0, 0x14, 0x0, 0x5, [0x0, 0xfffffffffffffffe, 0x3, 0x5, 0xfff, 0xcc7, 0xffffffff80000000, 0x28000, 0x2, 0x1000]}}, @generic={0x81, 0xae, "63f7b3baeadb07828ee44e9f6a15bfe254c2ed3be863cfa8919cec7323f3649e01b345b117ed837a9db8b72002cc5bb72f9107610f6b80faa24fc5a898fd4a024171e850964a723d91bc7e6eae23cee3453c1a0b309631e41d37a180f85cca66052b9cfff121527564f47bc7c9307bf5111ea8da012da167f5ed9716ec83a2ca6594fa81e4cef771413d81e70929f97e1176befc7ee04dc1222069f0e100f0fc24434ef220b429874b72cf7d40a8"}]}, @routing={0x32, 0xa, 0x1, 0x7, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x97, 0x2, [], "8ad20fdac18e7656c8fbf5a448e04181ffd8ffdc1150c8ff01ad5c69bc1f63ad3a1b00e5441c7d4e28cd1edefe0007ddb9c20f64662167bb7da8aecd23443a1fb51269f1cb0386590d72593c74e04ea777239aff40a9c11e26fa83c437ca0e621420259f6b305be9057be2194b33da42687d601c20db344a72930fff6f6fa7e9ecc4a0e73d895d97041c25d62d650961ba24286014b557"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x800, 0x5, 0x8], "ab45d05ac43771acb47dd8fff1636f1902dc43358b7f718abf4a8ac77d0fb654e4a5cae4b5f532821e67adc8f27e359fc25834c94f64d07897d1849cd82b0b652782e640b10590eaaeb5a66bca04"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x5]}, {0x8, 0x88be, 0x1, {{0xf, 0x1, 0x2, 0x1, 0x0, 0x1, 0x3, 0x1}}}, {0x8, 0x22eb, 0x3, {{0x7, 0x2, 0x3, 0x3, 0x0, 0x3, 0x3, 0x7f}, 0x2, {0xffff8000, 0x401, 0x1, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "faee66eb95c681d34ca08a10166a325ae63a9e4bf371ffbe6d7df90d178bc55001f1f51c8ee356fdd15bbbc974449fdc3556ddf5d57f3b1253f8f905c7728c7fcc11565c2770b57e9a4b94489a34bcda199846d612b619b88ec5d1aa1ddce57e6521fec6b20b18a6876cbb012b14c8254ada58e873e932ff353e554d3497f8835b4fe936db7a83320c7c78865f645fc829d38745fddae70c5fe6b723852e6ceca89a3a747d2bdbd4a86cbdbc9a81703eef1112db"}}}}}}, 0x597) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="c1d777b577126b0ea05d6a50c76c7e204954c84ec33b0615eda52e4f00c5f0cdb1ecf68c67164ddd1b909799503903bb7ff7a1e483ad552e189fa1833bedfb9b3ec78ad8a3735f50fd2819f6a96c5ad848876ce02c3643777e1c57e8a1d8157b128560ea50e3b33814dcd1af6f51b7dbebe898bff00feed61753f57ab2ec1eca56ad6acf9a2e2ea0d83d4a42a0307d3f89e7239d3fedb359dc0c0c4a529eea1bc0223346", 0xa4}], 0x1) 4m26.044338334s ago: executing program 7 (id=3267): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c0600b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e485556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668050044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce02724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2215a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, 0x0) setuid(0xee01) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 4m25.690256631s ago: executing program 3 (id=3268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0x59, &(0x7f0000000400)=""/89, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xb, 0x6, 0xff}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000009c0)=[{0x2, 0x1, 0xa, 0xb}, {0x1, 0x4, 0xb}, {0x2, 0x4, 0x2, 0xa}, {0x4, 0x5, 0xe, 0xb}, {0x4, 0x4, 0x3, 0x3}], 0x10, 0xb}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0xf6, 0x1}}, 0x40) creat(&(0x7f0000000100)='./file0\x00', 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 4m25.433691139s ago: executing program 7 (id=3269): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0x20363159, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x7fffffff}, {0xd, 0x8}, {0x5, 0x2000008}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) userfaultfd(0x80001) lseek(0xffffffffffffffff, 0x4, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4840) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x34, 0x10, 0x401, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x2000, 0x41042}, [@IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) 4m24.544847371s ago: executing program 3 (id=3272): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usbip_server_init(0x1) r0 = socket(0x1, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r0, 0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) r2 = syz_io_uring_setup(0x850, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0xffffffff}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x9, 0x6000, @fd_index=0xa, 0x3, 0xf7e0, 0xfecc, 0x1d, 0x1, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000340)={{0x3, 0x2, 0x3ff, 0x81, 'syz0\x00', 0x3}, 0x1, [0x0, 0x10, 0x8000000000000000, 0x9, 0x100000001, 0x6, 0x8b1, 0x9, 0x263, 0xb19c, 0x5, 0x80000, 0x9, 0x2, 0x6, 0x64, 0x2, 0xd29e, 0x3, 0x8, 0x0, 0x6, 0x6, 0x7, 0xc1a01d9, 0xb, 0x2, 0x9, 0x8000000, 0x7, 0xb, 0x3, 0x9, 0x9, 0x3, 0x0, 0x1, 0x0, 0x6, 0xf, 0xb381, 0x3, 0x7fff, 0xffff, 0xffffffffffff8000, 0x6, 0x8000000000000001, 0x1, 0x6, 0xfffffffffffffff7, 0x6, 0x9, 0x5, 0x4, 0x3, 0x8000000000000000, 0x8000000000000001, 0x1, 0x3, 0x4, 0x9, 0x10, 0x5, 0x9, 0x80000000, 0x3, 0x1, 0x7fff, 0x8000, 0x0, 0x7, 0x7cf, 0x109, 0x7fffffffffffffff, 0x10, 0x4040000000, 0x5, 0x2, 0xf95, 0xb2f0, 0x8, 0xfc39, 0xc, 0x3ff, 0x2, 0x8000000000000001, 0x8, 0x1, 0x7fff, 0xf8, 0x2, 0x55, 0x2, 0x80000000, 0x6, 0x2, 0x7fffffffffffffff, 0xd35, 0x2, 0x3, 0x3, 0xd, 0x5, 0x8, 0x5, 0x8000, 0x9, 0x6, 0x4, 0x100000001, 0xb5e2, 0x0, 0x7, 0x8, 0x6, 0xfff, 0x8000000000000000, 0x4, 0x200, 0x1ff, 0xb6d7, 0xfffffffffffffff2, 0x200, 0x200, 0x4, 0x28, 0x1, 0x10000]}) mmap(&(0x7f0000322000/0x800000)=nil, 0x800000, 0x5, 0x4000010, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80, 0x1}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 4m24.427617373s ago: executing program 2 (id=3274): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='rtc_alarm_irq_enable\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r4, 0x7002) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r5, 0x5}, 0x10) r6 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000000)={0x8, [[0x7fff, 0x0, 0xfffffffd, 0x11, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x0, 0x0, 0xc000, 0x5, 0x4, 0x4], [0x80, 0x5, 0x0, 0x0, 0xfffffffe, 0xa, 0xfffffffe, 0x7f]], '\x00', [{}, {0xffffffff}, {0xfffffffb, 0x1}, {0x0, 0x1}, {0xb07, 0x6}, {0xfffffffc, 0xa}, {0xf}, {0x9}, {0x0, 0x200000}, {0x161, 0xffff}, {0x8, 0x1}], '\x00', 0x80000001, 0x0, 0x0, 0x2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) 4m24.248649426s ago: executing program 2 (id=3276): mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x2, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x104, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = socket(0x10, 0x803, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mkdir(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000340), r2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_usb_connect(0x2, 0x24, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3050}}, {0x86, &(0x7f0000000b80)=ANY=[@ANYBLOB="86038aa05464d715e1cff722b32eec4b304acdcd36967012552dbd9f45207068ce57c771f9ae5b252899e8ff67ed3199095187be66f5c1775212cab36147f8493faecc5d3b8b11e7ddd4b648d4615d109b51255d52ed8ac6de375a37c62855d93dfd2f64bdf535434f62c0aeca2bbd73b11de5a56619b3dd2457344cc87b5ba2216ad84984d157b90c170231be45515177df3c19d2026ae625310c109a32e24199381769ba2c6abb9c68a15dfac7d536960186ad5177728fa6aba606af030e270fd0be2271234affe85242e111d9e659dc6a978ca57eb02e"]}]}) 4m24.225413512s ago: executing program 1 (id=3277): syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_SCAN_PARAM={{0x2}, 0x5}}}, 0x7) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0x8, {0x0, r2, 0x2}}, 0x18) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "94fd12f796254abc30cabb0fe3ef175f59d7b9aecc91a721850185e9cac58894c84a886c54bf37a528a23bcc660b90f32173d7fd90799735d5869d4e6ab6657ccc5f311c9a5fd7365003afb07a64e43b4886ddc64a899fa49cbc03017a46582a1e4b7d0262e0a98b65574694439930827eaddfb6735d2013bb623aee58c7375546e30027f9ec0566ec515e2a087ade51864941741745da48389294e5de846a1a1746778c1b71eb320757c2294aaf8f31bfe04b52a2322ef52c007fd8b94fb79106870a0d38a8903f5112368afdb8945105fbf1be37278319056cea9bc9c02f57fe39bb3df1ccc0e6efce5be8417f07aa3f15613309df4103"}}}, 0x102) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x3c, r4, 0x1, 0x70bd24, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x2}}}, 0xa) 4m23.875722339s ago: executing program 0 (id=3278): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x801, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8028, 0xe000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x7000000) 4m23.806506952s ago: executing program 1 (id=3279): openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) (async) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async, rerun: 32) r2 = socket(0x2, 0x80805, 0x0) (rerun: 32) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000200)={0x3, 'veth1\x00', {0x10001}, 0x7}) (async) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0xe) (async) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {}, 0x0, 0x33}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$SOUND_PCM_READ_BITS(r4, 0x80045005, &(0x7f00000001c0)) 4m23.046296116s ago: executing program 1 (id=3280): prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x13) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = gettid() openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xc00) tkill(r1, 0x12) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={[0x59]}, 0xfffffffffffffee4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 4m22.924455064s ago: executing program 0 (id=3281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) close(r3) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x10120, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000600000000000000faffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000bf910000825e9782b7000000000000009500"/104], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x59, &(0x7f0000000400)=""/89, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xb, 0x6, 0xff}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000009c0)=[{0x2, 0x1, 0xa, 0xb}, {0x1, 0x4, 0xb}, {0x2, 0x4, 0x2, 0xa}, {0x4, 0x5, 0xe, 0xb}, {0x4, 0x4, 0x3, 0x3}], 0x10, 0xb}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r6, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000100)='./file0\x00', 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, 0x0) 4m22.902384965s ago: executing program 2 (id=3282): mount$afs(0x0, &(0x7f0000000240)='./cgroup/../file0\x00', 0x0, 0x1000000, &(0x7f0000000440)={[{}, {@dyn}]}) 4m22.814292775s ago: executing program 1 (id=3283): socket$packet(0x11, 0x3, 0x300) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='binfmt_misc\x00', 0x281c012, 0x0) chdir(&(0x7f0000000480)='./file0\x00') (async) chdir(&(0x7f0000000480)='./file0\x00') syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) unlink(&(0x7f0000000540)='./file0\x00') (async) unlink(&(0x7f0000000540)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f8000000160029062abd7000fcdbdf25ac1e0101000000000000000000000000640101020000000000000000000000004e22d64c4e2300040200200073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000300000000000804d233000000ac1414bb0000000000000000000000000104000000000000ff000000000000002100000000000000ffff000000000000040000000000000006000000000000000000000000000000faffffffffffffff54450000000000000000000000000000ffffffffffff337c4f8ed1bcb3c900000500000009000000ffffffff2abd7000000000000a0003df1493000000000000010000000a00000019a11caaa067dadac04b165b74c564c271b3da22ceb8dc0b69934c5dba1ddeda373396c46e3ce58830edf05ac8d8f475c92f046abfdb7977b899a6b8fe356d9bd3056a0d4df5767b1e943c83eecaf3cd4517f2c7df2d381f460561f05a8b5dcee63dcb4f413555cc37e3e8d1ed142f69e89ad0000d83083849e9b7609ea59de89944a394db1ac5591ccc734f3d56f96d465594e1e0efe131b02daddd3bc3dba703"], 0xf8}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f8000000160029062abd7000fcdbdf25ac1e0101000000000000000000000000640101020000000000000000000000004e22d64c4e2300040200200073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000300000000000804d233000000ac1414bb0000000000000000000000000104000000000000ff000000000000002100000000000000ffff000000000000040000000000000006000000000000000000000000000000faffffffffffffff54450000000000000000000000000000ffffffffffff337c4f8ed1bcb3c900000500000009000000ffffffff2abd7000000000000a0003df1493000000000000010000000a00000019a11caaa067dadac04b165b74c564c271b3da22ceb8dc0b69934c5dba1ddeda373396c46e3ce58830edf05ac8d8f475c92f046abfdb7977b899a6b8fe356d9bd3056a0d4df5767b1e943c83eecaf3cd4517f2c7df2d381f460561f05a8b5dcee63dcb4f413555cc37e3e8d1ed142f69e89ad0000d83083849e9b7609ea59de89944a394db1ac5591ccc734f3d56f96d465594e1e0efe131b02daddd3bc3dba703"], 0xf8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @array]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x42}, 0x20) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0xc1205531, &(0x7f0000000040)=""/112) add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="c8476c4371a51c21870b3ffdd160ec7e1d3b3561d7ed5f84168cfc2bb27f458a5093740f844878bda23c98a68a9181d4e13df9a8732e1e3d23201fe0ccfcca5350", 0x41, 0x0) (async) add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="c8476c4371a51c21870b3ffdd160ec7e1d3b3561d7ed5f84168cfc2bb27f458a5093740f844878bda23c98a68a9181d4e13df9a8732e1e3d23201fe0ccfcca5350", 0x41, 0x0) pipe2$watch_queue(&(0x7f0000000340), 0x80) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) 4m22.569371781s ago: executing program 2 (id=3284): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) 4m22.365562676s ago: executing program 3 (id=3285): syz_open_dev$loop(0x0, 0xd79, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0xfffffffffffffffc, 0x0}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000500)={0x0, 0x2b20, 0x50, 0x7, 0x80000000}, &(0x7f0000000540)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1, @ANYBLOB="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"], 0x1008) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="150c000000000008000007000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet6(0xa, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001700)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x130, 0x26010000, 0x170, 0x130, 0x260, 0x220, 0x220, 0x260, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x170, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00], 0x4e24, 0x4e22, 0x4e22, 0x4e22, 0xbe, 0x1, 0x2, 0x4, 0x6}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000001600)={0x1, 0x2, 0x2, 0x8, 0x4, 0x0, [{0x4, 0x4, 0x6}, {0x10001, 0x3, 0x6, '\x00', 0x2000}, {0xffffffff00000000, 0xfa, 0x7, '\x00', 0x205}, {0x7, 0x0, 0x1}]}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @mss={0x2, 0x1}, @sack_perm, @window, @timestamp, @timestamp], 0x7) 4m21.786126739s ago: executing program 0 (id=3286): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\n\x00'], 0x0}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1001, 0x7], [0x9, 0xfff], 0x108}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) timer_delete(0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}, 0x1, 0x0, 0x0, 0x480c0}, 0x4040010) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) openat2(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x80, 0x102, 0xa}, 0x18) syz_usb_connect$uac1(0x1, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 4m21.751995164s ago: executing program 7 (id=3287): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x24, 0x0, &(0x7f0000001a00)) syz_open_dev$video(0x0, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102384, 0x18ff0) r3 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200200000093af91b0722bc92e1d0268ebf0f82a21288015a409362508", @ANYRES16=r3, @ANYBLOB="01000300000000000000020000000900010073797a3200000000"], 0x20}}, 0xc800) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x4000050) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc, 0x800}], 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsopen(&(0x7f0000000240)='romfs\x00', 0x1) 4m21.594919545s ago: executing program 2 (id=3288): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) mount$fuseblk(0x0, 0x0, 0x0, 0x8104a9, 0x0) open(0x0, 0x14103e, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0x6000, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 4m21.022115684s ago: executing program 1 (id=3289): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x8400, 0x80) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/191, 0xbf}], &(0x7f0000000240)=[0x3, 0x9, 0x15, 0x2, 0x6, 0x5, 0x3, 0x1]}, 0x20) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0xf2d, 0x80000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.state\x00', 0x275a, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000d40)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x0) sendfile(r4, r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) pwritev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000140)="ec", 0x1}], 0x1, 0x9, 0x26d0d5f1) r7 = socket$inet6(0xa, 0x80003, 0x6) fchdir(r2) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000800000000000000200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a6683f5aeb4edbb57a5025ccca9e00360db398262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3c93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4000050) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f00000002c0)) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) r9 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r9, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r9, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) shmat(r9, &(0x7f0000ffa000/0x3000)=nil, 0x2000) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000980)={0x16, 0xa2, 0xfa00, {0x0, 0x2, r6, 0x1c, 0x1, @ib={0x1b, 0x1, 0x200001, {"c6b7b7e198082124066b72a4ca8bf843"}, 0x7, 0x7, 0x30b}}}, 0xa0) 4m20.827676209s ago: executing program 1 (id=3290): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsopen(0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, r6, 0x10000000, 0x80000001, 0x2000, 0x1fd, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) 3m12.35758031s ago: executing program 35 (id=3286): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\n\x00'], 0x0}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1001, 0x7], [0x9, 0xfff], 0x108}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) timer_delete(0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8"], 0x2d4}, 0x1, 0x0, 0x0, 0x480c0}, 0x4040010) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61153c18000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf630000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf664e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386ba3b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f44fc00b69151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a299fa176018054e9149a1c9d20a809ce3000000000000000000000000f6fad8476470bf4bb79d2ba2c0f7147577466f4229b364d6900ad22583c0ec630ea0c6177ad88014b074d88fea473d5ef91ed786bbd3371f0dfcc5ccf4aa82927192aa94fe70a261f1899e1f2f62d50b027f7e7cac8fe3691aa323e71d5e479d466512d1df57633a9006016322978a795431c745f0502e37b8884c368a3f9d5c05a7fb5bd25d95442d09f79c5bd656dccb450cb19c6df406ffcfc414334021df3e4654f84f10070846d3b06795445f79b1f0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) openat2(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x80, 0x102, 0xa}, 0x18) syz_usb_connect$uac1(0x1, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 3m11.947066854s ago: executing program 36 (id=3290): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsopen(0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, r6, 0x10000000, 0x80000001, 0x2000, 0x1fd, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) 3m11.396459457s ago: executing program 37 (id=3288): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) mount$fuseblk(0x0, 0x0, 0x0, 0x8104a9, 0x0) open(0x0, 0x14103e, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0x6000, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 3m11.069474831s ago: executing program 38 (id=3285): syz_open_dev$loop(0x0, 0xd79, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0xfffffffffffffffc, 0x0}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000500)={0x0, 0x2b20, 0x50, 0x7, 0x80000000}, &(0x7f0000000540)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1, @ANYBLOB="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"], 0x1008) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="150c000000000008000007000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet6(0xa, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001700)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x130, 0x26010000, 0x170, 0x130, 0x260, 0x220, 0x220, 0x260, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x170, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00], 0x4e24, 0x4e22, 0x4e22, 0x4e22, 0xbe, 0x1, 0x2, 0x4, 0x6}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000001600)={0x1, 0x2, 0x2, 0x8, 0x4, 0x0, [{0x4, 0x4, 0x6}, {0x10001, 0x3, 0x6, '\x00', 0x2000}, {0xffffffff00000000, 0xfa, 0x7, '\x00', 0x205}, {0x7, 0x0, 0x1}]}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @mss={0x2, 0x1}, @sack_perm, @window, @timestamp, @timestamp], 0x7) 3m10.99790104s ago: executing program 39 (id=3287): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x24, 0x0, &(0x7f0000001a00)) syz_open_dev$video(0x0, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102384, 0x18ff0) r3 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200200000093af91b0722bc92e1d0268ebf0f82a21288015a409362508", @ANYRES16=r3, @ANYBLOB="01000300000000000000020000000900010073797a3200000000"], 0x20}}, 0xc800) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x4000050) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc, 0x800}], 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsopen(&(0x7f0000000240)='romfs\x00', 0x1) 1m18.58227456s ago: executing program 4 (id=3627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xce, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02000000"], 