last executing test programs: 26m20.009397482s ago: executing program 32 (id=236): connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x200, 0x9, 0x8602, 0x7, 0x8, 0x5, 0x2, 0x2}, &(0x7f0000000280)=0x20) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000100)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0xe4ffffff}, 0x0) 26m9.620830223s ago: executing program 33 (id=271): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000140)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}, {[@cipso={0x86, 0x77, 0x0, [{0x0, 0xc, "e256b28c04002000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x7, 0x12, "02011c2ea13658d7367e27d4010d7d5f"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0x7, "c8f46976e7"}]}, @cipso={0x86, 0x6, 0x2}]}}}}}}}, 0x0) 23m48.64258815s ago: executing program 34 (id=871): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CAP_STEAL_TIME(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x1c, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000100)="00fea535cf", 0x5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x12}, 0x80) 19m50.656251714s ago: executing program 35 (id=2137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0xac, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @register_looper, @exit_looper, @increfs_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x10a}, @flat=@weak_binder={0x77622a85, 0x81, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/117, 0x75, 0x1, 0x8}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000800)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000007c0)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{}], 0x1) 19m37.04813319s ago: executing program 36 (id=2190): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe80fe43c8a0000000000000000000bb00000000000000000000ffff000000052420655800000000000000"], 0x0) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="03800000000000", @ANYRES32, @ANYBLOB='\b\x00\n', @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='gadgetfs\x00', 0x10005, 0x0) 19m6.249323966s ago: executing program 37 (id=2243): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltuid}]}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r6, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x1}}, 0x40) getpeername$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af7edbc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 18m58.548142636s ago: executing program 38 (id=2332): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400488058010c8054000b800800090000000000080009000000000008000a0000000000"], 0x184}}, 0x0) 18m11.151715097s ago: executing program 39 (id=2510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000000008000900feff000008000a"], 0x184}}, 0x0) 16m27.364987262s ago: executing program 40 (id=2964): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x200000000000000, 0x0, 0x600}, 0x24044800) 16m20.192567141s ago: executing program 41 (id=2983): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x1}}}}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}], 0x2}], 0x1, 0x40800) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000240)=0xf9c5, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080"], 0x24}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$rose(r0, 0x104, 0x6, 0x0, &(0x7f0000000500)) syz_usb_connect(0x3, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)='R', 0x1) syz_usb_connect$uac1(0x1, 0xd2, &(0x7f0000000640)=ANY=[@ANYBLOB="12011003000000086b1d010140000102030600000000030180800d0904000000010100000a24010800040201020904010000010200000904010101010200000b240201010405038c03a10c2402010203cd061c2a2be01024020200100200046faafe533614d709240202ff00fbff10112402020500010400ec8cbbada01b6c190905010940000f0506072501030518000904020000010200000904020101010200000c2402010001fb058279d40c0d2402010304020608c98be2390724010909011009058209000209060607250103b00900"], &(0x7f00000004c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x510, 0x8, 0x88, 0x3, 0x10, 0x6}, 0x25, &(0x7f00000003c0)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x133, 0xf000, 0x9, [0xc000, 0x0, 0x3f00, 0x1f8f, 0x3f]}]}, 0x3, [{0xc1, &(0x7f0000000740)=@string={0xc1, 0x3, "de5b186f49c6eacc2d1eded18991a3ad974b11d2c0be5b2d1bd4d6ee86fd0e7054ed542219312b62e708c2670559332ca4d1a14e0ed791f2eb37aa23f2c6cde368b6cbafb1e16dfcd29dd93b141cc16e3bbc9e538d80a07670893384cae582fc62090fe039c77b5ec47fa1247d8d4a28cb02751b083bee2a3d09a235f56cf44a5c59ef981cfa2779798e3e616fb70b4b9f958bf6cefa7e28de3d3866b4ef2830115c16dd392cb22fcab5c0dff7ecbcb3b3d6e908f1e4e80cf83f361dcf5d15"}}, {0xf0, &(0x7f0000000840)=@string={0xf0, 0x3, "fef7d2b92bbc55267b5c06f6c21940e8e9c0da5fd49011b48c3b83372dbdb59c03531c5a844c58c0135f7aba786f41bd2722da9cd5bb4d7a960905a0591edc8efd01dcbcf4237872f04303ee1dbced7c5048f0adb8bada8c72a5fdbcaac6a277569d4eec0978ba6b8de2d47b2d0b36174589c4b64d9c715fd98e39ee8ba563e7eaaf4e952b6184429373b74a21980dd576155471b2f47d0f7d6882a542e0dc6632821b23f045e5ade9d727f1129143d5b96b164033f6cf8144e76d06e46948472f959987320694856e6e9c8f2da774e450d3321de0c4faa41f9b2fd317c1fc4085bcecbcf4b881ed4fb68aa860e4"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44f}}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001000070d23bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0400000060000000340012800b000100627269646765000024000280050025000100000005002a00010000000800040002000000060014"], 0x54}, 0x1, 0x0, 0x0, 0x6}, 0x0) 16m14.547995836s ago: executing program 42 (id=3006): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x13, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1476}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0}, 0x48) 15m14.870642728s ago: executing program 43 (id=3209): socket(0x2, 0x5, 0xa17) (async, rerun: 64) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100000000000000000000000ff020000000000000000000000000001e0008223df45000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0100000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000100000000000000000000000000600000000000000000000000000000000000000000000000100000000000000070000000000000000000000000000000000040000000000e80a0000000000000000000002000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x20048811) r1 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (rerun: 64) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000002140)=0x1) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYRES32=r2], 0x270}}], 0x1, 0x48811) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast2}, {0x306, @remote}, 0x6, {0x2, 0x4e21, @multicast1}, 'veth1_to_bridge\x00'}) (async) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000100)=0x80009, 0x4) (async) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r8, 0xc0945662, &(0x7f0000000600)={0xd19, 0x0, '\x00', {0x0, @reserved}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8ab43, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x982}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async, rerun: 32) r10 = accept4(r5, 0x0, 0x0, 0x800) (rerun: 32) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r11, 0x11, 0x0, 0x4, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) sendmmsg$alg(r10, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="bc339cfbfffffff3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000500)="5b8e018d3c81cb84672d68926037723484b407b17a1abb183af348b4b7000e27516d8bf82066055d1fce960493636a706ca79c94ebab70e037a21bc9739ecadd1b2e6fdaffdf97928089356e7eec715197b1ff7e5b8f733de9f0f39bf4b29c", 0x5f}, {&(0x7f00000006c0)="31d67ad5189f10ec56a7fd0be2332476843a46be10fe520b57ab6db3d1f4ea9d0a69f71152026599d1a06dd138d2b5849caa7acedb3c9af99b09318ed32714722c216fd6ae", 0x45}, {&(0x7f0000000740)="19fc7448e2331e40e56f88cb856718f952fedf8c64f6ea449b1d8ffd8539683ed5b49099ce55ac342c828f69c31d3fab7ad9b51283a8e2c8ed37ea050c8c48c6173b652ab6e917a727230e48cbf46d95462e2bf3ace94ec0442994e0db26fdff89432bfbf412615981390e5f42d8b8aa6a42bcbd0d034dea898a85f435ae2cc5f4a768ae047d675cc698780ca477f7aa73d63cfb1eb97d8f8433f0316792c07f561ada1ae0ac1ff05e17ff5a66cf8f1b0866534b9b479b35f9427277ff75be0c", 0xc0}, {&(0x7f0000000cc0)="e57ef82c95bba671bcece44900ce97acf24891d08cf7091b6e2326dec60e4583539a48e48b557035cba5b06f95e90bd16f8a8e3b83cc657db677a952ff415032a93b0f34b927be6d9bd198a054c35b19ad2add4cd5fac3a0686ecdac99f94690952c5ae8e9bce583292139fb5e1dac440f941efc3993ec5d3d9cf7aee4b1b5ffb374653562191e048692067ab3c7681e6920301c39f1b7097851bbfae2f85abcda964932d4dc7c71b5d0f764032018d096fad650f3ad78ce1b098e797e31c7bf33689219fc91dd85e44dd4c2d775bf1117320edee2d21788d77bea661b5424185fb01439d402ff12de3904f5fe5f03cf1c793b3b217e9a99cbdfcefdf7ad699ec68020fca3e6745c2d8f396807c131cfe80dd066b78edc0c761a0bb2df0562fb1662b4386c21e3b58c4f5bc8fa9081e44e31b5765365544fcc5e263aa50467f843c1223f3b0227f4f0f36099459a3503ce8ee9556690a293863be284f6fbc166fbe14e54d00f4081b166c1d8044466f9628a16f7f353b4f7d52b86d2ccff8b7d7de149a299e40ebb387a36f149eee244d2da89d8618489f5b23684c793af3bb1019d3f7102a97a828fdf6ab44de0d8e620d1808ecef16c79f7ef38353ab7b1b19feca60b7c753ce292394939f357e7d943dc4b5a06347be39170969bda13dae9c70049b60606e06053cbe97fad497f17c449fed47efe97dfed0536047e418affc42edb95bc5a8cf9dba39878683a6a26abcacd0a862d6c6992dbbcfe5caf2ae0d365752c2c4f07e8b1ee12b526b6415d19d0e043bd9f12141d1e10da1e146a9cc4fa50a6d56b65aeb69cee42420c58b3938a5c58387d749ef365b26d1314731b81c7ba7f100c025e806a85e2538ea8b3af8cb1db4cda2bafa5d74587e649c8ba93ab6ea14c6389809d869b1cbcd8d0fb080b1ccd6efe61c433e2cc35329a218c7fe10f43ff20f225c64bd6d88aefc8e9dbdfe9146cc54ae2f15d8c03ae93716e137ab96a4bb375959b30ea9752e6fcc046bee8df9e69d2797e8ae72deba9569b4ea811ae742538017597ea49624332430af81d83a7bd1059b10ec6cb7807055aad0e7bd2b1fb704dafe4693924971221f99a7fce423529a7036a1d16aa2ffa9e8f3ee3ca9b63b250b6679e93731cc04112e24457fe44d7de649b552d0a4acea10e2d0ab546bcb2f04e21140e3922e48615003672247004308e8599e6efacaa1e33b386003faddaa12d2cceba2e45e35c28522e720dec1878798b1d65e8b589bf1563c51efd2f8fb8ff00a03f17682e16eb4821c207a1b355dec4c0402024d013bc2b4a57cf96f252b8937b12d0689df01b693675d3a1b47861a9d0cdd44b55c4cb2a34ba24ac47fb49b2359048158cd4f82a71adbe00ab4ac02103b796de6379a1906082c4ac250bf3b57b301cceee2976d7807332fe1aeb38fa5f7ef99ef434e049691f2c2240a0381bc314ab50ee262b2e9d4ac41d75673ce81aa3f1d548b20da0a6fc447e17bce14ca4116e92093d7adb98eafe174743c04c0278a74e0688425c984a5edfa42baa4d1a0277896193ea0c0288b3de9ba0f585259250c422a8b5f195f2ccb06ae0d426fd02205ad356e801be0c2dab166c7de92b2b695926b7c19d7e5bc214d5c9678b40431b2913a38ff5a783bd0f44acd70fdabf548104f3113ceef72d6d506af1cd06034d79d7649e198383d54334e5b86b018f2744841fb8d6e84782d50034e3e68b235c7cff04517d058094505cecd38e391cda10cf1f7f67ccbe11478048d15b3dc09067d96c84be5dcf80267158edc0ebaecb3d5b6e0a851b80942424e1360fd3e96dc288cf14ca5ed5e5760431fdc41f71a71cbe01a0e598e9fe39b2109827806c89ee968f70f680446616f89646c97a8fbbc52e58e68c890d103718bcdbab9665bbd99211805fdf40086e3856397018920a7de40ea166dfb383232b4b855fbf4a2a62e51b4334bfd728f5586d4bf13ca8311af96294cccc5970dffccdd31b7d9f47299a399906f57ca09af33965bcb94a8de9ca21d199abee3f700093ceeb1d13e139081af348ae1367319ddeef8bb3f6aff8970b182519c230afe5621286252fd50aa0ad71e648f6339b4e7ac0004b73d9e53c1468179b02b024085bec73cd51840827bb68a029d45fc59d5f0c919c5ee4607b9597cf152c65737829ec69d3bb17682d76d741fbee22499d858a06dda735c28654f9488483822c724de43254678734f1b72b129257e9a98473319cdf174bed68371fd17844f18b22ec4cc1f9965ea9eea42f6700bb0c2b2250b73a298f04b00d735aea7f0b62490e7072fd84c4e3f8a30f3d3fb0a4d0f98b68339f03b0207214f2bcea30035640b239b9ef02ab3b3b58733d2db7cb70b823bd19d69424ee4db1dd953150545c45c59d867fbf30d4ef7cb52ed3225ecdda11f518f37e6dd803e1bd0b893a7bc3d1127105ed8dd450824e800cd632466e471b624c3eb18e89fbc2614bef420b0a0965b6050043669dec89cb0a109a5911f5d1df6bc63222d388fb39f756985641b02f8f2c1294ead7bcc519af1a52ea709a583195edf9faff9b87e54cc0887ec4227d806b162a392435c7d7d1ffc919d3df1945db1e4e2e785654701ef7d0a39f6af256cf6f5c6f7e2459edf57ca0f96a62e410ad3770c5d3b918f92a4be795e0300c59608a2496528d7f213db9c06482667b0b35916f2ce0a2fa44f4d628aede82092490b30c8c9fb60184e83c2e971a4fd6f802337fbd7069933e00c73bc7028974ff68b03b50fe805e323d747259c2949bff0e9f12c9aeb8fe1e1b0e86a582f8259755d73ea8d0bd1f25f2cb6163711b3e5d634296bfef4ae5e34dd930a2266b14ef7dcaddf8b724355b68406ce3a5fe42ca73be4bd150680e5b64b5fed9c911889fcb88da145bdba2ef81a66aff88de8e1f1ae00843e26fc7dd3fc8dd839a55fc6bb7ba1dce059f48f8cc95b6bc19139c3d80b78a031f604930ee6c02793edc3b05b9a96fd2379f11bc1147cb30693cc9fee76ccd40cff9baf0bc0ba9066ce38cd07980f3872d012fef3a253a09de7db597603d315a59d8e1796ac23c4391f4b45f3e8af9f660d2592556872d125863f63ac06fca587a07ee2155618020223d3b23bafccade675e0dc3a5018247f225da2b39924040000cf3b91dbc80d4a2d1050efd9263f6c151c83b5ecbb2579f0d61593758885e1be5b0db0f22cfb7a32355f84d66edd1fb47be221004a4a15a4a282ec611eecc466901ca8db894c8286b9bc94a32ef20c0cd1d3d2e8614cbb3db07a09349f6b2183d98ad79bc212dd09a50930ca8b459c631f0d4b4710f4ccab6b749a96848a6cac70193e80fa0c1c67fc9a23ec41e28efa82c544088c5146e0fbca6ccebcc435a33d90913a99e0de098cbf6117b56a5fd9513690b0ef619a0c51421be737af323b4e67cb0c3a4fe2c5bfd21ae8a76568f21afb27933dc1022ab39907e8db8714db442781d262bcd7c4ab9c5aa1cde497cd4f4e49ef65aeb83064de85a2ac19d977f57370e8d966377ff7e3ab65e2992cd802e3173dd21023b1ddd3b9f6cbf4498bb95bc11877a91d9a831f10d44e527151d6a99183eb9e9077a1b582ccd235d3a8e86bee94ccba62acf4991de0161ed4ca59b3e3fff11575dc46aa9685dfc9dd9beec394bb52c96c4d9725d77d1f2c66f38628a78da1f92490ff8b4d6a367a3a3ab153eade41336b8dea53413876100ca002369d454f246bf084a3c608a956e90fe03900a3f618f25f7af872ea600271efd225baf7da826ec6fb7e6d61abf3915c4725232e992906f9d30cbdcdb417f926cadb3116680be11c8997ed8388d95b7d9519e1f7bad1aec5eb0f239ee60f0115e7153bfe957940a4648a031775dae4336c4b0ef47fdc7cf10d7c7694eb1ef9ec76f925d489774e02d96de77e7b8836aaefa98f3b021b3f7ef7d1cc598621f16f2e1ec443e99d2f4d0e3f260d89c602f043ec0fa995edc27429dd555f6ab8bbb48522cbf6c93bdcc04fb83241f4161f93f5fb9fbbfd4b42963d2673ccc53bdefa1f94a05fe0ccba42632a9b500300dac201472ad4792c3b59f07461ac37463ea61ce264251856e81e00c6b460153a86acccab122691d1bb15bd2946e50aa553cae3b32171e0b156b2d9742d125581864b6aa9c17d1aa79c13c03c48e8b73866a069827c341355c4626e6da3424820c47940095c2b227463ddb6ad842f6607d3ee32e9226e58f1b2aa8047cde0631bb23ea6884fc5ef7372cd53d5a1c881d5a43569fd0bfe6619e8ce331963ae341d4a485431f560247c3d0de4e4569ed3e48a41a6173cbd0c0445e307ffba97e0aafd4586aff126f0c161dad958d0f3e21183424e8dcb65584e1e3742bf8ff1794420b138060b956cf0abd4a3eb1e24db10fe12771d2961dc20fd1069e72d4fb10ec79855e0ad27f8fe674d61740ed9b28462a16b92cb06731993dd1f733133e20aff17020b8720ef8b03eca72eb6da8efa04d060a0ab134c17adf1c053bf16aee841328e787e844b5d0efdd8b0f14c3ecc850c74123763763f488baf0d967f62e17318044460cd778ed3bec5bf96296254d0c6afed4eab5f8e74f8717cb62d765f17c427438d18874b513d92f3323de2d4fb846451801a585e3a7e4bc1474dcc1321fb6a9d2b95276d13cbdaf0e717c63d44051385586d6c0598c695d277ef683f521f6b980ef78ebada20f23b9e9096e1b0e45ac2ae96903165d664ec7056cec644ff8d5d824b41c54f1bb3b9446b10633097aa5dda950cab0385329b5999bd01cbddcbf6483b8d0b9fe4e23630a371b26de5b71a2496b5283b657c878188afb574a69d6b3c50f4458dcdaa64d2abfc9dcf7439de02405ccc4b43a4e960aaf09e8e0adbf06c985e8eaddb18341074528dd260c73ec86f41059f62287400f44d198e9643aef6b08fa199390000b9cdc591879ffa686979146f9ce4858a2fbb63e9019d71c213e07d0a942221c861c0d2da19fb7758c56dd9edfe3aa1c01587cf7920662e25de9ac1f461faaa94a9fe8622c38b8dd6d13efaebdf82298e432f488aa6940e7fb07ae1dfe34f7419f1edf74c2d84f88e0667e941555a68c02bf1ac4920577c9a988e0a130eb9ac06b4f22c730bbeec994be8652a837235175788785aab84d9afce0f0149a8e869892a3d8e375361f4f8b3543fc2fea7d49cce214e7f07f485b841155826f314ce5d7b739a22f7b32458d094af127cd07d3a664be01d4ef77a45636f410890ff3ec31e4bbbeeb0f517f56238c94b9f17b23573d1831a2638416456b15db852f0d6275dc378bfbaea291ea569da238ea8bc41349bd8b4b899ab718958f4284c44133c54aea578c9624e1cd55ff81afc5475d0df10a9240ca863f5dd00cad8ebd6eba30c44445485a478659944da0a80110841041cd0093ac7dfee9448cddeaa9531cfa7b584195156715d1b000956d864cc3a47784d0f0054c885a68da34a8ef85d9afe1ed697dd84a90cb4e0dc34814a8ae35471055e6e665c082e734578e66e731c3f1dc5cc6fcf1a221d2a04aa003ebae168927cd056befa03e0420f09e3e0e3732d6502ff6352b7244ed156bdfd58013ea44a49ef128500a6a41259ee3e3089c19576bf10b4f95554ea700a448dd38a985ccb4d87cc7cfb6020ef345930814df2e8f593e0ffed4275fb1be9992dcf8867affd78fd565855656fa9bf57e1391d8eed31399828f267adc1d6153f6bf13d73d7554d33739562aab523ee95f61498965521ae8b84d3d73c552e165a3b045afc97595dd2ead9437f1", 0x1000}, {&(0x7f0000000800)="3438011b20ec9ae679935203957b8b86ab3201f618b1b9e85a6c318953d880aad88fa2d3dfb2a42570a87ad8df3707ba18520c86322bd97f70e0bba87a776e54e3f2bdf24d1daa3d8e9fc4d2d47295f14fb1fecc64b77a87c507e3eda9cff09e7e97458bccf5fe", 0x67}, {&(0x7f0000000880)="f3d006bd99364645ca10f64c9be3356dffd4fb258f45567996eb620c0cd459e0f1e5c8f094ced607347e15a1dd15aa58ea91353fbb9b33cf76cb4c5eaf290e9b175aeb460b232f1152e0c1437649be58595839b433", 0x55}], 0x6, 0x0, 0x0, 0x20040080}, {0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000980)="85e6373dacd4e789f9337db1d02eeb63e9ab44bbf9333fe288b9ac4d37e7f8dbda85a1c67d83bd4c3d6383deda2e6695b112bb8b0101918cd03e7e8d8e03c751bffc1565de77e670144a6a9925bd0f4aed65c7400308467f7e4effde535a306f1fedb0c4ea44e4f0f6e7d8a9ebe49578860c3d4b777122d9b866143cc8181655f476ce341b1e3ee90b9dae17614f7f9ba3cef847bdf80f9c2c1cb49daa655d24cb5aea0350c6eeeff2dd4e38e0f24125cc1f7af2e3b618bc80fecb2309e9d759fe28cb", 0xc3}, {&(0x7f0000000a80)="f3babfa174ccfd472334be38f870f1fda4119bfb0b64d5895c9f1e7d8d55742bb594fe3b565f0b37aa613d4884b712736c7fe9cb9e464e2013034bf1ac14e152942f5c121554843ecfa6cc22008fa89ee0371f4e8225b27476c89b93311070d1b007", 0x62}, {&(0x7f0000002180)="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", 0x1000}], 0x3, &(0x7f0000000b00)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}], 0x60, 0x84}], 0x3, 0x40800) (async, rerun: 32) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 15m7.246719483s ago: executing program 44 (id=3231): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key(&(0x7f0000003300)='encrypted\x00', &(0x7f0000003340)={'syz', 0x0}, 0x0, 0x0, r0) (async, rerun: 64) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'nat\x00'}}]}]}, 0xff58}}, 0x48084) keyctl$revoke(0x3, r1) 13m40.44890854s ago: executing program 45 (id=3334): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000003000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) 13m33.783035612s ago: executing program 46 (id=3359): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x20000a}, 0x8) sendmsg$nl_xfrm(r3, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r5, 0x0, 0x4048050) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4e23, @private=0xa010102}, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0xe4f, 0x2}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) 13m21.178788368s ago: executing program 47 (id=3388): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x18c) r4 = semget$private(0x0, 0x4000, 0x0) semctl$SETALL(r4, 0x0, 0x14, &(0x7f0000000740)) socket$inet(0x2, 0x80001, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010000ff8c000000040000000000000010000200000000002000000000000000456deb880f"], 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 13m14.514127568s ago: executing program 48 (id=3404): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000040)={[0x0, 0x21, 0xffffffffffffffff, 0x5d2a, 0x9, 0xc76c, 0x1, 0x40, 0x1, 0x10000, 0x9, 0x3, 0x0, 0x6291, 0x400000000, 0x400], 0x25000, 0x10040}) (async, rerun: 64) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000100)={{0xffffb000, 0x50000, 0xf, 0x8, 0x3, 0x4, 0x3, 0x0, 0xf5, 0xc, 0x0, 0x6}, {0x30000, 0x1, 0x3, 0x9, 0x8, 0x3c, 0x8, 0x0, 0x74, 0x9, 0x0, 0xf7}, {0x2, 0x0, 0x0, 0x0, 0x1, 0x80, 0x9, 0x2, 0x7, 0xbc, 0x9, 0x6}, {0x2000, 0x54000, 0x9, 0x0, 0x8, 0x9, 0x9, 0x6, 0x3, 0x9, 0x3f, 0x7}, {0x41000, 0x40000, 0x4, 0x8, 0x9, 0xb, 0xc, 0x81, 0x5, 0x1, 0xfe, 0x1}, {0x100000, 0x8080000, 0xd, 0xff, 0x7, 0xf8, 0xfd, 0x6a, 0x5, 0xff, 0x6, 0x3}, {0x5000, 0x3000, 0xf, 0x7, 0x9, 0x2, 0x3, 0x4, 0x1, 0x6, 0x9, 0x4}, {0x24d000, 0xeeee8000, 0x9, 0x64, 0x8, 0x7, 0x6, 0x0, 0xc, 0x1, 0xa}, {0x70000, 0xc}, {0xf000, 0xfffc}, 0x80000010, 0x0, 0x100004, 0x2110, 0x1, 0xc800, 0x5000, [0xf0, 0x2, 0x4, 0x7]}) (rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x200) (async, rerun: 64) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000240)="430f01c96546d9e9c4c195feba9fde0000440f7913460f017e002e64410f64ef836b0081b9800000c00f3235004000000f30450f2041460f2a2e", 0x3a}], 0x1, 0x62, &(0x7f00000002c0)=[@cstype0], 0x1) (async, rerun: 64) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000300)={0x70000, 0x108000, 0x1}) (async) r1 = socket(0x28, 0xa, 0x7f) openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x140f, 0x200, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}}, 0x800) (async) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000480)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pipefs\x00', 0x184000, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000580)={0x1a, 0xb, 0x4, 0x5, 0x5, 0x81}) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f00000005c0)=[0x6, 0x6, 0x5, 0xfffffff7, 0x5, 0x8, 0x9, 0x4]) sendmsg$nl_generic(r0, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x174, 0x3c, 0x200, 0x70bd27, 0x25dfdbfb, {0x1}, [@nested={0x106, 0x92, 0x0, 0x1, [@generic="44935c30190a77420f4ef8f213c0c4e22866ba1691b20fa9f2c1a51231f45aef94d7c9dbb6e9a72252caa6efb1825c43c44d1addad6055982bb01b3920a704703c5f19b6fa7e7a62d2e27140663e58285397509f49f9ce72999e3249ca9b33f6de6df9c8b709a7064a9d37db411e1d906d3069584dbb296a4f59e22178b5a8c8321fd62ed3fa9e28874659fe93270e2fb19365a051d35df2db2d0586533a5d5ced567fda25a5ab2c1704b9d062e4e85de72c757c0561a6421098b7ee74f41ee8fb98729d2e2c4ee9ee41fe0fc1789f41c0be722654a8b47b469c3e348adb68bcb712b8c04c2feaee4d6c5326909a068bf18c", @nested={0x4, 0xcf}, @nested={0x4, 0xf}, @typed={0x8, 0x25, 0x0, 0x0, @uid=0xee01}]}, @nested={0xc, 0x41, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @ipv4=@empty}]}, @generic="920f69196a1a5ff0a3b735713351e91dfd4a3374c261c914febf57a4fd16cc4364724a264cb1d014adf8fe2b656b54142c1a141d4435f24cd98265729366fcb9280e1b96a639203aea9e"]}, 0x174}}, 0x40c0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000840), 0x80, 0x0) getpeername$netlink(r3, &(0x7f0000000880), &(0x7f00000008c0)=0xc) (async) recvmmsg(r2, &(0x7f0000001a00)=[{{&(0x7f0000000900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000980)=""/18, 0x12}], 0x1, &(0x7f0000000a00)=""/4096, 0x1000}, 0x100}], 0x1, 0x100, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001a80)=@generic={&(0x7f0000001a40)='./file0\x00', r0}, 0x18) (async) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000001ac0)={0x7ff}) preadv2(r0, &(0x7f0000001e00)=[{&(0x7f0000001b00)=""/201, 0xc9}, {&(0x7f0000001c00)=""/209, 0xd1}, {&(0x7f0000001d00)=""/244, 0xf4}], 0x3, 0xc38a, 0x7, 0x8) (async, rerun: 32) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000001e40)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x1, 0x4, [@loopback, @remote, @dev={0xac, 0x14, 0x14, 0x30}, @multicast1]}, 0x20) (rerun: 32) connect(r1, &(0x7f0000001e80)=@ethernet={0x306, @link_local}, 0x80) r4 = syz_open_dev$sg(&(0x7f0000001f00), 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000001f40)) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000002040)='pipefs\x00', &(0x7f0000002080)='./file0\x00', r3) (async, rerun: 64) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000002100)={0x7, 0x10, [0x6, 0x8, 0x26b, 0x7fffffff], &(0x7f00000020c0)=[0x0, 0x0]}) (rerun: 64) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000030c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003080)={&(0x7f0000002180)={0xec8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd2}, @NL80211_ATTR_CSA_IES={0xe98, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x16, 0xba, [0x5af0, 0xc000, 0xfff7, 0x6, 0x382, 0x2, 0xfffd, 0x3, 0x200]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x82, 0x80, [@mic={0x8c, 0x18, {0x1dc, "fb9abbd10cb6", @long="d6d1460250d555783ab39f9271ba48a8"}}, @random={0x9, 0x4d, "394a897c610dbe08ca14af7aac9cd2e9ba01f1a43c4b6924832e28ae80368d5afe19eeaed028b126b53b7005527d94e0f46c14cf48b10b70ec0d12b19e213921428f16228c577736dd64c55522"}, @channel_switch={0x25, 0x3, {0x0, 0x99, 0x5}}, @peer_mgmt={0x75, 0x6, {0x1, 0x1, @void, @val=0x1, @void}}, @cf={0x4, 0x6, {0x0, 0x8, 0x40, 0x3}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_a, @device_b}}]}, @NL80211_ATTR_BEACON_HEAD={0x726, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xcd}, @device_a, @device_a, @initial, {0x7, 0x5}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x101, @random=0x8, 0x8044, @void, @val={0x1, 0x7, [{0xb, 0x1}, {0x6, 0x1}, {0x60, 0x1}, {0x6a, 0x1}, {0x6}, {0x4}, {0x1}]}, @val={0x3, 0x1, 0xa9}, @void, @void, @val={0x5, 0xab, {0xa0, 0x92, 0x0, "b76532552fbdfab7a90ed4b87a6f9dee84d228270c139214cdab86188f55cdc8c8a032a51edcbe94950512cd4f36c898f3b4200908f8e649c7e4f4fced3ae8d81c3c26b6c2bed4b83700bc4425ff5611ea91fbab937d6f3e22fa00d1c2eda5a8e543066b0bb4a13f9dff5b8cc744807de600b789d0fdd9355222ff0a2f0e9cc320abd16676eac3382af17628524aff74bd2a53cb26c26c06378b7dabf4c294c4a81213c565933f48"}}, @val={0x25, 0x3, {0x0, 0xb6, 0x5c}}, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x0, 0x42}}, [{0xdd, 0xd2, "facc0029cde5af000b0562d41504be7144b093d14ee0e14561e8935400626e3f9a34c6401438880e6624ba708b642a9ee0290f74913097c03c7c2bbda5e954e6b676705a574591fa049b588f61302b35acc3fcd21579e5f35b788215360e7c77ef3fc87d2ef89c387d8d23f975e9b16905e5243406be70bc48545f7d0027fd4273836dbde58880d76a5de9cd1ee80525947bf02545db1ab054f6e23ecbaa1b69dcfd60d4129db5b76088e5d3d58aa31897fe369422cde55473f7e6a5e746cc0fdcae9fbb871f6d6cfed891da01bfdd8ac76e"}, {0xdd, 0xe8, "8f5b37e662bfb234c5e93d0f4e979bc9ca923db551b4723d8f73946f577372c4cec74f8b0c2db31015020c9da3299aec53c878b85658d3426eb6fa151d857b4d059f5a3be96e3804bdc7e4196771252e2f707fc9bbf33bee9c0a9c4facf8f13db7c1c4db4f0b51fc5a1cf1f89c6debdfa571447684e447a042d869d2625512338609940b045be4131fd54957c4c8343c974b5acce81a594a2a1f34dc2294f83b28af454651459e6913d8363c2e0d304798d23e67cf6defd3cdefc6e2a5298c9aa41d15dc7c2b3904e780f9d9b584f91e2b24e19549f3d079b38237a603b32293e755edb81dcc0bd2"}, {0xdd, 0xf3, "a993a9ca12910c074f73c8a9938ceeb252e21aab70285e0a6c5965591f823cc38b7ef74f83c6c4ae5ae56cefc0d08809e8e1b50d868d03bc2f2c7a07bd3c0330bec3239a3531d5ffda08b72276a5d9ab1eb0688f2e2c9b63fd9c318c120b1c4304c109d4c4b8d8a439d23a6d9a150c105314fbb85708cd8df03cf59a8b2adab3a6842f2f5ba6442e17a181f88a659995e2941de9db0693f96a9eda48fe3eb1d336d28b23f7e28715996ed970e9d2901af9ea9517151ddcad425f3d1bbcb869b968a363a830c437166901c2d00293b1b85f4ba39e61df590ebb938c12d927b4a63d520081d12c9e22b1340c8d6a2f1c2dbcd688"}, {0xdd, 0xa5, "1f805a185f29def52b72766e81e11a2f1fd37adb1642f58496a273cec7b088824d545caef1c8d091ce6136bfa0ff34f0ffc9675627844125a8d13f7ca43c2a9d7719a53d243899db3a650649b5c8ab3c44644414ff509161559b2ff55745671a8548f7c1ad9e6843b4b659be6cf0ae9c999a3b8e77334cef96e3b28347f56320f0bf07f9846e3383521b5febb0c483e94683dfa4ae322afebe4a0b1af7f4fe23f5cf3a4555"}, {0xdd, 0x84, "7236390b2f0a3ca37e4c50c3711db7b538c6f0bb4ed928963dc3fe08a6de2db1b6aa816b0fc446869ca668359b2bb8c654b9666095a160f28812667552be2a1e85aa54cd378243d224d0939fda2c55b191860892653308dbc1aa270c191fac407973f1850bc431be5deb697571a954fd2908950b67bd0aca756624bf797f55cdbbd2d080"}, {0xdd, 0x69, "5ac1b523c99dc496c057b0075f4b3aa45106dc4693902c6bc11e8187c376c2684f7e0c62980d9deb1c13e069ba6b49af0029fc811020d27d2deffe2ed9bf6ad77322d5bcc06b412b57f507997469dc180da606f4a1e797b589b32162aad3cabc28cf4ba573e8443fbc"}, {0xdd, 0x68, "14f9365186a575b05aab6c6f2e2f7d0d2fb42d26d323d0d7f267cc37e83790e7a29a5e37d8067be8814f8429d3f93d88fa8f1392013b7695397640f339c10abe7c2366cc14148de35ed02655937afb3e9690f047a4209fb4e76ddc23c4b4673f71b61388d7cc8e6e"}, {0xdd, 0x8b, "6b0784c75994b65c1590f05b18007d02f13c5a725e879c20e10e6ca04ba6902d61bdb792abf8b3978141e1df67e78f7c1307851b1e731f5feea2697c48b0dc77ec4a67940307e11d664374b8105220fb5b88eedb580f5de9c687cfd924c1c2ec93178f894fea9c8678ced4a3d89753155713cf62cdf58947ec25c87e84ad883bd2fab82bc739749ecd18d6"}, {0xdd, 0xca, "2529bd5d5af29e06e7fe6733417488c9ac82207a229384b2dca57296eaea8ab0aa3dcdc4c95e7265741c47ab1c1a928590d00fec9e914f539248fad073420a60b49c73bfb7abc0cfeff33482c0426f19a8aac4465520f66e41a7501397f3329191fa2414de8616368a8e143d745be50a7a7c6995faee726e7cf3b606231c51e08c9f8fa4cd7582a86ddef35353ef64bfdeaab3a8e7dbde6d4be2a77eb5d4d5e6d248f4b6771df34099148a09534754baa5ba9b98b2d9e856f563311273fc1c23dd32287dd17027683aea"}, {0xdd, 