last executing test programs: 9m23.325255844s ago: executing program 1 (id=307): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000101e04003100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) 9m20.309523348s ago: executing program 1 (id=317): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x49b, &(0x7f00000000c0)={0x0, 0x52b8, 0x100, 0x20000004, 0x165}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40002020}) socket$nl_rdma(0x10, 0x3, 0x14) io_uring_enter(r1, 0x3517, 0x173d, 0x42, 0x0, 0x0) 9m19.843735899s ago: executing program 1 (id=320): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) userfaultfd(0x801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x341102) (rerun: 32) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r2, 0x402c542b, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0x5, 0xe6, 0x9, 0x2, 0x5, "da1c345b34d742ea"}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r6}, 0x10) (async, rerun: 64) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r4, 0x4) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee00}}, './file0\x00'}) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000340)={0x8016d5b3a9c0a1b4, @pix_mp={0x9, 0x2aa, 0x32315258, 0x8, 0x2, [{0x7ff}, {0xaea8, 0x6}, {0x0, 0x5}, {0x7, 0x7}, {0x4, 0xf}, {0xfffffffb, 0x43}, {0xfffffffe, 0x8001}, {0x11f, 0x5}], 0x3a, 0xfd, 0x0, 0x2, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x93}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)=0x6) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@main=@item_012={0x2, 0x0, 0xa, "ad40"}, @local=@item_4={0x3, 0x2, 0x5, "85805226"}, @global=@item_012={0x2, 0x1, 0x2, 'jd'}]}}, 0x0}, 0x0) 9m19.68889967s ago: executing program 3 (id=322): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x9, 0xfe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0xeeef0000, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0xff}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) recvmmsg(r2, &(0x7f000000e280), 0x58a, 0x42, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x60) 9m18.388862914s ago: executing program 3 (id=325): openat$sequencer(0xffffffffffffff9c, 0x0, 0x16b601, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x212940, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x8) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x0) write$binfmt_misc(r9, &(0x7f0000000980), 0xfdef) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0xfdef) socket$inet6(0xa, 0x2, 0x0) r10 = socket(0x29, 0x803, 0x2000003) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) 9m17.840611748s ago: executing program 1 (id=326): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0xa, &(0x7f0000000500)=[{0xfff, 0x9, 0x8b, 0xfffffffc}, {0x5, 0x0, 0x4, 0xaad1}, {0x8, 0xff, 0x31, 0x3ff}, {0xfffa, 0x93, 0x7, 0x50}, {0x9, 0x3, 0xd8, 0x5}, {0xe, 0x1, 0x0, 0x6}, {0x40, 0xf3, 0x0, 0x3ff}, {0xdf, 0x9, 0x9f, 0x6}, {0x5, 0x40, 0x2, 0x82f1}, {0x5, 0x0, 0x9, 0x80}]}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000400)=0x52228080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000043c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x400) unshare(0x22020400) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000100), &(0x7f0000000140), 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="01010101", 0x4) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000280), &(0x7f00000002c0)={[&(0x7f0000000440)='*[\x00', &(0x7f0000000480)='[.@$&%/!