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123f51c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e3962dcddef6af1a11972a6b4975022278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd0971d379380bf63432872cfed453870000b219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d3f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d3112874ec51d6fe048ba6866adebab53168770a71ad901ace383e7927de217d6bf74daf41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e490f241999085afabdd529f62ca0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637f99f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec737555392a0b06491cba71f897144910fe050038ec9e475e89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb6179d257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0117c9b737b9b59418006c1bc1aafa2768e82597251e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b101000f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf444b032dad13007b82e6044f643fc8cd07a97e2bbe636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935f602325984386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e71338a40c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2603bfab96831957a08e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d01af43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627ebe92d48aa5fc0a7bf1b5108b34d22ad004de8274c22c8ba823d964969c9f02bb78c598fa8701b000884de710b54e5ab2e8ff0c7ae23e0b601ac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105b65007c8ff1f00a8ce7e31f7c9c3e3fa61aab967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa1904122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700ba363ca3182105960bef3378a980000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450cfe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c32e4f1f22af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa58291c4eb9d4e08ad7a9c5f04be1ab59719a8200007bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b7f76c78ba0b44ec0bdfa0d32d7030000003a073b12eb579032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e02b7cd25385f3b9628471b4364987b0b2c82a8b0f976387ebb62ead0e1b761e6ec9b824fe006ea52c0c469e3bd8fed05a486bd5511144ebb63d56d61da5fcb58e196a8923edaf228b0cb96b856b15c90b154494fb0cff768b3417fcc89acb9b9b4f8581c82ff3121b5920f4e71508eea4341ec618f4d9110928ea8dd17e36f3beb0c07d911c00eb4054ad48cab563c5ad97d732c3653635df7600091973d44ff94ac6d670ecc085501bd91b586adf858b41d918fd58f8577adb541857dbbf33be97c4809c6595ebfff19b34cec7fd877e8f2aad6a1a6a4ec6dbb3de42bb2e75b4768d139d7b7ff5d51e6863b6704901b59fd92495608395fce98c267a3846b67e7a5b57d995e07dca8db555aea5a0f6f1cd85d791f22d06ff37fcbb22b2d9296b36faee22e513b276fc8494ce31699343278aa8f531ee549d2ba495059c80d5748d8a0cb19df27338aaafbf0849c31572d17a786383b3f619212651a076e5148fa6421f5405e65ee31e6fbd510d92c17fe12a7f203066848e2a9adef66ad7ae8edea20fb8c7233de3736949e15b88699c2f8576060cf95d2593828abde6e2eed2a717655782ae9e589f5de9792c810ec07a842bca96e594f13211eae7ee1919b7af1e33ff726792cbb1366fb8a3684370e35122b0ad40f55846ca7d39cf6f9a1cfa5460f537e89e1c5f3cd10a3d8ae3ecec0c7e4114aec30742d88f313d74447723808da0889e34b31c13a79b8bb105cdcb234d56246bbf003c0ad03ff20f573df9604720d652b0a0cc5d90a284b5c7824bfdc4e3f18eaf9820ffbd8c4f32c8de631c181ab76505dac753fec759b0414cb3c5dfa02b6a3b93ff79bcf8c613b4a9124923e7e6ce74266fd78564000000000ce0d3ac2350502cf4a410152ee893d57622bee2b52df83cd30b4ae17d507fba05e7055db7e6d4cfc085773b900ca50bee4d49529f24bab389fb87fbb481340e8ce1810727212dc5e96d99de07611cb588a5d8b5c510c1f5b3fb568971646821b50dc2542003eb60a4ee9398ae4b6681c29cd921fb35b12ca111f12c59ac39dde4bf4f7524362304610979f5199ef9d271af60a421e29c6483423157ed4c2721123ddf33313a97ec1a55115b6df23157ad17b5e544db26c46d31b2e7375c37ace025955c9482e1ef841554c202c356842233c57c258f8f2043b4b6de433e8a2fb9365b65496c5777c1a1a223763d51190a24fb4047ad7ff6258f1b000000000000000000000000e0ef07726228fb150d09f697ee3db6cc096676225780d422fe917a5c57bedabb42399727b386e979dde3b7243dad1f78e8592937866cfc017f3a8ad31c53115fb7f3452bd3318c4a17cc80bcab32d9ed35273c3c930719ddb5b757f9d85cc86ddd"], &(0x7f0000000140)='GPL\x00'}, 0x48) r8 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000001c0)=r7, 0x4) sendmsg$inet(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000180)={r6}) sendmsg$inet(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000100)={r8}) 1m15.976477519s ago: executing program 4 (id=3635): fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x7}, 0x18) r4 = userfaultfd(0x801) r5 = userfaultfd(0x80801) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = mq_open(&(0x7f0000000100)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7-\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00AWK\n\x8b!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3g:', 0x41, 0x80, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r14 = socket$inet_udp(0x2, 0x2, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x1943, 0x8000, 0x2002, 0x4000004}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) r20 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x61, 0x1, {0x1}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) write$UHID_CREATE2(r20, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r18, r19, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r17, 0x7330, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003000)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000000c0)="4f91921335e8fee3166730822ebd61097477e7bbd47eb6d2793c5864502a7af716d49137ccc816a9baafa7cb23fc596164b9a47db9ca6409b0f8454e4482a8c9", 0x40}, {&(0x7f0000000540)="8bc38573957f8b633fbdc6f0705a0252663083107c5f099ae5872d51d6832152d46be8b8eb40659d0dd67f2204441dbbed68ac97f98951e0b67006dcffd2592f54d880f9fed22cac4660c06fcbe90324300c5491803eed1408d4f63af10a2a386d79ddc3811f423528139cd199527ec1b2c8d0be3a006ca519be5e9999d4b2a020259c9a89e547d0d6077f587c599ee1f7716e40848297fc36586ca6f395cf201456d1f06a63fbc44bef1c93dc7aac12b3f1aad20bd8f51c54", 0xb9}], 0x2, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r0, r21, r0, 0xffffffffffffffff, r0, r11, r4]}}, @rights={{0x18, 0x1, 0x1, [r21, r10]}}, @cred={{0x1c}}], 0x88, 0x44884}}, {{&(0x7f00000024c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002540)="f60c69625ba7eeacca25b29c5017fff111c316561a1f3492dc58fcaa12493eb561e2d4be4ab3ecea1faef7b5e87167847c98862dfac15b6d385b595c084366e6d78423a4bd0f2dde371395021e3644c061a83b220ee0db038814cfc1cd3e1e1e40d433ceba805ef95a779d05360554331cd5e453d1a50b61e308b613723191ba92fcb785ab56381ad199af09a64d784dddfe251efeb3c56a14648bb5dfcb3aadb23888162638baca6aede6a0cf6cbb0b9a7f70d1767c363c037403075b9e05b918f41e024b6ea244d13484226cd3e3e39521f5a6259109b632d00ff3908070bb4a7bfb935b0c5f4fb2503f08254fb68477ab07a0ff6341", 0xf7}, {&(0x7f0000002640)="c57c65e5c700185000d75469ff4bf2a883656a5f76d118a0cefef6be565dc4b690306b47bb96e7a597c46e327548f21b2434014913ab4a06bbf7b07192a57a58a9ab13d0282d386bc71b679e3540d5a307375f26de5b08b194b7efb8d11c31942b6a88c9996529940657489a37940d", 0x6f}], 0x2, &(0x7f00000028c0)=[@rights={{0x28, 0x1, 0x1, [r17, r12, 0xffffffffffffffff, r8, r4, r11]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r7, r13, r7, 0xffffffffffffffff, r10, r9, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x78, 0x2000c084}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000002940)="156de2de551dd4687213f05ede659c42e4317c8188baab2840ea20767c2c13ec091405fcdf058f690e124b4418c6274b0b53433ae322811f6e14c1e3a659bc616c2b5c981946a895a5c12bbf3e114fb9ab1140775df5bd3092bbf54338719f7a607d8df58e0a3b969b37a3b40ace1f156a2de66a8db515b94ae41aea63691df28677557bc5aaaff7e317903c86234987687f016282109e763ab371cadefcf0354ff769326f2d83ab639385ab8046f68b51b5a817a593640e", 0xb8}, {&(0x7f0000002a00)="857d07b52463600dac7c04421acabb66d597a8447e2e231befecbfc2cee4f5e87a75ce0c7e4c6138b1bb18792c26d32d03f5b8958fe2a440b1eb16c41a1b900bea3ab8395271ae3069bbb0b07b74dcffc62141edd93c7ad8425426367537710aaeb53b2952d3159dc33d1ea250c0045853ecc51e2e113e164f0f8a4f952506c2bcd6be4180f4b7661362115aece6897c6019e62e6069a38a8277754f5a2a5cb1e4905b43e3e4169a0911c31f5136ea038f7bcc7f086c131ddd2316448e962c647fbca7e2be7032aa836f159dfd806d2e066f687cec46dc2bb54dd52bcc669229c3542c3a58a9a9", 0xe7}, {&(0x7f0000002b00)="0a66365c9d10dfe1448dacf50567552d3195eb94973f5a701f121f3ab6ef2a1088f9f557d4e0eebf67d81907ad94fcc97830d4ffb009704e8560bad9422dddb164d45841fa0e7a5646914e08b396b8822ef3f68b9999a9909322ab688d8fc87b79357b8b25d7d79ceb1792047f257b92e15c6a96dbd162396bebee895784b46f011585381fdd2289637898fa045ffaf2ed49e123b799c2362b69ba4a7473a79c7f9e40a1acff5cfdb96a734b77aa16ac8d855f9643ab715b4a9e44cd4c", 0xbd}, {&(0x7f0000002bc0)="4bddc26e1abb90492c9d2715609823c4bceb5f3b576080bc8eb9891c720ffce3b28053a0e1717c45e4f2ee11b36c8da6f0340c114151d55f2bcae917a27544fcf56bd18e925268d4a3e6e66ae920f72c7a3af9f152e1495180beed2983fbf66068c73123384c4a2990347c4d20217de0264144da71bf4357dd595f915c2859a7797014ec8fed8f94980cc93adaa4b0ed4fda0e0bb2c4ec76477ce04672e506e5", 0xa0}, {&(0x7f0000002c80)="8911441aef871e746110a4345be087c50372aa54df52107bf2112ca27fd5fc2626fdb0680a7de91912a447717432cff97a209a53f095e2c5fa33b61b136b1a70b451bb8e7accbb4b5f8a265fbe619abad1ad973a14370b", 0x57}, {&(0x7f0000002d00)="e166c65d09fa3c9609cdb24924dbbfa58ed707d7c0153379c970cb727f703cb323d542660dac6494ab4d46dbbdcbc733c11f863347a659639e473b8665e6a578c7ce9f01dd1b968ea26abb8d8b338da125ecba4b50952e3f76e2c31787cafc04f231ba4bcc71e3f5e25c15d0892b0146601f0ca4f75e5d87b708f1", 0x7b}, {&(0x7f00000006c0)="e557a37dc76767558e12a47544853fe18a39eee67353a910ca67fc9deb556d8fdc0e9b042395cf70e54972a4673ca36a60f520114edf734010b32ca880c184ba95969c49c19db8", 0x47}], 0x7, 0x0, 0x0, 0x40}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002e00)="772eacd4c9a03bbc12", 0x9}], 0x1, &(0x7f0000002f00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, r2, 0xffffffffffffffff, r16]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r10, 0xffffffffffffffff, r1, 0xffffffffffffffff, r15]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r14, r14]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r0, r14, r13, 0xffffffffffffffff, r2, 0xffffffffffffffff, r6, r8, r16]}}], 0xc8}}], 0x4, 0x0) 1m15.046205948s ago: executing program 4 (id=3639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000580)={0x4, 0x0, 0x0, 'queue1\x00', 0xfffffffa}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0xfffffffc, 0x1, 0x10000000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r1, 0xffffffffffffffff, 0x400000000000000) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_open_dev$sndmidi(&(0x7f0000000040), 0xc, 0x4080) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x8000}}) mkdir(&(0x7f00000000c0)='./file1\x00', 0x317b3a83d7add643) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x3}, 0x8) sendmsg$inet6(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)='d', 0x34000}], 0x1}, 0x8000) io_uring_enter(r8, 0x47f4, 0xd4e2, 0x0, 0x0, 0xffffff01) 52.753790907s ago: executing program 4 (id=3639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000580)={0x4, 0x0, 0x0, 'queue1\x00', 0xfffffffa}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0xfffffffc, 0x1, 0x10000000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r1, 0xffffffffffffffff, 0x400000000000000) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_open_dev$sndmidi(&(0x7f0000000040), 0xc, 0x4080) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x8000}}) mkdir(&(0x7f00000000c0)='./file1\x00', 0x317b3a83d7add643) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x3}, 0x8) sendmsg$inet6(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)='d', 0x34000}], 0x1}, 0x8000) io_uring_enter(r8, 0x47f4, 0xd4e2, 0x0, 0x0, 0xffffff01) 34.372669169s ago: executing program 4 (id=3639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000580)={0x4, 0x0, 0x0, 'queue1\x00', 0xfffffffa}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0xfffffffc, 0x1, 0x10000000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r1, 0xffffffffffffffff, 0x400000000000000) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_open_dev$sndmidi(&(0x7f0000000040), 0xc, 0x4080) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x8000}}) mkdir(&(0x7f00000000c0)='./file1\x00', 0x317b3a83d7add643) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x3}, 0x8) sendmsg$inet6(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)='d', 0x34000}], 0x1}, 0x8000) io_uring_enter(r8, 0x47f4, 0xd4e2, 0x0, 0x0, 0xffffff01) 14.330970328s ago: executing program 4 (id=3639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000580)={0x4, 0x0, 0x0, 'queue1\x00', 0xfffffffa}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0xfffffffc, 0x1, 0x10000000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r1, 0xffffffffffffffff, 0x400000000000000) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_open_dev$sndmidi(&(0x7f0000000040), 0xc, 0x4080) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x8000}}) mkdir(&(0x7f00000000c0)='./file1\x00', 0x317b3a83d7add643) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x3}, 0x8) sendmsg$inet6(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)='d', 0x34000}], 0x1}, 0x8000) io_uring_enter(r8, 0x47f4, 0xd4e2, 0x0, 0x0, 0xffffff01) 10.214222617s ago: executing program 9 (id=3830): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020b11837000000000000010902240001000000000904004a0903000200092100000d0122030009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="003905"], 0x0, 0x0, 0x0}, 0x0) process_madvise(r2, 0x0, 0x0, 0x10, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2c10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 8.316114402s ago: executing program 9 (id=3833): r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x4, 0x28400) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x8, 0x2, 0x5, 0x80, 0xfffffff8}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0x3}, &(0x7f0000000240)=0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001964d408861a92e03f53010203010902240001020010030904"], 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0xfdef) socket$nl_route(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0x36, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4048aecb, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r7, 0x47f6, 0x40, 0x2, 0x0, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0x0) 7.785436809s ago: executing program 8 (id=3834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0xcc, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}]}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1, 0x0, 0x300}, 0x0) 7.093285692s ago: executing program 6 (id=3836): unshare(0x24060400) r0 = timerfd_create(0x7, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 6.833344888s ago: executing program 8 (id=3838): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000008b04"]) 6.404072501s ago: executing program 5 (id=3839): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) 5.504866586s ago: executing program 8 (id=3840): setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) userfaultfd(0x80801) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000d8363ffafdd0d29c2716f708a6019101104f0423b3000000000001090224000176fec2740000500009040009210000070122c9000905810300000c00070000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000006, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_add_watch(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x500082c) 5.493829486s ago: executing program 5 (id=3841): ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x2623f0, 0x8000334e8b}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4", 0xcc}, {&(0x7f0000000c40)="6dd950135126d19aaf46a60e", 0xc}], 0x2}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r3, r2, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x41) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000f6290100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="4000a2000a000200ffffffffffff000604000f8006"], 0x34}, 0x1, 0x0, 0x0, 0x2000009}, 0x0) connect(r7, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x5}}, 0x80) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) 5.493487973s ago: executing program 6 (id=3842): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, 0x0, 0xd40, 0xd2) setfsgid(0x0) close(r4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000045c0)={'tunl0\x00', &(0x7f0000004580)=@ethtool_link_settings={0x26, 0x1, 0x1, 0x7f, 0x81, 0x8, 0x0, 0xf, 0xb, 0xe1, [0x674, 0x5, 0x2, 0x2, 0x7fffffff, 0x7, 0x80, 0x3]}}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0}) sendmsg$key(r5, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a", 0x23}], 0x1}, 0x404404c) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 4.771331617s ago: executing program 6 (id=3843): io_setup(0x3, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000001780)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001240)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x390, 0x460, 0x1f0, 0x2c0, 0x1f0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@recent0={{0xf8}, {0x6, 0x9, 0x2, 0x1, 'syz0\x00', 0x1}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@ipv6={@empty, @mcast1, [0xff000000, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xffffffff], 'bond_slave_0\x00', 'wg1\x00', {}, {}, 0x87, 0x6, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @mcast2, [0xffffffff, 0xff000000, 0xff000000, 0xff0000ff], [0xff, 0xff000000, 0xffffff00, 0xffffff00], 'lo\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x16, 0x9f, 0x1, 0x51}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000002fc0)={0x0, @vbi={0x1, 0x400, 0x1, 0x30395056, [0x1, 0x40], [0x7, 0x8001], 0x1}}) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) syz_usb_connect$uac1(0x2, 0xdc, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffc}}}, 0x108) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000400)=@abs, 0x6e) 3.707243139s ago: executing program 6 (id=3844): connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000200)) socket$unix(0x1, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="c0"], 0x20) 3.568134328s ago: executing program 9 (id=3845): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x201, 0x4800003e, r1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x20}) 3.102158615s ago: executing program 8 (id=3846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_THP_DISABLE(0x44, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000180)="e4d79b3b828024b59aa49c257addff4e", 0x20) syz_open_dev$loop(&(0x7f0000000100), 0xd78, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000240)=@s={0x5, @generic, 0x14, 0x6}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = syz_io_uring_setup(0xeec, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r9, 0x0, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000140)) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010161, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r10 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r10, 0x0, 0x0, 0x20000000, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x18642, 0x0) 2.906292131s ago: executing program 5 (id=3847): r0 = io_uring_setup(0x1450, &(0x7f0000000180)={0x0, 0x73d5, 0x80, 0x3, 0x1f}) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0xc, 0x4, 0x3, 0x85, 0x0, r0}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x1f, 0x0, "92622eabfacf7a4538ccfab286b1eb846a7298b4d362ba5dd6da9dac98a83a1cbe0c1a66cebc0f06e07666fdc5669b5bd4caad9319152811582a496690a487f401df06a1af69256f2842f29a01e42f65"}, 0xd8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0) 2.585416352s ago: executing program 6 (id=3848): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) 2.156897844s ago: executing program 5 (id=3849): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000"], 0x50) r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x80000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "b7cc7c0e36e4a1023e9dda7bfb27b7fb40e8cdc58cf5f6a7c736ec9ca3bd70e2890a0d6372c11f27f25f473a5587baf3e103e46629c8e38c30e4ab744a0db1c87da0e58d5346c5d33c41104d015d38e95a696071b6e65297a5959f1bb7e86cbd67c6b3d8b1e02761fa19ebe7a231d5d00863c76c5b86ec0986010b0897fd5612c3ff97b2b20f668c63bafa4fd5f5d2805afd16d5bf77e70dd0b13d1f3461377123f3becd123504868714c17cd4a28d5b5cd04fd9280e72096e5e1c05d96c9c6bb8a820356c5ad3875fac54cc0691f69be00f711f237933d2448537edaa37a0100be62f8ab47086b06b4f17a4c843a3afa2d7441edcf25a1af41191aafc5e154b", "386431ecc0e7d42945210655bf1f259905279e64ad9b8e59473b79ea07bfa59232098ee7669c800bf78770dac05b607edb6a63aa5a57c474cfee51cecfd57242a388f66c69baadf3236f4000461db1838b1410f07caf46efa37412aa56231aa84b9d2dbba4d9e9be7e954ee2413fbacb94533e2fca5535f674e1d62f8280ba039c1690b2a63da79a56e7a48616437f8c9e6be1f46456baf0d91cfd46c3d4e8fd5b7fe97671c2409b178f2025d69955b8330f11a5a6892e98de653a7aa39e402a9b5c2a692d71b126ad23176b343e919400e13ca776776b990077c917cde4fad68f35afc7af5af5a038efda94255997e49b8fe1297930a48c64e6b120d44790d1050e5ced78430ef0aeaaecd29c263d21ed2212cce1c941efa6ce30123625f2e89e20b2490b7638f30a68666c73078c0734cc83e4caa4339b7494cf01d13f0b3c55a1ffc289ac057f7444dc629e9a18cf52e69799878e7f66fd3adc2cb81299bfba70b5132f1989c1ebca2b0eea3ff0df344094d483dbc585613b05306c4c4c1e3d567365222a9c704bfc9cca118564212d64fa1ce28ae81be463996d04b7280ddfe531b531a66608f13654e6a02d355ab441d1811b07615c53fffbde8d9d4c2d691437729fbf75153a103b0a830765ac86214933f02e7cb9bdaa7a292f34d543471047c80b3171bb6ff64a4971cbfad096071cbd98609814d599264bb7191864f6d19368b18ef2216006730d7da4966af91380655cd66014c91a47578a4547738d47f59a2c8d1d0ef637c4ccf24697110b1854848e91ae259e41087678593617bba45233501abcd864b8377fa4a9842a1848fc19b69a3db07bd35a27da9f62513484d258805cb8c48804909c4bddab9fe758d462aebe73d1fd64b533cd90d123e9c227fa7103e6bd0dd215c58cccca2889a101cdbde69e6c5f9dca6b9f83c808a924d064d7907d0c8b2563df8ab63ab421f0d5ad6578950a7c04e1ab0abad581f7e1fd765b04c5e0f1a2e23d1d4768e181a74301c7d5b5e9f71140bd8b3e0b02c216d4ef7097c8d3a16131916daec074af2905ac1ec6214bd76c3c0d1e5ac9564f807d8e7fd9fcafa3f6bffde40cd14c74077739f1e026d0869b8117abbdcf31c6237cadd60dfc0e38e0857b951cda4754caef6b1297271d85c04e92b0ed1c2646bbe003df8332e61578d52ed00f3dd2a69dcecc64f5a620be16d90cc6347a8a387535755dc58aeb5a68a5f74e18c14f734750b421c24c5e93b917c6c23ec64ac099a1e0d9e6b17e3a63d1293b599706ef6da7f29ea59f5b52dcd3e705980920ca88638a79c36513b13bff6906b8531bee41be58f356f77b4768521bf22475f424d60304c7ef3980d4a812ccebfb9a09c18bb58152218a271cf7d24e896a65a637f50d652c644601e693db5143ef5f3866bd32b77959b3ad363acf364995bca059e1de365285ce12812c53dc3a54b47d9821019895e13550af9fd44c9a303a3b60ab7a17f967f660e0c1a5051e116955530f576ddc53c6bab9b30ab4b06b6022589c92fa9c83539613cf0ac05eaabdb22e63787864779807803bc48c47e97434a33a067f5a56160727322356b15d9f749db9db914bbed95405a1bf303c958b4f9768e27d423ed0429557850a0c5950d262141e3071870c50bf42da4983717053ab42a0f70c5a7d04148a5c78908ac22268c7a11a25b773e1e60b62da096809889fc1993eb4ab1b7f80d7059df99dc45c4df839b2c23bc036e58adce05cbd1e84cbe985278438de97f932bd5e1a5493ee4838c3cb4ccad1a59eb1ff7ad50cf8095d37210a47f7653ed29a1a59ec8349dd902f8f43aee88f4b1763d85e9710d5ab5f95975c9d5ac127f292ddf2940311bce2a4ad42edaf51ed71207f30442a132c6c27ffc704a527671cea44776370df104b5d48b1c0bdcf2b0250dd281a28010c32abf1f85261273cfd4038a8991935e83c1a74f76080279da2a94acf13818e65971a67b29e48cc11348b1d554d17dddf1986d4f415695c5502e4ea35f72880968d4218fdb3a46e21c89571ab58c14416f1790e05edb37b3b1aee9623ad0b14fa979d3cffe0afa2ce498c03b0f2cab87dd0f076ba000109ae38979ec7dcc0e884f6eed8139974b9fa9ab6b31739f4c30ef172db24cc24943174cd19c3f724745d76acc33d8eb2de82e09e1a05322928e64a1b8f14603e73aca724b60c7d62786eb394335632e86963f3292fc359321997371517e97e2782de1ec5e0675df9a949b1f00ad9a733b037804c72c320a3627ae99fde7821b7535da2eb218d0d1f1039f129949b368ed05157562d187dcea6992e344487d987b1d6dcd28dd3d9d4549693b7326d5f56e0075e48ae69e07cd6e175ef874306650385c53f40cdc1ad39357cac80707868ff70250ca449e0b4dbaefa06bb7d744babee5d8d21b994cdf6e751f7f9685c04baa36e3e4447814c7fb2b4732f88bdba04a86f09bd40467d1a4fe5b26db8f9d1449f06bda1aa202c924a98141f4a9aa5c4783d75ff3789aa486f50926ae87f4928a9bbd146aa4eb946dc2518c6e8f40293c58e4378246e3cb1c7a8e35a44bf7bbef384acc2afaa41bfc566ed46f692f21e4eeed0098c8177b6e580bd3c9b225cbf7c10dc24fbbbf0e8f18275bc56a479d94fe87fc747d019adc0b10aa9257086f626f7bc440d1157fda168