0x1c, "9bc52972cc3bd5fce06163d48fa82473384e966a16eabd1f2495b6a8"}]}}, @NL80211_ATTR_FTM_RESPONDER={0xcc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1b, 0x3, "a8e213e6a0e3cb04d2a2aedaec4821721ffc2aabbf8b13"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x21, 0x3, "a1ed4890eadcdfe1b614c94f4de640a40d9667989f335a8b4ef0fb8ba6"}, @NL80211_FTM_RESP_ATTR_LCI={0x87, 0x2, "286abcc3f73731cf4c8f6981d8dafdc7bc2705f33805b930ab55a0d667e4f2f86a2527e11a569399ac1c03cd65b6585ee76651815234f0a4932df588484dddfd00285491ebb6cb63b062370e4c4d4cd6b164a126e1910dccb3ccbd820c9ea164b57388e1556f12bbffe02ec9e928db00d2e474b3a55802d418f7bb0b9832a50c27dc6f"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1f7, 0x80, [@rann={0x7e, 0x15, {{0x0, 0x4}, 0x9, 0x7, @device_b, 0x3, 0x5, 0x7}}, @random_vendor={0xdd, 0x91, "9c422c640995485a67fd84b59d14c4bedfdec3ccd4a14fca1d484e29e732cd9ce0f3ce2ab0682f0514022bf3750b2b229c24985f6964bfaec76c30da5b648b0570c1e8a419d9b738f114fd8fd71cbf6465d082fbaf2fbdaa76eb76745a7a3f6a034ebfdb3b3a1f90edc079bc7158e8058663399ab6df30ba717957fdc42cae3383091bb5c87f1a7f203d9100df5d78562f"}, @dsss={0x3, 0x1, 0xa9}, @supported_rates={0x1, 0x3, [{0x36}, {0xc, 0x1}, {0x48, 0x1}]}, @supported_rates={0x1, 0x1, [{0x24, 0x1}]}, @gcr_ga={0xbd, 0x6}, @perr={0x84, 0x134, {0x7, 0x12, [{{0x0, 0x1}, @device_a, 0x4, @value, 0x21}, {{}, @device_a, 0xffff, @void, 0xc}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x2c}, {{}, @broadcast, 0x8, @void, 0x18}, {{0x0, 0x1}, @device_b, 0x9, @value=@device_b, 0x1c}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x10}, {{0x0, 0x1}, @broadcast, 0x80000001, @value, 0x1a}, {{0x0, 0x1}, @device_a, 0x7f, @value, 0x34}, {{}, @device_b, 0x1, @void, 0x2f}, {{}, @broadcast, 0x2, @void, 0x3}, {{0x0, 0x1}, @device_b, 0x101, @value=@broadcast, 0x2c}, {{0x0, 0x1}, @device_b, 0x1, @value=@device_b, 0x20}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x13}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0xd}, {{}, @device_a, 0x1, @void, 0x29}, {{0x0, 0x1}, @device_b, 0x15, @value=@device_b, 0xc}, {{}, @device_b, 0x8, @void, 0x3}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x1e}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2de, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xf}, @broadcast, @broadcast, @random="9ccbd7e740eb", {0xe, 0x32e}}, 0x3, @random=0x2, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x8, 0x0, 0xac56, 0xe}}, @val={0x6, 0x2, 0xa}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x80, 0x3, 0x1, 0x0, {0x2, 0x4, 0x0, 0x167}, 0x800, 0x444, 0xff}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, 0x48}}, @val={0x76, 0x6, {0x0, 0xd, 0x9, 0x1}}, [{0xdd, 0x9, "ffa0de93d70bd20021"}, {0xdd, 0xb5, "82f1e07ff53d59a5bbd2478b650ce96aa964d1c1f766967e15dfdfe216bd1dfeedb1d882b742896a545222eeaea5f934b3554ae60cfe759a8e6af1ceae9791ea3a4b8296f5a0ec6d1717803a548929e837d4f84bb094a211ade614762107cd4ba528f8887bb5735282d944f407094d3684f86be5eaf12fdeb45aab8135286e6b28687f28c337acaded9da02ce9c899627b1988362caf52b47f393ddc4b78fec2c8a9b134d8862896e3a21f1f467f9aa976c93ecb49"}, {0xdd, 0x84, "0ad5140df8b3c3d8199344ce324d2265aff888a0ac2d44eb694f55a7a60b82f293cd84e794d6882e9691786a831373d4844c17bc7a13a42108194ef20e2949fd6be4cc3bbb8ae10d2af4c37f5a5a48c3123dc835017788d4a741fc0273454480371e8a33a1ff98b3046291a8dbac3e94993da4a868e463ca923ca04c00e3bbdd453dadc5"}, {0xdd, 0x9c, "c9b3e0d1aac413692d2fb61608e37df522c4c9bd1f7e6259ee2fde63528f151ff310d49fcf32f080bd505ec0179e56094111e2c10e0b57f81c36702870afca5ddaed4a800c4091bda22bf71b3cf0578e473006ba513c4988484048e439e4ab38ba799a95caf0a4b887a13ed6f8ea5312705d78f12b2d08b27c2c6de8c62a64a788affeae47f2dfa3f481ca2d01a77cc42a001854327a8f0bdc77b768"}, {0xdd, 0x8d, "0d97d0fac8b9a34d90ea48035f2e91043d134d03066f207639fbfd00a4737c212d7cccb8f737c20b0c258e42171e5fd7d68ebfb05757586fe974b1ac584d181c4dee9c7000e882dfec7a0aa3ffa4a79c9f298f3331e997d5730e8ad0302e63a0b65ba10e36eb3ed0b1060f3c0ca66b642f8fbc87d3d14ba3a7413801b7384b2cee7713a549b25dd70814c0776a"}]}}, @NL80211_ATTR_BEACON_HEAD={0xdb, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x66}, @device_b, @broadcast, @from_mac=@broadcast, {0x5}}, 0xff, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x18b}, @val={0x5, 0x69, {0x5, 0xab, 0xa, "bd574e2c4c622916e8ed928040176a263cf87918e45204195888b15930f568f602102385dfaaa78fc606bcfe37def6490c1c9e1c20eaf316caa3450a83406bd53816fba25010d122afef21047e8aa47ad5986c394c047a5c07b63ef117a7f304d180478f8b94"}}, @val={0x25, 0x3, {0x0, 0x28, 0x1}}, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x0, 0x8, 0x7, 0x3}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x3, 0x40, 0x2, 0x5}}, [{0xdd, 0x24, "1671b1f101e3f5a174e35a022424a947c8a4069251d21b124b17e67ec313124de101a444"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x6a84, 0x31, 0x9, 0x3, 0xe, 0x7fff, 0x80d, 0x16db]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x2, 0xab1]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1c, 0x7f, [@peer_mgmt={0x75, 0x16, {0x1, 0x8001, @void, @val=0x22, @val="8d954db0077536f919b0564d50d575cd"}}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x26}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0xec8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000050) (async) llistxattr(&(0x7f0000003100)='./file0\x00', &(0x7f0000003140)=""/4096, 0x1000) (async) mount$9p_unix(&(0x7f0000004140)='./file0\x00', &(0x7f0000004180)='./file1\x00', &(0x7f00000041c0), 0x4000, &(0x7f0000004400)={'trans=unix,', {[{@version_L}, {@dfltgid}, {@version_9p2000}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt}, {@dont_measure}, {@smackfsfloor}, {@audit}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/audio1\x00'}}, {@dont_appraise}, {@audit}, {@audit}, {@uid_lt}]}}) 12m45.728462687s ago: executing program 49 (id=3481): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x1000000, 0x5, 0xffff1896, 0xc, 0x27, 0x8, 0x1b}, 0x9c) clock_nanosleep(0x1, 0x1, &(0x7f0000000240), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x1, 0x1}, 0x8) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f00000005c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xffffffffffffffff, 0x3a, '\\', 0x3a, 'user_id', 0x3a, './file0/file0'}, 0x35) getpid() r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448) 12m32.453449835s ago: executing program 50 (id=3524): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x10, 0x0, 0x1300) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x7f, @loopback, 0x200000}, 0x80, 0x0}, 0x44454) r1 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0) syz_usb_control_io(r1, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x42, @string={0x42, 0x3, "ff42d712420421c36adec8aebb68562b83f43bbc812964a5bf7ff03a2a2c4384cab107859b1950da984a232ca2df9772e166c52e22967fd64ff0e3bd2268c25e"}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000140600fe80000000000000000000000000001dfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="10c8aee1d70671b346fc68d57dfdcbeb3ee090b19a9f6b49abc759feb78b8b316b755471ba1f6c0546b9beb14c22a1a2d875395642ad40cb8c2c2ddfbbc5fbc2569e62a9e60b5fa201a3cf084399ebd14a55df98239d42b1c6d2c8eef84167c157caa534849f5d73936c6be251d485d43e9cd705e5ffa2e33bc75410a0db6f350048bf1f225cbf2529dd2356b2082f823bb2c36e1ff6cb3573461abf4451876d8a0d0c13cf9ed42fa9ee8312ffb452a2f2f5f7e200e019543612bbd6946ac009cf4231fa34c4add6970cf37c7dcd555d9836d347c7c27f60d6d8989ecbb34ae5e423974bd992"], 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x89841) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x8000000fcd, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x4, 0x2]}}) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000000)) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x90}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215e8000) r6 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7e", 0xa, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000006a70bd"], 0x30}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) 12m24.094560073s ago: executing program 51 (id=3543): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000006000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 12m19.243342629s ago: executing program 52 (id=3553): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="180000f8ff0000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000094000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m7.937383101s ago: executing program 53 (id=3571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x3000000}, 0x0) 11m58.897416221s ago: executing program 54 (id=3589): landlock_create_ruleset(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x80) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008c40)=@newtfilter={0x300, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x0, 0xd}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x2d4, 0x2, [@TCA_FW_POLICE={0xa4, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xebd6, 0x2, 0xffff, 0xeab3, 0x3, {0x3, 0x2, 0x6, 0x3, 0x2, 0x800}, {0x5, 0x2, 0x1, 0x7ff, 0x9}, 0x2, 0x8217, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff319, 0xffffffffffffffff, 0x10000fff, 0x0, 0x3, {0x3, 0x0, 0x20, 0x3, 0x0, 0xc69}, {0x0, 0x0, 0xc4, 0x0, 0x40, 0x1ff}, 0x7, 0x4a, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x82c0a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_FW_ACT={0x22c, 0x4, [@m_tunnel_key={0xe4, 0xc, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xa1, 0x6, "65d99b23d8268a92d95df38a5c95888f1d0b40c4b3f31084c9666ebce01334b002e128df77afdc486c40145752e95a956dd32d3b9e254b6bd44ba8dacb4864758f260db5fa1912b141f40211be0987033c543a22a7b652e8212665472befdaeac892dc3a47d91416364fd417f6dee09acf71e4ea8accf23f36e63d1d1cf764a909ed2dd02ef348f4b142919340a76f550bd73a0d28a904cc1f271d5f08"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x144, 0x16, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x23}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "2ff161440093adb40306cb3a3b55a549"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6}]}, {0xe5, 0x6, "18c606275f2ebbd47c1488a31f37bd44c94133160cf348f2920753a36eafa644f2ec7c0c31a32a49e8797890824b6f64b968379609eff73cd211777e1183aea649793f0589215430b00f364ac22d4aa7628f2af3dbaec52706ed3caff26ae62988b0dc56fa7fe031fed2297f1f21efefc56dc23ff867b2c61819c8f54711c1f667283625fade4991209dbcaa900bc31afb5535fdf8e541222f269971a97d4eb4268de600f2aa2f9157f03503b6c058a2c092c4607d281c2ebe35cad7678a0b19d463acf57ebde2b36930c831837e343eb877bb59b0f93b09687ee9ae5a9bf12d60"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x300}}, 0x0) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 11m53.714330996s ago: executing program 55 (id=3606): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11m47.186927468s ago: executing program 56 (id=3628): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="180800800e0000000000000000000080"], &(0x7f0000000040)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000080)=""/124, 0xffffffdd}, {&(0x7f0000000740)=""/180, 0xb4}, {&(0x7f0000000640)=""/40, 0x28}, {&(0x7f0000000800)=""/246, 0xf6}, {&(0x7f0000000900)}], 0x5, 0x0, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 11m43.027471737s ago: executing program 57 (id=3636): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (rerun: 64) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x10}]}, 0x3c}}, 0x40010) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 11m32.222269861s ago: executing program 58 (id=3659): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) shutdown(r0, 0x1) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000000)={0x8, 0x1000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x15, 0x800000000004, @thr={&(0x7f00000003c0), 0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x4000000000000000, 0x24040050}, 0x4000054) 10m39.799401266s ago: executing program 59 (id=3771): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x64, 0x0, 0x0, 0x1}, {0x6}]}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000065ff"], 0x15) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) read$dsp(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0000000000101040000000400000000000000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003002001000000000000000000000000000214000400fe8800000000000000000000000000010c000280050001000000000008000740000000000c"], 0xa0}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e000000100"/31, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff3400000002fc00480500000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fc01000000000000000000000000000102000000000000000008000000080000fcffffff000000000000000000000000000000000000000032000000000000007f00000100"/287], 0x23c}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, &(0x7f0000000080)=0x8, 0x4) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x40) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) 8m44.687164877s ago: executing program 4 (id=4156): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x61) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000480)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={r3, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r3, 0x9c7, 0x800}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x3ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/18, @ANYRES32, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d0000000000050001", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000085) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r7 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x2800) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r7, 0xc0245720, &(0x7f0000000180)) mount(&(0x7f0000000340)=@rnullb, 0x0, &(0x7f00000004c0)='jfs\x00', 0x11884c8, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 8m44.048880182s ago: executing program 4 (id=4158): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, 0x0, 0x26) socket$inet6(0xa, 0x800000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000001c0)={"04dfc86351907bcbc9293982262169af775bedfb0a63cb8031ecdc5351097e022d45a9640a4a4b506dc328f61ac030dacac442d82b9e81e6847961e65610b8f6e25f9eaf1a9f48ac011b67d68f8725991345a1f8ed6450a11246c6424cd7837f6bfc47209662ba0d0f44149fcefbbf6fa5b40644bce6cf7210107f57b850d0c9af06c766af1c637aa057167a6910e2e185b8d972e49eeda481d9a58394ef43958ce7407e73d6460653fc672aa4ab6a26bd1a631fa3a0f2b025ba137b8e3f933af28e1ea9984bc0438ea00b5f5b16893a22bb83ff1c92407a946d4dc7d347d526db0e71bb38f873937ca7343fb7248867adf5decd52e74f05c768c3b1c8282b9b1b1bc0f7ae08917b2abe3d3305e32b8db562d19dd7c83fde6dbe03ef72aa7ddc00144895b2a1981105046a28ca0852521afbcd560c15cd9f33e36417a251af7100392b6cdb0bbed4670d746c45fb5589f279cfd594911cb11f2a7336af10b2332e731f2eec8287c735f2346449f1629fde95d6c78bed90645bb280e222976d5721ee6dd6068cfd6174d2382e524672a2656eed5cf34eff27c2974deebf2aa6226e3fa2f15ea8db5891a062d422607a450a32cfdfaaeadfb2498e79fe9e47089b2a8bbdbdcbb076ebbd9c8fdc6246c00a34176a1c46a924ab4c3877215e5666c7b384e9238b3ad6ac559d90e22170d6915c7150a1858eb3f20a1847642018840b49c335074496991fb3193914f5213846ff8bf5b389298d797dfdd4a1d116caec17f13152c9699caab72a96d364134266030e67ada0de8d2bb05091f7d855fe1c435574856b0f8de9dc6af14ce179e3c0b6b563ccb8e02900fa9412784b0e5fa71a6e4499fecd1343d289daeb929d0cbd96f9f4501bc9d6d9d0b4f462aaf2556ce92ae6438bb3e3aa258c8c4ba6646f99f5a3d4f14f677353722cc81a8ef1f68d41ad1bef785b248faee830613461239487bee1b53724eb28301420ced16a8110a8680c91c665f8eff65e2d48f95db7ad4f30d079a39a2286fb3df3472d330f6f11fc7d1939a923c50263b3e0314037ec808df7cec279df5785fa2124d1650563799defc378cb9506ee7142eb108b3f4125ade3d9a73646bfdac795c753895b2ad51d358eff496d1c1a885c30b85b50eca89bf14ee50ae3301805f1691b3a391d7575c9a0a514710ad3e590491c60bdab122222c66cbb155452a01cb9750d14ffdc77ad11d4495c53bf38c8185c769c1409eb0b1c613eac8101d6784c9510790dd1df8fa6f2b4dbdbde3bdcbf6bfc456f68b680f2595853178e89a32e9c56d66fd2210fb0fc0e3cda61e6980e16e47ae8071182af80950c43ba221fe072e6945107a6edcd38bfeb201a657969bf340960a67e30987e56c953a177404fdf67b5d99bbc06d705a0fc9659336b458ea0d575ddfe59706738d1e65c50527200"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r9) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r9) sendmsg$IEEE802154_LLSEC_GETPARAMS(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01fddbdf25240000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01fddbdf25240000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000600)=0x0) sendmsg$NFC_CMD_SE_IO(r9, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r11, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000045}, 0x20000000) read$FUSE(r8, &(0x7f0000002c00)={0x2020}, 0x2020) 8m42.193278955s ago: executing program 4 (id=4168): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) (async) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 8m41.753957688s ago: executing program 4 (id=4170): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000003e040000000000005d000000000000000704000012da0aff2500000017ffffffae040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6b8306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) unlink(&(0x7f0000000080)='./file0/file0\x00') mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_settime(0x1, &(0x7f0000000100)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="200001ff26bd7000fbdbdf250000000000000000", @ANYRES32=0x0, @ANYBLOB="7d1e0300231a0500"], 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x20040040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'batadv0\x00', 0x4000}) socket$inet6_tcp(0xa, 0x1, 0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xfa}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 8m39.728855888s ago: executing program 2 (id=4175): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) getsockname$unix(0xffffffffffffffff, 0xfffffffffffffffd, &(0x7f0000000040)) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r1, &(0x7f0000000d40)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b800da4173b9e63544ee1f32fd585dab49f06f4e7e92a867080b7b83c0a3125", 0x48, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x7, 0xfffffffffffffffe, 0x5, 0x1, 0x3, 0x4, {0x2000400000080001, 0x400fd, 0x7ffffffffffffffe, 0x8000000dd6, 0x200, 0xd615, 0x9, 0xffff, 0xfffff7fc, 0x8000, 0xfffffff6, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) (async) getsockname$unix(0xffffffffffffffff, 0xfffffffffffffffd, &(0x7f0000000040)) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) (async) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) pwrite64(r1, &(0x7f0000000d40)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b800da4173b9e63544ee1f32fd585dab49f06f4e7e92a867080b7b83c0a3125", 0x48, 0x0) (async) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x7, 0xfffffffffffffffe, 0x5, 0x1, 0x3, 0x4, {0x2000400000080001, 0x400fd, 0x7ffffffffffffffe, 0x8000000dd6, 0x200, 0xd615, 0x9, 0xffff, 0xfffff7fc, 0x8000, 0xfffffff6, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) (async) 8m39.595779187s ago: executing program 2 (id=4176): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x100032, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x3}) 8m39.440103682s ago: executing program 2 (id=4177): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000380)={0x34, r3, 0x1, 0x30bd2a, 0x25dfdc00, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0xf, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r4, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 8m38.637812989s ago: executing program 4 (id=4182): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x1, 0x4000}, 0xc) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="1407008e", @ANYRES16=r5, @ANYBLOB="010329bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x2000000, 0x0, 0x8000}, 0x4040020) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_TSC_KHZ_vm(r8, 0xaea2, 0xffffffffffff64de) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f00000001c0)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ed1}, [@call={0x85, 0x0, 0x0, 0x2f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r10 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000940)=ANY=[@ANYBLOB="1201100100000010631d01014000010203010902a20003010070000904000000010100000a24010800000201020d2406000003080000000000000c24020601010608000010000c24020800000300000000000924060506010100020924030001010005000c2402060301030206003305090401000001020000090401010101020000090501091000400000072501000080000904020000010200000904020107250180028100"], 0x0) 8m37.816927431s ago: executing program 4 (id=4184): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = fsmount(r1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000240)=0x5, 0x7) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = fsmount(r0, 0x0, 0xc) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000000280)={r0, 0x0, 0x6d46, 0x0, 0xfffffffffffffff8, 0x4, [0x80, 0x1, 0x9, 0xdd2, 0x4f, 0x5]}) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095000000000000007c45aab297e7a45a4abd22b2a797cca36295798b5b6b62f3125d00000000000000006785181fe7a1528b4d41b177769798166da69f0bed4c49d4ae0cb6fcf77c91fc049e17ddae8eb7f77e72d94e3fe6b4f443f345f7e7a627287109f6784a40a944822109e102687f"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) 8m36.907080483s ago: executing program 60 (id=4184): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = fsmount(r1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000240)=0x5, 0x7) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = fsmount(r0, 0x0, 0xc) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000000280)={r0, 0x0, 0x6d46, 0x0, 0xfffffffffffffff8, 0x4, [0x80, 0x1, 0x9, 0xdd2, 0x4f, 0x5]}) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095000000000000007c45aab297e7a45a4abd22b2a797cca36295798b5b6b62f3125d00000000000000006785181fe7a1528b4d41b177769798166da69f0bed4c49d4ae0cb6fcf77c91fc049e17ddae8eb7f77e72d94e3fe6b4f443f345f7e7a627287109f6784a40a944822109e102687f"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) 8m36.897945106s ago: executing program 2 (id=4187): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_settime(0x1, &(0x7f0000000100)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="200001ff26bd7000fbdbdf250000000000000000", @ANYRES32=0x0, @ANYBLOB="7d1e0300231a0500"], 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x20040040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'batadv0\x00', 0x4000}) socket$inet6_tcp(0xa, 0x1, 0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xfa}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 8m33.342184295s ago: executing program 2 (id=4202): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98000000000000560800000000000085000000b2000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m32.847583985s ago: executing program 2 (id=4205): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r3, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c000000030000000000000008040000000000000000000005000000010000000100000004000000000000000c000000030000000e0000000100000008000000010000000100000100000005040000003000"], &(0x7f0000000400)=""/2, 0x67, 0x2, 0x0, 0x3, 0x10000}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1000000004000000080000000400000000000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000005000000000000000000000000000000000000000000000034d20e081c953232eecfd5cde706837f7885d5c9e716401aeb8ceac8a9ae4bae6358e9b69e2dc36d0c5b93b8311a6842adf5074f7bb79bdd82df988a36652b7b4973b245cf87cde88b656048bfbd468e7cbf1675cc830ecae9acc728f41facb6477d457ff210b3ec8a062598e6b0284fbd3b0a6714bc0e9901937b6256da1f0f518844ce87c9ec00008001b400f46b649f9f17b0c2f929baf734ee7001ce2c3a0c2c3c6fb4f4"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r6}, &(0x7f0000000700), &(0x7f0000000740)=r7}, 0x20) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x60, r9, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x60}}, 0x4) 8m32.474657586s ago: executing program 61 (id=4205): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r3, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c000000030000000000000008040000000000000000000005000000010000000100000004000000000000000c000000030000000e0000000100000008000000010000000100000100000005040000003000"], &(0x7f0000000400)=""/2, 0x67, 0x2, 0x0, 0x3, 0x10000}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1000000004000000080000000400000000000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000005000000000000000000000000000000000000000000000034d20e081c953232eecfd5cde706837f7885d5c9e716401aeb8ceac8a9ae4bae6358e9b69e2dc36d0c5b93b8311a6842adf5074f7bb79bdd82df988a36652b7b4973b245cf87cde88b656048bfbd468e7cbf1675cc830ecae9acc728f41facb6477d457ff210b3ec8a062598e6b0284fbd3b0a6714bc0e9901937b6256da1f0f518844ce87c9ec00008001b400f46b649f9f17b0c2f929baf734ee7001ce2c3a0c2c3c6fb4f4"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r6}, &(0x7f0000000700), &(0x7f0000000740)=r7}, 0x20) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x60, r9, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x60}}, 0x4) 8m25.577766925s ago: executing program 5 (id=4228): ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8) getpgrp(0xffffffffffffffff) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0x1c67, 0x100, 0x23, 0x4000032c}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 8m25.497883555s ago: executing program 5 (id=4229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900010027bd7000fddbdf2500000000", @ANYRES8=r0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000440)={0x90000000}) accept4(r2, 0x0, 0x0, 0x0) 8m24.542680418s ago: executing program 5 (id=4230): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000000101040000000000002f0002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140004"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 8m23.845058681s ago: executing program 5 (id=4231): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000003e040000000000005d000000000000000704000012da0aff2500000017ffffffae040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6b8306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) unlink(&(0x7f0000000080)='./file0/file0\x00') mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_settime(0x1, &(0x7f0000000100)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="200001ff26bd7000fbdbdf250000000000000000", @ANYRES32=0x0, @ANYBLOB="7d1e0300231a0500"], 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x20040040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'batadv0\x00', 0x4000}) socket$inet6_tcp(0xa, 0x1, 0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xfa}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 8m20.527391023s ago: executing program 5 (id=4238): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000440)={0x90000000}) accept4(r0, 0x0, 0x0, 0x0) 8m20.288706013s ago: executing program 5 (id=4240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000306010100000000000000000a0000030900020073797a32000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) (async) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) (async) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001180)=[{{&(0x7f00000002c0)=@tipc=@name, 0x80, &(0x7f0000000b40)=[{&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000540)=""/113, 0x71}, {&(0x7f0000000980)=""/86, 0x56}, {&(0x7f0000000a00)=""/118, 0x76}, {&(0x7f0000000a80)=""/131, 0x83}], 0x6, &(0x7f0000000c00)=""/153, 0x99}}, {{&(0x7f0000000cc0)=@can, 0x80, &(0x7f0000000440)=[{&(0x7f0000000d40)=""/90, 0x5a}, {&(0x7f0000000dc0)=""/178, 0xb2}], 0x2, &(0x7f0000000e80)=""/86, 0x56}, 0x3ff}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000f00)=""/174, 0xae}, {&(0x7f0000000fc0)=""/219, 0xdb}, {&(0x7f00000010c0)=""/65, 0x41}], 0x3, &(0x7f0000001140)=""/19, 0x13}, 0x3}], 0x3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r3, 0x6, 0x0) (async) lseek(r3, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x1e, 0x80000, 0xa00) r6 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') acct(0x0) (async) acct(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS2(r8, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS2(r8, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x368, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x8, 