#\x00', &(0x7f00000004c0)='\x00']}, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0x8, 0x80000000]) syz_usb_connect(0x3, 0x5d, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0xa, &(0x7f0000000500)=[{0xfff, 0x9, 0x8b, 0xfffffffc}, {0x5, 0x0, 0x4, 0xaad1}, {0x8, 0xff, 0x31, 0x3ff}, {0xfffa, 0x93, 0x7, 0x50}, {0x9, 0x3, 0xd8, 0x5}, {0xe, 0x1, 0x0, 0x6}, {0x40, 0xf3, 0x0, 0x3ff}, {0xdf, 0x9, 0x9f, 0x6}, {0x5, 0x40, 0x2, 0x82f1}, {0x5, 0x0, 0x9, 0x80}]}) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000400)=0x52228080) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000043c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x400) (async) unshare(0x22020400) (async) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000080), &(0x7f00000000c0), 0x0) (async) openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) (async) close(r6) (async) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000100), &(0x7f0000000140), 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000180)="01010101", 0x4) (async) close(0xffffffffffffffff) (async) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000280), &(0x7f00000002c0)={[&(0x7f0000000440)='*[\x00', &(0x7f0000000480)='[.@$&%/!#\x00', &(0x7f00000004c0)='\x00']}, 0x0) (async) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0x8, 0x80000000]) (async) syz_usb_connect(0x3, 0x5d, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4], 0x0) (async) 9m16.944664056s ago: executing program 3 (id=328): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000180)={{0x3b, @dev={0xac, 0x14, 0x14, 0x33}, 0x4e20, 0x1, 'dh\x00', 0x2, 0xe, 0x41}, {@multicast2, 0x4e22, 0x0, 0x296, 0xff, 0x10000}}, 0x44) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r8], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 9m16.689285528s ago: executing program 3 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') lstat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) unshare(0x8040600) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') execveat$binfmt(0xffffffffffffffff, r1, &(0x7f0000000200)={[&(0x7f0000000100)='\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='\x00']}, &(0x7f0000000340)={[&(0x7f0000000240)='\x00', &(0x7f0000000280)='/de\x8e/video#\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00']}, 0x1000) pipe2(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) r4 = open_tree(r2, &(0x7f0000000380)='./file0\x00', 0x89000) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000003c0)={@initdev, 0x0}, &(0x7f0000000400)=0x14) sendmsg$kcm(r2, &(0x7f0000000940)={&(0x7f0000000440)=@xdp={0x2c, 0xb, r5, 0x23}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)="349e5e101f37ef85c8d20f08b2af9cd5ff394676f42a47c5e5709bfce055b7bd4b5695829e6aa4e29e20153c3ba16cf2527876710acc2dee6188e81451e25bff4525229c8ddbe2985bdc3cd7857e61792040edf6ec0c6780e755c9303ea6c7413df0d103ccf72378fb834b262a826cec219e9d0d8a17bf565fbf0ca675c8a0e65c51cd8b2fb011f2f60f8cf877ef5197cd7b0c", 0x93}, {&(0x7f0000000580)="b4737022c96b7a751c206ccc16dd5050150ba69265aceb25298515b4df41856f101c4f9e5cd686f2819bf1e937171d9fa3fb9786ce8d89be9043c9c6d4f0411242e00927962f3835e3e0e05e946e362cdd934164c9f6e6d9bab879341ff88b12c81112e5ea753ded175a604fbdb113087944af40d515e3193c95e196db47c24a4743b7f3f64c2e60c8057308b94671042b0e4c5147cf57f8610be735cd0c5ca0aea6de0aaae33b51e336f6a92bcdb5f9de0fd6", 0xb3}, {&(0x7f0000000640)="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", 0xff}, {&(0x7f0000000740)="3e1eecd711b99619d24cbfb47ddd305fd9d9a60d05188297742109cec390442c29fb9dd0198fd24e295ff1ed55bcecf0d9402a5da35975dad4f2bbc71fe6054d291ede25aa04715c51820b811571e6c69fb5aa8ed171f54a5a2ca6b5e0adf9c04aabf204226ed67ce5f842f38c7561eced40", 0x72}, {&(0x7f00000007c0)="60a03d8e13b3af1545a2f8c224263d6c58d537336b1a198904a0c44eafa04bcd94fd326a1d8ee6ef6861aabed148f2e56d421e20696930a169bf9e0f7f78db7f32c0f377d0f3af7c83c1072fb2bcc7394e8645020305fea495a90c7b78b507535ee58c8147983752fd0a198797ab5e115e1e5dc84f232a533176ebedbac3138b584b5215dbeb1fc8f25a1fb5cd8d6f4fef2e129818e146143501cccd9e6ea98825c10f5e828c94ca60f76cf5bb708155c763c9da2b14001bf1f00d319c0456178a94fe5c75b138bdadb44dfbc175f76aff", 0xd1}], 