806d4284c5dae7b430b4c428527a052ec591e1e19baea469b9c521d6eb91373a40f91f1cb0435228de79f293f4a9430974b68be92dcd1f7009b7a33ea0bd8592c55d402e489302c00235be71e2c10e5aecff0dde9b87a92f9635bbd2cab63202c5ef59e883a15d4cb90d58c810b117cc1b25ced18acc38338d5f0a57235d33d6b9a7832255274684f1f399d3a1c3208db111d2ee09c78d0eae2058f8cdc039e85e97589bfb85439751f4f3b663b4dd7a6117a79897d0dd5292f46aef26b981b81e9d5b46c92af68a22739e6f92c6b5b43e00e06b4bedb905a2e743804486a7585be208c0b78d33492a9f1b1f304e5e9d46b24a0882fcbaed0384fa70f8fff7db411f0964e3339e4baec9c2708ac5b0369cd79f2aed29cd11e3f30df641e9b11a45af0f096479cd694a21221a80344328441aa152cde7c39e9aa19a96f66e92e2e7edd8433d8b700b9197c4c34fd9afae266194cffe99eb58ed1ab28d177bef429e73d9959072637bbc690f90276049e934324eafc98bffa5fa22eed59ff22706545e2c33d40f9178735a20b89159d9df562a20ec21c64c53283ad44daf4fbe26492e861e99f8241a2f68b426eeb51131e2c7f45c569ef481db99763f36156851a9ead5619c3f40e70fd23ae809769f3426d6972c8a6930b42ccd94cb02dd5fcad3889b852fc42b2e05d971edc8b3d639c3436152e960490490d4edd4660d7477642ea64d9c488bfd6527f33622c0a8da3685df8522d7b84a0e5d730430502c9e7c926992493c189e1b6f7485ad276a6e57e1d16cc9e08aa98d45dd130372b7b8e49abe1a2c1ccf4366e271b343b61f9d8b0d5d5f3a63832d4f9fa91cc0f042301b69e55aa9e64d1b0db24305071daab5d38055744434db1d40dd40fb215f9a8ae3544ffef31bb3de1fedb5e27ee2fb9bbde0485901f3809b2f1798c17616eb9f3d9758687f24874f88e7abb60fbda9aa26570c22a64327ba50eb3a7edc21b8d6213caf77fdb3ebad8f346186f14de2837677bb602ed572cd47192a5e453c4c59dca9f8ed53d0ee21a8c5a0368e226b10dba677a54dbdd2d94e5ed13eae029c35d11bdf5dd72cf89af9838b51884487d68f0cc73d1d7a9a1df2d0161af0a378c67891cca9af1861dabeadcd06cae5056a9f5cfdb5800242ba855ef0b90b5480c55060a289fafc2ab449a8650d626110fd6a2fa34016e609d2c860526ab33a9261bd95714192d8ae31f6121034e27126de07bb94d38477f7310f1ba985efb938f064e28ab9ee129d253f63f8c0306487dea584a71ce5b7ba4e80b983ac5110c4e288952485e471fe1233f4dbe89b25c51200d16757016b7d746a3b74c331ffff481effec9d950abee324607b62de260aed096fec7902fd59e5cf7d090178185436e2a2ab8f70bf4de62867d2bcb71f1ba383fc961ab39f24165c7c134f854c48b43e61c5119d71d802410384c0f4c0347ffcc57735fcccaed43470c2c166f19531c0656e637d5d62a9ef2db81f908fd89f9d10bd5613e0cd8ea75378cfe329afd9f33ae22d7aab314794f64cb96de28e4309b2b28bea4301ba89377ccc1bd6d9742c117c3f89a1e46ffabb97742a5b15c8e79c1a94184b23bc8e6a1740840e0fa371714dde0f9c1513a184a056ac59288fd2364f539a78bc2a6b1c77fb33e71c6b78639ed338b5fa2030f26cc76371ae50f0e6f55ee9679e4eb1dc119bd9dd55e17ce52c103e4f868a27ad417ce0dcb4d3c8737331d17028ffc1655b9dc179b1ee41586edf94b6db78d3856087e473b412172bfcac83f05b7dfec12948d2a3be583adc65153f3aefadfe0833230d2ff76e0c4b846b54c52c28ee7c8160e1ac9755bbac3c74e9e7793d0895f6b40e49740ca97bc59c38f02ba9c3198bfd5bdde8b44996fd102701017554488906f14f398b7f6adf30ea4d847fa66635fabb0a185f5ee90f8ab7e2defb3d14880510a3ac6881f34f9ab923bed64010d58718a3218e5ab345caad7a25e2695c70e1258979ae006e27cde052579b71913eacab2c1f79f074bf4950c42c05d3d12ad95d43e5879a1ca4b5b94288c380835c1f02f5d26be56228873798989561c111f30cffbb5d9c10b9b088358196a6d132313519cc19b6522d62436f966763b9268b0148575672e87554964e045b315732b198a8563da73bb1e01e82028e72d9a9c46d98b6bf2aa1346781bcaf59e973cb65220c77156ef8e8197613a9518969de6087ec99a0c5a7263f7242cd49bb11976ecc637f57af540b355c86d7531195d5431d77806cb1dfb1b1b04b185df167980f533a0378ed447b7da2c34fc6822a2629bbf0891525d51e0c5665b7126b00d5eff7a5d56dcdef56ccf81bcdae03f82f6617f043bf9e170958aa7a08cd36e22c540bd5626ce9e39ca1781299eb92be4bab8f3970292ba3ffaa8c527fb53d4f9d46b036b81199175b2d569db2827e18f8877b18beb90800f640d35b5427ff780295011ca32cceeaeec84c9e48221a4627df8a5da89e5005a6c7daff9a0284dab459721eb4d0b911bcae09916f354d9e1e952246f947239c999a48bdd1b46b837482a1c37932a556b272b70747d7062aefac41d7e04089e12aba8a9e126ab6e406a0d938dadaf93387baf54dbba0cf1c997be281759682ab018e25b704d5143adea8e6dcd0bb4816f5f0eba0f81665258aa53f4aa90fc371b0cf42ceeb3d43048b08d55245"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{0x0, 0xc0, 0x2, 0x3}, {0x6, 0xf2, 0x9e, 0x6}, {0x5, 0xd6, 0x5, 0x4a9e}, {0x3b0, 0x0, 0x2, 0xcdd1}, {0x7f, 0x66, 0x2, 0x7}, {0x1000, 0x1, 0x7, 0xfffffffc}, {0x1, 0xff, 0x1, 0x1}, {0x9, 0xf6, 0x7, 0x4}, {0xb, 0x4, 0x7, 0x40}, {0x7, 0xb, 0xa, 0xfffffff9}]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001500)={r1, 0xff}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f00000000c0)={0x5, 0x0, [{0xb, 0xb0c, 0x1, 0x5312, 0x6, 0xfffffffc, 0x100}, {0x80000008, 0x1, 0x4, 0x2af, 0xff, 0x6, 0x2cae2c49}, {0xb, 0x5, 0x6, 0x6, 0x8000, 0xb, 0x6b3b}, {0x2, 0x0, 0x4, 0x1, 0x2, 0x81, 0x3}, {0x8000000f, 0x0, 0x4, 0xb09, 0x8, 0x43ffafd7, 0xfffffffe}]}) 2.125285809s ago: executing program 8 (id=3850): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100030000000858041150400001020301090224000101b7000000000000000301010709214749000122770809058103000028800d"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xb7, 0x4, 0x3, 0xff, 0x4}, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="00477e3b9b4c2e236e356ff07a4a6e49df9b11bad4b3a0cc1059c1ac7a1bf7adeab1c05a273c46761c53ed1fb58cf46f0cd6c062c726e079399cf7c4eeb7c3e304d42c811b76"], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x409}}]}) ioctl$KIOCSOUND(r1, 0x4b2f, 0x8001) (async) ioctl$KIOCSOUND(r1, 0x4b2f, 0x8001) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003e00070b2dbd7000fcdbdf25037c000004"], 0x24}}, 0x8080) (async) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003e00070b2dbd7000fcdbdf25037c000004"], 0x24}}, 0x8080) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x100, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102398, 0x18ffe) shmget$private(0x0, 0x400000, 0x40, &(0x7f000000e000/0x400000)=nil) mremap(&(0x7f00003df000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000090) accept4$inet6(r5, 0x0, &(0x7f00000003c0), 0x800) (async) accept4$inet6(r5, 0x0, &(0x7f00000003c0), 0x800) unshare(0x2c020600) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r6, &(0x7f0000000780)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r6, &(0x7f0000000780)}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1, &(0x7f0000006680)) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@int=0x1, 0x4) 1.862479803s ago: executing program 5 (id=3851): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) 1.822171401s ago: executing program 5 (id=3852): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) close(r1) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 2', 0x19) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000004c0)={r4, 0x7}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xf0, 0x8f, 0xd, 0x40, 0x4b4, 0x6830, 0x86cf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x63, 0xc1}}]}}]}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x2, 0x1, 0x4, 0x100, 0x1b52, 0x4, 0x6}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe, 0xe0, 0x0, &(0x7f00000003c0)="0f2fe34bfd9d6d373b547c8975a0edb46765efe2d18c7269cbb5ff3322ba24dca1af4fbabd537078b539db6c3aaebce3a0a7d102b0ea2f747fa823049cbbe98aa8df29c8e68bba08886b112d0dfbc9a098c3c6661e30377a42dd15b2712ea610cae701cace3ecebf41051a93a36b8780329703a1084c1dfa3a6da522b89b6da88b7fcaf84ea2a0d8d9637f7b5bae3ab22e7c335c243400911f1a4c5df6505db140e8619998c227e02b5c8e8e9582b95531f810a18c441fe2cacb20c1f5ae763c0bbed70119cd91172225972455ff147875b1717d3470359138d2278cd32d7e20"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) (fail_nth: 19) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x208000, 0x0) 1.806934707s ago: executing program 8 (id=3853): mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x2, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x104, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = socket(0x10, 0x803, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mkdir(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000340), r2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800ff"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3050}}, {0x86, &(0x7f0000000b80)=ANY=[@ANYBLOB="86038aa05464d715e1cff722b32eec4b304acdcd36967012552dbd9f45207068ce57c771f9ae5b252899e8ff67ed3199095187be66f5c1775212cab36147f8493faecc5d3b8b11e7ddd4b648d4615d109b51255d52ed8ac6de375a37c62855d93dfd2f64bdf535434f62c0aeca2bbd73b11de5a56619b3dd2457344cc87b5ba2216ad84984d157"]}]}) 192.839582ms ago: executing program 9 (id=3854): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000040), 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0xfffffffffffff5cc, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000017000000bca30000000000002403000040feffff6b0af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140800000000001d430000000000007a0a00fe0000001f6114100000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4fffe2158dfb8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb3fa3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5973acc706db6b861b8c10a7cbd0b723906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff6194732827a58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f1000000006eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa555ec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f37382000000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23577949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115553f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5f07918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa61071799e1acb3928143be1c1023a375e528285544d0064b91f00f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aa3f999ce700ffe794e27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a2271d96c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b0200780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000005bae7859839f856e7a397913eec7977f6231c5f11849b3deabc60c5ccf240d16924eb760a969813be02a229c674045b88915518a17b683268f10358e1c0b20cfc2bd105e5e1db7fed951b8faf126267bb38b8d356f63d3433d3dee643503a8ba4968adf6673f720c474ecf324d989235f1b52aacfe52e4519af87b7e1594728d6d6fff1248e72d5b1b1b692b2b732f0f2ac0714079fd7bf97bf2b5687d1db91daa5210d09ebe66d00ff4f35143be01585e629d408f2d00a0a290db76adc5f57e160b2c188bb1ecc4e7d2948788e4f9c1bcaf91dac53a2f525f7385d5d82728b5217908748f4c22b6d79700"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async, rerun: 64) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000300)="7a8c6ce75facf80a3e717755af276fd612805ae44b5c31d0a9223e43582d263f833a95b33312ecc2d63acc61874e71db676d2e596880edddf39ec4513d141a2aa58bfc62639e62d8d317d35a92596b5bbc5afc828d8edc500601d69df3d8dab5928d81a4a1637a8f3848c21c8eafcf86abdbff3100e2c3c9ce0ca5718b58ed7bacc0c2f85b2c2b14b55e3ca2f4fc162694ac19c8d9e7a3ab99d07685d64199fb896c3d47a5902073fd106e7d204b969589bab59d95fd512b859322600507a8988aeac0915ef0a24e68d820680f05368591442288d8", 0xd5}, {&(0x7f0000000400)="9a40ac22837bbcd792d8dfdc1713a201d0a2804e60b860c11b9839e6bae0fce92b0f156167fe50768df32e934fa0cc5367938b188b0bb4d8e67105a8804b8f1a61696430bdc51ad9bad858e7f0acde0768bddaf8ce591e0faea26428d1b5e253574846c1eec7564292f560ec2841d10402c26a08520122d87879a7911ac6e8943b3015aa77aa4f3459a94f3094eb8f802aeca6c3ef60c4c27d51540614ba119f7f3cdf8aa3485024b89fe85838fcf9713d100955c96fbdf4687fb7afaf7689ee34959481865502d39a2e8d4d19582a4083d868c0fcce0496", 0xd8}, {&(0x7f0000000500)="6dfbb24110fbf2a19e49a6befd7816cb296ed6224f45c3054e4308bdcedb11653fa7e620a85ed324f5aa2351c76785c7f10e6e0ef65cf628020f0d620a835f70b72a2cc378d6872f06a6c597432f6ecb71b9a0765dd881", 0x57}, {&(0x7f0000000680)="fc58a1355105d555f9cebee4cf32359deff7d13fa7dd2e724cf87830e6db7d787b66f6ecc278eb85bc8136787eaab04d6bea813519cecf4feaf36c469e1304095f9dc36d15a018640712b5c06f2629df26d79c65e561073e13d02706b285c5d1e68061b4b48e9b8dc5bb39a26930fef1159f47fc12048718017ce8da4b9d66d91424b892e7f850d925daec0f01624769e49a627f65e11b4d114f5d0607f026dbf1b0be2d97b01bdcf5a931425a755b98d68396234f48f9d175417a58be0e2f4d192d69d87847cc0c31a0f15ceb3591a63083698e9e09c06cd3fbd6079a7618f2c049e674804ea0d8b119a8c7d37cfe44a909eb76", 0xf4}, {&(0x7f0000000240)="484ba0c088440450523c5a21fee50c616e0accfcf0", 0x15}], 0x5) (async, rerun: 64) syz_open_dev$video(0x0, 0x8, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) (async, rerun: 64) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}]}, 0x2c}}, 0x40) (async) timer_create(0x1, &(0x7f0000000100)={0x0, 0x37, 0x2, @thr={&(0x7f0000001240)="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", &(0x7f0000000040)="e034517f439dd83e974977f8c2fcd21aeb30b40db1ef87f4912fcc867267e28d1174d04025fd193e712ce202b62542867a7f158730060f6b4cd541134c90e1f382ce8695d172845ce756ed89e64daccd97d84e15afd5d4b68d855864dfe26e533338d3e59560ee56af7093955a51bfc312a6c1a92df190689eaa8463ec1c66c16c28c9cbade81684721848bea1db1208a0929dccd4577016ec"}}, &(0x7f0000000140)=0x0) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r9, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {r10, r11+10000000}}, &(0x7f0000000200)) 94.072287ms ago: executing program 9 (id=3855): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="8304a51adfa2da34e3bd002909bf08f8d7b632d788192b515b72956b7e61fae685a277d01a47e968d7da295a5ca02188a7bb1131f603d1bf8efcb80472d377a00509e349c703fba1c2d2234c294a76888b7f80f73990f1b12a9e97"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x7800, 0x10, 0x9, 0x0, {{0x8, 0x4, 0x1, 0xf, 0x20, 0x65, 0x0, 0x5, 0x4, 0x0, @empty, @local, {[@timestamp={0x44, 0x8, 0xae, 0x0, 0x6, [0xd8bc]}, @generic={0x88, 0x2}]}}}}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)="14e5d530b3da39787419a628ee5c51ff498549c9afe781f7a1daf2800148f7ab06b0728d7724c2bf0deb446fe804ef943fde90350adb4d6d96e9aa06346c22f4e9837c0ec036712fdb1b6660e6de1f37195a0842c876fa993dbb2e2bcd4860a5f2ea57ddb01b12da20939ee2b9319105c331f0667a9115a2dc5900b4f895afd0a87bbcb8342c32266b9873971c35623840be11934039a18feac2f73ffd06c7e533504d", &(0x7f0000000640), 0xffc, r1}, 0x38) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000140), &(0x7f00000000c0)=0xfffffffffffffe87) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 87.039441ms ago: executing program 6 (id=3856): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040f0402001304c702a6e8e9b2641c4e9f2aa3376800b61823d1e2efef99bf837851c47d7255b97d5801754ad204fc061a6a612badea14fde723a2cfa58e9861d339e56d2a45aa80c79d8e9627759682f0c94914831a615c0faa01a1"], 0x7) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000000c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = io_uring_setup(0x1abf, &(0x7f0000000000)={0x0, 0xa4ec, 0x10000, 0x1, 0x102a8}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080)=[0xfff, 0x6], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r2 = timerfd_create(0x7, 0x81000) timerfd_settime(r2, 0x2, &(0x7f0000007000), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES8], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="5902000000000701000800f55299c6383dce8b0014000180080003009c4e3ab90be9506a98618d9940cdf29739e810ed236fc2217aed668f8efe62cf3c02cf2e7f04d41b125cf5cf4e89cde5b6506983dbbf1413463d7cd08b98ef6a367ee67eebebdeb4505b12fb7c26995283a92676ab32a36a820d2b24894942c7f286eff80a0a", @ANYRES64=r3, @ANYBLOB="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"], 0x258}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @loopback}, {0x2, 0x2, @rand_addr=0x64010101}, 0x184, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)='dvmrp0\x00', 0x0, 0x8}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r3, 0x0, 0x0}, 0x20) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) lseek(r7, 0xaea, 0x3) r8 = socket(0x10, 0x803, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r9 = socket(0x6, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) 0s ago: executing program 9 (id=3857): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x3) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) kernel console output (not intermixed with test programs): [ 1267.838653][T20812] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1268.230083][ T976] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1268.251326][T20812] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1268.289103][T20812] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1268.302836][T20812] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1268.332143][T20812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.364818][T21121] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1268.384150][T20812] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1268.430063][ T976] usb 9-1: Using ep0 maxpacket: 16 [ 1268.436637][ T976] usb 9-1: config 0 has an invalid interface number: 142 but max is 0 [ 1268.462914][ T976] usb 9-1: config 0 has no interface number 0 [ 1268.500546][ T976] usb 9-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=a0.f1 [ 1268.509743][ T976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.521209][T21143] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3567'. [ 1268.539591][ T976] usb 9-1: Product: syz [ 1268.548307][ T976] usb 9-1: Manufacturer: syz [ 1268.570686][ T976] usb 9-1: SerialNumber: syz [ 1268.764421][ T976] usb 9-1: config 0 descriptor?? [ 1269.679453][T21126] xt_hashlimit: overflow, try lower: 17592186044416/2047 [ 1269.747021][ T30] audit: type=1400 audit(1751015470.545:2752): avc: denied { setopt } for pid=21125 comm="syz.8.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1270.078731][T16439] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1270.086604][ T5926] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1270.096218][ T976] usb 9-1: Found UVC 0.00 device syz (1bcf:0b40) [ 1270.103439][ T30] audit: type=1400 audit(1751015470.695:2753): avc: denied { ioctl } for pid=21125 comm="syz.8.3564" path="socket:[74868]" dev="sockfs" ino=74868 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1270.128827][ T976] usb 9-1: Forcing UVC version to 1.0a [ 1270.128853][ T976] usb 9-1: No valid video chain found. [ 1270.130761][ T976] usb 9-1: USB disconnect, device number 21 [ 1270.291624][T16439] usb 10-1: Using ep0 maxpacket: 32 [ 1270.297117][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 1270.304028][T16439] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 1270.316677][ T5926] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1270.325261][T16439] usb 10-1: config 0 has no interface number 0 [ 1270.333351][ T5926] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1270.344730][T16439] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1270.356456][ T5926] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1270.367804][T16439] usb 10-1: config 0 interface 85 has no altsetting 0 [ 1270.375730][ T5926] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1270.401015][T16439] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1270.416980][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1270.424495][T16439] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.445166][T16439] usb 10-1: Product: syz [ 1270.449492][T16439] usb 10-1: Manufacturer: syz [ 1270.462443][ T5926] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1270.473917][T16439] usb 10-1: SerialNumber: syz [ 1270.482241][ T5926] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1270.498466][T16439] usb 10-1: config 0 descriptor?? [ 1270.509846][ T5926] usb 5-1: Product: syz [ 1270.519334][ T5926] usb 5-1: Manufacturer: syz [ 1270.534298][ T5926] usb 5-1: SerialNumber: syz [ 1270.550666][ T5926] usb 5-1: config 0 descriptor?? [ 1270.575558][ T5926] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1270.608945][ T5926] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1271.320259][T16439] appletouch 10-1:0.85: Geyser mode initialized. [ 1271.394227][T16439] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input131 [ 1271.505659][T21183] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1271.507913][T20812] usb 5-1: USB disconnect, device number 65 [ 1271.512686][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 1271.532704][T21182] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3567'. [ 1273.042987][T21186] wg1: entered promiscuous mode [ 1273.047977][T21186] wg1: entered allmulticast mode [ 1273.056249][ T24] usb 6-1: USB disconnect, device number 17 [ 1273.153087][T20812] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1273.323755][ T5881] usb 10-1: USB disconnect, device number 19 [ 1273.368756][ T5881] appletouch 10-1:0.85: input: appletouch disconnected [ 1273.425776][T16439] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 1273.488945][T21194] wg1: entered promiscuous mode [ 1273.502162][T21194] wg1: entered allmulticast mode [ 1273.605348][T16439] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1273.631916][T16439] usb 9-1: config 0 has no interface number 0 [ 1273.649059][T16439] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1273.670284][T16439] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1273.700104][T16439] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1273.719850][T16439] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.753491][T16439] usb 9-1: config 0 descriptor?? [ 1273.759750][T21186] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1273.781275][T16439] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1273.861871][ T5881] usb 10-1: new low-speed USB device number 20 using dummy_hcd [ 1274.082693][ T5881] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1274.100087][ T5881] usb 10-1: config 0 has no interface number 0 [ 1274.106284][ T5881] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1274.210905][ T5881] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1274.211190][T16439] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1274.239751][ T976] usb 9-1: USB disconnect, device number 22 [ 1274.329786][ T5881] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1274.402441][ T5881] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.589105][ T30] audit: type=1400 audit(1751015475.435:2754): avc: denied { bind } for pid=21218 comm="syz.5.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1274.609946][ T5881] usb 10-1: config 0 descriptor?? [ 1274.620569][T21194] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1274.712143][T16439] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1274.723957][T16439] usb 5-1: not running at top speed; connect to a high speed hub [ 1275.023768][ T5881] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1275.031047][T16439] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1275.087469][T16439] usb 5-1: string descriptor 0 read error: -22 [ 1275.319030][ T976] usb 10-1: USB disconnect, device number 20 [ 1275.370015][T16439] usb 5-1: New USB device found, idVendor=02c7, idProduct=d349, bcdDevice=8a.42 [ 1275.402764][T21233] trusted_key: encrypted_key: key trusted:8sX not found [ 1275.406453][T16439] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.467050][T16439] usb 5-1: config 0 descriptor?? [ 1275.870186][ T30] audit: type=1326 audit(1751015476.595:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21235 comm="syz.6.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce578e929 code=0x7ffc0000 [ 1276.137315][ T5881] usb 5-1: USB disconnect, device number 66 [ 1276.166742][ T30] audit: type=1326 audit(1751015476.595:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21235 comm="syz.6.