0x4}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x338, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x6}}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_BASIC_POLICE={0x24, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_BASIC_ACT={0x2fc, 0x3, [@m_tunnel_key={0xb8, 0xf, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0x3a, 0x6, "e55fa15b0676e00a9b9ea4fb92d15179da93faa8199989a09e79fed8b6b4af86c4d3dd924c74ca0b95768e2b5fc10c070dd5599a9d96"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x100, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0xd5, 0x6, "ad36f4391a75ed95586cfa04f7b0c8c05808a403901d1dda82e9e8e459e43d6ca2283acd5473a99a39a71e1c9c06fa030abe69d3f43547955930e561e16e43c0aacab70e12c78c0dcabe45cdf8e3464e636fb799c596a4f9fa1f8c5eea65a0a9e6525762c71a755e094ad384706d154caab6078e4df681a713a43ee47ec4589e65ded23bdfe563563e312d7c5b8073e2f572fca7726729aba043c523e3a2f6c60894d019f4f78c638371d7902c7822fa69c9623fec8cd948229d0bc6cf2404e9cfbf1d3bbd3c00d460cf97de433e43a7f2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x140, 0x10, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x5, 0x4, 0x7, 0xc3ed}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x1, 0x3, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffff7f, 0x0, 0x2, 0x4, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x20000000, 0x179}}, @TCA_DEF_DATA={0x6, 0x3, ')\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0xa2, 0x6, "7260547954edc2452167c5e768d449cb703bef02e30d83861de410a2089fb5c29d97a6308c51c8ab335c44283a175719268edc35b48cd28e93326aaa636d12dcf20b829be2f00665a3dc3d6726874455dc857606c13ac68edff3468663df2b9340cc2e7ba025ca5961ec02616b640af41eeb67b49ec0f3234d4b2fc35ec19f1a7a8ca009277f0a2c324567aa2796fa21f12bd225143aacc287748ecc96ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 8m20.109340071s ago: executing program 62 (id=4240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000306010100000000000000000a0000030900020073797a32000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) (async) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) (async) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001180)=[{{&(0x7f00000002c0)=@tipc=@name, 0x80, &(0x7f0000000b40)=[{&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000540)=""/113, 0x71}, {&(0x7f0000000980)=""/86, 0x56}, {&(0x7f0000000a00)=""/118, 0x76}, {&(0x7f0000000a80)=""/131, 0x83}], 0x6, &(0x7f0000000c00)=""/153, 0x99}}, {{&(0x7f0000000cc0)=@can, 0x80, &(0x7f0000000440)=[{&(0x7f0000000d40)=""/90, 0x5a}, {&(0x7f0000000dc0)=""/178, 0xb2}], 0x2, &(0x7f0000000e80)=""/86, 0x56}, 0x3ff}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000f00)=""/174, 0xae}, {&(0x7f0000000fc0)=""/219, 0xdb}, {&(0x7f00000010c0)=""/65, 0x41}], 0x3, &(0x7f0000001140)=""/19, 0x13}, 0x3}], 0x3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r3, 0x6, 0x0) (async) lseek(r3, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x1e, 0x80000, 0xa00) r6 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') acct(0x0) (async) acct(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS2(r8, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS2(r8, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x368, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x8, 0x4}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x338, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x6}}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_BASIC_POLICE={0x24, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_BASIC_ACT={0x2fc, 0x3, [@m_tunnel_key={0xb8, 0xf, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0x3a, 0x6, "e55fa15b0676e00a9b9ea4fb92d15179da93faa8199989a09e79fed8b6b4af86c4d3dd924c74ca0b95768e2b5fc10c070dd5599a9d96"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x100, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0xd5, 0x6, "ad36f4391a75ed95586cfa04f7b0c8c05808a403901d1dda82e9e8e459e43d6ca2283acd5473a99a39a71e1c9c06fa030abe69d3f43547955930e561e16e43c0aacab70e12c78c0dcabe45cdf8e3464e636fb799c596a4f9fa1f8c5eea65a0a9e6525762c71a755e094ad384706d154caab6078e4df681a713a43ee47ec4589e65ded23bdfe563563e312d7c5b8073e2f572fca7726729aba043c523e3a2f6c60894d019f4f78c638371d7902c7822fa69c9623fec8cd948229d0bc6cf2404e9cfbf1d3bbd3c00d460cf97de433e43a7f2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x140, 0x10, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x5, 0x4, 0x7, 0xc3ed}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x1, 0x3, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffff7f, 0x0, 0x2, 0x4, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x20000000, 0x179}}, @TCA_DEF_DATA={0x6, 0x3, ')\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0xa2, 0x6, "7260547954edc2452167c5e768d449cb703bef02e30d83861de410a2089fb5c29d97a6308c51c8ab335c44283a175719268edc35b48cd28e93326aaa636d12dcf20b829be2f00665a3dc3d6726874455dc857606c13ac68edff3468663df2b9340cc2e7ba025ca5961ec02616b640af41eeb67b49ec0f3234d4b2fc35ec19f1a7a8ca009277f0a2c324567aa2796fa21f12bd225143aacc287748ecc96ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 5m15.853134367s ago: executing program 8 (id=4942): r0 = socket(0x80000000000000a, 0x2, 0x0) (async) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) (async) memfd_create(0x0, 0x5) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async, rerun: 64) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) syz_open_procfs(0x0, 0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0e0000000400000000805c005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYRES32=r4], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x1, @private0, 0x98}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @dev={0xfe, 0x80, '\x00', 0x36}, 0x127}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) (async, rerun: 64) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) (rerun: 64) 5m10.846987894s ago: executing program 8 (id=4962): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random='\x00\a]\x00N\v'}) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000006c0)="ad56b6e4820fae9d6dcd3292ea54c7beef915d564c90c200c424ea06f1da34af7fa0157bf805c18446df1a455b08469b92ba0cdb07a96b34c3be5cf0aedcc6da9b569d120d6c2072ea16f9de83b123d5c296863f4396a0470176eda0163ceb32ce605b7b86e8a4af391a24c695716eb989218b897effc50285e9516050d07027619141837f6b28b9df4fd9afa528c7f60100000000000000148bddab526b95e6d4529f4604377767c6c58eeb4c219ad8a0bbf5d1156984dbb9d42adb1263e95bcb0762dba5f108d65412442704f56b7a521119c8a8698dca06fe036a8f16789e03db573bd4b66653f53b0e903e88a8f645", 0xf1) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158ca988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/90, 0x5a}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async) listen(0xffffffffffffffff, 0x8) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000100)={0x0, 0x3, 0x5, 0x62, 0x3}) (async) r8 = socket$packet(0x11, 0x3, 0x300) (async) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r9, 0x4004af07, &(0x7f0000000240)=r10) (async) ioctl$VHOST_SET_LOG_FD(r9, 0x4004af07, &(0x7f0000000000)=r10) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) 5m10.266565094s ago: executing program 8 (id=4966): setxattr$system_posix_acl(&(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000004000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 5m9.597140859s ago: executing program 8 (id=4971): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000001540)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x3f00, 0xb3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m9.530850234s ago: executing program 8 (id=4973): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x330, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00', {}, {}, 0x0, 0x3}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000400001a000000180001801400020064756d6d793000000000000000000000341d4ef0f970136361e66b3e99feefe39eeaea8e795923af73b237924445e18f71d2fd0f2b7392f0921de3cb7bed17d73a2e8bab63caf970104249f33acd4a"], 0x2c}, 0x1, 0x0, 0x0, 0x4008045}, 0x8000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x20000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) r4 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x230, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x65010102, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e20], [0x4e21, 0x4e22]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000340)=""/168, &(0x7f0000000200)=0xa8) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x5ba2, &(0x7f0000000280)={0x0, 0xc404, 0x0, 0x2, 0x365, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000440)=@IORING_OP_TEE={0x21, 0x1e, 0x0, @fd=r5, 0x0, 0x0, 0x8, 0x0, 0x1, {0x0, 0x0, r3}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800}, 0x38) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) connect$802154_dgram(r9, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x400600, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r10) 5m7.562617852s ago: executing program 8 (id=4981): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000002c0)=@ethtool_pauseparam={0x1, 0x5, 0x8, 0x6f4}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getpeername$inet6(r0, &(0x7f0000000100), &(0x7f00000001c0)=0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x141500, 0x0) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000540)={{0x3, 0x2, 0x6ec, 0x40, 0x7, 0x1}, 0x14f, [0x481b, 0xffffffff, 0x8, 0x3, 0x1ff, 0x0, 0x31a3, 0x5, 0x7, 0xfc, 0x5, 0x7, 0x100, 0x1, 0x10, 0x9, 0x2, 0x80, 0x3, 0x2, 0x2, 0x1, 0x6, 0x10001, 0x1, 0xb5af2053, 0xb, 0xfffffff4, 0x7, 0xfffffff8, 0x36, 0x3, 0x1, 0x19e, 0xda, 0x2, 0xa86d, 0x9, 0x9, 0x3, 0x3, 0xe, 0x4, 0xc, 0x9, 0xb5, 0x81, 0x6, 0x9, 0x6, 0x7fffffff, 0x4, 0x1, 0x7, 0xfffffffa, 0x6f, 0x4, 0x9, 0x10000, 0x4, 0x0, 0xffff, 0x7e86f641, 0x6, 0x4, 0x4, 0x4560, 0x7, 0xffff5a9f, 0xff, 0x0, 0xf, 0x8001, 0x4, 0x0, 0xfffff951, 0xc8, 0x1, 0x8, 0x840b5054, 0x7f, 0xd, 0xb7, 0xfffffeff, 0x4, 0x2, 0x6, 0x8, 0x2, 0xa22, 0xfff, 0xec, 0x5, 0x8, 0x800, 0x5, 0x4, 0x2, 0x8, 0x8, 0x8, 0x1, 0x7, 0x2, 0x7f, 0x1, 0x7ff, 0x2, 0x0, 0x5, 0x6, 0x0, 0x0, 0x1ff, 0x1ff, 0xefaf, 0x9, 0x0, 0xd, 0x10000, 0x1e, 0x7, 0x6, 0x5, 0xffffffff, 0xea72, 0x7e8d, 0x49, 0x7fffffff, 0x2, 0x1, 0x897, 0x1, 0x9, 0x5, 0x7fffffff, 0x80000000, 0x8, 0xd9db, 0x1, 0x9, 0x800, 0x1, 0x2, 0x5, 0x8000, 0xabd, 0x5, 0x4, 0x9, 0x6, 0x6, 0x3374, 0x10000, 0x9, 0x81, 0x9, 0x3, 0x4, 0x7, 0x6, 0x10, 0x9, 0x97, 0x8, 0x8001, 0xc, 0xbea1, 0x8, 0x8, 0x1, 0x5, 0x174, 0x8, 0x7, 0x5, 0x4, 0x3, 0x3, 0x4, 0x101, 0x81, 0x5, 0x1ff, 0x0, 0x3, 0xffff0001, 0x5f, 0x0, 0x100, 0x4, 0x8, 0x2, 0xe2cc, 0x0, 0x8, 0x228, 0x6, 0x6, 0x3d51, 0x4, 0x10, 0x7f, 0x8, 0x4, 0x2, 0x825, 0x2, 0xffffffff, 0x8, 0xfffffffb, 0x1, 0xd28d61c5, 0x7f, 0xfffffffe, 0x7, 0xffffff00, 0xc, 0x6, 0xc, 0x4, 0xfffffc01, 0x4, 0x40, 0x4, 0x7, 0x3d2, 0x5f3, 0x8000, 0x9, 0x655, 0x46, 0x32e4, 0x0, 0x1, 0x3, 0x79981c3f, 0x1, 0x5, 0xf, 0x0, 0x4, 0x7, 0xb4b, 0x8, 0x8000, 0xfffffffe, 0x7, 0xafa0, 0x9, 0x80000000, 0xfffffffd, 0x8, 0x8, 0x6, 0x9, 0x1, 0xfffffffb, 0x5124, 0x100, 0x7f, 0x7, 0x3, 0xd, 0x81, 0xfffffffa, 0x4, 0x2, 0x4, 0x1, 0xd4, 0x7, 0x858, 0x4a1, 0xe1c7, 0x4a6, 0x9, 0xa, 0x2, 0x7, 0x0, 0x8, 0x6677, 0xb703, 0x0, 0x3, 0x9, 0x9, 0xfe6, 0x3, 0x1000, 0x48, 0x3, 0x4, 0x5c, 0x5, 0x1, 0x0, 0x7, 0x2aa, 0x75f8, 0x7, 0x6, 0x2, 0x1, 0x1, 0x9, 0x1, 0xdf, 0xd0d7, 0x8, 0x3ff, 0x2, 0x1, 0xc, 0x0, 0xfffffffc, 0x2, 0x5, 0x21e754bb, 0x7, 0x9, 0x7, 0x0, 0x3, 0xe88c, 0xbe4, 0x40, 0x8001, 0x4fab, 0x1, 0x5, 0x100, 0x5, 0x4c, 0xfa6, 0x80, 0x2f, 0x7, 0x6, 0x7, 0x6, 0xd01, 0x1, 0x9, 0x5, 0x3fff800, 0x0, 0x2, 0xe, 0x200, 0x0, 0x8, 0x5, 0x101, 0x4, 0x8, 0x4, 0x9, 0x101, 0x8, 0x4, 0x5, 0x4000, 0xe, 0x6, 0xb9a42bf, 0x7, 0x3, 0x4, 0x5, 0xd64, 0x4, 0x7, 0x8, 0x2, 0x58, 0x7ff, 0x1ff, 0x7fff, 0x0, 0x6, 0x100, 0x5, 0x4, 0xfffffffb, 0x2f, 0x9, 0x5, 0x7f, 0x6a, 0x4, 0x5, 0x2, 0x8, 0x7, 0x9, 0x2, 0xfffffffc, 0x4, 0x2, 0x6, 0x6, 0xfa3f6302, 0xffff, 0xb, 0xffff7fff, 0x9, 0x4, 0x0, 0x1, 0x10001, 0x8, 0x8, 0x5, 0xffffe550, 0x9, 0x7, 0xffff204b, 0x4, 0x9, 0x101, 0x44eb2c4e, 0x3, 0x0, 0x3, 0x8, 0x1, 0x0, 0x8, 0x1, 0xffffffff, 0x7, 0x1, 0x7, 0x6cc5, 0x4, 0xffff, 0x0, 0x45, 0x4, 0xff, 0x3, 0x2, 0x3, 0xfffffffe, 0x0, 0x2, 0x1, 0x3, 0xfab, 0x5, 0xfda, 0xd5, 0x7, 0x38e, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x8, 0x9, 0x9, 0x1, 0x5, 0x6, 0x2, 0x9e8, 0x4, 0x8, 0x9cf, 0xe, 0xf3a, 0x2, 0x5, 0x8, 0x6, 0x5, 0x2, 0x5, 0x3, 0x2, 0xb178, 0x3, 0x3ff, 0x2, 0x8, 0xb, 0x3, 0x7ff, 0x3, 0x572, 0xd, 0x9, 0x9, 0x2974, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0xaccf, 0x6, 0x1, 0x1, 0x4, 0x4, 0x763, 0x81, 0x9, 0x7, 0xa, 0x6, 0xfffffffa, 0x4, 0xa, 0x0, 0x3, 0x3, 0x2, 0x7, 0x7, 0x0, 0x7ff, 0x400, 0x10000, 0xfff, 0xfffffffd, 0x0, 0x4, 0xd1, 0x1ff8000, 0x4, 0x5, 0x4, 0x10001, 0xc0, 0x5, 0x6, 0x3, 0x8000, 0x2, 0x7, 0x845, 0x7886f2db, 0x5, 0xe, 0x3, 0xa, 0xc87c, 0xb0, 0x2, 0x6, 0x188d, 0x7f, 0x401, 0x3, 0x9, 0xbcd2, 0x800, 0x4, 0x0, 0xffff8001, 0x5, 0x4, 0x2, 0x80000001, 0x1, 0x4, 0x2, 0x9, 0xbd, 0xff99, 0xa, 0xffffffff, 0x3, 0xf, 0x10, 0xb7e, 0x7, 0x1, 0x101, 0xffffff40, 0x1, 0x6, 0x200000ff, 0x3f, 0x9, 0x311, 0x7b74, 0x7, 0x1, 0x800, 0x6, 0x101, 0x5728370d, 0x0, 0x0, 0x8, 0x3, 0x8000, 0x24, 0x40, 0x2, 0x10001, 0xa7, 0x8, 0x9, 0x1, 0x4, 0x6, 0x428, 0x7, 0x27d, 0x721, 0x9, 0x1, 0x9, 0xd, 0x1, 0x9, 0x8, 0x9, 0x0, 0x80000000, 0xffff0000, 0x8, 0x8, 0x3, 0x5, 0x0, 0x6, 0x6, 0x8, 0x28, 0x2, 0x2, 0x5, 0x9, 0x3, 0x81, 0x200, 0x3, 0x9, 0x0, 0x3, 0x6, 0x6, 0x7905, 0xc0, 0x8, 0x2, 0x0, 0x4, 0x2, 0x9, 0x0, 0x95, 0x200, 0x2b0, 0x0, 0x10f9, 0x4, 0x6, 0x1c0b4529, 0x8, 0xffff2b75, 0x8a1cf3c, 0x200, 0xe2ce, 0x401, 0x2, 0x3, 0x0, 0x9f, 0x9, 0x0, 0x6, 0x101, 0x4, 0x4, 0xfffffffd, 0x8, 0x4, 0xfffffffa, 0xf459, 0x7f, 0x4, 0x6, 0x9, 0x3, 0x3, 0x91, 0x4, 0xfff, 0x5, 0xe2, 0x0, 0x5, 0x0, 0x91e, 0xb, 0x8, 0x27, 0x3, 0x4, 0x7fff, 0x9, 0x4, 0x5, 0x3, 0x730a9872, 0xfe, 0x9, 0x6e, 0xd1, 0x3ff, 0x10, 0x85d, 0x1, 0x3, 0x0, 0x80000001, 0x9, 0x6, 0x7, 0x0, 0x8, 0x5, 0x80, 0x3, 0x3, 0x6, 0xfffffffa, 0x3ff, 0x7, 0x950, 0x7fffffff, 0xde, 0x7, 0xaaa, 0x8, 0x4, 0x9, 0x3, 0x10001, 0x0, 0x5, 0x1, 0xfff, 0x4a3b, 0x1, 0x7f, 0x2, 0x9, 0xd14, 0x4, 0x2356, 0x1000, 0x80000000, 0x3, 0xaf8, 0x5, 0x7, 0x1000, 0x1, 0xe0000, 0x3c00, 0x10, 0x10, 0x200, 0x8000, 0x8, 0x5, 0x4, 0x80000001, 0x1, 0x9f3, 0x4, 0x5, 0x5, 0x0, 0x800, 0x8, 0x5, 0x8, 0xe9, 0xfffffc01, 0x724c00, 0x9eb, 0x8, 0x8, 0x6, 0x2, 0x9, 0x2, 0x1, 0x0, 0x5, 0x200, 0x8, 0xf, 0x1, 0xa, 0x1cf, 0x80000000, 0xbf, 0x800, 0x5, 0x9, 0x9, 0xfd1, 0x6, 0x3, 0x6, 0x7c, 0x4, 0x800, 0x7, 0x6, 0xec3, 0x400, 0xa, 0xaa, 0x4, 0x100, 0x1, 0x3, 0x5, 0x7, 0x83, 0x3, 0x5, 0x7f, 0x0, 0x80000000, 0x5, 0x6, 0x8, 0x876f, 0x4, 0x10, 0x7f, 0x9, 0x9, 0x5, 0xf, 0xc, 0x3ff, 0x7, 0xfffffffb, 0x2, 0x4, 0x9, 0xca, 0xedc7, 0x3, 0x4, 0x96d, 0x3, 0x4, 0x22c, 0x81, 0x3, 0x101, 0xb70, 0x7, 0x4, 0x6, 0x1, 0x3, 0x5, 0x8, 0x0, 0x9539, 0x8f, 0x3, 0x8, 0xf, 0x0, 0x40, 0xeb, 0x29, 0x5, 0x6, 0xc, 0x9, 0x2, 0x6c, 0x3, 0x1, 0x9, 0x3510, 0x6, 0x2, 0x4, 0xb68, 0x0, 0x5, 0x2, 0x8, 0x2fb1, 0x9, 0x7ff, 0x8, 0x3, 0x2, 0xccac, 0x800, 0x0, 0x0, 0x3fc0, 0x3, 0x8, 0x7, 0x4, 0x3a5, 0x8, 0x80000001, 0x4, 0x9, 0x8, 0x1000, 0x6, 0x6, 0x9, 0x80000000, 0x9, 0x8, 0x2, 0x1, 0x6, 0x7, 0x9, 0x2, 0xd, 0x7b, 0x9, 0x4, 0x7f, 0x4, 0x5, 0x8, 0x10, 0x7, 0x7f, 0x7, 0x800, 0x5, 0x3, 0x8, 0x7fff, 0x9, 0x5a43, 0x2, 0x1, 0x1, 0x0, 0x7f, 0x6, 0x1, 0xd, 0x9, 0x2, 0xffffffff, 0x93d, 0x90, 0x6, 0xa103, 0x2, 0x3, 0x7fffffff, 0xf, 0x2, 0xe7f, 0xff, 0x3, 0x7, 0x148, 0x9a4e, 0xea1, 0x2, 0x0, 0x253, 0x3, 0xfffffffe, 0xffffffff, 0x4, 0x6, 0x6af, 0x10001, 0x335c, 0x40, 0xfffffffd, 0x9, 0x2, 0x80000000, 0xfffffffd, 0x8, 0x7, 0xffffff9e, 0x77, 0x7, 0x2, 0x4, 0x5, 0x8, 0x9, 0x200, 0xa35f, 0x7, 0x55c1, 0x5, 0xfffffff0, 0xfffffffa, 0x5, 0x3, 0x5, 0x7, 0x9, 0x0, 0xecc]}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500feff0000000085100000faffffff95000000000000005dc4b7b6904caf9ddd06e45a73f6d6ce5d1111857be0fcb1da4e2bac932b48e3e1586c56ec6d3393e0451f80a5091ec995da30ddea6119dc5f5e4e8b5296a97499650b11cca7a003459c42b66fd72ed7137efc82fcf21fd24a594f82fb584b656cae857a09b2539950f935bb5c9d6bfaec9a566d9673438197407815c01e54a569fa8cd14cceddfb884fcc56741fc74f72e1405cf49ffc516bbf"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r6, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r7, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 4m51.470105519s ago: executing program 63 (id=4981): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000002c0)=@ethtool_pauseparam={0x1, 0x5, 0x8, 0x6f4}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getpeername$inet6(r0, &(0x7f0000000100), &(0x7f00000001c0)=0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x141500, 0x0) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000540)={{0x3, 0x2, 0x6ec, 0x40, 0x7, 0x1}, 0x14f, [0x481b, 0xffffffff, 0x8, 0x3, 0x1ff, 0x0, 0x31a3, 0x5, 0x7, 0xfc, 0x5, 0x7, 0x100, 0x1, 0x10, 0x9, 0x2, 0x80, 0x3, 0x2, 0x2, 0x1, 0x6, 0x10001, 0x1, 0xb5af2053, 0xb, 0xfffffff4, 0x7, 0xfffffff8, 0x36, 0x3, 0x1, 0x19e, 0xda, 0x2, 0xa86d, 0x9, 0x9, 0x3, 0x3, 0xe, 0x4, 0xc, 0x9, 0xb5, 0x81, 0x6, 0x9, 0x6, 0x7fffffff, 0x4, 0x1, 0x7, 0xfffffffa, 0x6f, 0x4, 0x9, 0x10000, 0x4, 0x0, 0xffff, 0x7e86f641, 0x6, 0x4, 0x4, 0x4560, 0x7, 0xffff5a9f, 0xff, 0x0, 0xf, 0x8001, 0x4, 0x0, 0xfffff951, 0xc8, 0x1, 0x8, 0x840b5054, 0x7f, 0xd, 0xb7, 0xfffffeff, 0x4, 0x2, 0x6, 0x8, 0x2, 0xa22, 0xfff, 0xec, 0x5, 0x8, 0x800, 0x5, 0x4, 0x2, 0x8, 0x8, 0x8, 0x1, 0x7, 0x2, 0x7f, 0x1, 0x7ff, 0x2, 0x0, 0x5, 0x6, 0x0, 0x0, 0x1ff, 0x1ff, 0xefaf, 0x9, 0x0, 0xd, 0x10000, 0x1e, 0x7, 0x6, 0x5, 0xffffffff, 0xea72, 0x7e8d, 0x49, 0x7fffffff, 0x2, 0x1, 0x897, 0x1, 0x9, 0x5, 0x7fffffff, 0x80000000, 0x8, 0xd9db, 0x1, 0x9, 0x800, 0x1, 0x2, 0x5, 0x8000, 0xabd, 0x5, 0x4, 0x9, 0x6, 0x6, 0x3374, 0x10000, 0x9, 0x81, 0x9, 0x3, 0x4, 0x7, 0x6, 0x10, 0x9, 0x97, 0x8, 0x8001, 0xc, 0xbea1, 0x8, 0x8, 0x1, 0x5, 0x174, 0x8, 0x7, 0x5, 0x4, 0x3, 0x3, 0x4, 0x101, 0x81, 0x5, 0x1ff, 0x0, 0x3, 0xffff0001, 0x5f, 0x0, 0x100, 0x4, 0x8, 0x2, 0xe2cc, 0x0, 0x8, 0x228, 0x6, 0x6, 0x3d51, 0x4, 0x10, 0x7f, 0x8, 0x4, 0x2, 0x825, 0x2, 0xffffffff, 0x8, 0xfffffffb, 0x1, 0xd28d61c5, 0x7f, 0xfffffffe, 0x7, 0xffffff00, 0xc, 0x6, 0xc, 0x4, 0xfffffc01, 0x4, 0x40, 0x4, 0x7, 0x3d2, 0x5f3, 0x8000, 0x9, 0x655, 0x46, 0x32e4, 0x0, 0x1, 0x3, 0x79981c3f, 0x1, 0x5, 0xf, 0x0, 0x4, 0x7, 0xb4b, 0x8, 0x8000, 0xfffffffe, 0x7, 0xafa0, 0x9, 0x80000000, 0xfffffffd, 0x8, 0x8, 0x6, 0x9, 0x1, 0xfffffffb, 0x5124, 0x100, 0x7f, 0x7, 0x3, 0xd, 0x81, 0xfffffffa, 0x4, 0x2, 0x4, 0x1, 0xd4, 0x7, 0x858, 0x4a1, 0xe1c7, 0x4a6, 0x9, 0xa, 0x2, 0x7, 0x0, 0x8, 0x6677, 0xb703, 0x0, 0x3, 0x9, 0x9, 0xfe6, 0x3, 0x1000, 0x48, 0x3, 0x4, 0x5c, 0x5, 0x1, 0x0, 0x7, 0x2aa, 0x75f8, 0x7, 0x6, 0x2, 0x1, 0x1, 0x9, 0x1, 0xdf, 0xd0d7, 0x8, 0x3ff, 0x2, 0x1, 0xc, 0x0, 0xfffffffc, 0x2, 0x5, 0x21e754bb, 0x7, 0x9, 0x7, 0x0, 0x3, 0xe88c, 0xbe4, 0x40, 0x8001, 0x4fab, 0x1, 0x5, 0x100, 0x5, 0x4c, 0xfa6, 0x80, 0x2f, 0x7, 0x6, 0x7, 0x6, 0xd01, 0x1, 0x9, 0x5, 0x3fff800, 0x0, 0x2, 0xe, 0x200, 0x0, 0x8, 0x5, 0x101, 0x4, 0x8, 0x4, 0x9, 0x101, 0x8, 0x4, 0x5, 0x4000, 0xe, 0x6, 0xb9a42bf, 0x7, 0x3, 0x4, 0x5, 0xd64, 0x4, 0x7, 0x8, 0x2, 0x58, 0x7ff, 0x1ff, 0x7fff, 0x0, 0x6, 0x100, 0x5, 0x4, 0xfffffffb, 0x2f, 0x9, 0x5, 0x7f, 0x6a, 0x4, 0x5, 0x2, 0x8, 0x7, 0x9, 0x2, 0xfffffffc, 0x4, 0x2, 0x6, 0x6, 0xfa3f6302, 0xffff, 0xb, 0xffff7fff, 0x9, 0x4, 0x0, 0x1, 0x10001, 0x8, 0x8, 0x5, 0xffffe550, 0x9, 0x7, 0xffff204b, 0x4, 0x9, 0x101, 0x44eb2c4e, 0x3, 0x0, 0x3, 0x8, 0x1, 0x0, 0x8, 0x1, 0xffffffff, 0x7, 0x1, 0x7, 0x6cc5, 0x4, 0xffff, 0x0, 0x45, 0x4, 0xff, 0x3, 0x2, 0x3, 0xfffffffe, 0x0, 0x2, 0x1, 0x3, 0xfab, 0x5, 0xfda, 0xd5, 0x7, 0x38e, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x8, 0x9, 0x9, 0x1, 0x5, 0x6, 0x2, 0x9e8, 0x4, 0x8, 0x9cf, 0xe, 0xf3a, 0x2, 0x5, 0x8, 0x6, 0x5, 0x2, 0x5, 0x3, 0x2, 0xb178, 0x3, 0x3ff, 0x2, 0x8, 0xb, 0x3, 0x7ff, 0x3, 0x572, 0xd, 0x9, 0x9, 0x2974, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0xaccf, 0x6, 0x1, 0x1, 0x4, 0x4, 0x763, 0x81, 0x9, 0x7, 0xa, 0x6, 0xfffffffa, 0x4, 0xa, 0x0, 0x3, 0x3, 0x2, 0x7, 0x7, 0x0, 0x7ff, 0x400, 0x10000, 0xfff, 0xfffffffd, 0x0, 0x4, 0xd1, 0x1ff8000, 0x4, 0x5, 0x4, 0x10001, 0xc0, 0x5, 0x6, 0x3, 0x8000, 0x2, 0x7, 0x845, 0x7886f2db, 0x5, 0xe, 0x3, 0xa, 0xc87c, 0xb0, 0x2, 0x6, 0x188d, 0x7f, 0x401, 0x3, 0x9, 0xbcd2, 0x800, 0x4, 0x0, 0xffff8001, 0x5, 0x4, 0x2, 0x80000001, 0x1, 0x4, 0x2, 0x9, 0xbd, 0xff99, 0xa, 0xffffffff, 0x3, 0xf, 0x10, 0xb7e, 0x7, 0x1, 0x101, 0xffffff40, 0x1, 0x6, 0x200000ff, 0x3f, 0x9, 0x311, 0x7b74, 0x7, 0x1, 0x800, 0x6, 0x101, 0x5728370d, 0x0, 0x0, 0x8, 0x3, 0x8000, 0x24, 0x40, 0x2, 0x10001, 0xa7, 0x8, 0x9, 0x1, 0x4, 0x6, 0x428, 0x7, 0x27d, 0x721, 0x9, 0x1, 0x9, 0xd, 0x1, 0x9, 0x8, 0x9, 0x0, 0x80000000, 0xffff0000, 0x8, 0x8, 0x3, 0x5, 0x0, 0x6, 0x6, 0x8, 0x28, 0x2, 0x2, 0x5, 0x9, 0x3, 0x81, 0x200, 0x3, 0x9, 0x0, 0x3, 0x6, 0x6, 0x7905, 0xc0, 0x8, 0x2, 0x0, 0x4, 0x2, 0x9, 0x0, 0x95, 0x200, 0x2b0, 0x0, 0x10f9, 0x4, 0x6, 0x1c0b4529, 0x8, 0xffff2b75, 0x8a1cf3c, 0x200, 0xe2ce, 0x401, 0x2, 0x3, 0x0, 0x9f, 0x9, 0x0, 0x6, 0x101, 0x4, 0x4, 0xfffffffd, 0x8, 0x4, 0xfffffffa, 0xf459, 0x7f, 0x4, 0x6, 0x9, 0x3, 0x3, 0x91, 0x4, 0xfff, 0x5, 0xe2, 0x0, 0x5, 0x0, 0x91e, 0xb, 0x8, 0x27, 0x3, 0x4, 0x7fff, 0x9, 0x4, 0x5, 0x3, 0x730a9872, 0xfe, 0x9, 0x6e, 0xd1, 0x3ff, 0x10, 0x85d, 0x1, 0x3, 0x0, 0x80000001, 0x9, 0x6, 0x7, 0x0, 0x8, 0x5, 0x80, 0x3, 0x3, 0x6, 0xfffffffa, 0x3ff, 0x7, 0x950, 0x7fffffff, 0xde, 0x7, 0xaaa, 0x8, 0x4, 0x9, 0x3, 0x10001, 0x0, 0x5, 0x1, 0xfff, 0x4a3b, 0x1, 0x7f, 0x2, 0x9, 0xd14, 0x4, 0x2356, 0x1000, 0x80000000, 0x3, 0xaf8, 0x5, 0x7, 0x1000, 0x1, 0xe0000, 0x3c00, 0x10, 0x10, 0x200, 0x8000, 0x8, 0x5, 0x4, 0x80000001, 0x1, 0x9f3, 0x4, 0x5, 0x5, 0x0, 0x800, 0x8, 0x5, 0x8, 0xe9, 0xfffffc01, 0x724c00, 0x9eb, 0x8, 0x8, 0x6, 0x2, 0x9, 0x2, 0x1, 0x0, 0x5, 0x200, 0x8, 0xf, 0x1, 0xa, 0x1cf, 0x80000000, 0xbf, 0x800, 0x5, 0x9, 0x9, 0xfd1, 0x6, 0x3, 0x6, 0x7c, 0x4, 0x800, 0x7, 0x6, 0xec3, 0x400, 0xa, 0xaa, 0x4, 0x100, 0x1, 0x3, 0x5, 0x7, 0x83, 0x3, 0x5, 0x7f, 0x0, 0x80000000, 0x5, 0x6, 0x8, 0x876f, 0x4, 0x10, 0x7f, 0x9, 0x9, 0x5, 0xf, 0xc, 0x3ff, 0x7, 0xfffffffb, 0x2, 0x4, 0x9, 0xca, 0xedc7, 0x3, 0x4, 0x96d, 0x3, 0x4, 0x22c, 0x81, 0x3, 0x101, 0xb70, 0x7, 0x4, 0x6, 0x1, 0x3, 0x5, 0x8, 0x0, 0x9539, 0x8f, 0x3, 0x8, 0xf, 0x0, 0x40, 0xeb, 0x29, 0x5, 0x6, 0xc, 0x9, 0x2, 0x6c, 0x3, 0x1, 0x9, 0x3510, 0x6, 0x2, 0x4, 0xb68, 0x0, 0x5, 0x2, 0x8, 0x2fb1, 0x9, 0x7ff, 0x8, 0x3, 0x2, 0xccac, 0x800, 0x0, 0x0, 0x3fc0, 0x3, 0x8, 0x7, 0x4, 0x3a5, 0x8, 0x80000001, 0x4, 0x9, 0x8, 0x1000, 0x6, 0x6, 0x9, 0x80000000, 0x9, 0x8, 0x2, 0x1, 0x6, 0x7, 0x9, 0x2, 0xd, 0x7b, 0x9, 0x4, 0x7f, 0x4, 0x5, 0x8, 0x10, 0x7, 0x7f, 0x7, 0x800, 0x5, 0x3, 0x8, 0x7fff, 0x9, 0x5a43, 0x2, 0x1, 0x1, 0x0, 0x7f, 0x6, 0x1, 0xd, 0x9, 0x2, 0xffffffff, 0x93d, 0x90, 0x6, 0xa103, 0x2, 0x3, 0x7fffffff, 0xf, 0x2, 0xe7f, 0xff, 0x3, 0x7, 0x148, 0x9a4e, 0xea1, 0x2, 0x0, 0x253, 0x3, 0xfffffffe, 0xffffffff, 0x4, 0x6, 0x6af, 0x10001, 0x335c, 0x40, 0xfffffffd, 0x9, 0x2, 0x80000000, 0xfffffffd, 0x8, 0x7, 0xffffff9e, 0x77, 0x7, 0x2, 0x4, 0x5, 0x8, 0x9, 0x200, 0xa35f, 0x7, 0x55c1, 0x5, 0xfffffff0, 0xfffffffa, 0x5, 0x3, 0x5, 0x7, 0x9, 0x0, 0xecc]}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500feff0000000085100000faffffff95000000000000005dc4b7b6904caf9ddd06e45a73f6d6ce5d1111857be0fcb1da4e2bac932b48e3e1586c56ec6d3393e0451f80a5091ec995da30ddea6119dc5f5e4e8b5296a97499650b11cca7a003459c42b66fd72ed7137efc82fcf21fd24a594f82fb584b656cae857a09b2539950f935bb5c9d6bfaec9a566d9673438197407815c01e54a569fa8cd14cceddfb884fcc56741fc74f72e1405cf49ffc516bbf"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r6, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r7, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 2m28.542886697s ago: executing program 9 (id=5704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000200001030000000000200000020000000000000306000000080003"], 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100039048a61d9a3000000000000ff00", @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000000000c00028008000300e0"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 2m28.348575677s ago: executing program 9 (id=5707): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x2}]}, {0x0, [0x61, 0x61, 0x5f, 0x61]}}, &(0x7f0000002200)=""/4106, 0x2a, 0x100a, 0x1}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)=0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {0xdd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) 2m27.337350614s ago: executing program 9 (id=5711): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x18c) r4 = semget$private(0x0, 0x4000, 0x0) semctl$SETALL(r4, 0x0, 0x14, &(0x7f0000000740)) socket$inet(0x2, 0x80001, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000100000000000005040000000000000010000200000000002000000000000000456deb880f"], 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 2m25.021897159s ago: executing program 9 (id=5729): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000100)) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)='Y', 0x1}], 0x1}, 0x240400d0) 2m24.849903117s ago: executing program 9 (id=5732): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) inotify_init1(0x800) r1 = syz_io_uring_setup(0x18c1, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 2m24.099343926s ago: executing program 9 (id=5734): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40041271, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0xfffffffe, 0x1, 0x3, 0x1, 0x0, 0x4}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b32, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ad5000/0x14000)=nil, &(0x7f0000c5c000/0x3000)=nil, &(0x7f0000438000/0x2000)=nil, &(0x7f0000a1f000/0x1000)=nil, &(0x7f000060c000/0x3000)=nil, &(0x7f0000797000/0x2000)=nil, &(0x7f0000bf4000/0x2000)=nil, &(0x7f00008cd000/0x1000)=nil, &(0x7f0000b36000/0x1000)=nil, &(0x7f00007a1000/0x2000)=nil, &(0x7f0000000000), 0x0, r1}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x42002, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0xf0, 0x960, 0x3c00, 0x384, 0x5, 0xfbd, 0x20, 0x0, {0x3, 0x7, 0x1}, {0x7, 0x4, 0x1}, {0xc57d, 0x1ff, 0x1}, {0x7, 0x3}, 0x2, 0x100, 0xfffffffa, 0x2, 0x1, 0xe, 0x1, 0x7, 0x6, 0x80000000, 0x2, 0x9, 0x3, 0x2, 0x0, 0x5}) fdatasync(r0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x550, 0x280, 0x5, 0x0, 0x1, 0x0, {0x0, 0xd}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x3, 0xd611, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}) 2m8.034682088s ago: executing program 64 (id=5734): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40041271, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0xfffffffe, 0x1, 0x3, 0x1, 0x0, 0x4}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b32, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ad5000/0x14000)=nil, &(0x7f0000c5c000/0x3000)=nil, &(0x7f0000438000/0x2000)=nil, &(0x7f0000a1f000/0x1000)=nil, &(0x7f000060c000/0x3000)=nil, &(0x7f0000797000/0x2000)=nil, &(0x7f0000bf4000/0x2000)=nil, &(0x7f00008cd000/0x1000)=nil, &(0x7f0000b36000/0x1000)=nil, &(0x7f00007a1000/0x2000)=nil, &(0x7f0000000000), 0x0, r1}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x42002, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0xf0, 0x960, 0x3c00, 0x384, 0x5, 0xfbd, 0x20, 0x0, {0x3, 0x7, 0x1}, {0x7, 0x4, 0x1}, {0xc57d, 0x1ff, 0x1}, {0x7, 0x3}, 0x2, 0x100, 0xfffffffa, 0x2, 0x1, 0xe, 0x1, 0x7, 0x6, 0x80000000, 0x2, 0x9, 0x3, 0x2, 0x0, 0x5}) fdatasync(r0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x550, 0x280, 0x5, 0x0, 0x1, 0x0, {0x0, 0xd}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x3, 0xd611, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}) 16.574442136s ago: executing program 6 (id=6343): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x700, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 16.439497727s ago: executing program 6 (id=6344): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) getpgrp(0x0) (async) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12011001000000108a25360000000000000109022400010000b00018040000020300030016210000000122a000090581031000000000944351442d31ad108c688563c3eaf106d2ad0b08d76dd15314fb2015ac585cb9ab11a2c63abc037860f81d68adfa635ab4bda63b07b1b21a79d7b6464668f710bdbb27732a9c60ecb07c787cfff8ac3d"], 