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="080100000000000029010000070000005ffd4f6b279a078181b88bce4fa9a3d979604e8219e7844a7001f424d44e8dac28d151fd37511e89c59156bfb66201700753f3d941f65e13f67c6e5e715c20e29bbaf6bacc6c3a1df4a5104ab9e484663555cefce226b5624e39ec5dd5fccabdfad1520b4ac5a1ebc615c2f4a34d0c839848d823dbbf0ecf0859c48fce128a85b02b929f0fe694d7c9fdfc5bfaba1a5574d60b0bdb3e899fac240ee56d50eeed7b0b17a42f851274d51f8997b25ca58369c475b45fac84bba79cf7289dc5568683d5e2783be5f0fda01689989ddaafef7156f107804701e152a4c5517fdb8d8d70b0a9c56e4f0d4122fecb72b0b825768c0b00000000000028000000000000008400000000000080da13b487001fdc53f57b5fcd750870f7d9c38979d09c2b00"], 0x130}, 0x40000e0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r6, 0x0, 0x14) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5100) ioctl$SNDCTL_SEQ_RESET(r7, 0x5100) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000080)={0xfdfd, 0x35315258, 0xf00, 0x870, 0x0, @stepwise={{0x80, 0x9}, {0xa, 0x4}, {0x17, 0x7ff}}}) socket$inet6(0xa, 0x1, 0x3) close(0x3) write$binfmt_elf32(r3, 0x0, 0x38) 9m15.560820388s ago: executing program 3 (id=340): syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) (async) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000943000/0x2000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb01001800000000000000b4000000b4000000030000000c0000000200008505000000010000000300000004000000040000000100000007000000030000000000000e0500000001000000050000000000000100000000150056010f0000000000000900000000020000000000000c050000000b00040005000006040000001000000004000000020000000000ff000000330a9752319e160d000000050000000600000000000012020000000a00000000000000050000000000000700000000006100"/214], &(0x7f00000007c0)=""/197, 0xcf, 0xc5, 0x1, 0x5, 0x10000}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb01001800000000000000b4000000b4000000030000000c0000000200008505000000010000000300000004000000040000000100000007000000030000000000000e0500000001000000050000000000000100000000150056010f0000000000000900000000020000000000000c050000000b00040005000006040000001000000004000000020000000000ff000000330a9752319e160d000000050000000600000000000012020000000a00000000000000050000000000000700000000006100"/214], &(0x7f00000007c0)=""/197, 0xcf, 0xc5, 0x1, 0x5, 0x10000}, 0x28) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000005c0)=""/143, 0x8f}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x8, 0x2, 0x800001, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r4}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0x6, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r5, @ANYBLOB="000126bd70007d34d2880700000008000300060000000800040003000000080000000008000400a694000005000500ecff0000050005000a000000240006800500020096000000060005004e240000080006001400000006000100020000000000000000000002000000"], 0x70}, 0x1, 0x0, 0x0, 0x24040951}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000040)) getdents64(r7, &(0x7f0000001f00)=""/4093, 0xffd) socket$nl_route(0x10, 0x3, 0x0) 9m14.968247562s ago: executing program 3 (id=343): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgid() syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) syz_usb_connect$uac1(0x8, 0xc7, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0x3c, 0xe0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffe, 0xfe}, [@selector_unit={0x8, 0x24, 0x5, 0x1, 0xfb, "1af52e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x6, 0x12, 0x19, "e13fd8fa77"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0xe2, "74c8c3c2d3"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x4, 0x6, 0xe, "d31246ca7403f112"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0x7, 0x1, '3R'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x1000, 0x8}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x2, 0x5, 0x6, "b718ab0e6ceb0b7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x7, 0x7, {0x7, 0x25, 0x1, 0x82, 0x2, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0xfa, 0x2, {0x7, 0x25, 0x1, 0x0, 0x6, 0x9549}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x0, 0x8, 0x9, 0x2, 0x40, 0x6}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x4, [{0xaa, &(0x7f00000002c0)=@string={0xaa, 