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce578e929 code=0x7ffc0000 [ 1276.237199][ T30] audit: type=1326 audit(1751015476.595:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21235 comm="syz.6.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fbce578e929 code=0x7ffc0000 [ 1276.274151][ T30] audit: type=1326 audit(1751015476.595:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21235 comm="syz.6.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce578e929 code=0x7ffc0000 [ 1276.712839][ T30] audit: type=1326 audit(1751015476.595:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21235 comm="syz.6.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce578e929 code=0x7ffc0000 [ 1276.820167][ T30] audit: type=1326 audit(1751015476.595:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21235 comm="syz.6.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fbce578e929 code=0x7ffc0000 [ 1276.844289][ T30] audit: type=1326 audit(1751015476.595:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21235 comm="syz.6.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce578e929 code=0x7ffc0000 [ 1276.942478][T21254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1276.964077][ T30] audit: type=1326 audit(1751015476.595:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21235 comm="syz.6.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce578e929 code=0x7ffc0000 [ 1277.146682][T21259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21259 comm=syz.8.3586 [ 1277.235543][ T30] audit: type=1326 audit(1751015476.595:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21235 comm="syz.6.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbce578e929 code=0x7ffc0000 [ 1277.258913][ C0] vkms_vblank_simulate: vblank timer overrun [ 1277.572041][T21269] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3587'. [ 1277.582880][T21269] veth1_macvtap: left promiscuous mode [ 1277.588593][T21269] macsec0: entered allmulticast mode [ 1279.686211][T21293] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3592'. [ 1279.696155][T21293] (unnamed net_device) (uninitialized): (slave ip6_vti0): Device is not bonding slave [ 1279.705783][T21293] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6_vti0) [ 1279.733013][T21293] ucma_write: process 246 (syz.6.3592) changed security contexts after opening file descriptor, this is not allowed. [ 1279.990054][ T5926] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1279.997730][ T976] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1280.150324][ T5926] usb 10-1: Using ep0 maxpacket: 16 [ 1280.170041][ T976] usb 9-1: Using ep0 maxpacket: 32 [ 1280.184725][ T5926] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1280.195088][ T5926] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.204793][ T976] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1280.213576][ T976] usb 9-1: config 0 has no interface number 0 [ 1280.220209][ T5926] usb 10-1: config 0 descriptor?? [ 1280.247877][ T5926] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1280.254390][ T976] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.370070][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1280.370087][ T30] audit: type=1400 audit(1751015481.225:2788): avc: denied { getopt } for pid=21306 comm="syz.5.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1280.398322][ T976] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.426899][ T976] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1280.600168][ T5881] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 1280.615513][ T976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.685241][T21318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21318 comm=syz.6.3598 [ 1280.877025][ T5881] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1280.890907][ T976] usb 9-1: config 0 descriptor?? [ 1280.892208][ T5881] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1280.906992][ T5881] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1280.913829][ T5881] usb 6-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1280.924973][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.935834][ T5881] usb 6-1: config 0 descriptor?? [ 1280.955346][T21307] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1281.457461][ T5881] holtek_mouse 0003:04D9:A067.002D: unknown main item tag 0x3 [ 1281.636730][ T5881] holtek_mouse 0003:04D9:A067.002D: unknown main item tag 0x0 [ 1281.725286][T21307] o2cb: This node has not been configured. [ 1281.764896][ T976] uclogic 0003:28BD:0094.002E: pen parameters not found [ 1281.769860][ T5881] holtek_mouse 0003:04D9:A067.002D: unknown main item tag 0x0 [ 1281.785371][T21307] o2cb: Cluster check failed. Fix errors before retrying. [ 1281.790037][ T976] uclogic 0003:28BD:0094.002E: interface is invalid, ignoring [ 1281.806067][T21307] (syz.5.3596,21307,0):user_dlm_register:674 ERROR: status = -22 [ 1281.812382][ T5881] holtek_mouse 0003:04D9:A067.002D: unknown main item tag 0x0 [ 1281.819185][T21307] (syz.5.3596,21307,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1281.989407][ T5881] holtek_mouse 0003:04D9:A067.002D: unknown main item tag 0x0 [ 1281.996955][ T5881] holtek_mouse 0003:04D9:A067.002D: unknown main item tag 0x0 [ 1282.034200][ T5881] holtek_mouse 0003:04D9:A067.002D: unknown main item tag 0x0 [ 1282.049101][T21338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3601'. [ 1282.087282][ T5881] holtek_mouse 0003:04D9:A067.002D: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.5-1/input0 [ 1282.127970][T20812] usb 9-1: USB disconnect, device number 23 [ 1282.320565][ T5881] usb 6-1: USB disconnect, device number 18 [ 1282.451414][ T5926] gspca_sonixj: i2c_w8 err -110 [ 1282.926649][ T5926] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 1283.259235][ T5926] usb 10-1: USB disconnect, device number 21 [ 1283.406795][T16439] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1283.600378][T21361] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 1283.606404][T21361] syzkaller0: ignored: set checksum disabled [ 1283.680045][T16439] usb 6-1: Using ep0 maxpacket: 8 [ 1283.692803][T16439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.814429][T16439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.844538][T16439] usb 6-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 1283.873293][T16439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.916573][T16439] usb 6-1: config 0 descriptor?? [ 1284.752593][T16439] logitech-hidpp-device 0003:046D:C343.002F: unbalanced delimiter at end of report description [ 1284.763793][T16439] logitech-hidpp-device 0003:046D:C343.002F: hidpp_probe:parse failed [ 1284.772700][T16439] logitech-hidpp-device 0003:046D:C343.002F: probe with driver logitech-hidpp-device failed with error -22 [ 1284.888868][T21384] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3609'. [ 1284.898028][T21384] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3609'. [ 1284.910119][T21384] tipc: MTU too low for tipc bearer [ 1285.021546][T21389] netlink: 642 bytes leftover after parsing attributes in process `syz.9.3611'. [ 1286.170849][T16439] usb 6-1: USB disconnect, device number 19 [ 1286.926883][T21410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1288.029157][ T24] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1288.140228][T21413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3614'. [ 1288.220062][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 1288.236761][T21432] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1288.269460][ T24] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1288.278895][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.297114][ T24] usb 10-1: Product: syz [ 1288.306406][ T24] usb 10-1: Manufacturer: syz [ 1288.313649][ T24] usb 10-1: SerialNumber: syz [ 1288.320633][ T24] usb 10-1: config 0 descriptor?? [ 1288.327338][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1288.353061][ T24] usb 10-1: setting power ON [ 1288.365081][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1288.393169][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1288.400047][T16439] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1288.434182][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1288.490277][T21441] netlink: 'syz.4.3620': attribute type 11 has an invalid length. [ 1288.500391][ T24] usb 10-1: media controller created [ 1288.521784][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1288.533403][T21420] dvb-usb: bulk message failed: -22 (3/0) [ 1288.539456][T21420] dvb-usb: bulk message failed: -22 (6/0) [ 1288.562647][ T24] usb 10-1: selecting invalid altsetting 6 [ 1288.588995][ T24] usb 10-1: digital interface selection failed (-22) [ 1288.639745][T16439] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1288.680216][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1288.681263][T21446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.702021][ T24] usb 10-1: setting power OFF [ 1288.711546][T21446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.714085][T16439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.745346][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1288.753100][T16439] usb 6-1: Product: syz [ 1288.757349][T16439] usb 6-1: Manufacturer: syz [ 1288.762314][T16439] usb 6-1: SerialNumber: syz [ 1288.825152][T16439] usb 6-1: config 0 descriptor?? [ 1288.834734][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1288.863319][T16439] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1288.968593][ T24] (NULL device *): no alternate interface [ 1289.180373][ T976] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1289.335051][ T976] usb 7-1: device descriptor read/64, error -71 [ 1289.570158][T16439] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 1289.587914][T16439] sq905c 6-1:0.0: Reading version command failed [ 1289.594545][ T976] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1289.608041][T16439] sq905c 6-1:0.0: probe with driver sq905c failed with error -110 [ 1289.701970][T16439] usb 6-1: USB disconnect, device number 20 [ 1289.756288][ T976] usb 7-1: device descriptor read/64, error -71 [ 1290.450116][ T976] usb usb7-port1: attempt power cycle [ 1290.505325][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1290.530794][T21476] bridge0: port 3(vlan2) entered blocking state [ 1290.558140][T21476] bridge0: port 3(vlan2) entered disabled state [ 1290.566572][ T24] usb 10-1: USB disconnect, device number 22 [ 1290.599486][T21476] vlan2: entered allmulticast mode [ 1290.617760][T21476] bond0: entered allmulticast mode [ 1290.634682][T21476] bond_slave_0: entered allmulticast mode [ 1290.643887][T21476] bond_slave_1: entered allmulticast mode [ 1290.719810][T20812] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 1290.742054][T21476] vlan2: entered promiscuous mode [ 1290.747101][T21476] bond0: entered promiscuous mode [ 1290.754675][T21476] bond_slave_0: entered promiscuous mode [ 1290.763929][T21476] bond_slave_1: entered promiscuous mode [ 1290.914768][T20812] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1290.981991][T21487] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1291.222795][ T976] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1291.253443][T20812] usb 9-1: config 0 has no interface number 0 [ 1291.261700][T20812] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1291.275271][ T976] usb 7-1: device descriptor read/8, error -71 [ 1291.285840][T20812] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1291.307925][T20812] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1291.317300][T20812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.328938][T20812] usb 9-1: config 0 descriptor?? [ 1291.334754][T21474] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1291.349357][T20812] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1291.620028][ T976] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1291.674060][ T976] usb 7-1: device descriptor read/8, error -71 [ 1291.847196][T16439] usb 9-1: USB disconnect, device number 24 [ 1292.037877][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1292.059288][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1292.144602][ T976] usb usb7-port1: unable to enumerate USB device [ 1292.268413][T21499] ceph: No mds server is up or the cluster is laggy [ 1292.334550][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1292.477455][T21506] FAULT_INJECTION: forcing a failure. [ 1292.477455][T21506] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.490678][T21506] CPU: 0 UID: 0 PID: 21506 Comm: syz.6.3630 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 1292.490703][T21506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1292.490715][T21506] Call Trace: [ 1292.490721][T21506] [ 1292.490728][T21506] dump_stack_lvl+0x16c/0x1f0 [ 1292.490758][T21506] should_fail_ex+0x512/0x640 [ 1292.490788][T21506] ? fs_reclaim_acquire+0xae/0x150 [ 1292.490808][T21506] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1292.490833][T21506] should_failslab+0xc2/0x120 [ 1292.490859][T21506] __kmalloc_noprof+0xd2/0x510 [ 1292.490887][T21506] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1292.490915][T21506] ? tomoyo_profile+0x47/0x60 [ 1292.490944][T21506] tomoyo_path_number_perm+0x245/0x580 [ 1292.490964][T21506] ? tomoyo_path_number_perm+0x237/0x580 [ 1292.490988][T21506] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1292.491010][T21506] ? find_held_lock+0x2b/0x80 [ 1292.491055][T21506] ? find_held_lock+0x2b/0x80 [ 1292.491075][T21506] ? hook_file_ioctl_common+0x145/0x410 [ 1292.491107][T21506] ? __fget_files+0x20e/0x3c0 [ 1292.491135][T21506] security_file_ioctl+0x9b/0x240 [ 1292.491160][T21506] __x64_sys_ioctl+0xb7/0x210 [ 1292.491181][T21506] do_syscall_64+0xcd/0x4c0 [ 1292.491208][T21506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.491226][T21506] RIP: 0033:0x7fbce578e929 [ 1292.491241][T21506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1292.491258][T21506] RSP: 002b:00007fbce6553038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1292.491276][T21506] RAX: ffffffffffffffda RBX: 00007fbce59b5fa0 RCX: 00007fbce578e929 [ 1292.491288][T21506] RDX: 0000200000000040 RSI: 00000000c040565f RDI: 0000000000000003 [ 1292.491299][T21506] RBP: 00007fbce6553090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.491309][T21506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.491320][T21506] R13: 0000000000000000 R14: 00007fbce59b5fa0 R15: 00007ffc44db81e8 [ 1292.491344][T21506] [ 1292.491351][T21506] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1292.494128][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1293.019669][T21521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3632'. [ 1293.053241][T21523] FAULT_INJECTION: forcing a failure. [ 1293.053241][T21523] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.124720][T21523] CPU: 1 UID: 0 PID: 21523 Comm: syz.6.3633 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 1293.124746][T21523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1293.124757][T21523] Call Trace: [ 1293.124763][T21523] [ 1293.124770][T21523] dump_stack_lvl+0x16c/0x1f0 [ 1293.124804][T21523] should_fail_ex+0x512/0x640 [ 1293.124825][T21523] ? fs_reclaim_acquire+0xae/0x150 [ 1293.124843][T21523] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1293.124867][T21523] should_failslab+0xc2/0x120 [ 1293.124891][T21523] __kmalloc_noprof+0xd2/0x510 [ 1293.124911][T21523] ? trace_kmalloc+0x2b/0xd0 [ 1293.124934][T21523] ? __kmalloc_noprof+0x242/0x510 [ 1293.124959][T21523] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1293.124983][T21523] ? tomoyo_fill_path_info+0x233/0x420 [ 1293.125004][T21523] tomoyo_mount_acl+0x1ae/0x850 [ 1293.125024][T21523] ? kernel_text_address+0x8d/0x100 [ 1293.125043][T21523] ? __kernel_text_address+0xd/0x40 [ 1293.125061][T21523] ? unwind_get_return_address+0x59/0xa0 [ 1293.125090][T21523] ? arch_stack_walk+0xa6/0x100 [ 1293.125110][T21523] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1293.125139][T21523] ? stack_trace_save+0x8e/0xc0 [ 1293.125183][T21523] ? tomoyo_domain+0xbb/0x150 [ 1293.125210][T21523] ? tomoyo_profile+0x47/0x60 [ 1293.125240][T21523] tomoyo_mount_permission+0x16d/0x420 [ 1293.125262][T21523] ? tomoyo_mount_permission+0x14f/0x420 [ 1293.125286][T21523] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1293.125325][T21523] security_sb_mount+0x9b/0x260 [ 1293.125350][T21523] path_mount+0x128/0x2020 [ 1293.125378][T21523] ? kmem_cache_free+0x2d1/0x4d0 [ 1293.125399][T21523] ? __pfx_path_mount+0x10/0x10 [ 1293.125429][T21523] ? putname+0x154/0x1a0 [ 1293.125461][T21523] __x64_sys_mount+0x28d/0x310 [ 1293.125488][T21523] ? __pfx___x64_sys_mount+0x10/0x10 [ 1293.125525][T21523] do_syscall_64+0xcd/0x4c0 [ 1293.125553][T21523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.125571][T21523] RIP: 0033:0x7fbce578e929 [ 1293.125585][T21523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1293.125601][T21523] RSP: 002b:00007fbce6553038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1293.125617][T21523] RAX: ffffffffffffffda RBX: 00007fbce59b5fa0 RCX: 00007fbce578e929 [ 1293.125629][T21523] RDX: 0000200000000480 RSI: 0000200000000000 RDI: 0000200000000140 [ 1293.125639][T21523] RBP: 00007fbce6553090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.125649][T21523] R10: 0000000000010008 R11: 0000000000000246 R12: 0000000000000001 [ 1293.125660][T21523] R13: 0000000000000000 R14: 00007fbce59b5fa0 R15: 00007ffc44db81e8 [ 1293.125683][T21523] [ 1293.125690][T21523] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1293.641770][T21531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3636'. [ 1293.686252][T21535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3636'. [ 1293.712974][T21535] loop2: detected capacity change from 0 to 7 [ 1293.845467][T12649] Dev loop2: unable to read RDB block 7 [ 1293.940436][T18150] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1293.979535][T12649] loop2: AHDI p1 p2 p3 [ 1294.133390][T12649] loop2: partition table partially beyond EOD, truncated [ 1294.169873][T12649] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1294.189488][T12649] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1294.198703][T21535] Dev loop2: unable to read RDB block 7 [ 1294.204538][T21535] loop2: AHDI p1 p2 p3 [ 1294.211233][T21535] loop2: partition table partially beyond EOD, truncated [ 1294.218355][T21535] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1294.252404][T21535] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1294.263089][T18150] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1294.276576][T18150] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1294.326648][T18150] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1294.393522][T18150] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1294.460102][T18150] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1294.521651][T18150] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1294.542652][T18150] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1294.563915][T18150] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1294.600038][T18150] usb 7-1: Product: syz [ 1294.600059][T18150] usb 7-1: Manufacturer: syz [ 1294.600074][T18150] usb 7-1: SerialNumber: syz [ 1294.602279][T18150] usb 7-1: config 0 descriptor?? [ 1294.603400][T21536] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1294.608432][T18150] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1294.620010][T18150] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1294.675356][T19306] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.883315][T19306] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.935952][T21560] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1294.945025][ T30] audit: type=1400 audit(1751015495.805:2789): avc: denied { mounton } for pid=21559 comm="syz.5.3641" path="/61/file0" dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1295.058798][T19306] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.183040][T19306] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.215342][ T30] audit: type=1326 audit(1751015496.085:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21565 comm="syz.5.3642" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6883b8e929 code=0x0 [ 1295.279367][T21569] hpfs: Bad magic ... probably not HPFS [ 1295.324903][T21571] FAULT_INJECTION: forcing a failure. [ 1295.324903][T21571] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.388857][T21571] CPU: 0 UID: 0 PID: 21571 Comm: syz.9.3644 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 1295.388883][T21571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1295.388894][T21571] Call Trace: [ 1295.388900][T21571] [ 1295.388907][T21571] dump_stack_lvl+0x16c/0x1f0 [ 1295.388936][T21571] should_fail_ex+0x512/0x640 [ 1295.388958][T21571] ? fs_reclaim_acquire+0xae/0x150 [ 1295.388978][T21571] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1295.389007][T21571] should_failslab+0xc2/0x120 [ 1295.389033][T21571] __kmalloc_noprof+0xd2/0x510 [ 1295.389055][T21571] ? trace_kmalloc+0x2b/0xd0 [ 1295.389080][T21571] ? __kmalloc_noprof+0x242/0x510 [ 1295.389106][T21571] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1295.389132][T21571] ? tomoyo_fill_path_info+0x233/0x420 [ 1295.389154][T21571] tomoyo_mount_acl+0x1ae/0x850 [ 1295.389175][T21571] ? kernel_text_address+0x8d/0x100 [ 1295.389194][T21571] ? __kernel_text_address+0xd/0x40 [ 1295.389213][T21571] ? unwind_get_return_address+0x59/0xa0 [ 1295.389241][T21571] ? arch_stack_walk+0xa6/0x100 [ 1295.389261][T21571] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1295.389289][T21571] ? stack_trace_save+0x8e/0xc0 [ 1295.389333][T21571] ? tomoyo_domain+0xbb/0x150 [ 1295.389359][T21571] ? tomoyo_profile+0x47/0x60 [ 1295.389388][T21571] tomoyo_mount_permission+0x16d/0x420 [ 1295.389410][T21571] ? tomoyo_mount_permission+0x14f/0x420 [ 1295.389434][T21571] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1295.389472][T21571] security_sb_mount+0x9b/0x260 [ 1295.389496][T21571] path_mount+0x128/0x2020 [ 1295.389524][T21571] ? kmem_cache_free+0x2d1/0x4d0 [ 1295.389546][T21571] ? __pfx_path_mount+0x10/0x10 [ 1295.389576][T21571] ? putname+0x154/0x1a0 [ 1295.389607][T21571] __x64_sys_mount+0x28d/0x310 [ 1295.389633][T21571] ? __pfx___x64_sys_mount+0x10/0x10 [ 1295.389668][T21571] do_syscall_64+0xcd/0x4c0 [ 1295.389696][T21571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.389714][T21571] RIP: 0033:0x7f0940b8e929 [ 1295.389729][T21571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1295.389745][T21571] RSP: 002b:00007f094194c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1295.389762][T21571] RAX: ffffffffffffffda RBX: 00007f0940db5fa0 RCX: 00007f0940b8e929 [ 1295.389774][T21571] RDX: 0000200000000480 RSI: 0000200000000000 RDI: 0000200000000140 [ 1295.389786][T21571] RBP: 00007f094194c090 