0x0) (async) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12011001000000108a25360000000000000109022400010000b00018040000020300030016210000000122a000090581031000000000944351442d31ad108c688563c3eaf106d2ad0b08d76dd15314fb2015ac585cb9ab11a2c63abc037860f81d68adfa635ab4bda63b07b1b21a79d7b6464668f710bdbb27732a9c60ecb07c787cfff8ac3d"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x800, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x13}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x35}, &(0x7f0000000440)=0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 12.511042984s ago: executing program 6 (id=6358): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x1000040, &(0x7f0000000140)=ANY=[@ANYBLOB="75737271756f74615f626c6f636b5f686172645a696d68743d4275537271756f74615f696e6f64655ff46818a8e1152473743d362c00"]) r0 = syz_usbip_server_init(0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0xa, 0x0, &(0x7f0000000380)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902"], 0x0) write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) 10.204965314s ago: executing program 3 (id=6369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="30010000160011072bbd7000fcdbdf25fe880000000000000000000000000001fe8000000000000000000000000000aa4e2400014e210003020020a032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d66c000000fe88000000000000000000000000000118010000000000000500000000000000000000000000000008000000000000000300000000000000e10b0000000000002500000000000000001000000000000900000000000000400000000000000005000000000000000000000000000400000000001d9a0000cb09000027bd7000000000000a0003001000000000000000040000000180000014"], 0x130}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000002c0)={'macvlan0\x00', @local}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x8802, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) readv(r8, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x4e14, 0x913a, 0x41, 0x0, 0x0) 10.187611913s ago: executing program 6 (id=6371): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00010609860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 10.065123566s ago: executing program 6 (id=6372): socket$caif_stream(0x25, 0x1, 0x2) socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x240400c2) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x240400c2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0xe000, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0xe000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x2, 0xc6, &(0x7f0000000380)=""/198, 0x41000, 0x3d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000000c0)={0x10, 0x2f, 0x15, 0x5, 0x4, 0xe, 0x3, 0xc3}) (async) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000000c0)={0x10, 0x2f, 0x15, 0x5, 0x4, 0xe, 0x3, 0xc3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() (async) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file2'}}, {@redirect_dir_on}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@index_off}, {@xino_on}], [], 0x2c}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f000099e000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f000099e000/0x2000)=nil, 0x2000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x0, 0x1000001, 0x8010, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0x40045010, &(0x7f0000000300)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) (async) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) (async) read$msr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 8.033364259s ago: executing program 7 (id=6377): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x3, 0x6}, {0x6, 0x0, 0x0, 0x40}]}) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x258a, 0x36, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000740)='rxrpc\x00', 0x0, &(0x7f0000000900)="0e1300c38282d169fa358b4043d99f820ea0800561ca59ff14fbbc97b6", 0x1d, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mq_unlink(0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="4004552bb7e5018619673f871bbb3867e436d2f9b734da1c7b841c810a5ba209795a112c33eb4c1b7f446c1051af2e8d"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.957046119s ago: executing program 3 (id=6385): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x99, r2, 0x7}, 0x80, 0x0}}], 0x1, 0x80) ioctl$SIOCRSACCEPT(r1, 0x89e3) 5.845219634s ago: executing program 3 (id=6386): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000680)=""/102400, 0x19000) setrlimit(0xe, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') r2 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x600, 0x0, 0x0, [0x48, 0x75f, 0x1, 0x8, 0x7, 0xf], 0x8, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00') r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r5 = syz_io_uring_setup(0x83a, &(0x7f00000000c0)={0x0, 0x3d06, 0x400, 0x2, 0x3ce}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0xffffff97, &(0x7f00000002c0)=@x25, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x49d4, &(0x7f0000000380)={0x0, 0xc4b, 0x2, 0x0, 0x4000}, &(0x7f0000000240)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.987690485s ago: executing program 3 (id=6389): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x1f8, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x81, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@arp={@rand_addr=0x64010100, @loopback, 0xff, 0x0, 0x0, 0x1, {@mac, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x88ede4f229c5de10, 0xff]}}, 0x0, 0x7, 0xfff7, 0x8, 0x9, 0xf, 'wg0\x00', 'pim6reg0\x00', {}, {}, 0x0, 0x200}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 4.928591009s ago: executing program 3 (id=6391): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r4, @ANYBLOB="05"], 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00006c3000/0x2000)=nil, 0x2000}, 0x2}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xf, @empty, 0x10000}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x934e, @loopback, 0x100}, @in6={0xa, 0x4e23, 0x80, @private1, 0xfb8c}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e21, @remote}], 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000001ac0)={0x0, 'veth0_vlan\x00', {0x3}, 0x4006}) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) 4.877416851s ago: executing program 7 (id=6393): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) move_mount(0xffffffffffffffff, &(0x7f0000000400)='\x00', 0xffffffffffffff9c, 0x0, 0x54) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000013, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) move_mount(0xffffffffffffffff, &(0x7f0000000400)='\x00', 0xffffffffffffff9c, 0x0, 0x54) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000013, 0x13, r0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) 4.796725257s ago: executing program 7 (id=6395): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000070000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r5, 0x0, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x5, 0xf}, {0x7}, {0x3, 0x5}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r5) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) mount$afs(&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2a9d003, &(0x7f0000000940)={[{@flock_write}, {@flock_local}, {@dyn}], [{@pcr={'pcr', 0x3d, 0x2e}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, '\x00sSc|\xb6\xbb\xf5n\xb4\xb4\x9c\xbe\xf4\xa4h\xf9^\x88\xb0\xeb\x12~\xbb\x99g\xd4/\x85\f/\\\xb4\xbd\x19\x83\xec\x03\xa1\x14y\xcad\x9d#\xc1\x10\xd1\x12\xb2`\x1d\xd1g>\xd4\x9b\x87\xab\x01a\xa7\xd8\xa3\xae6_\x1b.\xf2;\xba\xd0\x94\x13\xa33dr\xcf\xf3\xba\x94\xeb`\x03\xfb\xac\x82C\xe3\xeec>\x00\x06\x00'/110}}]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x38, r8, 0xe7816804f9787cab, 0x70b52a, 0x25dfdc03, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40002084) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\\}\x00') 4.553161648s ago: executing program 7 (id=6398): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'wg0\x00', @remote}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB], 0x1c4}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={0x0, 0x10}, 0x1, 0x7}, 0x20040000) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300016000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20000000) 2.768876764s ago: executing program 3 (id=6402): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYBLOB="f38e668206b88fb6413cfa13f63246"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x2, 0x0) (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0xb, "c06f6f36010fe15762ed1f"}, 0x0}) 2.541468211s ago: executing program 1 (id=6403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) close(0x3) 2.432083354s ago: executing program 1 (id=6405): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010040", 0x7) syz_emit_ethernet(0x4e, &(0x7f0000000f80)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60f9edff00183ae1cac200fe8000000000000000000000000000bb00000000000000000000ffff7fe0ff018a0090781000ffff00000000000000000000000000000001d7c11ef16a28f669bfc959eb746a6879b3984e88a618b25ccd0f88b3b5bb51f63f1d9a2a2068cf27c1f19423b121220a8ce12a43c2cdee22182e8e5ee525dad4aa46375e80dd5cc1ebe53c6d8e2cf719763fa1e7f8d576ed0bddbec63f91961a2ca35330ad53c1ff024f71b7e9d22c856b36da92278ce8ea266b044cd0aa5648095e6fc3307e5dc9f7428dac69c84411149026f87ce59bc78c8dbac900000000000000000000858bea7a693c5e53c3f4315471259add9d6f44de5696f09e34a7e7450737b38e381f5e68dc8e7cc76b99f00e0e333a5b4f"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}, @ip_retopts={{0x10}}], 0x28}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000008c0)="3e0f21ec65ed66b8060000000f23d80f21f86635800000200f23f866b9ac09000066b80e00000066ba000000000f30f20f38f13a66b8000000000f23d00f21f86635200000020f23f80f01f6f8ba210066b8e019121866ef0fa9", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r0}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x501000, 0x0) 2.350500068s ago: executing program 1 (id=6407): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x2108, r0}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x4ed, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x8000, 0x400253}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20400) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r7, &(0x7f0000000340)='./file0\x00', 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="2c0000002c0b0000000000009da04f27e67eaa494856d8e361aa50bb6323", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, 0x2, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008091}, 0x20048800) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2.257278804s ago: executing program 0 (id=6408): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) (async) syz_usb_connect(0x6, 0xfffffffffffffe20, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0xa0, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001740)=[{{&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000480)="ec1f0215906f1d90", 0x8}, {&(0x7f0000000540)="1e4a14125cb0c3b18c3e76d77bf4578f4484b08ebcc0556992ed9bbcd4bba5418939820e219cd8c6612d3c314005092e8b5c5d1a8a15af91d6117066534e900c621864db5a8b3f5fa90ebe80d1e6963081260af8dd7e2ede2df10b7afa1cb1c11ea508afdcba751febfc969f85061b124c1b68bbf1da66aa5f4f1d83bb1de0161fc4822ca9adbf0fec99765374d06c31c8c7aee1134b2df99078b304a38f1a1a1db84da282687071238d86713c30b2d9ff291cbc9d70a3abd373908693cf59fc19462aa05e5b7c76e51ba9e8137271a444bb4027ad465bc0db1313f1821bb955ed6b16e66fc9e1ac221ea3c92bc284858b9ad3e4", 0xf4}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000640)="0433472eabae68eb84c9c4a6e4e8128b23948bff4504ff44afe8eadba6881a3e834c3927893ee956c34477495864a4d54d7e9d62dc67ae9d1f0f5b4c7ae10eef9cbfb13b4e581654c8b70331ea7880e04b3283b2af2bae7a3ed34e1d7aa08ef8c50e4a38be5525c688b9a586ba1623b00563c0b5010f2f609fd20050a12b5eb9e2a84c007ab9d8d36d6f55f6ebe7d5cb4c25a25b642020dc955006fa07971fdc5edfd1f4", 0xa4}], 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000018000000518ef56c74e110d701000000c3b7916955cd79f8020b1ad170c318328b2f7e339b18857cbc2fd3f2d18dbcf71939c95c7b71cee2a86d9b0105e27a7ea93dffd375e509297d13e293372f5490785b69d637579bbf2d9e840b8355442cac3f06be0da70680e37fb7b3f7ca839320f344433958a09685f47d697a208fbf344f9752f517a9832a36dc16f8", @ANYRES32=r2, @ANYRES32=r1], 0x38, 0x40000}}, {{&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000940)="2e7af92110969855813b8150190e4ffa3a351552d690dd84afe5ac2d9fd49d8a751dee5e0b5193fdaa", 0x29}, {&(0x7f0000000980)="6cec7d94d47a7d63d1d38aafd786ce56bc523bd6f92978d60e5d355ee44f101bcafe3eb0d5fe13b495369a12ad7cc67e9301c1d987d0572d3ab71c82cd69cc78e08c1d202006bc44568c220650919fb430bc766dc30fc3379b6c4670f8a80bd41de22b13d6f21e77f90be48db6ad2cfc2efc9736f70acd92496913466b75636cf422c46524ea7e3bbc19ee43990c35e4b415b8f1d0b06fcf1078b8717210183b2913366e5e73f29ca4347719a58a4586447f56f95a4752f0403fb7d9aadfc7aef24deefa6c026ad5723383d02bc30bf20eccd3351945e11d68720b11ff1a2f65801d1f", 0xe3}], 0x2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="00000000f9ffffffffffffff0100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000fb0000000001000000b5c995de9c90e40a18b220dce57c15e7baf1f35347095d3319a76e0683c818d69e595c23d4d7d7b8dbea8622c53238c3967bb77089178dfdf7005ae8f20efbe4fbad35ffd41ecd4f060500853236040d19a5c5cd3180b0765a5078262d390e079345cc361e10ebe9d477db4ad57c4ad16fba4fe4000000000000000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1], 0x138, 0x400}}], 0x2, 0x4004000) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) (async) io_setup(0x1, &(0x7f0000000380)=0x0) (async) r6 = eventfd2(0xfffffffc, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r7, 0x0, 0x1, &(0x7f0000001dc0)=[{}], 0x0) (async) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r6, 0x0, 0x0, 0x4, 0x0, 0x3, r6}]) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\b\a\x00', @ANYRES16=r9, @ANYBLOB="010000000000fcffffff100000001500018014000200776c616e30000000000000000000000008000700000000000800070003000000180001801400020077673100"/78], 0x54}}, 0x4000001) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x0, 0x0, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x5, r4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3}]) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) (async) sendmsg$nl_route(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) 2.254927954s ago: executing program 1 (id=6409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffee9}, 0x48) 1.737004377s ago: executing program 1 (id=6410): prlimit64(0x0, 0xe, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x2c) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9902) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r3 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r3, 0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYRESHEX=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x100, 0x0, 0x1000}, 0x10}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181882, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) 1.731135003s ago: executing program 0 (id=6411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x55, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="021009090a0000002abd7000fbdbdf25080012"], 0x50}}, 0x40010) 1.608556464s ago: executing program 0 (id=6412): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x50) 1.48080877s ago: executing program 0 (id=6413): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) prlimit64(0x0, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) (async) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1efe01, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcd0}, 0xffffffffffffffc9) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.462436667s ago: executing program 0 (id=6414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CAP_STEAL_TIME(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80800100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x1c, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'team_slave_1\x00'}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_auth_payload_to={{}, {0x0, 0xc8, 0x81}}}}, 0xb) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000100)="00fea535cf", 0x5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x500}, 0x80) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) 424.79768ms ago: executing program 0 (id=6415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) close(0x3) 336.907121ms ago: executing program 6 (id=6416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYRES64=0x0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r0, 0x0, &(0x7f0000001740)=""/4085}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0}) r2 = memfd_create(&(0x7f0000000040)='\\\\&\x0e\x00', 0x1) lseek(r2, 0xfffffffffffffffe, 0x1) futex(&(0x7f00000000c0), 0x80, 0x0, &(0x7f00000005c0)={0x77359400}, 0x0, 0x2) r3 = landlock_create_ruleset(&(0x7f0000000200)={0x4000, 0x3}, 0x18, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x40000000000000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000040)={0x10001, [[0x9ef8], [0x1000000, 0x0, 0x8, 0x0, 0x0, 0x4], [0xaa63, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x1]], '\x00', [{0x4}, {}, {}, {0x7fff, 0x1, 0x0, 0x1}, {0x0, 0x800}, {}, {0x5}, {0x0, 0x10000}, {0xfffffffc}, {}, {}, {0x2}], '\x00', 0x8000}) landlock_restrict_self(r4, 0x9) landlock_restrict_self(r3, 0xa) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0xea60}}, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000944c000000000000ffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x8040004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x20000080) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000000040)=[{0x1e, '\x00', @buffer={"efd0104982ff19686a2a5702f585446a5befd8e6396790bbd22e0743482f2082", 0x20}, 0xffffffff}]}) r9 = socket(0x10, 0x2, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) 308.162951ms ago: executing program 7 (id=6417): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00', {0x1, 0x0, 0x0, 0x5}, 0x0, [0x0, 0xfffffffc, 0x2000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffa, 0x0, 0x0, 0x6b, 0x400, 0x4, 0x0, 0x3, 0x0, 0x84a3, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0xda2], [0x0, 0x0, 0x0, 0x4ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x80000000, 0x0, 0x4000, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8, 0x800000, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0xbaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe29b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9c2, 0x0, 0x2, 0xfffffffe, 0x0, 0x9, 0x0, 0x2, 0x1], [0x110003, 0x1000002, 0x0, 0x6d, 0x4, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x181400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000002040)={0x4, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0xffff) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x48, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000001800012112efc010000000000000000000000000000ff020000000000ddf0ed2604c300000000000000000100000e2200129078a20500010500000059020c7c239c46c3481092f2"], 0x0) 54.216002ms ago: executing program 7 (id=6418): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x4) r2 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$setstatus(r2, 0x4, 0x40000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000240)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10000000}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x1) ioctl$EVIOCGVERSION(r10, 0x80044501, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=6419): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x2108, r0}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x4ed, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x8000, 0x400253}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20400) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r7, &(0x7f0000000340)='./file0\x00', 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="2c0000002c0b0000000000009da04f27e67eaa494856d8e361aa50bb6323", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, 0x2, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008091}, 0x20048800) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): .400581][T32601] __sys_bpf+0x223a/0x4b90 [ 1514.400594][T32601] ? __pfx___sys_bpf+0x10/0x10 [ 1514.400604][T32601] ? proc_fail_nth_write+0x9f/0x220 [ 1514.400618][T32601] ? find_held_lock+0x2b/0x80 [ 1514.400634][T32601] ? find_held_lock+0x2b/0x80 [ 1514.400647][T32601] ? ksys_write+0x190/0x250 [ 1514.400665][T32601] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1514.400678][T32601] ? __fget_files+0x215/0x3d0 [ 1514.400696][T32601] ? fput+0x79/0x100 [ 1514.400707][T32601] ? ksys_write+0x1ac/0x250 [ 1514.400722][T32601] ? __pfx_ksys_write+0x10/0x10 [ 1514.400743][T32601] __x64_sys_bpf+0x7b/0xc0 [ 1514.400754][T32601] ? lockdep_hardirqs_on+0x78/0x100 [ 1514.400764][T32601] do_syscall_64+0x106/0xf80 [ 1514.400774][T32601] ? clear_bhb_loop+0x40/0x90 [ 1514.400787][T32601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.400798][T32601] RIP: 0033:0x7f7cded9c629 [ 1514.400809][T32601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1514.400819][T32601] RSP: 002b:00007f7cdfbdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1514.400830][T32601] RAX: ffffffffffffffda RBX: 00007f7cdf015fa0 RCX: 00007f7cded9c629 [ 1514.400837][T32601] RDX: 0000000000000094 RSI: 0000200000000580 RDI: 0000000000000005 [ 1514.400843][T32601] RBP: 00007f7cdfbdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.400850][T32601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.400856][T32601] R13: 00007f7cdf016038 R14: 00007f7cdf015fa0 R15: 00007ffdc989ea18 [ 1514.400870][T32601] [ 1514.400915][T32601] Mem-Info: [ 1514.904426][T32606] netlink: 'syz.1.5499': attribute type 4 has an invalid length. [ 1515.286289][ T30] audit: type=1400 audit(2000000168.724:3096): avc: denied { write } for pid=32603 comm="syz.6.5497" name="file0" dev="tmpfs" ino=424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1515.436257][ T30] audit: type=1400 audit(2000000168.724:3097): avc: denied { open } for pid=32603 comm="syz.6.5497" path="/77/file0" dev="tmpfs" ino=424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1515.459502][T32601] active_anon:15132 inactive_anon:0 isolated_anon:0 [ 1515.459502][T32601] active_file:17776 inactive_file:16493 isolated_file:0 [ 1515.459502][T32601] unevictable:768 dirty:693 writeback:0 [ 1515.459502][T32601] slab_reclaimable:12182 slab_unreclaimable:109783 [ 1515.459502][T32601] mapped:37011 shmem:4245 pagetables:1949 [ 1515.459502][T32601] sec_pagetables:0 bounce:0 [ 1515.459502][T32601] kernel_misc_reclaimable:0 [ 1515.459502][T32601] free:1251457 free_pcp:47206 free_cma:0 [ 1515.500140][ T30] audit: type=1400 audit(2000000168.790:3098): avc: denied { ioctl } for pid=32603 comm="syz.6.5497" path="/77/file0" dev="tmpfs" ino=424 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1515.641952][ T30] audit: type=1400 audit(2000000169.024:3099): avc: denied { write } for pid=32619 comm="syz.7.5504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1515.666303][T32601] Node 0 active_anon:60628kB inactive_anon:0kB active_file:71052kB inactive_file:65812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131688kB dirty:2748kB writeback:0kB shmem:15444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14256kB pagetables:7680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1515.698999][T31574] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1515.715637][T32601] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16456kB dirty:24kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1515.756418][ T30] audit: type=1400 audit(2000000169.164:3100): avc: denied { setopt } for pid=32621 comm="syz.1.5505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1515.784219][T32630] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5506'. [ 1515.796831][T32627] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5505'. [ 1515.825153][T32601] Node 0 DMA free:11108kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:32kB free_cma:0kB [ 1515.870857][T32601] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1515.914932][T31574] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 1515.958075][T31574] usb 4-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1515.959606][T32601] Node 0 [ 1516.017504][T31574] usb 4-1: Product: syz [ 1516.047293][T31574] usb 4-1: Manufacturer: syz [ 1516.052240][T31574] usb 4-1: SerialNumber: syz [ 1516.128277][T32601] DMA32 free:1131156kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60728kB inactive_anon:0kB active_file:71052kB inactive_file:65812kB unevictable:1536kB writepending:2748kB zspages:0kB present:3129332kB managed:2537236kB mlocked:0kB bounce:0kB free_pcp:146324kB local_pcp:121140kB free_cma:0kB [ 1516.130044][T31574] usb 4-1: config 0 descriptor?? [ 1516.389774][T31574] ch341 4-1:0.0: ch341-uart converter detected [ 1516.396401][T32601] lowmem_reserve[]: 0 0 1 1 1 [ 1516.410783][T32601] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1052kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1516.562877][T32601] lowmem_reserve[]: 0 0 0 0 0 [ 1516.593456][T32601] Node 1 Normal free:3860408kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:160kB unevictable:1536kB writepending:24kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:41512kB local_pcp:10888kB free_cma:0kB [ 1516.616443][T32647] bond0: option arp_validate: invalid value (18446744073709551615) [ 1516.635084][T31574] usb 4-1: failed to receive control message: -71 [ 1516.641718][T31574] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1516.658978][T31574] usb 4-1: USB disconnect, device number 75 [ 1516.666522][T31574] ch341 4-1:0.0: device disconnected [ 1516.673158][T32647] bond0 (unregistering): Released all slaves [ 1516.691375][T32601] lowmem_reserve[]: 0 0 0 0 0 [ 1516.696199][T32601] Node 0 DMA: 1*4kB (U) 2*8kB (U) 1*16kB (U) 2*32kB (U) 2*64kB (U) 1*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11108kB [ 1516.712063][T32601] Node 0 DMA32: 7859*4kB (UM) 7975*8kB (UME) 5005*16kB (UME) 2535*32kB (UME) 1465*64kB (UME) 840*128kB (UME) 374*256kB (UME) 254*512kB (UM) 245*1024kB (UME) 100*2048kB (UM) 1*4096kB (U) = 1143284kB [ 1516.717794][ T30] audit: type=1400 audit(2000000170.034:3101): avc: denied { listen } for pid=32648 comm="syz.6.5510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1516.732976][T32601] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1516.765281][T32601] Node 1 Normal: 4*4kB (UME) 5*8kB (UME) 10*16kB (UE) 9*32kB (UME) 7*64kB (UE) 6*128kB (UM) 5*256kB (UM) 2*512kB (M) 4*1024kB (UME) 5*2048kB (UME) 938*4096kB (UM) = 3860408kB [ 1516.845279][T32601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1516.891771][T32601] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1516.964281][T32601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1516.990166][T32601] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1517.020777][T32601] 43495 total pagecache pages [ 1517.035483][T32601] 0 pages in swap cache [ 1517.054261][T32601] Free swap = 124996kB [ 1517.074666][T32601] Total swap = 124996kB [ 1517.103218][T32601] 2097051 pages RAM [ 1517.107068][T32601] 0 pages HighMem/MovableOnly [ 1517.111767][T32601] 430864 pages reserved [ 1517.140485][T32601] 0 pages cma reserved [ 1517.149429][ T30] audit: type=1400 audit(2000000170.474:3102): avc: denied { append } for pid=32667 comm="syz.7.5515" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1517.150654][T32669] usb usb8: usbfs: process 32669 (syz.7.5515) did not claim interface 0 before use [ 1517.290748][T32677] netlink: 256 bytes leftover after parsing attributes in process `syz.9.5516'. [ 1517.300907][T32674] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.5515' resets device [ 1517.319898][T32678] loop5: detected capacity change from 0 to 4096 [ 1517.344380][T32677] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5516'. [ 1517.468855][T32685] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1517.637960][T31578] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1517.989952][T31578] usb 4-1: Using ep0 maxpacket: 16 [ 1517.997333][T31578] usb 4-1: config 1 has an invalid interface number: 214 but max is 0 [ 1518.011374][T31578] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.025815][T31578] usb 4-1: config 1 has no interface number 0 [ 1518.032052][T31578] usb 4-1: config 1 interface 214 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1518.074022][T31578] usb 4-1: config 1 interface 214 has no altsetting 0 [ 