0x3, "7e1ae065b5e2939bfe33f1bf68203386505d9a9c67313d3ede5fe6ab9ab9084e20cdc65965e599c252b733a59baf29992ed0ff305077b019344d8906a6004c4df167e7ce66f91ef360f67b8dd785858ac15fccf8fd662605cea071f937e3774f069adadf3622109bf019b65220aa719a1d377eb2461807f1d6d6f0b66ca5ea188ebf426ae1463882588288d66df62ff7b15810ea428e138700640cd4e2be9a74d99f1a135fb619d6"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x407}}, {0x44, &(0x7f0000000480)=@string={0x44, 0x3, "a6dc616a9c8a3ede6d92f49f3b93e69e434a928ff96275ebce1b1c7fd18bccb2dd07ab4abb093c603cf60eab77a40b6353abbef07af124f8e7a81875f0b4d97f8d44"}}]}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {}, {0xc, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x5}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18934}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) 9m14.729853099s ago: executing program 1 (id=344): socket$nl_route(0x10, 0x3, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400), 0x0) r0 = semget(0x0, 0x2, 0x568) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x0, 0x1800}, {0x4, 0x7fff, 0x1800}, {0x2, 0x3ff}, {0x4, 0xd, 0x800}, {0x0, 0x0, 0x800}, {0x0, 0xece4, 0x800}], 0x6, &(0x7f0000000100)={r1, r2+10000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f0000002820000004000000", @ANYRES32, @ANYBLOB="9e0412101b7c3e7ca4400f99c94f58ea0210711078f9e8ffb111188992d1cecd7b248a9d2d7d41f80dcc", @ANYRES64=0x0], 0x98) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) prlimit64(0x0, 0xd, &(0x7f0000000040)={0x7, 0x8b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x0, 0x45}, 0x90) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r10, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r3, 0x0, 0x0) syz_fuse_handle_req(r10, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0xfffffffffffffff5, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0xfffffffd, {0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m13.625748459s ago: executing program 1 (id=347): syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x5, 0xa9, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x2, 0x1, 0x4, 0x20, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "663a9121f5ec"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0xed4f, 0x2}, {0x6, 0x24, 0x1a, 0x7, 0x10}, [@country_functional={0x8, 0x24, 0x7, 0x12, 0xd, [0x80]}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x8, 0x6}, @obex={0x5, 0x24, 0x15, 0xca}, @mdlm_detail={0x12, 0x24, 0x13, 0x49, "9220488d8fb3b1a0422b0393286f"}, @dmm={0x7, 0x24, 0x14, 0x0, 0x100}, @dmm={0x7, 0x24, 0x14, 0x7, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xf, 0x1, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xac, 0x4, 0x82}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x9, 0x8, 0x8, 0x40, 0xd6}, 0x1f, &(0x7f0000000200)={0x5, 0xf, 0x1f, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0x3, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x4, 0x8000}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x22, 0x39, {0x39, 0xa, "c1e07bed4bb45f5b3b15bda3dfc4dce9dc341ae3dc43505b6c2f3f74e0d93a76338403ca3db6acf579f68ddf947352924aa130589da674"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f0000000480)={0x0, 0xb, 0x9e, "3fb7e21a4f7eb5c141e23f24ac92456c2dfbbf67fbb8ee887e9a09f1f468e376dc6dbddb9f7677cc2b00582ec5583ff233138c2fe8140f81a6c0aa0f5840cfa7b2ecb7f6ea57729eff736a19a24253d5902846413fa8c1b47d17a58c2e14d07b58b871e7bf26bb17392f0721edc4db8eff0f893c53f77602703a73596641ccc6669474b4c6741714986cf8e71bb26bdcb48bdf6d4ec58af6997e73644156"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000640)={0x0, 0x8, 0x1}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0xf7b1, 0x2, 0x59, 0x4, 0x3, 0x6, 0x8, 0xac0c, 0x7ff, 0x9, 0x4, 0x4}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2}, &(0x7f0000000780)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x22, 0x39, {0x39, 0xa, "c1e07bed4bb45f5b3b15bda3dfc4dce9dc341ae3dc43505b6c2f3f74e0d93a76338403ca3db6acf579f68ddf947352924aa130589da674"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f0000000480)={0x0, 