R08: 0000000000000000 R09: 0000000000000000 [ 1295.389796][T21571] R10: 0000000000010008 R11: 0000000000000246 R12: 0000000000000001 [ 1295.389806][T21571] R13: 0000000000000001 R14: 00007f0940db5fa0 R15: 00007ffc57835688 [ 1295.389835][T21571] [ 1295.650200][T21571] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1295.744053][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1295.748336][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1295.759697][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1295.779185][T19306] vlan2: left allmulticast mode [ 1295.779204][T19306] bond0: left allmulticast mode [ 1295.779217][T19306] bond_slave_0: left allmulticast mode [ 1295.779232][T19306] bond_slave_1: left allmulticast mode [ 1295.779311][T19306] vlan2: left promiscuous mode [ 1295.779324][T19306] bond0: left promiscuous mode [ 1295.779335][T19306] bond_slave_0: left promiscuous mode [ 1295.779492][T19306] bond_slave_1: left promiscuous mode [ 1295.779867][T19306] bridge0: port 3(vlan2) entered disabled state [ 1295.781407][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1295.785745][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1295.830549][T19306] bridge_slave_1: left allmulticast mode [ 1295.830569][T19306] bridge_slave_1: left promiscuous mode [ 1295.830719][T19306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.866594][T19306] bridge_slave_0: left allmulticast mode [ 1295.866613][T19306] bridge_slave_0: left promiscuous mode [ 1295.866747][T19306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.885896][T21585] hpfs: Bad magic ... probably not HPFS [ 1295.980459][T16439] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1296.148864][T21575] tty tty37: ldisc open failed (-12), clearing slot 36 [ 1296.538131][T21596] FAULT_INJECTION: forcing a failure. [ 1296.538131][T21596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1296.551804][T21596] CPU: 1 UID: 0 PID: 21596 Comm: syz.5.3647 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 1296.551829][T21596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1296.551841][T21596] Call Trace: [ 1296.551847][T21596] [ 1296.551855][T21596] dump_stack_lvl+0x16c/0x1f0 [ 1296.551884][T21596] should_fail_ex+0x512/0x640 [ 1296.551915][T21596] _copy_from_user+0x2e/0xd0 [ 1296.551942][T21596] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 1296.551965][T21596] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1296.551995][T21596] sk_setsockopt+0x170/0x3e40 [ 1296.552026][T21596] ? __pfx_sk_setsockopt+0x10/0x10 [ 1296.552052][T21596] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 1296.552078][T21596] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1296.552102][T21596] ? proc_fail_nth_write+0x9f/0x250 [ 1296.552138][T21596] ? selinux_socket_setsockopt+0x6a/0x80 [ 1296.552164][T21596] do_sock_setsockopt+0x3f2/0x470 [ 1296.552192][T21596] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1296.552234][T21596] __sys_setsockopt+0x1a0/0x230 [ 1296.552262][T21596] __x64_sys_setsockopt+0xbd/0x160 [ 1296.552284][T21596] ? do_syscall_64+0x91/0x4c0 [ 1296.552310][T21596] ? lockdep_hardirqs_on+0x7c/0x110 [ 1296.552334][T21596] do_syscall_64+0xcd/0x4c0 [ 1296.552361][T21596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.552380][T21596] RIP: 0033:0x7f6883b8e929 [ 1296.552396][T21596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1296.552414][T21596] RSP: 002b:00007f68819b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1296.552432][T21596] RAX: ffffffffffffffda RBX: 00007f6883db6160 RCX: 00007f6883b8e929 [ 1296.552445][T21596] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000008 [ 1296.552456][T21596] RBP: 00007f68819b4090 R08: 0000000000000010 R09: 0000000000000000 [ 1296.552467][T21596] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1296.552479][T21596] R13: 0000000000000000 R14: 00007f6883db6160 R15: 00007ffc5078c6d8 [ 1296.552503][T21596] [ 1297.335036][ T30] audit: type=1400 audit(1751015497.425:2791): avc: denied { setopt } for pid=21590 comm="syz.5.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1297.729724][T20812] usb 7-1: USB disconnect, device number 34 [ 1297.737859][T20812] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1297.831441][ T5827] Bluetooth: hci1: command tx timeout [ 1298.021802][T19306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1298.032897][T19306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1298.042495][T19306] bond0 (unregistering): Released all slaves [ 1298.076821][T21578] lo speed is unknown, defaulting to 1000 [ 1298.691774][T21616] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3651'. [ 1300.375910][T19501] Bluetooth: hci1: command tx timeout [ 1302.390076][ T51] Bluetooth: hci1: command tx timeout [ 1302.397076][ T51] Bluetooth: hci7: command 0x0406 tx timeout [ 1302.427343][T19501] Bluetooth: hci0: command 0x0406 tx timeout [ 1302.435027][T19501] Bluetooth: hci6: command 0x0406 tx timeout [ 1302.441100][ T51] Bluetooth: hci8: command 0x0406 tx timeout [ 1302.647041][T21652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3656'. [ 1302.694051][T21654] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3660'. [ 1302.740130][T18150] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1302.836040][T21578] chnl_net:caif_netlink_parms(): no params data found [ 1302.890802][T19306] hsr_slave_0: left promiscuous mode [ 1302.900624][T18150] usb 10-1: Using ep0 maxpacket: 16 [ 1302.908285][T19306] hsr_slave_1: left promiscuous mode [ 1302.916141][T18150] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.920210][T16439] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1302.927105][T19306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1302.941836][T18150] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1302.955751][T19306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1302.957005][ T24] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1302.971196][T18150] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1302.971394][T19306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1302.980392][T18150] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.988818][T18150] usb 10-1: config 0 descriptor?? [ 1303.000262][T19306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.010067][T18150] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1303.033885][T19306] veth1_macvtap: left promiscuous mode [ 1303.039432][T19306] veth0_macvtap: left promiscuous mode [ 1303.046860][T19306] veth1_vlan: left promiscuous mode [ 1303.054571][T19306] veth0_vlan: left promiscuous mode [ 1303.140067][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1303.146811][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1303.155053][ T24] usb 7-1: config 0 has no interface number 0 [ 1303.161352][T16439] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.175382][T16439] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1303.175731][ T24] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1303.186991][T16439] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.246856][ T24] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1303.255499][T16439] usb 9-1: Product: syz [ 1303.259784][T16439] usb 9-1: Manufacturer: syz [ 1303.269471][T16439] usb 9-1: SerialNumber: syz [ 1303.276011][ T24] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1303.289319][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.317233][ T24] usb 7-1: Product: syz [ 1303.322646][ T24] usb 7-1: Manufacturer: syz [ 1303.327250][ T24] usb 7-1: SerialNumber: syz [ 1303.342551][ T24] usb 7-1: config 0 descriptor?? [ 1303.567966][ T24] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1303.585515][ T24] cx231xx 7-1:0.1: Failed to read PCB config [ 1303.624575][ T24] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 1303.662834][ T24] usb 7-1: USB disconnect, device number 35 [ 1304.076681][T19306] team0 (unregistering): Port device team_slave_1 removed [ 1304.124293][T19306] team0 (unregistering): Port device team_slave_0 removed [ 1304.270140][ T24] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1304.470191][T17212] Bluetooth: hci1: command tx timeout [ 1304.530230][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1304.569617][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1304.596626][ T24] usb 7-1: config 0 has no interface number 0 [ 1304.673760][ T24] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1304.679874][T16439] cdc_ncm 9-1:1.0: failed to get mac address [ 1304.703558][ T24] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1304.704180][T16439] cdc_ncm 9-1:1.0: bind() failure [ 1304.713168][ T24] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1304.719484][T16439] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1304.733997][T16439] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1304.739186][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.742992][T16439] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 1304.752619][ T24] usb 7-1: Product: syz [ 1304.763486][ T24] usb 7-1: Manufacturer: syz [ 1304.768106][ T24] usb 7-1: SerialNumber: syz [ 1304.777847][ T24] usb 7-1: config 0 descriptor?? [ 1304.786965][T16439] usb 9-1: USB disconnect, device number 26 [ 1305.035241][T18150] usb 10-1: USB disconnect, device number 23 [ 1305.048046][ T24] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1305.065649][ T24] cx231xx 7-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1305.980899][ T24] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1305.989076][ T24] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1306.000365][ T24] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1306.008491][ T24] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1306.018443][ T24] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1306.026457][ T24] cx231xx 7-1:0.1: Failed to set devmode to analog: error: -71 [ 1306.239323][T21687] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3669'. [ 1306.252226][T21687] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3669'. [ 1306.667603][ T24] i2c i2c-2: Added multiplexed i2c bus 4 [ 1306.690231][ T24] i2c i2c-2: Added multiplexed i2c bus 5 [ 1306.696832][ T24] cx231xx 7-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1307.304485][ T24] cx231xx 7-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1307.327296][ T24] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 1307.338935][ T24] usb 7-1: USB disconnect, device number 36 [ 1307.396659][T21696] netlink: 'syz.8.3666': attribute type 10 has an invalid length. [ 1307.478786][T21683] syzkaller1: entered promiscuous mode [ 1307.676712][T21683] syzkaller1: entered allmulticast mode [ 1307.777410][T21711] netlink: 'syz.9.3670': attribute type 4 has an invalid length. [ 1307.808634][T21712] netlink: 'syz.9.3670': attribute type 4 has an invalid length. [ 1307.875781][T21711] netlink: 'syz.9.3670': attribute type 4 has an invalid length. [ 1307.911103][T21706] netlink: 'syz.9.3670': attribute type 4 has an invalid length. [ 1307.933100][ T5926] lo speed is unknown, defaulting to 1000 [ 1307.938836][ T5926] syz0: Port: 1 Link DOWN [ 1308.053594][T21578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.076106][T21578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.083348][T21578] bridge_slave_0: entered allmulticast mode [ 1308.090901][T21578] bridge_slave_0: entered promiscuous mode [ 1308.097969][T16439] lo speed is unknown, defaulting to 1000 [ 1308.098616][T21578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.110999][T16439] syz0: Port: 1 Link ACTIVE [ 1308.113422][T21578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.123450][T21578] bridge_slave_1: entered allmulticast mode [ 1308.133186][T21578] bridge_slave_1: entered promiscuous mode [ 1308.140142][ T10] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1308.215602][T21578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.234341][T21578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.289346][T21578] team0: Port device team_slave_0 added [ 1308.298104][T21578] team0: Port device team_slave_1 added [ 1308.310594][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1308.333508][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.346754][T21578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1308.356471][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.366304][T21578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1308.398118][ T10] usb 9-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1308.407587][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.417564][T21578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1308.430060][T21578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1308.437022][T21578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1308.468969][T21578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.488490][ T10] usb 9-1: config 0 descriptor?? [ 1308.581503][T21578] hsr_slave_0: entered promiscuous mode [ 1308.588573][T21578] hsr_slave_1: entered promiscuous mode [ 1308.731631][T21728] 9pnet_fd: Insufficient options for proto=fd [ 1309.005808][ T10] zydacron 0003:13EC:0006.0030: unknown main item tag 0x4 [ 1309.120976][ T10] zydacron 0003:13EC:0006.0030: unexpected long global item [ 1309.303402][ T10] zydacron 0003:13EC:0006.0030: parse failed [ 1309.336886][ T10] zydacron 0003:13EC:0006.0030: probe with driver zydacron failed with error -22 [ 1309.397286][ T10] usb 9-1: USB disconnect, device number 27 [ 1309.577355][T20812] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1309.748293][T20812] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 1309.812296][T20812] usb 10-1: config 0 has no interface number 0 [ 1309.873841][T20812] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1310.017360][T20812] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1310.114512][T20812] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.207326][T20812] usb 10-1: Product: syz [ 1310.261788][T20812] usb 10-1: Manufacturer: syz [ 1310.317404][T20812] usb 10-1: SerialNumber: syz [ 1310.455940][T20812] usb 10-1: config 0 descriptor?? [ 1310.600977][T20812] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 1310.788740][T21578] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1310.820416][T21578] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1310.954666][T21578] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1311.906167][T16439] usb 10-1: USB disconnect, device number 24 [ 1311.927232][T21578] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1311.945644][T16439] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 1312.020115][ T10] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 1312.027936][ T30] audit: type=1400 audit(1751015512.895:2792): avc: denied { bind } for pid=21753 comm="syz.6.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1312.049614][T21761] syz.5.3682: attempt to access beyond end of device [ 1312.049614][T21761] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1312.069859][T21761] syz.5.3682: attempt to access beyond end of device [ 1312.069859][T21761] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1312.080191][T21578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1312.085546][T21761] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1312.115445][T21761] syz.5.3682: attempt to access beyond end of device [ 1312.115445][T21761] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1312.117995][T21578] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.132451][ T30] audit: type=1326 audit(1751015513.005:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21754 comm="syz.5.3682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6883b8e929 code=0x0 [ 1312.159201][T21761] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1312.171026][T19306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.178126][T19306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.189683][T21761] syz.5.3682: attempt to access beyond end of device [ 1312.189683][T21761] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1312.191914][T19306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.204621][T21761] syz.5.3682: attempt to access beyond end of device [ 1312.204621][T21761] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1312.209549][T19306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1312.211873][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 1312.241487][T21761] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1312.246209][ T10] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1312.265377][ T10] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1312.283714][T21761] syz.5.3682: attempt to access beyond end of device [ 1312.283714][T21761] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1312.299104][ T10] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 1312.308282][T21761] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1312.308531][T21766] af_packet: tpacket_rcv: packet too big, clamped from 52 to 0. macoff=72 [ 1312.326986][T21761] syz.5.3682: attempt to access beyond end of device [ 1312.326986][T21761] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1312.340307][T21761] syz.5.3682: attempt to access beyond end of device [ 1312.340307][T21761] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1312.360847][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.377978][T21761] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1312.390516][T21761] syz.5.3682: attempt to access beyond end of device [ 1312.390516][T21761] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1312.404268][T21761] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1312.419671][T21761] syz.5.3682: attempt to access beyond end of device [ 1312.419671][T21761] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1312.434076][T21761] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1312.446911][T21761] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1312.456740][T21761] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1312.571639][ T10] usb 9-1: Product: syz [ 1312.647770][ T10] usb 9-1: Manufacturer: 뜂ৄ尶퓢窪DŽ罁陘 [ 1312.798143][ T10] usb 9-1: SerialNumber: syz [ 1312.913453][T21749] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1313.015261][ T30] audit: type=1400 audit(1751015513.875:2794): avc: denied { listen } for pid=21772 comm="syz.9.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1313.221308][ T30] audit: type=1400 audit(1751015514.035:2795): avc: denied { read } for pid=21767 comm="syz.6.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1313.329511][T21578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.902801][T16439] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 1314.036571][T21578] veth0_vlan: entered promiscuous mode [ 1314.161314][T16439] usb 10-1: not running at top speed; connect to a high speed hub [ 1314.170368][T16439] usb 10-1: config 95 has an invalid interface number: 1 but max is 0 [ 1314.178535][T16439] usb 10-1: config 95 has no interface number 0 [ 1314.190078][T16439] usb 10-1: config 95 interface 1 has no altsetting 0 [ 1314.211616][T21578] veth1_vlan: entered promiscuous mode [ 1314.826184][T16439] usb 10-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1314.854488][ T10] usbhid 9-1:1.0: can't add hid device: -71 [ 1314.870541][ T10] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1314.888991][T16439] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.909702][T16439] usb 10-1: Manufacturer: ぐ [ 1314.916409][T21578] veth0_macvtap: entered promiscuous mode [ 1314.978250][ T10] usb 9-1: USB disconnect, device number 28 [ 1314.991169][T16439] usb 10-1: SerialNumber: syz [ 1315.081287][T21578] veth1_macvtap: entered promiscuous mode [ 1315.126123][T21578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.160607][T21578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1315.203460][T21578] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.240084][T21578] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.248792][T21578] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.318669][T21578] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.372283][ T10] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1315.446803][T16439] usb 10-1: USB disconnect, device number 25 [ 1315.765383][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1315.784571][T21801] vlan2: entered allmulticast mode [ 1315.831047][T21801] veth1: entered allmulticast mode [ 1315.838378][T12649] udevd[12649]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1315.860917][ T10] usb 9-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1316.009822][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.177452][T19306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.186162][ T10] usb 9-1: config 0 descriptor?? [ 1316.201422][T19306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.370144][T19302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.381008][T19302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.388373][ T30] audit: type=1400 audit(1751015517.255:2796): avc: denied { bind } for pid=21804 comm="syz.5.3692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1316.572237][T21812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3693'. [ 1316.623799][ T10] aquacomputer_d5next 0003:0C70:F0BD.0031: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.8-1/input0 [ 1316.843042][T21812] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3693'. [ 1316.930456][ T10] usb 9-1: USB disconnect, device number 29 [ 1317.150426][T19305] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.185431][T21818] fido_id[21818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1317.311495][T21825] bio_check_eod: 2 callbacks suppressed [ 1317.311511][T21825] syz.5.3697: attempt to access beyond end of device [ 1317.311511][T21825] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1317.337828][T21825] syz.5.3697: attempt to access beyond end of device [ 1317.337828][T21825] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1317.351951][T20812] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1317.364999][T21825] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1317.375185][T21825] syz.5.3697: attempt to access beyond end of device [ 1317.375185][T21825] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1317.393261][ T30] audit: type=1326 audit(1751015518.265:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21824 comm="syz.5.3697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6883b8e929 code=0x0 [ 1317.416935][T21825] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1317.433789][T21825] syz.5.3697: attempt to access beyond end of device [ 1317.433789][T21825] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1317.453104][T21825] syz.5.3697: attempt to access beyond end of device [ 1317.453104][T21825] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1317.494870][T21825] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1317.511044][T20812] usb 7-1: Using ep0 maxpacket: 16 [ 1317.518184][T21825] syz.5.3697: attempt to access beyond end of device [ 1317.518184][T21825] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1317.518503][T20812] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.557257][T20812] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.618515][T21829] 9pnet_fd: Insufficient options for proto=fd [ 1317.631351][T20812] usb 7-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1317.642032][T20812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.929630][T21825] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1317.965323][T19305] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.001569][T20812] usb 7-1: config 0 descriptor?? [ 1318.002085][T21825] syz.5.3697: attempt to access beyond end of device [ 1318.002085][T21825] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1318.033693][T21825] syz.5.3697: attempt to access beyond end of device [ 1318.033693][T21825] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1318.049202][T21825] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1318.077907][T21825] syz.5.3697: attempt to access beyond end of device [ 1318.077907][T21825] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1318.091156][T21825] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1318.101145][T21825] syz.5.3697: attempt to access beyond end of device [ 1318.101145][T21825] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1318.114292][T21825] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1318.386337][T21825] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1318.405979][T21825] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1318.932618][ T30] audit: type=1400 audit(1751015519.415:2798): avc: denied { setopt } for pid=21816 comm="syz.6.