1518.084475][T31578] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1518.101576][T31578] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.111869][T31578] usb 4-1: Product: syz [ 1518.116078][T31578] usb 4-1: Manufacturer: syz [ 1518.134095][T31578] usb 4-1: SerialNumber: syz [ 1518.220701][T31578] ums-alauda 4-1:1.214: USB Mass Storage device detected [ 1518.482334][T32710] netlink: 'syz.9.5521': attribute type 10 has an invalid length. [ 1519.009294][ T30] audit: type=1400 audit(2000000172.215:3103): avc: denied { ioctl } for pid=32680 comm="syz.3.5517" path="socket:[117065]" dev="sockfs" ino=117065 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1519.924553][T32720] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5521'. [ 1520.250730][T32710] IPVS: set_ctl: invalid protocol: 103 172.30.1.10:20000 [ 1520.757875][T14435] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1520.889890][T32748] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1520.930963][T14435] usb 8-1: Using ep0 maxpacket: 32 [ 1520.950304][T14435] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1520.969213][T14435] usb 8-1: config 0 has no interface number 0 [ 1521.022420][T14435] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1521.052192][T14435] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1521.077891][T14435] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1521.126224][T14435] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.248460][ T30] audit: type=1400 audit(2000000174.302:3104): avc: denied { getopt } for pid=32758 comm="syz.9.5536" lport=58517 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1521.300169][T14435] usb 8-1: config 0 descriptor?? [ 1521.424163][T31574] usb 4-1: USB disconnect, device number 76 [ 1522.080238][T14435] uclogic 0003:28BD:0094.0022: pen parameters not found [ 1522.089121][T32738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.145201][T14435] uclogic 0003:28BD:0094.0022: interface is invalid, ignoring [ 1522.161354][T32738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1522.239421][T14435] usb 8-1: USB disconnect, device number 43 [ 1522.312754][ T306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5538'. [ 1523.238999][ T333] vlan3: entered promiscuous mode [ 1523.244365][ T333] bridge0: entered promiscuous mode [ 1523.596514][ T342] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1524.742858][ T30] audit: type=1400 audit(2000000177.577:3105): avc: denied { create } for pid=303 comm="syz.9.5539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1525.721318][ T378] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5552'. [ 1525.906918][ T391] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5551'. [ 1525.953257][ T5954] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1526.156543][ T5954] usb 10-1: Using ep0 maxpacket: 16 [ 1526.179483][ T5954] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1526.269571][ T406] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1526.615605][ T5954] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1526.643588][ T5954] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1526.653802][ T5954] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1526.668706][ T5954] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1526.684461][ T5954] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.697201][ T5954] usb 10-1: Product: syz [ 1526.705420][ T5954] usb 10-1: Manufacturer: syz [ 1526.716477][ T5954] usb 10-1: SerialNumber: syz [ 1527.063124][ T379] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5553'. [ 1527.264768][ T30] audit: type=1326 audit(2000000179.935:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=375 comm="syz.9.5553" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7cded9c629 code=0x0 [ 1527.708972][ T417] netlink: 'syz.7.5559': attribute type 1 has an invalid length. [ 1528.430410][T14096] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 1529.077766][T14096] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1529.089066][T14096] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1529.099890][T14096] usb 7-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 1529.160766][ T5954] usb 10-1: 0:2 : does not exist [ 1529.167063][T14096] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.195679][T14096] usb 7-1: config 0 descriptor?? [ 1529.230318][ T5954] usb 10-1: USB disconnect, device number 74 [ 1529.341221][T25663] udevd[25663]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1529.651411][T14096] glorious 0003:258A:0036.0023: item fetching failed at offset 0/2 [ 1529.680076][T14096] glorious 0003:258A:0036.0023: probe with driver glorious failed with error -22 [ 1529.877172][T14096] usb 7-1: USB disconnect, device number 26 [ 1530.224207][ T475] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1530.766932][ T488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5571'. [ 1530.811832][ T453] FAT-fs (loop19): unable to read boot sector [ 1530.822394][ T482] macvtap1: entered promiscuous mode [ 1530.897184][ T482] macvtap1: entered allmulticast mode [ 1530.919067][ T482] dummy0: entered promiscuous mode [ 1530.951769][ T495] netlink: 'syz.6.5573': attribute type 1 has an invalid length. [ 1530.971952][ T482] dummy0: entered allmulticast mode [ 1531.017282][ T482] team0: Device macvtap1 failed to register rx_handler [ 1531.707646][ T482] dummy0: left allmulticast mode [ 1531.728666][ T482] dummy0: left promiscuous mode [ 1532.218503][ T529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5581'. [ 1532.315132][ T527] fuse: Invalid rootmode [ 1532.321199][ T30] audit: type=1400 audit(2000000184.680:3107): avc: denied { execute } for pid=524 comm="syz.6.5580" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1532.711339][ T543] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1532.734892][ T5809] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 1532.735028][ T5809] Bluetooth: hci5: unknown advertising packet type: 0x6c [ 1532.744857][ T5809] Bluetooth: hci5: Malformed LE Event: 0x02 [ 1532.758673][ T5908] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1533.065469][ T542] macvlan0: entered promiscuous mode [ 1533.172897][ T5908] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1533.206332][ T5908] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 1533.227629][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.240056][ T542] netlink: 'syz.9.5585': attribute type 1 has an invalid length. [ 1533.247871][ T542] netlink: 'syz.9.5585': attribute type 2 has an invalid length. [ 1533.283167][ T30] audit: type=1400 audit(2000000185.578:3108): avc: denied { write } for pid=555 comm="syz.1.5589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1533.289565][ T5908] usb 4-1: Product: syz [ 1533.453781][ T559] kAFS: unable to lookup cell '(,c¾Ì' [ 1534.771745][ T5908] usb 4-1: Manufacturer: syz [ 1535.044418][ T5908] usb 4-1: SerialNumber: syz [ 1535.088296][ T5908] usb 4-1: config 0 descriptor?? [ 1535.918897][ T537] xfrm0 speed is unknown, defaulting to 1000 [ 1536.283648][ T537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1536.303830][ T537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.336048][ T595] input: syz0 as /devices/virtual/input/input44 [ 1536.351675][ T537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1536.384995][ T595] netlink: 428 bytes leftover after parsing attributes in process `syz.9.5597'. [ 1536.391683][ T537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.426725][ T595] netlink: 428 bytes leftover after parsing attributes in process `syz.9.5597'. [ 1536.455760][ T537] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5583'. [ 1536.499139][T14435] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1536.554273][T14096] usb 4-1: USB disconnect, device number 77 [ 1536.679910][T14435] usb 7-1: Using ep0 maxpacket: 16 [ 1536.722294][T14435] usb 7-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 1536.758920][ T30] audit: type=1400 audit(2000000188.825:3109): avc: denied { ioctl } for pid=612 comm="syz.1.5602" path="socket:[118509]" dev="sockfs" ino=118509 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1536.789398][T14435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.822809][T14435] usb 7-1: Product: syz [ 1536.839109][T14435] usb 7-1: Manufacturer: syz [ 1536.858695][T14435] usb 7-1: SerialNumber: syz [ 1536.886099][T14435] usb 7-1: config 0 descriptor?? [ 1536.900844][ T618] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1537.166372][T14435] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1537.200507][T14435] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1537.318493][T14435] usb 7-1: USB disconnect, device number 27 [ 1538.731605][T14435] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1538.798606][ T654] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1538.805168][ T654] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1538.830691][ T654] vhci_hcd vhci_hcd.0: Device attached [ 1538.878788][ T658] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 1539.137953][T14096] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1539.212613][ T659] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1539.367902][T13875] vhci_hcd vhci_hcd.3: stop threads [ 1539.380977][T13875] vhci_hcd vhci_hcd.3: release socket [ 1539.385432][T14435] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1539.489578][T13875] vhci_hcd vhci_hcd.3: disconnect device [ 1539.511640][T14435] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1539.649894][T14435] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1539.836210][T14435] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.871272][T14435] usb 7-1: config 0 descriptor?? [ 1540.325745][T14435] hid-led 0003:0FC5:B080.0024: unknown main item tag 0x0 [ 1540.381993][T14435] hid-led 0003:0FC5:B080.0024: unknown main item tag 0x0 [ 1540.412016][T14435] hid-led 0003:0FC5:B080.0024: unknown main item tag 0x0 [ 1540.550501][ T30] audit: type=1400 audit(2000000192.363:3110): avc: denied { ioctl } for pid=640 comm="syz.6.5606" path="socket:[117681]" dev="sockfs" ino=117681 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1540.713377][T14435] hid-led 0003:0FC5:B080.0024: probe with driver hid-led failed with error -71 [ 1540.822434][T14435] usb 7-1: USB disconnect, device number 28 [ 1541.051218][ T687] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1541.453306][ T30] audit: type=1400 audit(2000000193.214:3111): avc: denied { kexec_image_load } for pid=695 comm="syz.7.5615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1541.752325][ T709] netlink: 'syz.7.5618': attribute type 4 has an invalid length. [ 1541.760324][ T709] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5618'. [ 1542.062903][ T30] audit: type=1400 audit(2000000193.785:3112): avc: denied { map } for pid=710 comm="syz.6.5620" path="socket:[118801]" dev="sockfs" ino=118801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1542.407679][T13875] Bluetooth: hci4: Frame reassembly failed (-84) [ 1542.661292][ T729] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1543.266646][ T30] audit: type=1804 audit(2000000194.824:3113): pid=728 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.5625" name="/newroot/372/file0" dev="fuse" ino=1 res=1 errno=0 [ 1543.957116][ T10] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1544.026613][ T747] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5630'. [ 1544.035800][ T747] bridge_slave_0: default FDB implementation only supports local addresses [ 1544.053318][T14435] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1544.149843][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 1544.171360][ T10] usb 10-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1544.180606][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.208263][ T10] usb 10-1: config 0 descriptor?? [ 1544.216708][T14435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1544.246523][T14435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1544.285292][T14435] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1544.295259][T14435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.303936][T14435] usb 4-1: Product: syz [ 1544.857323][T25390] Bluetooth: hci4: command 0x1003 tx timeout [ 1544.863692][ T5809] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1544.955353][T14096] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1544.991663][T14435] usb 4-1: Manufacturer: syz [ 1545.003452][T14435] usb 4-1: SerialNumber: syz [ 1545.036387][T14435] usb 4-1: config 0 descriptor?? [ 1545.140183][ T10] prodikeys 0003:041E:2801.0025: unknown main item tag 0x0 [ 1545.153959][ T10] prodikeys 0003:041E:2801.0025: item fetching failed at offset 3/5 [ 1545.165249][ T10] prodikeys 0003:041E:2801.0025: hid parse failed [ 1545.183880][ T10] prodikeys 0003:041E:2801.0025: probe with driver prodikeys failed with error -22 [ 1545.371225][ T737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.389986][ T737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.868502][T31573] usb 10-1: USB disconnect, device number 75 [ 1545.880727][T14435] usb 4-1: USB disconnect, device number 78 [ 1545.939053][T24974] udevd[24974]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1546.468585][ T782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1546.969508][ T787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5637'. [ 1547.423438][ T807] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1548.018350][ T30] audit: type=1400 audit(2000000199.362:3114): avc: denied { getopt } for pid=808 comm="syz.1.5641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1548.054916][ T812] 9p: Bad value for 'wfdno' [ 1548.435848][ T822] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1548.648560][ T826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5645'. [ 1548.889743][ T829] tipc: Started in network mode [ 1548.896977][ T829] tipc: Node identity 3e107089a4ca, cluster identity 4711 [ 1548.907142][ T829] tipc: Enabled bearer , priority 0 [ 1548.952991][ T829] tipc: Resetting bearer [ 1549.163005][ T827] tipc: Disabling bearer [ 1549.508888][ T840] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1549.939927][ T30] audit: type=1400 audit(2000000201.159:3115): avc: denied { connect } for pid=842 comm="syz.3.5651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1550.219066][ T30] audit: type=1400 audit(2000000201.365:3116): avc: denied { read write } for pid=842 comm="syz.3.5651" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1550.529454][ T30] audit: type=1400 audit(2000000201.365:3117): avc: denied { open } for pid=842 comm="syz.3.5651" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1550.660716][ T30] audit: type=1400 audit(2000000201.374:3118): avc: denied { ioctl } for pid=842 comm="syz.3.5651" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1550.698626][ T853] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5652'. [ 1551.356240][ T886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5661'. [ 1553.393281][ T5793] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1553.517332][ T956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1553.596301][ T5793] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1553.614686][ T5793] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1553.635208][ T5793] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1553.650022][ T5793] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1553.651707][T31583] libceph: connect (1)[c::]:6789 error -101 [ 1553.659169][ T5793] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.684421][ T962] ceph: No mds server is up or the cluster is laggy [ 1553.694794][ T5793] usb 10-1: config 0 descriptor?? [ 1553.753348][T31583] libceph: mon0 (1)[c::]:6789 connect error [ 1553.921115][ T976] netlink: 'syz.6.5676': attribute type 4 has an invalid length. [ 1553.930589][ T976] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5676'. [ 1554.025569][ T976] .`: renamed from bond0 (while UP) [ 1554.193138][ T5793] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x6 [ 1554.223764][ T5793] plantronics 0003:047F:FFFF.0026: collection stack underflow [ 1554.279450][ T980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5678'. [ 1554.292368][ T5793] plantronics 0003:047F:FFFF.0026: item 0 1 0 12 parsing failed [ 1554.322392][ T5793] plantronics 0003:047F:FFFF.0026: parse failed [ 1554.329920][ T5793] plantronics 0003:047F:FFFF.0026: probe with driver plantronics failed with error -22 [ 1554.452092][ T990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5680'. [ 1554.523453][ T992] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5670'. [ 1554.712171][ T1003] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5684'. [ 1554.728578][ T1003] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5684'. [ 1555.352417][ T1009] input: syz0 as /devices/virtual/input/input45 [ 1555.389259][ T1015] netlink: 428 bytes leftover after parsing attributes in process `syz.6.5685'. [ 1555.428762][ T1015] netlink: 428 bytes leftover after parsing attributes in process `syz.6.5685'. [ 1555.636639][ T1021] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5688'. [ 1556.378497][T14096] usb 10-1: USB disconnect, device number 76 [ 1557.122692][T31583] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1557.144289][ T1059] input: syz0 as /devices/virtual/input/input46 [ 1557.167240][ T1059] netlink: 428 bytes leftover after parsing attributes in process `syz.7.5696'. [ 1557.183737][ T1059] netlink: 428 bytes leftover after parsing attributes in process `syz.7.5696'. [ 1557.294910][T31583] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1557.375261][T31583] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1557.389775][T31583] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1557.398840][T31583] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1557.409082][T31583] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1557.418819][T31583] usb 4-1: Product: syz [ 1557.424387][T31583] usb 4-1: Manufacturer: syz [ 1557.459457][T31583] usb 4-1: SerialNumber: syz [ 1557.508661][T31583] usb 4-1: config 0 descriptor?? [ 1557.529991][T31583] usb 4-1: selecting invalid altsetting 0 [ 1558.787279][ T1091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.927194][ T1091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1559.445128][ T1125] IPVS: Error connecting to the multicast addr [ 1560.051798][ T1133] input: syz0 as /devices/virtual/input/input47 [ 1560.119380][ T1134] __nla_validate_parse: 1 callbacks suppressed [ 1560.119399][ T1134] netlink: 428 bytes leftover after parsing attributes in process `syz.7.5710'. [ 1560.200254][ T1134] netlink: 428 bytes leftover after parsing attributes in process `syz.7.5710'. [ 1560.418715][T31573] usb 4-1: USB disconnect, device number 79 [ 1560.797386][ T1158] tipc: Enabled bearer , priority 0 [ 1560.829264][ T1158] tipc: Resetting bearer [ 1561.152863][ T1154] tipc: Disabling bearer [ 1561.186941][ T1164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5718'. [ 1562.013216][ T1189] input: syz0 as /devices/virtual/input/input48 [ 1562.077854][ T1189] netlink: 428 bytes leftover after parsing attributes in process `syz.6.5726'. [ 1562.314774][ T1196] netlink: 'syz.7.5728': attribute type 4 has an invalid length. [ 1562.315634][ T1189] netlink: 428 bytes leftover after parsing attributes in process `syz.6.5726'. [ 1562.337224][ T1196] netlink: 120 bytes leftover after parsing attributes in process `syz.7.5728'. [ 1563.809932][ T1225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1565.466654][ T1246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5740'. [ 1565.662464][T31583] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1565.834923][T31583] usb 8-1: Using ep0 maxpacket: 32 [ 1565.836738][T31583] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1565.836758][T31583] usb 8-1: config 0 has no interface number 0 [ 1565.838547][T31583] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1565.838575][T31583] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.838595][T31583] usb 8-1: Product: syz [ 1565.838610][T31583] usb 8-1: Manufacturer: syz [ 1565.838625][T31583] usb 8-1: SerialNumber: syz [ 1565.841287][T31583] usb 8-1: config 0 descriptor?? [ 1566.036664][ T1260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1566.042993][ T1261] No source specified [ 1566.045929][ T1260] CUSE: info not properly terminated [ 1566.052020][ T30] audit: type=1400 audit(2000000216.225:3119): avc: denied { ioctl } for pid=1258 comm="syz.3.5747" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1566.078008][ T1264] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1566.082760][T31583] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1566.082794][T31583] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1566.646335][T31583] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1566.646540][T31583] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 1566.689575][T31583] usb 8-1: USB disconnect, device number 44 [ 1566.782494][T31573] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1566.963066][T31573] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1566.963110][T31573] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1566.963156][T31573] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1566.963185][T31573] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.972516][T31573] usb 7-1: config 0 descriptor?? [ 1567.226001][T31573] kovaplus 0003:1E7D:2D50.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 1567.315999][ T1278] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5750'. [ 1567.316023][ T1278] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5750'. [ 1567.435524][T31573] kovaplus 0003:1E7D:2D50.0027: couldn't init struct kovaplus_device [ 1567.435575][T31573] kovaplus 0003:1E7D:2D50.0027: couldn't install mouse [ 1567.473408][T31573] kovaplus 0003:1E7D:2D50.0027: probe with driver kovaplus failed with error -32 [ 1567.764320][ T1289] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1567.886392][ T1272] netlink: 'syz.6.5745': attribute type 16 has an invalid length. [ 1567.886444][ T1272] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5745'. [ 1567.903917][ T1294] netlink: 'syz.6.5745': attribute type 16 has an invalid length. [ 1567.903970][ T1294] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5745'. [ 1567.995309][ T1263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.010749][ T1263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.106392][T31583] usb 7-1: USB disconnect, device number 29 [ 1568.354144][T14435] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1568.633681][T14435] usb 4-1: config 0 has no interfaces? [ 1568.633721][T14435] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1568.633745][T14435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.653821][T14435] usb 4-1: config 0 descriptor?? [ 1568.855420][ T1324] netlink: 'syz.6.5757': attribute type 4 has an invalid length. [ 1568.855504][ T1324] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5757'. [ 1569.110637][ T1328] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1569.271496][ T5793] usb 4-1: USB disconnect, device number 80 [ 1570.555494][ T1351] netlink: 'syz.3.5760': attribute type 31 has an invalid length. [ 1571.253000][ T1381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5762'. [ 1571.791449][ T1402] xt_hashlimit: size too large, truncated to 1048576 [ 1572.278710][ T1426] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1572.278761][ T1426] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1572.279693][ T1426] vhci_hcd vhci_hcd.0: Device attached [ 1572.532512][ T10] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 1572.534374][T31582] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1572.699545][T31582] usb 4-1: config index 0 descriptor too short (expected 28271, got 18) [ 1572.699573][T31582] usb 4-1: config 101 has too many interfaces: 116, using maximum allowed: 32 [ 1572.699585][T31582] usb 4-1: config 101 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.699638][T31582] usb 4-1: config 101 has 0 interfaces, different from the descriptor's value: 116 [ 1572.699661][T31582] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1572.699673][T31582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.926450][T31582] usb 4-1: string descriptor 0 read error: -71 [ 1572.931838][ T1428] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 1572.932140][T26072] vhci_hcd vhci_hcd.3: stop threads [ 1572.932158][T26072] vhci_hcd vhci_hcd.3: release socket [ 1572.933642][T26072] vhci_hcd vhci_hcd.3: disconnect device [ 1572.934467][T31582] usb 4-1: USB disconnect, device number 81 [ 1573.246405][ T1464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5773'. [ 1573.869782][ T1498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5776'. [ 1574.938850][ T1545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5785'. [ 1574.979838][ T1550] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1575.120267][ T1561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5787'. [ 1575.296764][ T1567] kAFS: unable to lookup cell '(,c¾Ì' [ 1577.233654][T14435] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1577.757356][T14435] usb 4-1: Using ep0 maxpacket: 16 [ 1578.001315][ T30] audit: type=1400 audit(2000000226.716:3120): avc: denied { read } for pid=1606 comm="syz.7.5795" path="socket:[120832]" dev="sockfs" ino=120832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1578.028789][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1578.044723][T14435] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1578.053498][T14435] usb 4-1: config 1 has no interface number 0 [ 1578.059954][T14435] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1578.070297][T14435] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1578.083547][T14435] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1578.092738][T14435] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1578.102596][T14435] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1578.111232][T14435] usb 4-1: Product: syz [ 1578.116126][T14435] usb 4-1: Manufacturer: syz [ 1578.121941][T14435] usb 4-1: SerialNumber: syz [ 1578.129495][ T1599] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1578.155159][ T1599] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1578.391797][T14435] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 1578.416497][T14435] usb 4-1: USB disconnect, device number 82 [ 1579.529517][ T1637] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1579.555314][ T1636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1579.621604][T25390] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1579.644789][T25390] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1579.664171][T25390] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1579.711381][T25390] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1579.734935][T25390] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1579.885908][ T1640] xfrm0 speed is unknown, defaulting to 1000 [ 1580.687310][ T1640] chnl_net:caif_netlink_parms(): no params data found [ 1580.929125][ T1640] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.947098][ T1640] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.963170][ T1640] bridge_slave_0: entered allmulticast mode [ 1580.982142][ T1640] bridge_slave_0: entered promiscuous mode [ 1581.004310][ T1640] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.011959][ T1640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.027134][ T1640] bridge_slave_1: entered allmulticast mode [ 1581.046666][ T1640] bridge_slave_1: entered promiscuous mode [ 1582.031502][T25390] Bluetooth: hci4: command tx timeout [ 1582.478235][ T1698] xt_hashlimit: size too large, truncated to 1048576 [ 1582.506186][ T1640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1582.556935][ T1640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1582.582923][ T1712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5817'. [ 1582.593314][ T1640] team0: Port device team_slave_0 added [ 1582.630546][ T1640] team0: Port device team_slave_1 added [ 1582.652558][ T1640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1582.659592][ T1640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1582.685750][ T1640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1582.737574][ T1640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1582.744549][ T1640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1582.816038][ T1640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1582.884127][ T1724] netlink: set zone limit has 4 unknown bytes [ 1582.900471][ T1730] batadv_slave_1: entered promiscuous mode [ 1582.951510][ T30] audit: type=1400 audit(2000000232.059:3121): avc: denied { setopt } for pid=1721 comm="syz.6.5820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1582.990331][ T1640] hsr_slave_0: entered promiscuous mode [ 1583.015700][ T1640] hsr_slave_1: entered promiscuous mode [ 1583.033045][ T1640] debugfs: 'hsr0' already exists in 'hsr' [ 1583.042999][ T1640] Cannot create hsr debugfs directory [ 1583.064354][ T1722] tipc: Enabling of bearer rejected, failed to enable media [ 1583.663266][ T1721] batadv_slave_1: left promiscuous mode [ 1583.677280][T31574] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1583.766910][ T1758] overlayfs: failed to clone upperpath [ 1583.850556][ T1770] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1583.944312][T31574] usb 8-1: Using ep0 maxpacket: 8 [ 1583.964780][T31574] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1583.979835][T31574] usb 8-1: config 4 interface 0 has no altsetting 0 [ 1583.994528][T31574] usb 8-1: string descriptor 0 read error: -22 [ 1584.002104][T31574] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1584.115414][T31574] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.154980][T31574] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1584.254177][ T5809] Bluetooth: hci4: command tx timeout [ 1584.631583][T31574] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1584.657593][ T1752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.670859][ T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1584.684075][T31574] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1584.695360][ T1752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.705237][T31574] usb 8-1: media controller created [ 1584.746998][T31574] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1584.864539][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.884626][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1584.893557][ T10] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1584.931906][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.953184][ T10] usb 4-1: config 0 descriptor?? [ 1585.211639][ T10] Bluetooth: Can't get state to change to load ram patch err [ 1585.240201][ T10] Bluetooth: Loading patch file failed [ 1585.255425][ T10] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 1585.276046][ T10] usb 4-1: USB disconnect, device number 83 [ 1585.388103][ T1796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5831'. [ 1585.764818][ T1640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1585.791653][ T1640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1585.856141][ T1640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1585.881519][ T1640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1585.897643][T31574] zl10353_read_register: readreg error (reg=127, ret==0) [ 1585.976428][T31574] usb 8-1: USB disconnect, device number 45 [ 1586.042639][T31578] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1586.139398][ T1814] tipc: Enabling of bearer rejected, failed to enable media [ 1586.176104][ T1640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1586.216924][ T1640] 8021q: adding VLAN 0 to HW filter on device team0 [ 1586.237885][T31578] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1586.248334][T16114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.255523][T16114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1586.273363][T31578] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.293880][T31578] usb 7-1: config 0 descriptor?? [ 1586.783398][ T5809] Bluetooth: hci4: command tx timeout [ 1586.799497][T31578] hackrf 7-1:0.0: usb_control_msg() failed -71 request 0e [ 1586.806694][T31578] hackrf 7-1:0.0: Could not detect board [ 1586.813646][T13873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.820791][T13873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1586.831269][T31578] hackrf 7-1:0.0: probe with driver hackrf failed with error -71 [ 1587.028149][T31578] usb 7-1: USB disconnect, device number 30 [ 1588.141627][ T1862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5844'. [ 1588.460531][ T1640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1588.512846][ T1875] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5847'. [ 1588.554992][ T1875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1588.649754][ T1640] veth0_vlan: entered promiscuous mode [ 1588.695141][ T1640] veth1_vlan: entered promiscuous mode [ 1588.731557][ T10] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1588.770568][ T1640] veth0_macvtap: entered promiscuous mode [ 1588.802375][ T1640] veth1_macvtap: entered promiscuous mode [ 1588.855684][ T1640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1588.874441][ T1640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1588.913579][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.923735][ T10] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1588.935063][T26072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.943980][T26072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.956432][ T5809] Bluetooth: hci4: command tx timeout [ 1588.958054][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.974509][ T10] usb 8-1: config 0 descriptor?? [ 1588.995224][T26072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.018349][T26072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.331389][ T30] audit: type=1400 audit(2000000238.002:3122): avc: denied { mounton } for pid=1893 comm="syz.1.5850" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1589.600581][T31574] usb 8-1: USB disconnect, device number 46 [ 1589.619629][ T1897] kAFS: unable to lookup cell '(,c¾Ì' [ 1589.863395][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.906242][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.999194][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.018193][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.249083][T31574] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1590.430711][T31574] usb 8-1: Using ep0 maxpacket: 8 [ 1590.438492][T31574] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.459594][T31574] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice= 0.40 [ 1590.473409][T31574] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.556777][T31574] usb 8-1: config 0 descriptor?? [ 1590.596605][T31574] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 1590.649497][T31574] dvb-usb: bulk message failed: -22 (2/0) [ 1590.911036][ T1932] xfrm0 speed is unknown, defaulting to 1000 [ 1591.304144][T31574] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1591.320486][ T1936] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.5846'. [ 1591.358348][T31574] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 1591.376185][T31574] usb 8-1: media controller created [ 1591.386671][T31574] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1591.418369][T31574] dvb-usb: bulk message failed: -22 (1/0) [ 1591.454434][T31574] DVB: Unable to find symbol mt352_attach() [ 1591.460616][T31574] dvb-usb: bulk message failed: -22 (5/0) [ 1591.470372][T31574] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1591.486471][T31574] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 1591.595461][T31574] rc_core: IR keymap rc-dvico-mce not found [ 1591.659682][T31574] Registered IR keymap rc-empty [ 1591.714210][T31574] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1591.773228][T31574] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input50 [ 1591.799635][T31574] dvb-usb: schedule remote query interval to 100 msecs. [ 1591.833938][T31574] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 1591.953086][ T5793] dvb-usb: bulk message failed: -22 (1/0) [ 1591.983393][T31574] usb 8-1: USB disconnect, device number 47 [ 1592.256674][T31574] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 1592.815712][ T1953] netlink: 'syz.3.5855': attribute type 1 has an invalid length. [ 1593.435260][ T30] audit: type=1400 audit(2000000241.866:3123): avc: denied { accept } for pid=1991 comm="syz.1.5864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1593.501454][ T1999] tipc: Enabling of bearer rejected, failed to enable media [ 1593.679242][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1593.972715][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1594.050583][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1594.061569][ T2017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5866'. [ 1594.081434][ T10] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1594.113526][ T10] usb 7-1: Product: syz [ 1594.135132][ T10] usb 7-1: Manufacturer: syz [ 1594.145672][ T2011] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5865'. [ 1594.172009][ T10] usb 7-1: SerialNumber: syz [ 1594.244105][ T10] usb 7-1: config 0 descriptor?? [ 1594.494416][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1594.935694][ T10] gspca_zc3xx: reg_w_i err -71 [ 1594.959605][ T10] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1594.993810][ T2025] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5868'. [ 1594.996207][ T10] usb 7-1: USB disconnect, device number 31 [ 1595.197917][ T2037] netlink: 'syz.0.5869': attribute type 4 has an invalid length. [ 1595.323802][ T2037] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5869'. [ 1595.856551][ T2037] .`: renamed from bond0 (while UP) [ 1595.911094][ T2063] xt_hashlimit: max too large, truncated to 1048576 [ 1595.955513][ T5793] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1596.623269][ T5793] usb 7-1: config 3 has an invalid interface number: 61 but max is 0 [ 1596.639569][ T5793] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.662222][ T5793] usb 7-1: config 3 has no interface number 0 [ 1596.681994][ T5793] usb 7-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1596.705370][ T5793] usb 7-1: config 3 interface 61 has no altsetting 0 [ 1596.727892][ T5793] usb 7-1: string descriptor 0 read error: -22 [ 1596.738628][ T5793] usb 7-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 1596.767888][ T5793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.794389][ T5793] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1596.801138][ T1148] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.840436][ T1148] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.968174][ T5793] snd-usb-audio 7-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 1597.005234][ T2076] tipc: Enabling of bearer rejected, failed to enable media [ 1597.056058][ T5793] usb 7-1: USB disconnect, device number 32 [ 1597.197327][ T2095] kAFS: unable to lookup cell '(,c¾Ì' [ 1597.639920][ T1148] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1597.664419][ T1148] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.974334][ T1148] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1597.988344][ T1148] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.141176][ T2114] netlink: 'syz.1.5884': attribute type 4 has an invalid length. [ 1598.375761][ T10] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1598.417060][ T2111] program syz.0.5878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1598.528554][ T30] audit: type=1400 audit(2000000246.630:3124): avc: denied { read } for pid=2116 comm="syz.6.5885" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1598.560931][ T30] audit: type=1400 audit(2000000246.630:3125): avc: denied { open } for pid=2116 comm="syz.6.5885" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1598.682292][ T30] audit: type=1400 audit(2000000246.630:3126): avc: denied { ioctl } for pid=2116 comm="syz.6.5885" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1598.711307][ T30] audit: type=1400 audit(2000000246.648:3127): avc: denied { ioctl } for pid=2116 comm="syz.6.5885" path="socket:[123920]" dev="sockfs" ino=123920 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1598.765991][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 1598.799296][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.819011][ T10] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1598.867107][ T1148] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1598.879175][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1598.893612][ T10] usb 8-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1598.910235][ T1148] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.930215][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.974225][ T10] usb 8-1: config 0 descriptor?? [ 1598.994130][ T10] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1599.222320][ T2110] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.5883'. [ 1599.263757][T31574] usb 8-1: USB disconnect, device number 48 [ 1599.305337][ T1148] bridge_slave_1: left allmulticast mode [ 1599.321588][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.434285][ T1148] bridge_slave_0: left allmulticast mode [ 1599.444171][ T1148] bridge_slave_0: left promiscuous mode [ 1599.551084][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.621061][ T30] audit: type=1400 audit(2000000247.509:3128): avc: denied { remount } for pid=2139 comm="syz.1.5889" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1600.335170][ T2160] FAULT_INJECTION: forcing a failure. [ 1600.335170][ T2160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1600.350897][ T2160] CPU: 1 UID: 0 PID: 2160 Comm: syz.7.5893 Tainted: G L syzkaller #0 PREEMPT(full) [ 1600.350924][ T2160] Tainted: [L]=SOFTLOCKUP [ 1600.350932][ T2160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1600.350943][ T2160] Call Trace: [ 1600.350948][ T2160] [ 1600.350955][ T2160] dump_stack_lvl+0x100/0x190 [ 1600.350987][ T2160] should_fail_ex.cold+0x5/0xa [ 1600.351008][ T2160] _copy_from_user+0x2e/0xd0 [ 1600.351033][ T2160] do_sock_getsockopt+0x30b/0x3d0 [ 1600.351062][ T2160] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1600.351093][ T2160] __sys_getsockopt+0x148/0x260 [ 1600.351125][ T2160] ? __x64_sys_getsockopt+0xbd/0x160 [ 1600.351148][ T2160] __x64_sys_getsockopt+0xbd/0x160 [ 1600.351171][ T2160] ? do_syscall_64+0x95/0xf80 [ 1600.351187][ T2160] ? lockdep_hardirqs_on+0x78/0x100 [ 1600.351203][ T2160] do_syscall_64+0x106/0xf80 [ 1600.351218][ T2160] ? clear_bhb_loop+0x40/0x90 [ 1600.351238][ T2160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.351254][ T2160] RIP: 0033:0x7f634f59c629 [ 1600.351268][ T2160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1600.351284][ T2160] RSP: 002b:00007f6350419028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1600.351301][ T2160] RAX: ffffffffffffffda RBX: 00007f634f815fa0 RCX: 00007f634f59c629 [ 1600.351312][ T2160] RDX: 0000000000000085 RSI: 0000000000000084 RDI: 0000000000000003 [ 1600.351321][ T2160] RBP: 00007f6350419090 R08: 0000200000000300 R09: 0000000000000000 [ 1600.351331][ T2160] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 1600.351340][ T2160] R13: 00007f634f816038 R14: 00007f634f815fa0 R15: 00007ffe1c438f48 [ 1600.351364][ T2160] [ 1600.685004][ T2167] input: syz0 as /devices/virtual/input/input51 [ 1600.718349][ T2164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5892'. [ 1600.741898][ T30] audit: type=1400 audit(2000000248.698:3129): avc: denied { read write } for pid=2171 comm="syz.0.5895" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1600.782684][ T2167] netlink: 428 bytes leftover after parsing attributes in process `syz.7.5896'. [ 1600.791174][ T30] audit: type=1400 audit(2000000248.698:3130): avc: denied { open } for pid=2171 comm="syz.0.5895" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1600.843739][ T2167] netlink: 428 bytes leftover after parsing attributes in process `syz.7.5896'. [ 1600.920553][ T2155] program syz.6.5887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1600.958147][ T30] audit: type=1400 audit(2000000248.707:3131): avc: denied { ioctl } for pid=2171 comm="syz.0.5895" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1601.550945][ T1148] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1601.583515][ T1148] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1601.601035][ T1148] .` (unregistering): Released all slaves [ 1601.664503][ T2169] tipc: Enabling of bearer rejected, failed to enable media [ 1601.798862][ T1148] tipc: Left network mode [ 1601.910486][ T2200] syzkaller0: entered promiscuous mode [ 1601.923241][ T2200] syzkaller0: entered allmulticast mode [ 1602.706636][ T2217] fuse: Unknown parameter '184467440737095516150x0000000000000003' [ 1603.393112][T14435] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1603.745499][T14435] usb 8-1: Using ep0 maxpacket: 16 [ 1603.765788][T14435] usb 8-1: config index 0 descriptor too short (expected 91, got 27) [ 1603.839493][T14435] usb 8-1: config 0 has an invalid interface number: 9 but max is 1 [ 1603.889210][ T2246] tipc: Enabling of bearer rejected, failed to enable media [ 1603.975534][T14435] usb 8-1: config 0 has an invalid interface number: 9 but max is 1 [ 1603.993759][T14435] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1604.003649][T14435] usb 8-1: config 0 has no interface number 0 [ 1604.009778][T14435] usb 8-1: config 0 interface 9 has no altsetting 0 [ 1604.016656][T14435] usb 8-1: config 0 interface 9 has no altsetting 1 [ 1604.030804][T14435] usb 8-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice= 9.a0 [ 1604.064940][T14435] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.098470][T14435] usb 8-1: Product: syz [ 1604.122985][T14435] usb 8-1: Manufacturer: syz [ 1604.127684][T14435] usb 8-1: SerialNumber: syz [ 1604.401570][T14435] usb 8-1: config 0 descriptor?? [ 1604.755697][ T2261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5917'. [ 1605.091691][T14435] usb 8-1: selecting invalid altsetting 1 [ 1605.111903][T14435] sierra 8-1:0.9: Sierra USB modem converter detected [ 1605.186217][T14435] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 1605.259067][T14435] usb 8-1: USB disconnect, device number 49 [ 1605.297861][T14435] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1605.309380][ T1148] hsr_slave_0: left promiscuous mode [ 1605.354830][ T2276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5922'. [ 1605.366384][ T1148] hsr_slave_1: left promiscuous mode [ 1605.373594][T14435] sierra 8-1:0.9: device disconnected [ 1605.391887][ T2273] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1605.398434][ T2273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1605.439214][ T1148] veth1_vlan: left promiscuous mode [ 1605.450889][ T2281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5919'. [ 1605.460741][ T2273] vhci_hcd vhci_hcd.0: Device attached [ 1605.469104][ T1148] veth0_vlan: left promiscuous mode [ 1606.213924][T14435] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1606.221367][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1606.397836][ T10] usb 1-1: config 0 has no interfaces? [ 1606.414029][ T10] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1606.434533][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 1606.442527][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.459385][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 1606.469457][ T10] usb 1-1: config 0 descriptor?? [ 1606.711934][ T2279] usb 33-1: recv xbuf, 0 [ 1606.717326][ T10] usb 1-1: string descriptor 0 read error: -71 [ 1606.741847][ T10] usb 1-1: USB disconnect, device number 22 [ 1606.749740][T13871] vhci_hcd vhci_hcd.0: stop threads [ 1606.778337][T13871] vhci_hcd vhci_hcd.0: release socket [ 1606.786852][T13871] vhci_hcd vhci_hcd.0: disconnect device [ 1606.818452][ T1148] lo (unregistering): left allmulticast mode [ 1606.826943][T14435] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1606.949958][ T2304] tipc: Enabling of bearer rejected, failed to enable media [ 1607.018404][ T2317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5932'. [ 1607.087293][ T2320] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1607.283340][ T2329] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.5935'. [ 1607.641981][ T1148] IPVS: stop unused estimator thread 0... [ 1608.062453][ T2362] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1608.185389][ T2363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=2363 comm=syz.7.5944 [ 1608.201140][ T2363] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5944'. [ 1609.782655][ T2397] tipc: Enabling of bearer rejected, failed to enable media [ 1609.834282][ T2401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5952'. [ 1610.396641][ T2423] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1610.459401][ T5809] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 1610.459514][ T5809] Bluetooth: hci4: unknown advertising packet type: 0x6c [ 1610.493389][ T5809] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1610.921285][ T2432] netlink: 'syz.6.5957': attribute type 4 has an invalid length. [ 1610.929260][ T2432] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5957'. [ 1611.403979][ T2439] netlink: 'syz.0.5958': attribute type 4 has an invalid length. [ 1611.411975][ T2439] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5958'. [ 1613.014477][ T30] audit: type=1400 audit(2000000260.171:3132): avc: denied { associate } for pid=2501 comm="syz.3.5964" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1614.623027][ T30] audit: type=1400 audit(2000000261.687:3133): avc: denied { setattr } for pid=2542 comm="syz.7.5976" name="ptyr2" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1614.719250][ T2544] syzkaller0: entered promiscuous mode [ 1614.834438][ T2544] syzkaller0: entered allmulticast mode [ 1615.294653][ T2566] fuse: Bad value for 'fd' [ 1615.302158][ T2567] fuse: Bad value for 'fd' [ 1616.098681][T31577] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1616.286917][T31577] usb 7-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 1616.303266][T31577] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.334088][ T5908] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1616.520840][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 1616.530770][ T5908] usb 1-1: config 0 has no interfaces? [ 1616.548586][ T5908] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1616.567199][ T5908] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1616.577314][ T5908] usb 1-1: Manufacturer: syz [ 1616.595733][ T5908] usb 1-1: config 0 descriptor?? [ 1617.760183][ T2607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.781983][ T2607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.791135][T31577] pegasus 7-1:254.0: probe with driver pegasus failed with error -32 [ 1619.511818][T31573] usb 7-1: USB disconnect, device number 33 [ 1619.621946][ T2603] xfrm0 speed is unknown, defaulting to 1000 [ 1619.796636][ T2646] netlink: 'syz.1.5992': attribute type 4 has an invalid length. [ 1619.804506][ T2646] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5992'. [ 1620.462210][T31577] usb 1-1: USB disconnect, device number 23 [ 1621.238867][ T2684] overlayfs: failed to clone upperpath [ 1621.462458][ T2691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1621.510384][ T2656] kexec: Could not allocate control_code_buffer [ 1621.615492][ T2692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6001'. [ 1621.922434][ T2707] tipc: Enabled bearer , priority 0 [ 1622.009850][ T2707] tipc: Resetting bearer [ 1622.417761][ T2703] tipc: Disabling bearer [ 1624.123820][T31574] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1624.322998][T31574] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 1624.359202][T31574] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x95, changing to 0x85 [ 1624.418671][T31574] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1624.453515][T31574] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1624.493425][T31574] usb 8-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1624.535596][T31574] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.583674][T31574] usb 8-1: config 0 descriptor?? [ 1625.076255][ T2791] IPVS: set_ctl: invalid protocol: 98 172.30.1.2:19999 [ 1625.367025][T31574] usbhid 8-1:0.0: can't add hid device: -71 [ 1625.384112][T31574] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1625.462916][T31574] usb 8-1: USB disconnect, device number 50 [ 1627.383665][ T5809] Bluetooth: hci5: unexpected event for opcode 0x0c7b [ 1628.216307][ T2877] 9p: Bad value for 'rfdno' [ 1631.141149][ T2960] overlayfs: failed lookup in lower (newroot/33, name='file0', err=-40): overlapping layers [ 1631.700462][ T5809] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1631.711250][ T5809] Bluetooth: hci5: Injecting HCI hardware error event [ 1631.781878][T25390] Bluetooth: hci5: hardware error 0x00 [ 1631.991250][ T2988] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1632.105338][ T2989] netlink: 'syz.0.6059': attribute type 4 has an invalid length. [ 1632.113293][ T2989] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6059'. [ 1632.547184][ T2996] netlink: 'syz.0.6060': attribute type 21 has an invalid length. [ 1632.573107][ T2996] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6060'. [ 1632.586441][ T2996] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6060'. [ 1632.711724][ T3002] kAFS: unable to lookup cell '(,c¾Ì' [ 1633.940649][T31573] libceph: connect (1)[c::]:6789 error -101 [ 1633.947342][T31573] libceph: mon0 (1)[c::]:6789 connect error [ 1634.060275][ T3023] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6066'. [ 1634.113858][ T3023] bridge: RTM_NEWNEIGH with invalid ether address [ 1634.233350][ T5954] libceph: connect (1)[c::]:6789 error -101 [ 1634.244788][ T5954] libceph: mon0 (1)[c::]:6789 connect error [ 1634.254419][T31573] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1634.324762][ T30] audit: type=1400 audit(2000000280.122:3134): avc: denied { bind } for pid=3036 comm="syz.0.6070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1634.439672][T31573] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1634.464997][T31573] usb 7-1: config 0 has no interface number 0 [ 1634.491017][T31573] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1634.506382][T31573] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1634.517525][T31573] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1634.530138][T31573] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.547351][T31573] usb 7-1: config 0 descriptor?? [ 1634.627305][T25390] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1634.828483][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 1635.058377][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 1635.168637][ T3055] netlink: 'syz.1.6073': attribute type 4 has an invalid length. [ 1635.176454][ T3055] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6073'. [ 1635.435992][ T3061] ipvlan2: entered promiscuous mode [ 1635.624407][ T3078] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1636.071502][ T5954] libceph: connect (1)[c::]:6789 error -101 [ 1636.107103][ T5954] libceph: mon0 (1)[c::]:6789 connect error [ 1636.737734][ T3105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6081'. [ 1637.139017][ T3015] ceph: No mds server is up or the cluster is laggy [ 1637.154228][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 1637.187310][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 1637.882605][ T3125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6086'. [ 1637.906564][T31573] usbhid 7-1:0.1: can't add hid device: -71 [ 1637.929045][T31573] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 1637.967395][T31573] usb 7-1: USB disconnect, device number 34 [ 1638.101259][ T5793] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1638.595538][ T5793] usb 1-1: not running at top speed; connect to a high speed hub [ 1638.617240][ T3144] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1638.626085][ T5793] usb 1-1: config 1 has an invalid interface number: 78 but max is 0 [ 1638.661206][ T5793] usb 1-1: config 1 has no interface number 0 [ 1639.169649][ T5793] usb 1-1: config 1 interface 78 has no altsetting 0 [ 1639.200997][ T5793] usb 1-1: string descriptor 0 read error: -22 [ 1639.289869][ T30] audit: type=1400 audit(2000000284.763:3135): avc: denied { watch watch_reads } for pid=3147 comm="syz.7.6093" path="/362/file0" dev="tmpfs" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1639.319437][ T30] audit: type=1400 audit(2000000284.801:3136): avc: denied { map } for pid=3147 comm="syz.7.6093" path="socket:[126347]" dev="sockfs" ino=126347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1639.367147][ T5793] usb 1-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 1639.405529][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.437006][ T5793] usb 1-1: can't set config #1, error -71 [ 1639.460611][ T5793] usb 1-1: USB disconnect, device number 24 [ 1640.505374][ T3168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6100'. [ 1640.772715][T31573] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1640.899826][ T3194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1640.988195][T31573] usb 4-1: Using ep0 maxpacket: 16 [ 1641.016314][T31573] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1641.032812][T31573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.050410][T31573] usb 4-1: Product: syz [ 1641.061699][T31573] usb 4-1: Manufacturer: syz [ 1641.071048][T31573] usb 4-1: SerialNumber: syz [ 1641.682929][T31573] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1641.788165][ T3204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6101'. [ 1641.909921][ T30] audit: type=1400 audit(2000000287.225:3137): avc: denied { mounton } for pid=3164 comm="syz.3.6097" path="/proc/1647/cgroup" dev="proc" ino=126470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1641.949079][T31573] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1642.006275][T31573] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1642.047792][T31573] usb 4-1: media controller created [ 1642.078950][T31573] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1642.483531][ T3209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6106'. [ 1642.570781][T31573] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1642.646537][T31573] usb 4-1: USB disconnect, device number 84 [ 1642.963969][ T3221] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1644.673031][ T5908] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1644.844061][ T5908] usb 7-1: Using ep0 maxpacket: 32 [ 1644.868761][ T5908] usb 7-1: config 0 has an invalid interface number: 182 but max is 0 [ 1644.884433][ T5908] usb 7-1: config 0 has no interface number 0 [ 1644.891061][ T5908] usb 7-1: config 0 interface 182 has no altsetting 0 [ 1644.912874][ T5908] usb 7-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 1644.929038][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.947572][ T5908] usb 7-1: Product: syz [ 1644.957922][ T5908] usb 7-1: Manufacturer: syz [ 1644.971199][ T5908] usb 7-1: SerialNumber: syz [ 1644.972205][ T5954] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1644.978302][ T5908] usb 7-1: config 0 descriptor?? [ 1644.994802][ T5908] hub 7-1:0.182: bad descriptor, ignoring hub [ 1645.011137][ T5908] hub 7-1:0.182: probe with driver hub failed with error -5 [ 1645.187472][ T5954] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1645.223670][ T5954] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1645.224588][ T5908] kaweth 7-1:0.182: Firmware present in device. [ 1645.269457][ T5954] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.291864][ T5954] usb 8-1: config 220 has no interface number 2 [ 1645.312328][ T3267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6116'. [ 1645.329235][ T5954] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1645.359323][ T5954] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1645.404082][ T5954] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1645.430813][ T5954] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1645.449809][ T5954] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1645.465917][ T5954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.486380][ T5954] usb 8-1: Product: syz [ 1645.494096][ T5954] usb 8-1: Manufacturer: syz [ 1645.507790][ T5954] usb 8-1: SerialNumber: syz [ 1645.785859][ T5954] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1645.801973][ T5954] uvcvideo 8-1:220.0: No valid video chain found. [ 1645.815369][ T5954] usb 8-1: selecting invalid altsetting 0 [ 1645.831112][ T5954] usb 8-1: selecting invalid altsetting 0 [ 1645.837091][ T5954] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 1645.857797][ T5954] usb 8-1: USB disconnect, device number 51 [ 1645.964422][ T3296] netlink: 'syz.1.6122': attribute type 4 has an invalid length. [ 1645.973210][ T3296] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6122'. [ 1646.069254][ T3302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6123'. [ 1646.306386][ T5908] kaweth 7-1:0.182: Error reading configuration (-71), no net device created [ 1646.329916][ T5908] kaweth 7-1:0.182: probe with driver kaweth failed with error -5 [ 1646.379431][ T5908] usb 7-1: USB disconnect, device number 35 [ 1646.502317][ T3322] netlink: 'syz.6.6124': attribute type 1 has an invalid length. [ 1647.261773][ T3325] netlink: 'syz.1.6126': attribute type 4 has an invalid length. [ 1647.269711][ T3325] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6126'. [ 1647.657028][ T3341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6130'. [ 1648.624488][ T3359] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1648.631047][ T3359] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1648.655579][ T3359] vhci_hcd vhci_hcd.0: Device attached [ 1648.953103][T31583] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1649.024330][ T5908] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1649.121266][ T30] audit: type=1400 audit(2000000293.972:3138): avc: denied { nlmsg_write } for pid=3372 comm="syz.0.6137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1649.258903][ T5908] usb 7-1: config 0 has no interfaces? [ 1649.266355][ T5908] usb 7-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1649.276511][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.303218][ T5908] usb 7-1: config 0 descriptor?? [ 1649.332240][T14435] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1649.505082][T14435] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1649.513501][T14435] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1649.522859][T14435] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.534860][ T3362] usb 45-1: recv xbuf, 0 [ 1649.540286][T14435] usb 4-1: config 220 has no interface number 2 [ 1649.547174][ T5908] usb 7-1: string descriptor 0 read error: -71 [ 1649.555150][T16114] vhci_hcd vhci_hcd.6: stop threads [ 1649.555861][ T5908] usb 7-1: USB disconnect, device number 36 [ 1649.567385][T14435] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1649.572843][T16114] vhci_hcd vhci_hcd.6: release socket [ 1649.586136][T14435] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1649.593502][T14435] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1649.603752][T14435] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1649.610646][T16114] vhci_hcd vhci_hcd.6: disconnect device [ 1649.613725][T14435] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1649.626358][T14435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.635229][T14435] usb 4-1: Product: syz [ 1649.639667][T14435] usb 4-1: Manufacturer: syz [ 1649.644973][T14435] usb 4-1: SerialNumber: syz [ 1649.884456][T14435] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1649.909588][T14435] uvcvideo 4-1:220.0: No valid video chain found. [ 1649.916106][T14435] usb 4-1: selecting invalid altsetting 0 [ 1649.938830][T14435] usb 4-1: selecting invalid altsetting 0 [ 1649.951940][T14435] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1649.973699][T14435] usb 4-1: USB disconnect, device number 85 [ 1650.630885][ T3424] kAFS: unable to lookup cell '(,c¾Ì' [ 1652.530802][ T30] audit: type=1400 audit(2000000297.050:3139): avc: denied { accept } for pid=3435 comm="syz.0.6147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1652.705122][ T3436] can0: slcan on ttyS3. [ 1652.773386][ T3436] can0 (unregistered): slcan off ttyS3. [ 1652.800050][ T3437] can0: slcan on ttyS3. [ 1652.820984][ T30] audit: type=1400 audit(2000000297.434:3140): avc: denied { connect } for pid=3435 comm="syz.0.6147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1652.880254][ T3435] can0 (unregistered): slcan off ttyS3. [ 1654.129505][ T3462] syzkaller0: entered promiscuous mode [ 1654.136261][ T3462] syzkaller0: entered allmulticast mode [ 1654.731331][ T3468] netlink: 'syz.3.6157': attribute type 4 has an invalid length. [ 1654.739096][ T3468] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6157'. [ 1655.141989][ T3478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6161'. [ 1655.399448][ T30] audit: type=1400 audit(2000000299.849:3141): avc: denied { map } for pid=3471 comm="syz.7.6159" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1655.531726][ T30] audit: type=1400 audit(2000000299.849:3142): avc: denied { execute } for pid=3471 comm="syz.7.6159" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1655.550191][ T3474] xfrm0 speed is unknown, defaulting to 1000 [ 1656.599700][ T30] audit: type=1400 audit(2000000300.064:3143): avc: denied { bind } for pid=3490 comm="syz.1.6164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1656.998673][ T3512] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3512 comm=syz.6.6167 [ 1657.066648][ T3511] siw: device registration error -23 [ 1657.072475][ T30] audit: type=1400 audit(2000000300.073:3144): avc: denied { name_bind } for pid=3490 comm="syz.1.6164" src=28452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1657.149578][ T30] audit: type=1400 audit(2000000300.073:3145): avc: denied { node_bind } for pid=3490 comm="syz.1.6164" src=28452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1658.296949][ T3533] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1014 sclass=netlink_tcpdiag_socket pid=3533 comm=syz.3.6172 [ 1658.881763][ T3546] futex_wake_op: syz.6.6177 tries to shift op by -1; fix this program [ 1659.165196][ T3557] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1659.171734][ T3557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1659.181141][ T3557] vhci_hcd vhci_hcd.0: Device attached [ 1659.430542][ T5908] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 1659.515898][T14435] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1659.677834][T14435] usb 7-1: config 0 has no interfaces? [ 1659.687149][T14435] usb 7-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1659.720280][T14435] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.753121][T14435] usb 7-1: config 0 descriptor?? [ 1660.174693][ T3559] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1660.193417][T14435] usb 7-1: string descriptor 0 read error: -71 [ 1660.351600][T26082] vhci_hcd vhci_hcd.6: stop threads [ 1660.365905][T14435] usb 7-1: USB disconnect, device number 37 [ 1660.394917][T26082] vhci_hcd vhci_hcd.6: release socket [ 1660.599764][T26082] vhci_hcd vhci_hcd.6: disconnect device [ 1660.947484][ T3577] tmpfs: Bad value for 'mpol' [ 1660.982446][ T30] audit: type=1400 audit(2000000305.080:3146): avc: denied { bind } for pid=3576 comm="syz.7.6189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1661.089627][ T3577] xfrm0 speed is unknown, defaulting to 1000 [ 1661.106896][ T30] audit: type=1400 audit(2000000305.183:3147): avc: denied { ioctl } for pid=3583 comm="syz.3.6191" path="socket:[126927]" dev="sockfs" ino=126927 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1661.218794][ T3593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.226154][ T3593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.247615][ T3593] bridge0: entered allmulticast mode [ 1661.321865][T31580] usb 8-1: new low-speed USB device number 52 using dummy_hcd [ 1661.486933][T31580] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1661.502759][T31580] usb 8-1: config 0 has no interface number 0 [ 1661.523126][T31580] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1661.553750][T31580] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1661.572465][T31580] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1661.592230][T31580] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.620287][T31580] usb 8-1: config 0 descriptor?? [ 1661.644928][T31580] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1662.784297][ T3629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6200'. [ 1662.939170][T31580] usb 8-1: USB disconnect, device number 52 [ 1663.042178][ T3634] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1663.048727][ T3634] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1663.739919][ T3634] vhci_hcd vhci_hcd.0: Device attached [ 1663.982835][ T5954] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1663.993524][T31580] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 1664.075904][ T3652] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6206'. [ 1664.208175][ T5954] usb 4-1: config index 0 descriptor too short (expected 28271, got 18) [ 1664.216561][ T5954] usb 4-1: config 101 has too many interfaces: 116, using maximum allowed: 32 [ 1664.282580][ T5954] usb 4-1: config 101 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.311670][ T5954] usb 4-1: config 101 has 0 interfaces, different from the descriptor's value: 116 [ 1664.335277][ T5954] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1664.374253][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.639694][ T3665] tipc: Enabling of bearer rejected, failed to enable media [ 1664.645544][ T5954] usb 4-1: string descriptor 0 read error: -71 [ 1664.655589][ T3637] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 1664.738219][ T5954] usb 4-1: USB disconnect, device number 86 [ 1664.744280][T13873] vhci_hcd vhci_hcd.3: stop threads [ 1664.769789][T13873] vhci_hcd vhci_hcd.3: release socket [ 1664.799680][ T3690] netlink: 'syz.6.6215': attribute type 1 has an invalid length. [ 1664.817485][T13873] vhci_hcd vhci_hcd.3: disconnect device [ 1664.859201][ T5908] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1664.909736][ T3690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1664.936039][ T3695] bond0: (slave geneve2): making interface the new active one [ 1664.944239][ T3695] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 1664.964382][ T3697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6217'. [ 1665.001358][ T3700] netlink: 108 bytes leftover after parsing attributes in process `syz.7.6216'. [ 1665.026686][ T3690] bond0: entered promiscuous mode [ 1665.032110][ T30] audit: type=1400 audit(2000000308.870:3148): avc: denied { accept } for pid=3689 comm="syz.6.6215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1665.063263][ T3690] geneve2: entered promiscuous mode [ 1665.095179][ T30] audit: type=1400 audit(2000000308.926:3149): avc: denied { ioctl } for pid=3699 comm="syz.7.6216" path="socket:[128061]" dev="sockfs" ino=128061 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1665.111093][ T3700] netlink: 164 bytes leftover after parsing attributes in process `syz.7.6216'. [ 1665.143896][ T3706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6204'. [ 1665.644465][ T3720] tipc: Enabling of bearer rejected, failed to enable media [ 1666.167286][T31573] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1666.335738][ T3736] netlink: 'syz.7.6224': attribute type 1 has an invalid length. [ 1666.869484][ T3739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6228'. [ 1666.921686][T31573] usb 1-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 1666.930757][T31573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.058917][ T3747] netlink: 163952 bytes leftover after parsing attributes in process `syz.7.6230'. [ 1667.111228][ T3750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6231'. [ 1667.204732][T31573] pegasus 1-1:254.0: probe with driver pegasus failed with error -71 [ 1667.274180][ T3749] program syz.3.6225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1667.340943][T31573] usb 1-1: USB disconnect, device number 25 [ 1668.339475][ T3770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1668.705942][T14435] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1668.879782][T14435] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1668.923677][T14435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1668.951661][T14435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1669.956154][T14435] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1669.998906][T14435] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1670.000042][ T3805] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6243'. [ 1670.007979][T14435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.020324][T31580] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1670.032559][T14435] usb 4-1: config 0 descriptor?? [ 1670.556064][T14435] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1670.618459][ T3825] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1670.625017][ T3825] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1670.644948][ T3825] vhci_hcd vhci_hcd.0: Device attached [ 1670.931816][T31573] usb 47-1: new low-speed USB device number 5 using vhci_hcd [ 1671.085055][T14435] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1671.307345][T14435] usb 8-1: config 0 has no interfaces? [ 1671.339240][T14435] usb 8-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1671.373404][T14435] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.391841][T14435] usb 8-1: config 0 descriptor?? [ 1671.625612][ T3829] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 1671.632912][T26082] vhci_hcd vhci_hcd.7: stop threads [ 1671.675586][T14435] usb 8-1: string descriptor 0 read error: -71 [ 1671.722715][T26082] vhci_hcd vhci_hcd.7: release socket [ 1671.786997][T14435] usb 8-1: USB disconnect, device number 53 [ 1671.924012][ T3854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6254'. [ 1671.941280][T26082] vhci_hcd vhci_hcd.7: disconnect device [ 1672.356754][ T3858] netlink: 'syz.1.6256': attribute type 1 has an invalid length. [ 1672.467873][ T3862] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6257'. [ 1672.512702][T14435] usb 4-1: reset high-speed USB device number 87 using dummy_hcd [ 1672.524255][ T3860] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1672.556631][ T3860] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 1673.672987][ T3858] macvlan2: entered promiscuous mode [ 1673.685256][ T3858] macvlan2: entered allmulticast mode [ 1673.720625][ T3858] bond0: entered promiscuous mode [ 1673.739720][ T3858] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1673.774560][ T3858] bond0: left promiscuous mode [ 1673.957187][ T3873] netlink: 'syz.3.6260': attribute type 1 has an invalid length. [ 1673.973863][ T3873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1674.026609][ T3876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1674.110654][ T3873] xfrm0 speed is unknown, defaulting to 1000 [ 1674.148846][ T3880] FAULT_INJECTION: forcing a failure. [ 1674.148846][ T3880] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.205124][ T3880] CPU: 0 UID: 0 PID: 3880 Comm: syz.7.6263 Tainted: G L syzkaller #0 PREEMPT(full) [ 1674.205155][ T3880] Tainted: [L]=SOFTLOCKUP [ 1674.205160][ T3880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1674.205170][ T3880] Call Trace: [ 1674.205175][ T3880] [ 1674.205182][ T3880] dump_stack_lvl+0x100/0x190 [ 1674.205212][ T3880] should_fail_ex.cold+0x5/0xa [ 1674.205234][ T3880] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1674.205254][ T3880] should_failslab+0xc2/0x120 [ 1674.205278][ T3880] __kmalloc_noprof+0xe0/0x850 [ 1674.205304][ T3880] tomoyo_realpath_from_path+0xb6/0x690 [ 1674.205327][ T3880] tomoyo_path_number_perm+0x23c/0x580 [ 1674.205352][ T3880] ? tomoyo_path_number_perm+0x22e/0x580 [ 1674.205378][ T3880] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1674.205424][ T3880] ? find_held_lock+0x2b/0x80 [ 1674.205446][ T3880] ? __fget_files+0x215/0x3d0 [ 1674.205463][ T3880] ? hook_file_ioctl_common+0x146/0x410 [ 1674.205491][ T3880] ? __fget_files+0x21f/0x3d0 [ 1674.205510][ T3880] security_file_ioctl+0xd3/0x230 [ 1674.205529][ T3880] __x64_sys_ioctl+0xb7/0x210 [ 1674.205555][ T3880] do_syscall_64+0x106/0xf80 [ 1674.205573][ T3880] ? clear_bhb_loop+0x40/0x90 [ 1674.205596][ T3880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.205612][ T3880] RIP: 0033:0x7f634f59c629 [ 1674.205626][ T3880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1674.205641][ T3880] RSP: 002b:00007f6350419028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1674.205657][ T3880] RAX: ffffffffffffffda RBX: 00007f634f815fa0 RCX: 00007f634f59c629 [ 1674.205668][ T3880] RDX: 0000200000000040 RSI: 00000000c040563e RDI: 0000000000000003 [ 1674.205678][ T3880] RBP: 00007f6350419090 R08: 0000000000000000 R09: 0000000000000000 [ 1674.205688][ T3880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1674.205698][ T3880] R13: 00007f634f816038 R14: 00007f634f815fa0 R15: 00007ffe1c438f48 [ 1674.205721][ T3880] [ 1674.206113][ T3880] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1674.358942][T25390] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1674.424890][T25390] Bluetooth: hci4: Injecting HCI hardware error event [ 1674.434587][T25390] Bluetooth: hci4: hardware error 0x00 [ 1674.640381][ T30] audit: type=1326 audit(2000000317.844:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.3.6260" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2a199c629 code=0x0 [ 1674.811599][T31580] usb 4-1: USB disconnect, device number 87 [ 1675.331231][T31580] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 1676.395150][ T3905] netlink: 428 bytes leftover after parsing attributes in process `syz.6.6269'. [ 1676.401297][T31580] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1676.404559][ T30] audit: type=1400 audit(2000000319.117:3151): avc: denied { mount } for pid=3899 comm="syz.7.6270" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1676.445767][ T3905] netlink: 428 bytes leftover after parsing attributes in process `syz.6.6269'. [ 1676.452238][ T3902] input: syz0 as /devices/virtual/input/input53 [ 1676.460642][T31580] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1676.480504][T31573] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1676.523463][T31580] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1676.568941][T31580] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1676.591284][ T3908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6271'. [ 1676.611972][T31580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1676.633783][T31580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1676.654218][T31580] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1676.706586][T31580] usb 1-1: string descriptor 0 read error: -22 [ 1676.731319][T31583] usb 8-1: new full-speed USB device number 54 using dummy_hcd [ 1676.752633][T31580] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1676.752779][T25390] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1676.805871][T31580] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.833866][T31580] usb 1-1: config 0 descriptor?? [ 1676.851935][T31580] hub 1-1:0.0: bad descriptor, ignoring hub [ 1676.857957][T31580] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1676.886766][T31580] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input54 [ 1676.910371][T31583] usb 8-1: config 5 has an invalid interface number: 123 but max is 0 [ 1676.923824][T31583] usb 8-1: config 5 has no interface number 0 [ 1676.950288][T31583] usb 8-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1676.987378][T31583] usb 8-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1677.010015][T31583] usb 8-1: config 5 interface 123 has no altsetting 0 [ 1677.038987][T31583] usb 8-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1677.058169][T31583] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.124712][T31580] usb 1-1: USB disconnect, device number 26 [ 1677.147624][T31583] usb 8-1: Product: syz [ 1677.156805][T31583] usb 8-1: Manufacturer: syz [ 1677.191654][T31583] usb 8-1: SerialNumber: syz [ 1677.210137][ T3903] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1677.491381][T31583] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 1677.536709][T31583] usb 8-1: USB disconnect, device number 54 [ 1678.072604][ T30] audit: type=1400 audit(2000000321.063:3152): avc: denied { unmount } for pid=26396 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1678.742051][ T3931] input: syz0 as /devices/virtual/input/input55 [ 1678.780431][ T3931] netlink: 428 bytes leftover after parsing attributes in process `syz.3.6276'. [ 1678.819356][ T3931] netlink: 428 bytes leftover after parsing attributes in process `syz.3.6276'. [ 1678.978287][ T3934] netlink: 'syz.0.6279': attribute type 5 has an invalid length. [ 1679.723354][T31583] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1679.783287][ T3942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6282'. [ 1679.929151][T31583] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1679.946832][T31583] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1679.962733][ T3952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6285'. [ 1679.974398][T31583] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1679.990165][T31583] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1680.092881][T31583] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1680.105986][T31583] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1680.132760][T31583] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1680.143724][T31583] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1680.156808][T31583] usb 7-1: Product: syz [ 1680.161006][T31583] usb 7-1: Manufacturer: syz [ 1680.182057][ T3938] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1680.193050][T31583] cdc_wdm 7-1:1.0: skipping garbage [ 1680.217271][ T3962] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6288'. [ 1680.226465][T31583] cdc_wdm 7-1:1.0: skipping garbage [ 1680.242569][T31583] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1680.398975][T31583] cdc_wdm 7-1:1.0: Unknown control protocol [ 1680.463897][ T3965] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6290'. [ 1680.540713][ T30] audit: type=1400 audit(2000000323.375:3153): avc: denied { read write } for pid=3937 comm="syz.6.6280" name="cdc-wdm0" dev="devtmpfs" ino=4175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1680.543923][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1680.571518][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1680.580054][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1680.587108][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1680.593433][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1680.600048][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1680.606361][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1680.612967][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1680.617008][ T30] audit: type=1400 audit(2000000323.375:3154): avc: denied { open } for pid=3937 comm="syz.6.6280" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1680.619268][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1680.649417][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1680.657161][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1680.663800][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1680.670530][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1680.677145][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1680.683800][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1680.690412][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1680.697324][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1680.703939][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1680.710321][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1680.716929][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1680.802670][T31573] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1680.952373][T31573] usb 