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1318.974719][T19305] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.007381][T19496] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1319.020772][T19496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1319.029769][T19496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1319.038101][T19496] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1319.053653][T19496] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1319.256447][T20812] usbhid 7-1:0.0: can't add hid device: -71 [ 1319.259099][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3700'. [ 1319.270652][ T5881] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1319.305200][T20812] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1319.490205][T20812] usb 7-1: USB disconnect, device number 37 [ 1319.542401][T19305] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.602229][T21835] lo speed is unknown, defaulting to 1000 [ 1319.610013][ T5881] usb 10-1: Using ep0 maxpacket: 16 [ 1319.628193][ T5881] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.638513][ T5881] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1319.676101][ T5881] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1319.688424][ T5881] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1319.696757][ T5881] usb 10-1: Product: syz [ 1319.704474][ T5881] usb 10-1: Manufacturer: syz [ 1319.709329][ T5881] usb 10-1: SerialNumber: syz [ 1319.735798][ T5881] usb 10-1: config 0 descriptor?? [ 1319.979645][T16439] usb 10-1: USB disconnect, device number 26 [ 1320.137704][T21835] chnl_net:caif_netlink_parms(): no params data found [ 1320.188875][T19305] bridge_slave_1: left allmulticast mode [ 1320.202772][T19305] bridge_slave_1: left promiscuous mode [ 1320.448294][T21861] 9pnet_fd: Insufficient options for proto=fd [ 1320.464556][T21856] 9pnet_fd: Insufficient options for proto=fd [ 1320.474420][ T976] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1320.482209][T19305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.492327][T19305] bridge_slave_0: left allmulticast mode [ 1320.497986][T19305] bridge_slave_0: left promiscuous mode [ 1320.504206][T19305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.644450][ T976] usb 6-1: Using ep0 maxpacket: 8 [ 1320.652602][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1320.668454][ T976] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1320.679463][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.691343][ T976] usb 6-1: config 0 descriptor?? [ 1321.059154][T21867] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3708'. [ 1321.110602][T17212] Bluetooth: hci1: command tx timeout [ 1321.122944][T19305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1321.128746][ T976] holtek 0003:1241:5015.0032: unknown main item tag 0x0 [ 1321.184918][T19305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1321.193474][ T976] holtek 0003:1241:5015.0032: unknown main item tag 0x0 [ 1321.193498][ T976] holtek 0003:1241:5015.0032: unknown main item tag 0x0 [ 1321.193518][ T976] holtek 0003:1241:5015.0032: unknown main item tag 0x0 [ 1321.193539][ T976] holtek 0003:1241:5015.0032: unknown main item tag 0x0 [ 1321.200332][ T976] holtek 0003:1241:5015.0032: hidraw0: USB HID vff.ff Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0 [ 1321.249420][T19305] bond0 (unregistering): Released all slaves [ 1321.261207][ T976] holtek 0003:1241:5015.0032: no inputs found [ 1321.490714][T21848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.556223][T21848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.719148][T20812] usb 6-1: USB disconnect, device number 21 [ 1321.873929][T21835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.882694][T21835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.889850][T21835] bridge_slave_0: entered allmulticast mode [ 1321.897892][ T30] audit: type=1400 audit(1751015522.775:2799): avc: denied { bind } for pid=21889 comm="syz.6.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1321.918188][T21835] bridge_slave_0: entered promiscuous mode [ 1322.009086][T18527] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1322.055701][T21835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.062968][T21835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.072686][T21835] bridge_slave_1: entered allmulticast mode [ 1322.079424][T21835] bridge_slave_1: entered promiscuous mode [ 1322.560345][T18527] usb 9-1: Using ep0 maxpacket: 32 [ 1322.566931][T21876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1322.578001][T18527] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1322.613869][T21835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.623407][T18527] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.636593][T21835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1322.641131][T18527] usb 9-1: config 0 descriptor?? [ 1322.714738][T19305] hsr_slave_0: left promiscuous mode [ 1322.737659][T19305] hsr_slave_1: left promiscuous mode [ 1322.751332][T19305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1322.765400][T19305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.791446][T19305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1322.802020][T19305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.838782][ T30] audit: type=1400 audit(1751015523.705:2800): avc: denied { write } for pid=21897 comm="syz.5.3715" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1322.876151][T21885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.877122][ T30] audit: type=1400 audit(1751015523.705:2801): avc: denied { wake_alarm } for pid=21897 comm="syz.5.3715" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1322.921393][T21885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.925392][T19305] veth1_macvtap: left promiscuous mode [ 1322.943875][T19305] veth0_macvtap: left promiscuous mode [ 1322.951689][T19305] veth1_vlan: left promiscuous mode [ 1322.957003][T19305] veth0_vlan: left promiscuous mode [ 1323.049858][T18527] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1323.058470][T18527] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1323.069004][T18527] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1323.078692][T18527] usb 9-1: media controller created [ 1323.097139][T18527] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1323.170390][T16439] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1323.190109][T17212] Bluetooth: hci1: command tx timeout [ 1323.712396][ T30] audit: type=1400 audit(1751015524.585:2802): avc: denied { lock } for pid=21908 comm="syz.5.3718" path="socket:[78126]" dev="sockfs" ino=78126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1323.741256][T21912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3718'. [ 1325.235091][T18527] az6027: usb out operation failed. (-110) [ 1325.281611][T17212] Bluetooth: hci1: command tx timeout [ 1325.333970][T18527] az6027: usb out operation failed. (-32) [ 1325.432939][T18527] stb0899_attach: Driver disabled by Kconfig [ 1325.487808][T18527] az6027: no front-end attached [ 1325.487808][T18527] [ 1325.535610][T18527] az6027: usb out operation failed. (-71) [ 1325.580154][T18527] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1325.616674][T18527] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input132 [ 1325.668098][T18527] dvb-usb: schedule remote query interval to 400 msecs. [ 1325.691443][T21923] fuse: Unknown parameter '`roup_id' [ 1325.702803][T21923] 9pnet_fd: Insufficient options for proto=fd [ 1325.716182][T18527] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1325.741333][T18527] usb 9-1: USB disconnect, device number 30 [ 1326.983202][T18527] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1327.087571][ T30] audit: type=1400 audit(1751015527.955:2803): avc: denied { mount } for pid=21936 comm="syz.6.3725" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1327.145500][T21939] netlink: 'syz.5.3724': attribute type 10 has an invalid length. [ 1327.163153][T21937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1327.163696][ T30] audit: type=1400 audit(1751015528.015:2805): avc: denied { listen } for pid=21934 comm="syz.5.3724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1327.232422][ T30] audit: type=1400 audit(1751015527.995:2804): avc: denied { search } for pid=21936 comm="syz.6.3725" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1327.254574][ T30] audit: type=1400 audit(1751015528.035:2806): avc: denied { search } for pid=21936 comm="syz.6.3725" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1327.278368][ T30] audit: type=1400 audit(1751015528.035:2807): avc: denied { search } for pid=21936 comm="syz.6.3725" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1327.300620][ T30] audit: type=1400 audit(1751015528.035:2808): avc: denied { search } for pid=21936 comm="syz.6.3725" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1327.322750][ T30] audit: type=1400 audit(1751015528.035:2809): avc: denied { search } for pid=21936 comm="syz.6.3725" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1327.344527][T18527] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 1327.352399][T17212] Bluetooth: hci1: command tx timeout [ 1327.426094][T21942] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3726'. [ 1327.482683][T19741] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 1327.501623][T18527] usb 9-1: not running at top speed; connect to a high speed hub [ 1327.514944][T18527] usb 9-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1327.526635][T18527] usb 9-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1327.542293][T18527] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1327.551507][T18527] usb 9-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.40 [ 1327.562334][T18527] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.570694][T18527] usb 9-1: Product: 、 [ 1327.575348][T18527] usb 9-1: Manufacturer: Ы [ 1327.576868][T19305] team0 (unregistering): Port device team_slave_1 removed [ 1327.583673][T18527] usb 9-1: SerialNumber: ﳿ [ 1327.624263][T21921] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1327.642846][T21921] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1327.663469][T19741] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.673926][T19741] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1327.690980][T19741] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1327.700254][T19305] team0 (unregistering): Port device team_slave_0 removed [ 1327.715430][T19741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1327.732287][T19741] usb 7-1: SerialNumber: syz [ 1327.963502][T16439] usb 7-1: USB disconnect, device number 38 [ 1328.099083][T21921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.130724][T21921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.159718][T18527] usbhid 9-1:1.0: can't add hid device: -71 [ 1328.168719][T18527] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1328.184067][T18527] usb 9-1: USB disconnect, device number 31 [ 1328.259178][T21939] team0: Port device team_slave_0 removed [ 1328.311362][T21835] team0: Port device team_slave_0 added [ 1328.342755][T21835] team0: Port device team_slave_1 added [ 1328.393099][T21835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.403590][T21835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.429519][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.449121][T21835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.463059][T21835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.470058][T21835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.495953][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.548339][T21835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.776587][T21835] hsr_slave_0: entered promiscuous mode [ 1328.788705][T21835] hsr_slave_1: entered promiscuous mode [ 1329.016178][T21958] afs: Unknown parameter 'dy' [ 1329.034399][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1329.034413][ T30] audit: type=1400 audit(1751015529.905:2811): avc: denied { watch_mount } for pid=21957 comm="syz.6.3733" path="/105/file0" dev="tmpfs" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1329.170039][ T5881] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1329.965077][T21969] tmpfs: Unknown parameter 'nR_Jcks' [ 1330.111308][ T5881] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1330.120097][ T5881] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.130349][ T5881] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1330.140232][ T5881] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.151242][ T5881] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.621562][ T5881] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1330.633336][ T5881] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1330.641641][ T5881] usb 9-1: Product: syz [ 1330.645857][ T5881] usb 9-1: Manufacturer: syz [ 1330.654655][ T5881] cdc_wdm 9-1:1.0: skipping garbage [ 1330.659921][ T5881] cdc_wdm 9-1:1.0: skipping garbage [ 1330.685159][ T5881] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1330.700331][ T5881] cdc_wdm 9-1:1.0: Unknown control protocol [ 1330.847844][T21835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1330.876494][T21835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1330.919861][T21835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1330.934097][T21835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1331.154388][T21989] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 1331.339549][T19741] usb 9-1: USB disconnect, device number 32 [ 1331.408285][T21835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.432331][T21835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1331.458226][T19306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.465302][T19306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1331.474829][T19306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.481902][T19306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1331.492092][T21993] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 1331.502172][T21993] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1331.841428][T22001] netlink: 'syz.6.3742': attribute type 10 has an invalid length. [ 1332.267696][T21835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.605913][T22014] lo speed is unknown, defaulting to 1000 [ 1332.767839][T21835] veth0_vlan: entered promiscuous mode [ 1332.785276][T21835] veth1_vlan: entered promiscuous mode [ 1332.815894][T21835] veth0_macvtap: entered promiscuous mode [ 1332.834296][T21835] veth1_macvtap: entered promiscuous mode [ 1332.852218][T21835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1332.876853][T21835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1332.888512][T21835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.898702][T21835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.908796][T21835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.918021][T21835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.930543][T19741] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1333.008442][T19306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.060057][T19306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.083740][T19294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.084752][ T30] audit: type=1326 audit(1751015533.955:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="syz.8.3745" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57ebb8e929 code=0x0 [ 1333.114606][T19294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.132363][T19741] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.143815][T19741] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1333.153073][ T30] audit: type=1400 audit(1751015534.005:2813): avc: denied { setopt } for pid=22012 comm="syz.8.3745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1333.174644][T19741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.184798][ T30] audit: type=1326 audit(1751015534.005:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="syz.8.3745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57ebb8e929 code=0x0 [ 1333.224908][T19741] usb 7-1: config 0 descriptor?? [ 1333.439878][T22017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.484891][T22017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.710580][T22017] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3746'. [ 1333.731286][T22041] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3754'. [ 1333.769844][T22041] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3754'. [ 1333.777080][T18527] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1333.778950][T22041] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3754'. [ 1333.796762][T22041] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3754'. [ 1334.038474][T22041] netlink: 'syz.9.3754': attribute type 3 has an invalid length. [ 1334.040821][T18527] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1334.067784][T18527] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.135507][T18527] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1334.208308][T18527] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.236626][T18527] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.273954][T18527] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1334.283298][T18527] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1334.300473][T18527] usb 9-1: Product: syz [ 1334.304655][T18527] usb 9-1: Manufacturer: syz [ 1334.333762][T18527] cdc_wdm 9-1:1.0: skipping garbage [ 1334.338970][T18527] cdc_wdm 9-1:1.0: skipping garbage [ 1334.361107][T19305] Bluetooth: hci1: Frame reassembly failed (-84) [ 1334.368972][T18527] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1334.378719][T18527] cdc_wdm 9-1:1.0: Unknown control protocol [ 1334.390657][ T43] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1334.540623][ T43] usb 10-1: Using ep0 maxpacket: 32 [ 1334.548366][ T43] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1334.558203][ T43] usb 10-1: config 128 has an invalid interface number: 127 but max is 3 [ 1334.567659][ T43] usb 10-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.579259][ T43] usb 10-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1334.590728][ T43] usb 10-1: config 128 has no interface number 0 [ 1334.597525][ T43] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1334.609546][ T43] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1334.621154][ T43] usb 10-1: config 128 interface 127 has no altsetting 0 [ 1334.643169][ T43] usb 10-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1334.654498][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.659007][T22047] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 1334.663240][ T43] usb 10-1: Product: syz [ 1334.679385][ T43] usb 10-1: Manufacturer: syz [ 1334.685187][ T43] usb 10-1: SerialNumber: syz [ 1335.078355][ T43] usb 10-1: USB disconnect, device number 27 [ 1335.109061][T12649] udevd[12649]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1335.179905][T18150] usb 9-1: USB disconnect, device number 33 [ 1335.198958][T19294] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.472961][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1335.485121][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1335.495274][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1335.506460][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1335.516389][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1335.553463][T22049] lo speed is unknown, defaulting to 1000 [ 1335.660115][T22049] chnl_net:caif_netlink_parms(): no params data found [ 1335.700005][T19741] usbhid 7-1:0.0: can't add hid device: -71 [ 1335.706005][T19741] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1335.757427][T19741] usb 7-1: USB disconnect, device number 39 [ 1336.354614][T22068] netlink: 'syz.8.3757': attribute type 10 has an invalid length. [ 1336.391148][T17212] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1336.832322][T19294] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.267293][T22049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.297088][T22049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.309362][T22049] bridge_slave_0: entered allmulticast mode [ 1337.320511][T22049] bridge_slave_0: entered promiscuous mode [ 1337.638267][T19496] Bluetooth: hci2: command tx timeout [ 1337.708034][T19294] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.851893][T22049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.866652][T22049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.876379][T22049] bridge_slave_1: entered allmulticast mode [ 1337.890256][T22049] bridge_slave_1: entered promiscuous mode [ 1338.285945][T22049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.329212][T19294] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.364923][T22049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.393189][T22049] team0: Port device team_slave_0 added [ 1338.402557][T22049] team0: Port device team_slave_1 added [ 1338.426314][T22049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.434234][T22049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1338.464451][T22049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1338.477091][T22049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1338.486716][T22049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.131967][T22049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.188088][T22099] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3767'. [ 1339.672511][T19496] Bluetooth: hci2: command tx timeout [ 1339.760125][ T30] audit: type=1400 audit(1751015540.545:2815): avc: denied { read } for pid=22100 comm="syz.8.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1340.102070][T22116] netlink: 'syz.5.3770': attribute type 10 has an invalid length. [ 1340.533389][T22049] hsr_slave_0: entered promiscuous mode [ 1340.583113][T22049] hsr_slave_1: entered promiscuous mode [ 1340.594972][T22049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1340.604578][T22049] Cannot create hsr debugfs directory [ 1340.994727][ T30] audit: type=1400 audit(1751015541.865:2816): avc: denied { mounton } for pid=22119 comm="syz.9.3772" path="/108/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1341.300921][ T5881] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1341.331691][T19294] bridge_slave_1: left allmulticast mode [ 1341.331713][T19294] bridge_slave_1: left promiscuous mode [ 1341.331849][T19294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.352246][T19294] bridge_slave_0: left allmulticast mode [ 1341.352267][T19294] bridge_slave_0: left promiscuous mode [ 1341.352422][T19294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.462460][ T5881] usb 7-1: Using ep0 maxpacket: 32 [ 1341.463926][ T5881] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1341.463952][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.465988][ T5881] usb 7-1: config 0 descriptor?? [ 1341.475567][ T5881] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1341.751610][T19496] Bluetooth: hci2: command tx timeout [ 1342.003983][T22140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.119109][ T5881] gspca_sunplus: reg_r err -32 [ 1342.124742][ T5881] sunplus 7-1:0.0: probe with driver sunplus failed with error -32 [ 1342.142816][ T5881] usb 7-1: USB disconnect, device number 40 [ 1342.196461][T22144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.320111][ T976] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1342.456862][T19294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1342.467152][T19294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1342.476886][T19294] bond0 (unregistering): Released all slaves [ 1342.484240][ T976] usb 9-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 1342.496707][ T976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.510216][ T976] ums-cypress 9-1:1.0: USB Mass Storage device detected [ 1343.357260][ T976] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1343.691224][ T976] usb 6-1: Using ep0 maxpacket: 32 [ 1343.698126][ T976] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1343.707405][ T976] usb 6-1: config 4 has an invalid interface number: 75 but max is 0 [ 1343.759321][ T5881] usb 9-1: USB disconnect, device number 34 [ 1343.761350][ T976] usb 6-1: config 4 has no interface number 0 [ 1343.810000][ T976] usb 6-1: config 4 interface 75 has no altsetting 0 [ 1343.831130][T19496] Bluetooth: hci2: command tx timeout [ 1343.850236][ T976] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=31.1c [ 1343.859283][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.908615][ T976] usb 6-1: Product: syz [ 1343.946540][ T976] usb 6-1: Manufacturer: syz [ 1343.972589][ T976] usb 6-1: SerialNumber: syz [ 1344.158791][T19294] hsr_slave_0: left promiscuous mode [ 1344.353669][T22164] netlink: 'syz.6.3783': attribute type 10 has an invalid length. [ 1344.638881][T19294] hsr_slave_1: left promiscuous mode [ 1344.651980][T19294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1344.659564][T19294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.754045][T19294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1344.784739][T19294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1344.940813][T19294] veth1_macvtap: left promiscuous mode [ 1344.952041][T19294] veth0_macvtap: left promiscuous mode [ 1344.964739][T19294] veth1_vlan: left promiscuous mode [ 1344.987503][T19294] veth0_vlan: left promiscuous mode [ 1345.410102][T16439] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1345.525617][T19294] team0 (unregistering): Port device team_slave_1 removed [ 1345.550165][T16439] usb 9-1: device descriptor read/64, error -71 [ 1345.572819][T19294] team0 (unregistering): Port device team_slave_0 removed [ 1345.820052][T16439] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1345.974429][T16439] usb 9-1: device descriptor read/64, error -71 [ 1346.103543][T16439] usb usb9-port1: attempt power cycle [ 1346.129772][ T30] audit: type=1400 audit(1751015546.995:2817): avc: denied { ioctl } for pid=22178 comm="syz.6.3788" path="socket:[81014]" dev="sockfs" ino=81014 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1346.146808][ T976] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1346.172813][ T976] gspca_m5602: Failed to find a sensor [ 1346.178427][ T976] ALi m5602 6-1:4.75: ALi m5602 webcam failed [ 1346.190145][T22182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.229555][ T976] usb 6-1: USB disconnect, device number 23 [ 1346.235968][T22182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.257473][T22185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.266991][T22182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.283052][T22182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.292090][T22185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.336249][T22182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.402850][T22182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.404545][T22185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.459992][T16439] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1346.465007][T22185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.472958][T22189] netlink: 'syz.5.3789': attribute type 10 has an invalid length. [ 1346.483370][T22189] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3789'. [ 1346.500251][ T10] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1346.525364][T16439] usb 9-1: device descriptor read/8, error -71 [ 1346.715898][T22189] dummy0: entered promiscuous mode [ 1346.733164][T22189] bridge0: port 3(dummy0) entered blocking state [ 1346.733848][T22189] bridge0: port 3(dummy0) entered disabled state [ 1346.734649][T22189] dummy0: entered allmulticast mode [ 1346.759779][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 1346.764517][T22189] bridge0: port 3(dummy0) entered blocking state [ 1346.765436][T22189] bridge0: port 3(dummy0) entered forwarding state [ 1346.820066][T16439] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1346.850926][T16439] usb 9-1: device descriptor read/8, error -71 [ 1346.889801][T22182] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1347.032575][T16439] usb usb9-port1: unable to enumerate USB device [ 1347.164558][T22200] 9pnet_fd: Insufficient options for proto=fd [ 1347.512936][ T10] usb 10-1: device descriptor read/all, error -71 [ 1347.599294][T22049] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1347.635229][T22049] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1347.676364][T22049] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1347.694047][T22049] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1349.046306][T22227] netlink: 'syz.8.3798': attribute type 10 has an invalid length. [ 1349.422569][T22049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1349.459087][T22225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3796'. [ 1349.463031][T22049] 8021q: adding VLAN 0 to HW filter on device team0 [ 1349.482605][T22225] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3796'. [ 1349.499181][T19299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.506252][T19299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1349.710659][T22049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1349.731098][T22049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1349.749711][T19299] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.756875][T19299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1350.110912][ T976] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1350.270259][ T976] usb 10-1: Using ep0 maxpacket: 8 [ 1350.278725][ T976] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1350.288221][ T976] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.309218][ T976] usb 10-1: Product: syz [ 1350.326077][ T976] usb 10-1: Manufacturer: syz [ 1350.339844][ T976] usb 10-1: SerialNumber: syz [ 1350.350392][ T5926] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 1350.378107][ T976] usb 10-1: config 0 descriptor?? [ 1350.393737][ T976] gspca_main: se401-2.14.0 probing 047d:5003 [ 1350.404385][ T30] audit: type=1400 audit(1751015551.275:2818): avc: denied { ioctl } for pid=22237 comm="syz.6.3801" path="socket:[80546]" dev="sockfs" ino=80546 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1350.412385][T22238] binder: 22237:22238 ioctl c0306201 200000000240 returned -14 [ 1350.522213][ T5926] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1350.540652][ T5926] usb 9-1: not running at top speed; connect to a high speed hub [ 1350.574008][T22049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1350.585865][ T5926] usb 9-1: config 253 has an invalid interface number: 140 but max is 0 [ 1350.600732][ T5926] usb 9-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 1350.611702][ T5926] usb 9-1: config 253 has no interface number 0 [ 1350.635852][ T5926] usb 9-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1350.704435][ T5926] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 1350.720071][ T5926] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.728073][ T5926] usb 9-1: Product: syz [ 1350.752165][ T5926] usb 9-1: Manufacturer: syz [ 1350.758007][ T5926] usb 9-1: SerialNumber: syz [ 1350.800898][ T976] gspca_se401: Frame size: 2304x0 bayer [ 1350.806523][ T976] gspca_se401: Frame size: 0x0 1/16th janggu [ 1350.812794][ T976] gspca_se401: Frame size: 0x0 1/16th janggu [ 1350.827926][ T976] gspca_se401: Frame size: 0x0 1/16th janggu [ 1350.840176][ T976] gspca_se401: Frame size: 0x0 1/16th janggu [ 1350.867151][ T976] gspca_se401: Frame size: 0x0 1/16th janggu [ 1350.889996][ T976] gspca_se401: Frame size: 0x0 1/16th janggu [ 1350.910541][ T976] gspca_se401: Frame size: 0x0 1/16th janggu [ 1351.335638][T22251] binder: 22229:22251 ioctl c0306201 0 returned -14 [ 1351.349151][T22251] binder: BINDER_SET_CONTEXT_MGR already set [ 1351.356775][T22251] binder: 22229:22251 ioctl 4018620d 2000000001c0 returned -16 [ 1351.370761][T22231] delete_channel: no stack [ 1351.444040][ T5926] usbtest 9-1:253.140: couldn't get endpoints, -22 [ 1351.490235][ T5926] usbtest 9-1:253.140: probe with driver usbtest failed with error -22 [ 1351.610165][ T5926] usb 9-1: USB disconnect, device number 39 [ 1351.620690][ T30] audit: type=1400 audit(1751015552.435:2819): avc: denied { setattr } for pid=22254 comm="syz.5.3804" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1351.888341][T22049] veth0_vlan: entered promiscuous mode [ 1351.952335][T22049] veth1_vlan: entered promiscuous mode [ 1352.161278][ T976] input: se401 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input134 [ 1352.354187][T22049] veth0_macvtap: entered promiscuous mode [ 1352.371552][T22263] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3807'. [ 1352.395902][T22049] veth1_macvtap: entered promiscuous mode [ 1352.569319][T22049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1353.043773][T22251] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1353.064596][T22049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1353.097023][ T976] usb 10-1: USB disconnect, device number 30 [ 1353.105286][T22049] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.114354][T22049] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.123175][T22049] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.132172][T22049] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.553622][T22276] "syz.5.3811" (22276) uses obsolete ecb(arc4) skcipher [ 1353.617860][T22281] netlink: 'syz.8.3809': attribute type 10 has an invalid length. [ 1354.309242][T19294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.311156][T19299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.333304][T19299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.352770][T19294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.537032][ T30] audit: type=1400 audit(1751015555.399:2820): avc: denied { create } for pid=22291 comm="syz.8.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1354.557800][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.612635][ T5926] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1354.650323][ T30] audit: type=1400 audit(1751015555.409:2821): avc: denied { write } for pid=22291 comm="syz.8.3815" path="socket:[80831]" dev="sockfs" ino=80831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1354.674897][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.996995][ T30] audit: type=1400 audit(1751015555.869:2822): avc: denied { mounton } for pid=22298 comm="syz.8.3819" path="/102/file0" dev="gadgetfs" ino=68260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 1355.030653][T22299] overlay: Bad value for 'xino' [ 1355.155274][ T5926] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1355.191311][ T5926] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.409723][ T5926] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1355.411706][T19294] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.510552][ T5926] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.623229][ T5926] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.663914][ T5926] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1355.673178][ T5926] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1355.705433][ T5926] usb 10-1: Product: syz [ 1355.723819][ T5926] usb 10-1: Manufacturer: syz [ 1355.764649][ T5926] cdc_wdm 10-1:1.0: skipping garbage [ 1355.802473][T19294] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.849132][ T5926] cdc_wdm 10-1:1.0: skipping garbage [ 1355.875489][ T5926] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1355.894256][ T5926] cdc_wdm 10-1:1.0: Unknown control protocol [ 1356.262624][T19294] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.372805][T22312] cdc_wdm 10-1:1.0: Error submitting int urb - -90 [ 1356.520986][T19294] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.643039][ T43] usb 10-1: USB disconnect, device number 31 [ 1356.838347][ T30] audit: type=1400 audit(1751015557.709:2823): avc: denied { connect } for pid=22315 comm="syz.6.3821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1357.066793][T19294] bridge_slave_1: left allmulticast mode [ 1357.080516][T19294] bridge_slave_1: left promiscuous mode [ 1357.094505][T19294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.117870][T19294] bridge_slave_0: left allmulticast mode [ 1357.131201][ T30] audit: type=1400 audit(1751015557.969:2824): avc: denied { unmount } for pid=19489 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1357.144287][T19294] bridge_slave_0: left promiscuous mode [ 1357.179100][T19294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.431905][T17212] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1357.442696][T17212] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1357.451790][T17212] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1357.459424][T17212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1357.468926][T17212] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1357.476362][ T5881] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1357.636534][ T5881] usb 9-1: Using ep0 maxpacket: 16 [ 1357.657189][ T5881] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1357.669009][ T5881] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1357.683808][ T5881] usb 9-1: Product: syz [ 1357.688205][ T5881] usb 9-1: Manufacturer: syz [ 1357.708309][ T5881] usb 9-1: SerialNumber: syz [ 1357.741043][ T5881] usb 9-1: config 0 descriptor?? [ 1358.060230][T22332] netlink: 'syz.6.3824': attribute type 10 has an invalid length. [ 1358.428266][ T976] usb 9-1: USB disconnect, device number 40 [ 1358.817315][T19294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1358.827696][T19294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1358.837714][T19294] bond0 (unregistering): Released all slaves [ 1359.013861][T19496] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 1359.213077][T22323] lo speed is unknown, defaulting to 1000 [ 1359.229240][ T30] audit: type=1400 audit(1751015560.099:2825): avc: denied { getattr } for pid=22348 comm="syz.6.3831" path="socket:[82087]" dev="sockfs" ino=82087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1359.410642][ T976] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1359.418307][T19294] hsr_slave_0: left promiscuous mode [ 1359.424984][T19294] hsr_slave_1: left promiscuous mode [ 1359.446232][T19294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.460752][T19294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.472960][T19294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.483759][T19294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.515899][T19496] Bluetooth: hci1: command tx timeout [ 1359.560401][ T5926] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1359.574692][ T976] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1359.597428][T19294] veth1_macvtap: left promiscuous mode [ 1359.602991][ T976] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.613534][T19294] veth0_macvtap: left promiscuous mode [ 1359.619142][T19294] veth1_vlan: left promiscuous mode [ 1359.624402][ T976] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1359.633430][T19294] veth0_vlan: left promiscuous mode [ 1359.638900][ T976] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.649809][ T976] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.661685][ T976] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1359.670898][ T976] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1359.678886][ T976] usb 9-1: Product: syz [ 1359.683106][ T976] usb 9-1: Manufacturer: syz [ 1359.691634][ T976] cdc_wdm 9-1:1.0: skipping garbage [ 1359.696851][ T976] cdc_wdm 9-1:1.0: skipping garbage [ 1359.703301][ T976] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1359.709496][ T976] cdc_wdm 9-1:1.0: Unknown control protocol [ 1359.740278][ T5926] usb 10-1: Using ep0 maxpacket: 32 [ 1359.747115][ T5926] usb 10-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.758755][ T5926] usb 10-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.769150][ T5926] usb 10-1: config 0 interface 0 altsetting 74 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1359.782222][ T5926] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1359.788968][ T5926] usb 10-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1359.798175][ T5926] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.816635][ T5926] usb 10-1: config 0 descriptor?? [ 1359.821745][ T43] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1360.001367][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1360.094720][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1360.164208][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1360.189507][ T43] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1360.200011][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.208007][ T43] usb 6-1: Product: syz [ 1360.218966][T22359] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 1360.219101][ T43] usb 6-1: Manufacturer: syz [ 1360.257598][ T43] usb 6-1: SerialNumber: syz [ 1360.266849][ T43] usb 6-1: config 0 descriptor?? [ 1360.311383][ T43] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1360.359259][ T43] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1360.359392][ T5926] petalynx 0003:18B1:0037.0033: unknown main item tag 0x0 [ 1360.394395][ T5926] petalynx 0003:18B1:0037.0033: unknown main item tag 0x0 [ 1360.410789][ T5926] petalynx 0003:18B1:0037.0033: item fetching failed at offset 2/3 [ 1360.429208][ T5926] petalynx 0003:18B1:0037.0033: parse failed [ 1360.442556][ T5926] petalynx 0003:18B1:0037.0033: probe with driver petalynx failed with error -22 [ 1360.556373][ T5926] usb 10-1: USB disconnect, device number 32 [ 1360.608892][T19294] team0 (unregistering): Port device team_slave_1 removed [ 1360.653108][T19294] team0 (unregistering): Port device team_slave_0 removed [ 1360.905226][ T43] em28xx 6-1:0.0: unknown em28xx chip ID (97) [ 1361.039473][T18150] usb 9-1: USB disconnect, device number 41 [ 1361.132453][T22356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.149593][T22356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.286134][ T43] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1361.471976][ T43] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1361.478951][ T43] em28xx 6-1:0.0: No AC97 audio processor [ 1361.490852][T22323] chnl_net:caif_netlink_parms(): no params data found [ 1361.545451][ T43] usb 6-1: USB disconnect, device number 24 [ 1361.570645][ T43] em28xx 6-1:0.0: Disconnecting em28xx [ 1361.601759][T19496] Bluetooth: hci1: command tx timeout [ 1361.604318][ T43] em28xx 6-1:0.0: Freeing device [ 1361.617855][T18150] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1361.807608][T18150] usb 10-1: Using ep0 maxpacket: 8 [ 1361.831513][T18150] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.847129][T18150] usb 10-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1362.277271][T18150] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.295057][T18150] usb 10-1: Product: syz [ 1362.303342][T18150] usb 10-1: Manufacturer: syz [ 1362.350596][T18150] usb 10-1: SerialNumber: syz [ 1362.374215][T18150] ch9200 10-1:2.0: probe with driver ch9200 failed with error -22 [ 1362.442187][T22323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.459535][T22323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.587473][T22323] bridge_slave_0: entered allmulticast mode [ 1362.653474][T22323] bridge_slave_0: entered promiscuous mode [ 1362.680897][T22323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.792166][T22384] netlink: 'syz.5.3837': attribute type 10 has an invalid length. [ 1362.878435][T22323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.886234][T22323] bridge_slave_1: entered allmulticast mode [ 1362.893974][T22323] bridge_slave_1: entered promiscuous mode [ 