4-1: device descriptor read/64, error -71 [ 1680.982722][T31583] usb 7-1: USB disconnect, device number 38 [ 1680.988836][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1680.994883][ T3938] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 1681.011272][ T3971] netlink: 'syz.1.6292': attribute type 1 has an invalid length. [ 1681.233478][T31573] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1681.242726][ T3980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1681.428457][ T3982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3982 comm=syz.0.6296 [ 1681.445952][T31573] usb 4-1: device descriptor read/64, error -71 [ 1681.468488][ T3982] netlink: 'syz.0.6296': attribute type 1 has an invalid length. [ 1681.539359][ T3982] bond0: (slave gretap1): making interface the new active one [ 1681.547906][ T3982] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 1681.570507][ T3982] vlan3: entered allmulticast mode [ 1681.581670][ T3982] bond0: entered allmulticast mode [ 1681.587150][ T3982] gretap1: entered allmulticast mode [ 1681.593979][ T3982] bond0: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1681.597192][T31573] usb usb4-port1: attempt power cycle [ 1682.234416][T14096] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1682.355609][ T3991] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6300'. [ 1682.929042][T31573] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1683.028557][T31573] usb 4-1: device descriptor read/8, error -71 [ 1683.066118][T14096] usb 1-1: Using ep0 maxpacket: 8 [ 1683.310853][T14096] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1683.367466][T31573] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1683.375749][T14096] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1683.410152][T14096] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1683.418262][T14096] usb 1-1: Product: syz [ 1683.442137][T14096] usb 1-1: Manufacturer: syz [ 1683.446911][T31573] usb 4-1: device descriptor read/8, error -71 [ 1683.453634][T14096] usb 1-1: SerialNumber: syz [ 1683.582950][T31573] usb usb4-port1: unable to enumerate USB device [ 1683.627743][ T4003] netlink: 'syz.6.6304': attribute type 1 has an invalid length. [ 1683.733071][T14096] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 1683.830856][T14096] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1683.921226][T14096] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1684.032385][T14096] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1684.110144][T14096] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 1684.193251][T14096] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1684.322850][T14096] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1684.466574][T14096] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1684.513151][T14096] usb 1-1: USB disconnect, device number 27 [ 1684.555422][T14096] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1684.614423][T14096] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1684.671300][T14096] visor 1-1:1.0: device disconnected [ 1685.493822][T14096] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1685.507855][ T4022] can0: slcan on ttyS3. [ 1685.752364][T14096] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1685.777797][T14096] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1685.790113][T14096] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1686.250252][T14096] usb 1-1: config 220 has no interface number 2 [ 1686.261111][T14096] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1686.276575][T14096] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1686.283373][T14096] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1686.323295][T14096] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1686.332421][ T4017] can0 (unregistered): slcan off ttyS3. [ 1686.336866][ T4040] netlink: 'syz.1.6315': attribute type 33 has an invalid length. [ 1686.355957][ T4040] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6315'. [ 1686.404948][T14096] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1686.414602][T14096] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.422605][T14096] usb 1-1: Product: syz [ 1686.430565][T14096] usb 1-1: Manufacturer: syz [ 1686.507944][T14096] usb 1-1: SerialNumber: syz [ 1686.932978][T14096] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1686.947554][T14096] uvcvideo 1-1:220.0: No valid video chain found. [ 1686.954504][T14096] usb 1-1: selecting invalid altsetting 0 [ 1686.998513][T14096] usb 1-1: selecting invalid altsetting 0 [ 1687.010493][T14096] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1687.052858][T14096] usb 1-1: USB disconnect, device number 28 [ 1687.088475][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6321'. [ 1687.370300][ T4081] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.6327'. [ 1689.114005][ T30] audit: type=1400 audit(2000000331.394:3155): avc: denied { bind } for pid=4111 comm="syz.0.6334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1689.215010][ T4117] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6335'. [ 1689.448484][ T30] audit: type=1326 audit(2000000331.713:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.1.6331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cad59c629 code=0x0 [ 1690.113224][ T4132] kAFS: unable to lookup cell '(,c¾Ì' [ 1690.709500][ T4133] netlink: 'syz.3.6338': attribute type 1 has an invalid length. [ 1690.787155][ T4133] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1690.869799][ T4142] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1690.980043][ T30] audit: type=1400 audit(2000000333.135:3157): avc: denied { relabelto } for pid=4126 comm="syz.3.6338" name="syz1" dev="cgroup2" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1691.093206][ T4149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1691.112481][ T30] audit: type=1400 audit(2000000333.135:3158): avc: denied { associate } for pid=4126 comm="syz.3.6338" name="syz1" dev="cgroup2" ino=515 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 1691.160321][ T30] audit: type=1400 audit(2000000333.135:3159): avc: denied { write } for pid=4126 comm="syz.3.6338" name="syz1" dev="cgroup2" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1691.163079][ T4140] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1691.196525][ T30] audit: type=1400 audit(2000000333.135:3160): avc: denied { add_name } for pid=4126 comm="syz.3.6338" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1691.200989][ T4149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1691.225380][ T30] audit: type=1400 audit(2000000333.135:3161): avc: denied { create } for pid=4126 comm="syz.3.6338" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1691.254634][ T30] audit: type=1400 audit(2000000333.135:3162): avc: denied { associate } for pid=4126 comm="syz.3.6338" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1691.351568][ T4158] geneve1: entered allmulticast mode [ 1691.403038][T14435] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 1691.563540][T14435] usb 7-1: Invalid ep0 maxpacket: 16 [ 1691.788914][ T4172] sp0: Synchronizing with TNC [ 1691.895551][ T4172] xfrm0 speed is unknown, defaulting to 1000 [ 1692.718251][T14435] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 1692.726103][T31583] usb 8-1: new low-speed USB device number 55 using dummy_hcd [ 1693.039620][T14435] usb 7-1: Invalid ep0 maxpacket: 16 [ 1693.071184][T14435] usb usb7-port1: attempt power cycle [ 1693.126715][T31583] usb 8-1: Invalid ep0 maxpacket: 16 [ 1693.172911][ T4180] xfrm0 speed is unknown, defaulting to 1000 [ 1693.283909][T31583] usb 8-1: new low-speed USB device number 56 using dummy_hcd [ 1693.593827][T14435] usb 7-1: new low-speed USB device number 41 using dummy_hcd [ 1693.625811][T31583] usb 8-1: Invalid ep0 maxpacket: 16 [ 1693.631407][T14435] usb 7-1: Invalid ep0 maxpacket: 16 [ 1693.642739][T31583] usb usb8-port1: attempt power cycle [ 1693.679226][ T4194] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6356'. [ 1694.849359][T14435] usb 7-1: new low-speed USB device number 42 using dummy_hcd [ 1694.972963][T31583] usb 8-1: new low-speed USB device number 57 using dummy_hcd [ 1695.018965][T14435] usb 7-1: device descriptor read/8, error -71 [ 1695.095086][ T4207] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1695.101647][ T4207] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1695.166360][T14435] usb usb7-port1: unable to enumerate USB device [ 1695.185680][ T4207] vhci_hcd vhci_hcd.0: Device attached [ 1695.252759][T31583] usb 8-1: device not accepting address 57, error -71 [ 1695.392526][ T4219] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1695.401240][ T5954] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1695.442406][T14096] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 1695.633658][ T5954] usb 4-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 1695.656083][T31583] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1695.666855][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.701528][T31583] usb 8-1: Using ep0 maxpacket: 16 [ 1695.732093][T31583] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.744381][T14435] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1695.774307][T31583] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1695.795287][T31583] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1695.835587][T31583] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.856564][T31583] usb 8-1: config 0 descriptor?? [ 1695.937103][T14435] usb 7-1: config 0 has no interfaces? [ 1695.937636][ T5954] pegasus 4-1:254.0: probe with driver pegasus failed with error -71 [ 1695.985340][T14435] usb 7-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1695.991823][ T5954] usb 4-1: USB disconnect, device number 92 [ 1696.001516][ T4226] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=129 sclass=netlink_xfrm_socket pid=4226 comm=syz.0.6364 [ 1696.038245][T14435] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.193623][T14435] usb 7-1: config 0 descriptor?? [ 1696.592000][ T4208] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 1696.600617][T14435] usb 7-1: string descriptor 0 read error: -71 [ 1696.615310][T14435] usb 7-1: USB disconnect, device number 43 [ 1696.636122][T15748] vhci_hcd vhci_hcd.6: stop threads [ 1696.660960][T15748] vhci_hcd vhci_hcd.6: release socket [ 1696.756250][ T4234] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1696.800522][T15748] vhci_hcd vhci_hcd.6: disconnect device [ 1697.071983][T31583] mcp2221 0003:04D8:00DD.0029: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 1697.373868][ T4250] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6369'. [ 1697.651954][ T4260] overlayfs: missing 'lowerdir' [ 1698.464212][ T4267] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1698.470776][ T4267] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1698.523838][ T4267] vhci_hcd vhci_hcd.0: Device attached [ 1698.556602][ T4267] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 1698.563220][ T4267] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1698.607350][ T4270] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 1698.613973][ T4270] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1698.622333][ T4267] vhci_hcd vhci_hcd.0: Device attached [ 1698.657420][ T4267] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13) [ 1698.664041][ T4267] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1698.686790][ T4270] vhci_hcd vhci_hcd.0: Device attached [ 1698.721653][ T4267] vhci_hcd vhci_hcd.0: Device attached [ 1698.721653][ T4277] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 1698.721678][ T4277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1698.776392][ T5954] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 1698.776570][ T4277] vhci_hcd vhci_hcd.0: Device attached [ 1698.812292][ T4270] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(23) [ 1698.818907][ T4270] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1698.838817][ T4267] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1698.850912][ T4270] vhci_hcd vhci_hcd.0: Device attached [ 1698.882430][ T4267] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1698.917439][ T4267] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1698.993278][ T4280] vhci_hcd: connection closed [ 1698.993548][T13871] vhci_hcd vhci_hcd.0: stop threads [ 1698.995261][ T4271] vhci_hcd: connection closed [ 1698.998280][T13871] vhci_hcd vhci_hcd.0: release socket [ 1698.998304][T13871] vhci_hcd vhci_hcd.0: disconnect device [ 1699.004410][ T4278] vhci_hcd: connection closed [ 1699.008225][ T4273] vhci_hcd: connection closed [ 1699.008438][ T4275] vhci_hcd: connection closed [ 1699.036762][ T4268] vhci_hcd: connection reset by peer [ 1699.097428][T13871] vhci_hcd vhci_hcd.0: stop threads [ 1699.102767][T13871] vhci_hcd vhci_hcd.0: release socket [ 1699.129372][T13871] vhci_hcd vhci_hcd.0: disconnect device [ 1699.145506][T31571] usb 8-1: USB disconnect, device number 58 [ 1699.174045][T13871] vhci_hcd vhci_hcd.0: stop threads [ 1699.194922][T13871] vhci_hcd vhci_hcd.0: release socket [ 1699.200462][T13871] vhci_hcd vhci_hcd.0: disconnect device [ 1699.217490][T13871] vhci_hcd vhci_hcd.0: stop threads [ 1699.231121][T13871] vhci_hcd vhci_hcd.0: release socket [ 1699.247488][T13871] vhci_hcd vhci_hcd.0: disconnect device [ 1699.255694][T13871] vhci_hcd vhci_hcd.0: stop threads [ 1699.267355][T13871] vhci_hcd vhci_hcd.0: release socket [ 1699.280091][T13871] vhci_hcd vhci_hcd.0: disconnect device [ 1699.294415][T13871] vhci_hcd vhci_hcd.0: stop threads [ 1699.309213][T13871] vhci_hcd vhci_hcd.0: release socket [ 1699.321892][T13871] vhci_hcd vhci_hcd.0: disconnect device [ 1699.716805][ T4298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6379'. [ 1699.791698][T31571] usb 8-1: new low-speed USB device number 59 using dummy_hcd [ 1700.551902][T31571] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1700.631868][T31571] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.703620][ T30] audit: type=1400 audit(2000000342.240:3163): avc: denied { remount } for pid=4300 comm="syz.1.6380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1700.967435][T31571] usb 8-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 1700.976513][T31571] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.987534][T31571] usb 8-1: config 0 descriptor?? [ 1701.047364][ T4306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1701.107017][T14096] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1701.567424][ T4317] gretap1: entered promiscuous mode [ 1701.650690][T31571] usbhid 8-1:0.0: can't add hid device: -71 [ 1701.662611][T31571] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1702.132746][T31571] usb 8-1: USB disconnect, device number 59 [ 1702.802847][ T4347] netlink: 'syz.1.6396': attribute type 1 has an invalid length. [ 1702.890584][T14435] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1702.909692][ T4351] overlayfs: failed to clone upperpath [ 1702.978653][ T4348] program syz.0.6390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1703.239398][T14435] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.255842][ T4356] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6398'. [ 1703.271464][T14435] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1703.295272][T14435] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1703.329534][T14435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1703.362025][T14435] usb 4-1: SerialNumber: syz [ 1703.492784][ T4362] input: syz0 as /devices/virtual/input/input56 [ 1703.672321][T14435] usb 4-1: 0:2 : does not exist [ 1703.774333][T14435] usb 4-1: USB disconnect, device number 93 [ 1704.269356][ T5954] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1704.984965][T14435] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1705.096626][ T4376] netlink: 'syz.1.6405': attribute type 4 has an invalid length. [ 1705.104969][ T4376] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6405'. [ 1705.145545][T14435] usb 4-1: device descriptor read/64, error -71 [ 1705.189826][ T4381] netlink: 'syz.1.6407': attribute type 1 has an invalid length. [ 1705.765432][T14435] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1705.930638][T14435] usb 4-1: device descriptor read/64, error -71 [ 1706.065147][T14435] usb usb4-port1: attempt power cycle [ 1707.464175][T14435] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1707.529665][T14435] usb 4-1: device descriptor read/8, error -71 [ 1707.561438][ T4416] ================================================================== [ 1707.569529][ T4416] BUG: KASAN: slab-use-after-free in __list_add_valid_or_report+0x105/0x130 [ 1707.578194][ T4416] Read of size 8 at addr ffff88803319db00 by task syz.1.6419/4416 [ 1707.585976][ T4416] [ 1707.588293][ T4416] CPU: 1 UID: 0 PID: 4416 Comm: syz.1.6419 Tainted: G L syzkaller #0 PREEMPT(full) [ 1707.588312][ T4416] Tainted: [L]=SOFTLOCKUP [ 1707.588316][ T4416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1707.588325][ T4416] Call Trace: [ 1707.588330][ T4416] [ 1707.588335][ T4416] dump_stack_lvl+0x100/0x190 [ 1707.588357][ T4416] print_report+0x156/0x4c9 [ 1707.588375][ T4416] ? __virt_addr_valid+0x81/0x620 [ 1707.588393][ T4416] ? __phys_addr+0xe8/0x180 [ 1707.588409][ T4416] ? __list_add_valid_or_report+0x105/0x130 [ 1707.588422][ T4416] kasan_report+0xdf/0x1e0 [ 1707.588439][ T4416] ? __list_add_valid_or_report+0x105/0x130 [ 1707.588452][ T4416] __list_add_valid_or_report+0x105/0x130 [ 1707.588465][ T4416] clone_mnt+0x633/0x930 [ 1707.588482][ T4416] copy_tree+0xfc/0xbf0 [ 1707.588492][ T4416] ? __pfx_down_write+0x10/0x10 [ 1707.588507][ T4416] copy_mnt_ns+0x2bd/0xc30 [ 1707.588519][ T4416] ? create_new_namespaces+0x30/0xac0 [ 1707.588535][ T4416] ? rcu_is_watching+0x12/0xc0 [ 1707.588549][ T4416] create_new_namespaces+0xd3/0xac0 [ 1707.588563][ T4416] ? bpf_lsm_capable+0x9/0x10 [ 1707.588573][ T4416] ? security_capable+0x80/0x260 [ 1707.588590][ T4416] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1707.588606][ T4416] ksys_unshare+0x455/0xab0 [ 1707.588621][ T4416] ? __pfx_ksys_unshare+0x10/0x10 [ 1707.588639][ T4416] __x64_sys_unshare+0x31/0x40 [ 1707.588654][ T4416] do_syscall_64+0x106/0xf80 [ 1707.588664][ T4416] ? clear_bhb_loop+0x40/0x90 [ 1707.588677][ T4416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.588688][ T4416] RIP: 0033:0x7f6cad59c629 [ 1707.588699][ T4416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1707.588710][ T4416] RSP: 002b:00007f6cae479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1707.588722][ T4416] RAX: ffffffffffffffda RBX: 00007f6cad815fa0 RCX: 00007f6cad59c629 [ 1707.588729][ T4416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020400 [ 1707.588736][ T4416] RBP: 00007f6cad632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1707.588743][ T4416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1707.588749][ T4416] R13: 00007f6cad816038 R14: 00007f6cad815fa0 R15: 00007ffcc20906b8 [ 1707.588760][ T4416] [ 1707.588764][ T4416] [ 1707.815431][ T4416] Allocated by task 4411: [ 1707.819729][ T4416] kasan_save_stack+0x30/0x50 [ 1707.824386][ T4416] kasan_save_track+0x14/0x30 [ 1707.829045][ T4416] __kasan_slab_alloc+0x89/0x90 [ 1707.833884][ T4416] kmem_cache_alloc_noprof+0x241/0x6e0 [ 1707.839333][ T4416] alloc_vfsmnt+0x23/0x6a0 [ 1707.843734][ T4416] clone_mnt+0x4b/0x930 [ 1707.847864][ T4416] vfs_open_tree+0xb02/0x1500 [ 1707.852523][ T4416] __x64_sys_open_tree+0xa3/0x150 [ 1707.857550][ T4416] do_syscall_64+0x106/0xf80 [ 1707.862126][ T4416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.867993][ T4416] [ 1707.870292][ T4416] Freed by task 1640: [ 1707.874249][ T4416] kasan_save_stack+0x30/0x50 [ 1707.878903][ T4416] kasan_save_track+0x14/0x30 [ 1707.883565][ T4416] kasan_save_free_info+0x3b/0x70 [ 1707.888577][ T4416] __kasan_slab_free+0x5f/0x80 [ 1707.893317][ T4416] kmem_cache_free+0x124/0x6a0 [ 1707.898060][ T4416] rcu_core+0x5a2/0x10d0 [ 1707.902293][ T4416] handle_softirqs+0x1eb/0x9e0 [ 1707.907098][ T4416] __irq_exit_rcu+0xef/0x150 [ 1707.911700][ T4416] irq_exit_rcu+0x9/0x30 [ 1707.915927][ T4416] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1707.921547][ T4416] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1707.927504][ T4416] [ 1707.929812][ T4416] Last potentially related work creation: [ 1707.935514][ T4416] kasan_save_stack+0x30/0x50 [ 1707.940204][ T4416] kasan_record_aux_stack+0xa7/0xc0 [ 1707.945394][ T4416] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1707.951286][ T4416] task_work_run+0x150/0x240 [ 1707.955861][ T4416] exit_to_user_mode_loop+0x100/0x4a0 [ 1707.961214][ T4416] do_syscall_64+0x67c/0xf80 [ 1707.965785][ T4416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.971708][ T4416] [ 1707.974012][ T4416] Second to last potentially related work creation: [ 1707.980573][ T4416] kasan_save_stack+0x30/0x50 [ 1707.985229][ T4416] kasan_record_aux_stack+0xa7/0xc0 [ 1707.990397][ T4416] task_work_add+0x28b/0x3b0 [ 1707.994959][ T4416] mntput_no_expire_slowpath+0x3da/0xb00 [ 1708.000571][ T4416] mntput_no_expire+0x1fd/0x220 [ 1708.005425][ T4416] mntput+0x6b/0xa0 [ 1708.009210][ T4416] vfs_open_tree+0x1235/0x1500 [ 1708.013943][ T4416] __x64_sys_open_tree+0xa3/0x150 [ 1708.018935][ T4416] do_syscall_64+0x106/0xf80 [ 1708.023501][ T4416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.029376][ T4416] [ 1708.031747][ T4416] The buggy address belongs to the object at ffff88803319da40 [ 1708.031747][ T4416] which belongs to the cache mnt_cache of size 352 [ 1708.045702][ T4416] The buggy address is located 192 bytes inside of [ 1708.045702][ T4416] freed 352-byte region [ffff88803319da40, ffff88803319dba0) [ 1708.059484][ T4416] [ 1708.061788][ T4416] The buggy address belongs to the physical page: [ 1708.068190][ T4416] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3319c [ 1708.076928][ T4416] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1708.085405][ T4416] memcg:ffff88803319c171 [ 1708.089680][ T4416] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1708.097217][ T4416] page_type: f5(slab) [ 1708.101650][ T4416] raw: 00fff00000000040 ffff888140416140 dead000000000100 dead000000000122 [ 1708.110238][ T4416] raw: 0000000000000000 000001c000120012 00000000f5000000 ffff88803319c171 [ 1708.118833][ T4416] head: 00fff00000000040 ffff888140416140 dead000000000100 dead000000000122 [ 1708.127495][ T4416] head: 0000000000000000 000001c000120012 00000000f5000000 ffff88803319c171 [ 1708.136147][ T4416] head: 00fff00000000001 ffffea0000cc6701 00000000ffffffff 00000000ffffffff [ 1708.144804][ T4416] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1708.153459][ T4416] page dumped because: kasan: bad access detected [ 1708.159841][ T4416] page_owner tracks the page as allocated [ 1708.165522][ T4416] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5806, tgid 5806 (syz-executor), ts 65080381379, free_ts 65062933503 [ 1708.186846][ T4416] post_alloc_hook+0x153/0x170 [ 1708.191597][ T4416] get_page_from_freelist+0x111d/0x3140 [ 1708.197287][ T4416] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1708.203151][ T4416] new_slab+0xa6/0x6d0 [ 1708.207210][ T4416] refill_objects+0x26b/0x400 [ 1708.211897][ T4416] __pcs_replace_empty_main+0x19f/0x600 [ 1708.217434][ T4416] kmem_cache_alloc_noprof+0x480/0x6e0 [ 1708.222879][ T4416] alloc_vfsmnt+0x23/0x6a0 [ 1708.227274][ T4416] path_mount+0x1e6b/0x23d0 [ 1708.231751][ T4416] __x64_sys_mount+0x293/0x310 [ 1708.236501][ T4416] do_syscall_64+0x106/0xf80 [ 1708.241073][ T4416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.246948][ T4416] page last free pid 5807 tgid 5807 stack trace: [ 1708.253252][ T4416] __free_frozen_pages+0x7e1/0x10d0 [ 1708.258520][ T4416] qlist_free_all+0x47/0xe0 [ 1708.262999][ T4416] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1708.268435][ T4416] __kasan_slab_alloc+0x69/0x90 [ 1708.273275][ T4416] __kmalloc_cache_noprof+0x243/0x6f0 [ 1708.278654][ T4416] netdevice_event+0x308/0x9a0 [ 1708.283406][ T4416] notifier_call_chain+0x99/0x420 [ 1708.288438][ T4416] call_netdevice_notifiers_info+0xbe/0x110 [ 1708.294318][ T4416] netif_set_mac_address+0x370/0x4a0 [ 1708.299579][ T4416] do_setlink.isra.0+0x75f/0x3e50 [ 1708.304604][ T4416] rtnl_newlink+0x11bd/0x2380 [ 1708.309256][ T4416] rtnetlink_rcv_msg+0x95e/0xe90 [ 1708.314173][ T4416] netlink_rcv_skb+0x159/0x420 [ 1708.318911][ T4416] netlink_unicast+0x5aa/0x870 [ 1708.323662][ T4416] netlink_sendmsg+0x8b0/0xda0 [ 1708.328399][ T4416] __sys_sendto+0x4aa/0x520 [ 1708.332885][ T4416] [ 1708.335181][ T4416] Memory state around the buggy address: [ 1708.340786][ T4416] ffff88803319da00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1708.348820][ T4416] ffff88803319da80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1708.356854][ T4416] >ffff88803319db00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1708.364891][ T4416] ^ [ 1708.368929][ T4416] ffff88803319db80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 1708.376958][ T4416] ffff88803319dc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1708.384995][ T4416] ================================================================== [ 1708.393844][ T4416] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1708.401024][ T4416] CPU: 1 UID: 0 PID: 4416 Comm: syz.1.6419 Tainted: G L syzkaller #0 PREEMPT(full) [ 1708.411848][ T4416] Tainted: [L]=SOFTLOCKUP [ 1708.416144][ T4416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1708.426185][ T4416] Call Trace: [ 1708.429509][ T4416] [ 1708.432434][ T4416] dump_stack_lvl+0x100/0x190 [ 1708.437111][ T4416] vpanic+0x552/0x970 [ 1708.441098][ T4416] ? __pfx_vpanic+0x10/0x10 [ 1708.445576][ T4416] ? mark_held_locks+0x40/0x70 [ 1708.450320][ T4416] ? __list_add_valid_or_report+0x105/0x130 [ 1708.456194][ T4416] panic+0xd1/0xe0 [ 1708.459885][ T4416] ? __pfx_panic+0x10/0x10 [ 1708.464272][ T4416] check_panic_on_warn.cold+0x19/0x34 [ 1708.469618][ T4416] end_report.part.0+0x3a/0x90 [ 1708.474367][ T4416] kasan_report.cold+0xe/0x18 [ 1708.479032][ T4416] ? __list_add_valid_or_report+0x105/0x130 [ 1708.484906][ T4416] __list_add_valid_or_report+0x105/0x130 [ 1708.490609][ T4416] clone_mnt+0x633/0x930 [ 1708.494844][ T4416] copy_tree+0xfc/0xbf0 [ 1708.498971][ T4416] ? __pfx_down_write+0x10/0x10 [ 1708.503798][ T4416] copy_mnt_ns+0x2bd/0xc30 [ 1708.508201][ T4416] ? create_new_namespaces+0x30/0xac0 [ 1708.513636][ T4416] ? rcu_is_watching+0x12/0xc0 [ 1708.518372][ T4416] create_new_namespaces+0xd3/0xac0 [ 1708.523546][ T4416] ? bpf_lsm_capable+0x9/0x10 [ 1708.528289][ T4416] ? security_capable+0x80/0x260 [ 1708.533218][ T4416] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1708.538824][ T4416] ksys_unshare+0x455/0xab0 [ 1708.543304][ T4416] ? __pfx_ksys_unshare+0x10/0x10 [ 1708.548316][ T4416] __x64_sys_unshare+0x31/0x40 [ 1708.553074][ T4416] do_syscall_64+0x106/0xf80 [ 1708.557636][ T4416] ? clear_bhb_loop+0x40/0x90 [ 1708.562289][ T4416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.568151][ T4416] RIP: 0033:0x7f6cad59c629 [ 1708.572633][ T4416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1708.592218][ T4416] RSP: 002b:00007f6cae479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1708.600601][ T4416] RAX: ffffffffffffffda RBX: 00007f6cad815fa0 RCX: 00007f6cad59c629 [ 1708.608586][ T4416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020400 [ 1708.616530][ T4416] RBP: 00007f6cad632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1708.624472][ T4416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1708.632423][ T4416] R13: 00007f6cad816038 R14: 00007f6cad815fa0 R15: 00007ffcc20906b8 [ 1708.640380][ T4416] [ 1708.643665][ T4416] Kernel Offset: disabled [ 1708.647963][ T4416] Rebooting in 86400 seconds..