1363.076692][T22323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1363.175936][T22323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.525481][T18150] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1363.643698][T22397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10742 sclass=netlink_route_socket pid=22397 comm=syz.5.3841 [ 1363.670204][T19496] Bluetooth: hci1: command tx timeout [ 1364.060609][T22323] team0: Port device team_slave_0 added [ 1364.069053][T22323] team0: Port device team_slave_1 added [ 1364.092605][T18150] usb 9-1: device descriptor read/64, error -71 [ 1364.118197][T22323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1364.125606][T22323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1364.174088][T18527] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1364.203177][T22323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1364.231665][T22323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1364.238723][T22323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1364.265489][T22323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1364.330576][T18150] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1364.348715][T22323] hsr_slave_0: entered promiscuous mode [ 1364.356586][T22323] hsr_slave_1: entered promiscuous mode [ 1364.371383][T18527] usb 6-1: Using ep0 maxpacket: 8 [ 1364.386351][T18527] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1364.405260][T18527] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.426617][T18527] usb 6-1: Product: syz [ 1364.435553][T18527] usb 6-1: Manufacturer: syz [ 1364.445393][T18527] usb 6-1: SerialNumber: syz [ 1364.460593][T18150] usb 9-1: device descriptor read/64, error -71 [ 1364.463767][T18527] usb 6-1: config 0 descriptor?? [ 1364.504427][T18527] gspca_main: se401-2.14.0 probing 047d:5003 [ 1364.571046][T18150] usb usb9-port1: attempt power cycle [ 1364.910114][T18150] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1365.091300][T18150] usb 9-1: device descriptor read/8, error -71 [ 1365.168042][ T43] usb 10-1: USB disconnect, device number 33 [ 1365.200502][T22323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1365.209358][T22323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1365.219280][T22323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1365.231115][T22323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1365.294725][T22323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.312862][T22323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.324450][T19301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.330961][T18150] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1365.331566][T19301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.351420][T18150] usb 9-1: device descriptor read/8, error -71 [ 1365.359939][T19306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.367094][T19306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.468750][T18150] usb usb9-port1: unable to enumerate USB device [ 1365.544839][T22323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.689565][ T30] audit: type=1326 audit(1751015566.559:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22418 comm="syz.6.3844" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbce578e929 code=0x0 [ 1365.724932][T18527] usb 6-1: reset high-speed USB device number 25 using dummy_hcd [ 1365.754069][T19496] Bluetooth: hci1: command tx timeout [ 1365.785972][T22421] bridge_slave_0: left allmulticast mode [ 1365.823464][T22421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.867604][T22421] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1365.890429][T18527] usb 6-1: device descriptor read/64, error -32 [ 1365.972076][T22323] veth0_vlan: entered promiscuous mode [ 1365.986246][T22323] veth1_vlan: entered promiscuous mode [ 1365.993628][T22424] lo speed is unknown, defaulting to 1000 [ 1366.003809][T22424] lo speed is unknown, defaulting to 1000 [ 1366.022220][T22424] lo speed is unknown, defaulting to 1000 [ 1366.031346][T22323] veth0_macvtap: entered promiscuous mode [ 1366.041306][T22323] veth1_macvtap: entered promiscuous mode [ 1366.069604][T22323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1366.092558][T22323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1366.109248][T22323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.126762][T22323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.136568][T22323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.146058][T22323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.150086][T18527] usb 6-1: reset high-speed USB device number 25 using dummy_hcd [ 1366.278637][ T10] lo speed is unknown, defaulting to 1000 [ 1366.285337][T19306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.293246][T22424] infiniband sz1: set active [ 1366.293277][T22424] infiniband sz1: added lo [ 1366.302481][T19306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.310596][T18527] usb 6-1: device descriptor read/64, error -32 [ 1366.346863][T22424] RDS/IB: sz1: added [ 1366.351025][T22424] smc: adding ib device sz1 with port count 1 [ 1366.357281][T22424] smc: ib device sz1 port 1 has pnetid [ 1366.367595][ T10] lo speed is unknown, defaulting to 1000 [ 1366.572380][T22424] lo speed is unknown, defaulting to 1000 [ 1366.706042][T19299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.716664][T19299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.826906][ T30] audit: type=1400 audit(1751015567.599:2827): avc: denied { mount } for pid=22427 comm="syz.8.3846" name="/" dev="rpc_pipefs" ino=82444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1367.290823][ T30] audit: type=1400 audit(1751015568.169:2828): avc: denied { unmount } for pid=19489 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1367.326061][T18527] gspca_se401: read req failed req 0x06 error -19 [ 1367.354753][T18527] usb 6-1: USB disconnect, device number 25 [ 1367.435992][T22439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.468905][T22439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.488638][T22439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.501330][T22439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.510051][ T976] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1367.529579][T22424] lo speed is unknown, defaulting to 1000 [ 1367.820665][ T976] usb 7-1: Using ep0 maxpacket: 16 [ 1367.880673][T18150] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1367.883778][ T976] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1368.000446][ T976] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1368.012658][ T976] usb 7-1: Product: syz [ 1368.017296][ T976] usb 7-1: Manufacturer: syz [ 1368.022171][ T976] usb 7-1: SerialNumber: syz [ 1368.033802][ T976] usb 7-1: config 0 descriptor?? [ 1368.046478][T18150] usb 6-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 1368.056778][T18150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.086081][T18150] ums-cypress 6-1:1.0: USB Mass Storage device detected [ 1368.117226][T22424] lo speed is unknown, defaulting to 1000 [ 1368.240150][T16439] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 1368.252752][T22424] lo speed is unknown, defaulting to 1000 [ 1368.268429][T18150] usb 7-1: USB disconnect, device number 41 [ 1368.357512][T22452] FAULT_INJECTION: forcing a failure. [ 1368.357512][T22452] name failslab, interval 1, probability 0, space 0, times 0 [ 1368.370879][T22452] CPU: 0 UID: 0 PID: 22452 Comm: syz.5.3852 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 1368.370904][T22452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1368.370915][T22452] Call Trace: [ 1368.370921][T22452] [ 1368.370928][T22452] dump_stack_lvl+0x16c/0x1f0 [ 1368.370958][T22452] should_fail_ex+0x512/0x640 [ 1368.370980][T22452] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1368.371003][T22452] should_failslab+0xc2/0x120 [ 1368.371029][T22452] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1368.371049][T22452] ? snd_seq_port_connect+0x61/0x550 [ 1368.371080][T22452] snd_seq_port_connect+0x61/0x550 [ 1368.371105][T22452] ? check_subscription_permission.isra.0+0xf5/0x240 [ 1368.371135][T22452] snd_seq_ioctl_subscribe_port+0x211/0x450 [ 1368.371166][T22452] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 1368.371198][T22452] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 1368.371224][T22452] ? snd_seq_kernel_client_ctl+0xd2/0x1c0 [ 1368.371255][T22452] snd_seq_kernel_client_ctl+0x10a/0x1c0 [ 1368.371291][T22452] snd_seq_oss_midi_open+0x442/0x660 [ 1368.371315][T22452] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 1368.371351][T22452] snd_seq_oss_midi_open_all+0x91/0xe0 [ 1368.371373][T22452] snd_seq_oss_open+0x810/0xa20 [ 1368.371404][T22452] odev_open+0x6f/0x90 [ 1368.371425][T22452] ? __pfx_odev_open+0x10/0x10 [ 1368.371447][T22452] soundcore_open+0x40c/0x580 [ 1368.371469][T22452] ? __pfx_soundcore_open+0x10/0x10 [ 1368.371488][T22452] chrdev_open+0x234/0x6a0 [ 1368.371509][T22452] ? __pfx_chrdev_open+0x10/0x10 [ 1368.371528][T22452] ? file_set_fsnotify_mode_from_watchers+0x126/0x640 [ 1368.371550][T22452] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1368.371573][T22452] do_dentry_open+0x744/0x1c10 [ 1368.371592][T22452] ? __pfx_chrdev_open+0x10/0x10 [ 1368.371616][T22452] vfs_open+0x82/0x3f0 [ 1368.371641][T22452] path_openat+0x1de4/0x2cb0 [ 1368.371667][T22452] ? __pfx_path_openat+0x10/0x10 [ 1368.371688][T22452] ? __lock_acquire+0xb8a/0x1c90 [ 1368.371713][T22452] do_filp_open+0x20b/0x470 [ 1368.371732][T22452] ? __pfx_do_filp_open+0x10/0x10 [ 1368.371767][T22452] ? alloc_fd+0x471/0x7d0 [ 1368.371791][T22452] do_sys_openat2+0x11b/0x1d0 [ 1368.371804][T22452] ? __pfx_do_sys_openat2+0x10/0x10 [ 1368.371820][T22452] ? __fget_files+0x20e/0x3c0 [ 1368.371843][T22452] __x64_sys_openat+0x174/0x210 [ 1368.371857][T22452] ? __pfx___x64_sys_openat+0x10/0x10 [ 1368.371870][T22452] ? ksys_write+0x1ac/0x250 [ 1368.371895][T22452] do_syscall_64+0xcd/0x4c0 [ 1368.371918][T22452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.371932][T22452] RIP: 0033:0x7f6883b8e929 [ 1368.371945][T22452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1368.371959][T22452] RSP: 002b:00007f68819d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1368.371972][T22452] RAX: ffffffffffffffda RBX: 00007f6883db6080 RCX: 00007f6883b8e929 [ 1368.371981][T22452] RDX: 0000000000000800 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1368.371990][T22452] RBP: 00007f68819d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.371999][T22452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1368.372007][T22452] R13: 0000000000000000 R14: 00007f6883db6080 R15: 00007ffc5078c6d8 [ 1368.372026][T22452] [ 1368.920002][T16439] usb 9-1: not running at top speed; connect to a high speed hub [ 1368.962969][T16439] usb 9-1: config 95 has an invalid interface number: 1 but max is 0 [ 1368.971133][T16439] usb 9-1: config 95 has no interface number 0 [ 1368.977333][T16439] usb 9-1: config 95 interface 1 has no altsetting 0 [ 1368.988582][T16439] usb 9-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1368.997703][T16439] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.005735][T16439] usb 9-1: Product: ꂊ摔ᗗ쿡⋷⺳䯬䨰췍阶ተⵕ龽⁅桰城燇껹╛館￨餱儉뺇矁ቒ돊䝡䧸긿巌謻퓝䢶懔ၝ军崥욊㟞㝚⣆ﴽ搯䌵扏껀⯊玽ᶱꗥᥦ圤䰴篈ꉛ模䧘톄 [ 1369.022680][T22424] lo speed is unknown, defaulting to 1000 [ 1369.026328][T16439] usb 9-1: Manufacturer: ぐ [ 1369.036809][T16439] usb 9-1: SerialNumber: syz [ 1369.087785][ T976] usb 6-1: USB disconnect, device number 26 [ 1369.348870][T19294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.375026][T19294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.398563][T16439] usb 9-1: USB disconnect, device number 46 [ 1369.433094][T18150] ------------[ cut here ]------------ [ 1369.439105][T18150] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1369.449669][T18150] WARNING: CPU: 1 PID: 18150 at net/mac80211/rate.c:398 __rate_control_send_low+0x661/0x780 [ 1369.459778][T18150] Modules linked in: [ 1369.464262][T18150] CPU: 1 UID: 0 PID: 18150 Comm: kworker/1:4 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 1369.476445][T18150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1369.486550][T18150] Workqueue: mld mld_ifc_work [ 1369.491265][T18150] RIP: 0010:__rate_control_send_low+0x661/0x780 [ 1369.497519][T18150] Code: a4 a0 d4 00 00 00 e8 ce 3e c5 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 a0 a2 06 8d e8 f0 fe 83 f6 90 <0f> 0b 90 90 e9 26 fd ff ff 48 8b 3c 24 e8 6d 1c 2c f7 e9 fb fc ff [ 1369.517158][T18150] RSP: 0018:ffffc9000539ea48 EFLAGS: 00010282 [ 1369.523266][T18150] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae248 [ 1369.531293][T18150] RDX: ffff88807c89c880 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 1369.539268][T18150] RBP: ffff888058ed2ca8 R08: 0000000000000001 R09: 0000000000000000 [ 1369.547303][T18150] R10: 0000000000000000 R11: 000000000012e5d8 R12: 00000000ffffffff [ 1369.555304][T18150] R13: 0000000000000000 R14: 000000000000000c R15: ffff888058ed2cb0 [ 1369.563313][T18150] FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 1369.572266][T18150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1369.578856][T18150] CR2: 00007f09418e56c0 CR3: 00000000661b1000 CR4: 00000000003526f0 [ 1369.586861][T18150] Call Trace: [ 1369.590161][T18150] [ 1369.593098][T18150] rate_control_send_low+0x29a/0x820 [ 1369.598401][T18150] rate_control_get_rate+0x1be/0x5e0 [ 1369.603733][T18150] ieee80211_tx_h_rate_ctrl+0xad3/0x1a90 [ 1369.609391][T18150] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1369.615501][T18150] invoke_tx_handlers_late+0x119a/0x27a0 [ 1369.618532][T19496] Bluetooth: hci8: unexpected event for opcode 0x0413 [ 1369.621186][T18150] ? ieee80211_tx_h_select_key+0x279/0x1a50 [ 1369.621280][T18150] ieee80211_tx_dequeue+0x3064/0x43c0 [ 1369.639273][T18150] ? __lock_acquire+0xb8a/0x1c90 [ 1369.644238][T18150] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 1369.649981][T18150] ? ieee80211_next_txq+0xd8/0xa50 [ 1369.655102][T18150] ieee80211_handle_wake_tx_queue+0x19c/0x260 [ 1369.661187][T18150] ? __ieee80211_schedule_txq+0x167/0xc80 [ 1369.666904][T18150] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 1369.673502][T18150] ? __pfx___ieee80211_schedule_txq+0x10/0x10 [ 1369.679550][T18150] ? mark_held_locks+0x49/0x80 [ 1369.684309][T18150] ? __local_bh_enable_ip+0xa4/0x120 [ 1369.689574][T18150] ieee80211_queue_skb+0x12be/0x2010 [ 1369.694872][T18150] ieee80211_tx+0x2e4/0x420 [ 1369.699352][T18150] ? __pfx_ieee80211_tx+0x10/0x10 [ 1369.704379][T18150] ? ieee80211_skb_resize+0x22a/0x630 [ 1369.709732][T18150] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 1369.715122][T18150] ieee80211_xmit+0x30f/0x3e0 [ 1369.719797][T18150] __ieee80211_subif_start_xmit+0x880/0x1390 [ 1369.725767][T18150] ? __dev_queue_xmit+0x23e9/0x43e0 [ 1369.730953][T18150] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1369.737341][T18150] ? ip6_output+0x1f9/0x540 [ 1369.741829][T18150] ? mld_ifc_work+0x740/0xca0 [ 1369.746484][T18150] ? process_one_work+0x9cc/0x1b70 [ 1369.751581][T18150] ? worker_thread+0x6c8/0xf10 [ 1369.756323][T18150] ? kthread+0x3c2/0x780 [ 1369.760555][T18150] ? ret_from_fork+0x5d4/0x6f0 [ 1369.765298][T18150] ? ret_from_fork_asm+0x1a/0x30 [ 1369.770224][T18150] ieee80211_subif_start_xmit+0x11b/0x1970 [ 1369.776007][T18150] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1369.781891][T18150] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1369.788121][T18150] ? __lock_acquire+0xb8a/0x1c90 [ 1369.793081][T18150] ? dev_hard_start_xmit+0x97/0x740 [ 1369.798256][T18150] dev_hard_start_xmit+0x97/0x740 [ 1369.803277][T18150] __dev_queue_xmit+0x7eb/0x43e0 [ 1369.808210][T18150] ? __lock_acquire+0x622/0x1c90 [ 1369.813141][T18150] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1369.818492][T18150] ? look_up_lock_class+0x59/0x150 [ 1369.823599][T18150] ? __lock_acquire+0xb8a/0x1c90 [ 1369.828534][T18150] ? find_held_lock+0x2b/0x80 [ 1369.833227][T18150] ? __asan_memcpy+0x3c/0x60 [ 1369.837828][T18150] ? eth_header+0x11c/0x1f0 [ 1369.842331][T18150] neigh_resolve_output+0x53a/0x940 [ 1369.847518][T18150] ip6_finish_output2+0xaee/0x2020 [ 1369.852630][T18150] ? ip6_mtu+0x1a3/0x4a0 [ 1369.856864][T18150] ip6_finish_output+0x3f9/0x1360 [ 1369.861887][T18150] ip6_output+0x1f9/0x540 [ 1369.866199][T18150] mld_sendpack+0x9e9/0x1220 [ 1369.870783][T18150] ? __pfx_mld_sendpack+0x10/0x10 [ 1369.875798][T18150] mld_ifc_work+0x740/0xca0 [ 1369.880299][T18150] process_one_work+0x9cc/0x1b70 [ 1369.885217][T18150] ? __pfx_process_one_work+0x10/0x10 [ 1369.890580][T18150] ? assign_work+0x1a0/0x250 [ 1369.895160][T18150] worker_thread+0x6c8/0xf10 [ 1369.899730][T18150] ? __kthread_parkme+0x19e/0x250 [ 1369.904748][T18150] ? __pfx_worker_thread+0x10/0x10 [ 1369.909841][T18150] kthread+0x3c2/0x780 [ 1369.913901][T18150] ? __pfx_kthread+0x10/0x10 [ 1369.918464][T18150] ? rcu_is_watching+0x12/0xc0 [ 1369.923222][T18150] ? __pfx_kthread+0x10/0x10 [ 1369.927800][T18150] ret_from_fork+0x5d4/0x6f0 [ 1369.932387][T18150] ? __pfx_kthread+0x10/0x10 [ 1369.936952][T18150] ret_from_fork_asm+0x1a/0x30 [ 1369.941723][T18150] [ 1369.944722][T18150] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1369.951989][T18150] CPU: 1 UID: 0 PID: 18150 Comm: kworker/1:4 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 1369.964112][T18150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1369.974146][T18150] Workqueue: mld mld_ifc_work [ 1369.978806][T18150] Call Trace: [ 1369.982060][T18150] [ 1369.984969][T18150] dump_stack_lvl+0x3d/0x1f0 [ 1369.989540][T18150] panic+0x71c/0x800 [ 1369.993416][T18150] ? __pfx_panic+0x10/0x10 [ 1369.997812][T18150] ? show_trace_log_lvl+0x29b/0x3e0 [ 1370.002995][T18150] ? check_panic_on_warn+0x1f/0xb0 [ 1370.008099][T18150] ? __rate_control_send_low+0x661/0x780 [ 1370.013731][T18150] check_panic_on_warn+0xab/0xb0 [ 1370.018651][T18150] __warn+0xf6/0x3c0 [ 1370.022528][T18150] ? __rate_control_send_low+0x661/0x780 [ 1370.028143][T18150] report_bug+0x3c3/0x580 [ 1370.032455][T18150] ? __rate_control_send_low+0x661/0x780 [ 1370.038079][T18150] handle_bug+0x184/0x210 [ 1370.042393][T18150] exc_invalid_op+0x17/0x50 [ 1370.046877][T18150] asm_exc_invalid_op+0x1a/0x20 [ 1370.051713][T18150] RIP: 0010:__rate_control_send_low+0x661/0x780 [ 1370.057938][T18150] Code: a4 a0 d4 00 00 00 e8 ce 3e c5 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 a0 a2 06 8d e8 f0 fe 83 f6 90 <0f> 0b 90 90 e9 26 fd ff ff 48 8b 3c 24 e8 6d 1c 2c f7 e9 fb fc ff [ 1370.077590][T18150] RSP: 0018:ffffc9000539ea48 EFLAGS: 00010282 [ 1370.083691][T18150] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae248 [ 1370.091635][T18150] RDX: ffff88807c89c880 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 1370.099579][T18150] RBP: ffff888058ed2ca8 R08: 0000000000000001 R09: 0000000000000000 [ 1370.107523][T18150] R10: 0000000000000000 R11: 000000000012e5d8 R12: 00000000ffffffff [ 1370.115476][T18150] R13: 0000000000000000 R14: 000000000000000c R15: ffff888058ed2cb0 [ 1370.123425][T18150] ? __warn_printk+0x198/0x350 [ 1370.128170][T18150] ? __warn_printk+0x1a5/0x350 [ 1370.132914][T18150] ? __rate_control_send_low+0x660/0x780 [ 1370.138531][T18150] rate_control_send_low+0x29a/0x820 [ 1370.143798][T18150] rate_control_get_rate+0x1be/0x5e0 [ 1370.149065][T18150] ieee80211_tx_h_rate_ctrl+0xad3/0x1a90 [ 1370.154682][T18150] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1370.160736][T18150] invoke_tx_handlers_late+0x119a/0x27a0 [ 1370.166354][T18150] ? ieee80211_tx_h_select_key+0x279/0x1a50 [ 1370.172229][T18150] ieee80211_tx_dequeue+0x3064/0x43c0 [ 1370.177584][T18150] ? __lock_acquire+0xb8a/0x1c90 [ 1370.182516][T18150] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 1370.188226][T18150] ? ieee80211_next_txq+0xd8/0xa50 [ 1370.193320][T18150] ieee80211_handle_wake_tx_queue+0x19c/0x260 [ 1370.199375][T18150] ? __ieee80211_schedule_txq+0x167/0xc80 [ 1370.205073][T18150] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 1370.211656][T18150] ? __pfx___ieee80211_schedule_txq+0x10/0x10 [ 1370.217712][T18150] ? mark_held_locks+0x49/0x80 [ 1370.222464][T18150] ? __local_bh_enable_ip+0xa4/0x120 [ 1370.227743][T18150] ieee80211_queue_skb+0x12be/0x2010 [ 1370.233030][T18150] ieee80211_tx+0x2e4/0x420 [ 1370.237521][T18150] ? __pfx_ieee80211_tx+0x10/0x10 [ 1370.242537][T18150] ? ieee80211_skb_resize+0x22a/0x630 [ 1370.247888][T18150] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 1370.253242][T18150] ieee80211_xmit+0x30f/0x3e0 [ 1370.257898][T18150] __ieee80211_subif_start_xmit+0x880/0x1390 [ 1370.263857][T18150] ? __dev_queue_xmit+0x23e9/0x43e0 [ 1370.269038][T18150] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1370.275435][T18150] ? ip6_output+0x1f9/0x540 [ 1370.279917][T18150] ? mld_ifc_work+0x740/0xca0 [ 1370.284586][T18150] ? process_one_work+0x9cc/0x1b70 [ 1370.289669][T18150] ? worker_thread+0x6c8/0xf10 [ 1370.294404][T18150] ? kthread+0x3c2/0x780 [ 1370.298619][T18150] ? ret_from_fork+0x5d4/0x6f0 [ 1370.303362][T18150] ? ret_from_fork_asm+0x1a/0x30 [ 1370.308276][T18150] ieee80211_subif_start_xmit+0x11b/0x1970 [ 1370.314060][T18150] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1370.319941][T18150] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1370.326171][T18150] ? __lock_acquire+0xb8a/0x1c90 [ 1370.331098][T18150] ? dev_hard_start_xmit+0x97/0x740 [ 1370.336272][T18150] dev_hard_start_xmit+0x97/0x740 [ 1370.341279][T18150] __dev_queue_xmit+0x7eb/0x43e0 [ 1370.346196][T18150] ? __lock_acquire+0x622/0x1c90 [ 1370.351116][T18150] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1370.356460][T18150] ? look_up_lock_class+0x59/0x150 [ 1370.361553][T18150] ? __lock_acquire+0xb8a/0x1c90 [ 1370.366490][T18150] ? find_held_lock+0x2b/0x80 [ 1370.371147][T18150] ? __asan_memcpy+0x3c/0x60 [ 1370.375711][T18150] ? eth_header+0x11c/0x1f0 [ 1370.380187][T18150] neigh_resolve_output+0x53a/0x940 [ 1370.385364][T18150] ip6_finish_output2+0xaee/0x2020 [ 1370.390460][T18150] ? ip6_mtu+0x1a3/0x4a0 [ 1370.394686][T18150] ip6_finish_output+0x3f9/0x1360 [ 1370.399686][T18150] ip6_output+0x1f9/0x540 [ 1370.403991][T18150] mld_sendpack+0x9e9/0x1220 [ 1370.408562][T18150] ? __pfx_mld_sendpack+0x10/0x10 [ 1370.413570][T18150] mld_ifc_work+0x740/0xca0 [ 1370.418054][T18150] process_one_work+0x9cc/0x1b70 [ 1370.422970][T18150] ? __pfx_process_one_work+0x10/0x10 [ 1370.428317][T18150] ? assign_work+0x1a0/0x250 [ 1370.432887][T18150] worker_thread+0x6c8/0xf10 [ 1370.437454][T18150] ? __kthread_parkme+0x19e/0x250 [ 1370.442457][T18150] ? __pfx_worker_thread+0x10/0x10 [ 1370.447540][T18150] kthread+0x3c2/0x780 [ 1370.451583][T18150] ? __pfx_kthread+0x10/0x10 [ 1370.456145][T18150] ? rcu_is_watching+0x12/0xc0 [ 1370.460885][T18150] ? __pfx_kthread+0x10/0x10 [ 1370.465447][T18150] ret_from_fork+0x5d4/0x6f0 [ 1370.470022][T18150] ? __pfx_kthread+0x10/0x10 [ 1370.474597][T18150] ret_from_fork_asm+0x1a/0x30 [ 1370.479344][T18150] [ 1370.482444][T18150] Kernel Offset: disabled [ 1370.486743][T18150] Rebooting in 86400 seconds..