0xb, 0x9e, "3fb7e21a4f7eb5c141e23f24ac92456c2dfbbf67fbb8ee887e9a09f1f468e376dc6dbddb9f7677cc2b00582ec5583ff233138c2fe8140f81a6c0aa0f5840cfa7b2ecb7f6ea57729eff736a19a24253d5902846413fa8c1b47d17a58c2e14d07b58b871e7bf26bb17392f0721edc4db8eff0f893c53f77602703a73596641ccc6669474b4c6741714986cf8e71bb26bdcb48bdf6d4ec58af6997e73644156"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000640)={0x0, 0x8, 0x1}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0xf7b1, 0x2, 0x59, 0x4, 0x3, 0x6, 0x8, 0xac0c, 0x7ff, 0x9, 0x4, 0x4}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2}, &(0x7f0000000780)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001804"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001804"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_ifreq(r5, 0x8920, &(0x7f0000000bc0)={'bond_slave_0\x00', @ifru_addrs=@hci={0x1f, 0x2, 0x1}}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf2501000000000000000c4102000008001462726f61"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf2501000000000000000c4102000008001462726f61"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)="a2", 0x1}], 0x1, &(0x7f0000000040)=[@dstaddrv6={0x20, 0x84, 0x8, @dev}], 0x20}, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) (async) sendmmsg$inet_sctp(r7, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) fsopen(&(0x7f0000000000)='omfs\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 8m59.683135698s ago: executing program 32 (id=343): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgid() syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) syz_usb_connect$uac1(0x8, 0xc7, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0x3c, 0xe0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffe, 0xfe}, [@selector_unit={0x8, 0x24, 0x5, 0x1, 0xfb, "1af52e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x6, 0x12, 0x19, "e13fd8fa77"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0xe2, "74c8c3c2d3"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x4, 0x6, 0xe, "d31246ca7403f112"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0x7, 0x1, '3R'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x1000, 0x8}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x2, 0x5, 0x6, "b718ab0e6ceb0b7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x7, 0x7, {0x7, 0x25, 0x1, 0x82, 0x2, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0xfa, 0x2, {0x7, 0x25, 0x1, 0x0, 0x6, 0x9549}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x0, 0x8, 0x9, 0x2, 0x40, 0x6}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x4, [{0xaa, &(0x7f00000002c0)=@string={0xaa, 0x3, "7e1ae065b5e2939bfe33f1bf68203386505d9a9c67313d3ede5fe6ab9ab9084e20cdc65965e599c252b733a59baf29992ed0ff305077b019344d8906a6004c4df167e7ce66f91ef360f67b8dd785858ac15fccf8fd662605cea071f937e3774f069adadf3622109bf019b65220aa719a1d377eb2461807f1d6d6f0b66ca5ea188ebf426ae1463882588288d66df62ff7b15810ea428e138700640cd4e2be9a74d99f1a135fb619d6"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x407}}, {0x44, &(0x7f0000000480)=@string={0x44, 0x3, "a6dc616a9c8a3ede6d92f49f3b93e69e434a928ff96275ebce1b1c7fd18bccb2dd07ab4abb093c603cf60eab77a40b6353abbef07af124f8e7a81875f0b4d97f8d44"}}]}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {}, {0xc, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x5}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18934}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) 8m58.329043162s ago: executing program 33 (id=347): syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x5, 0xa9, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x2, 0x1, 0x4, 0x20, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "663a9121f5ec"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0xed4f, 0x2}, {0x6, 0x24, 0x1a, 0x7, 0x10}, [@country_functional={0x8, 0x24, 0x7, 0x12, 0xd, [0x80]}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x8, 0x6}, @obex={0x5, 0x24, 0x15, 0xca}, @mdlm_detail={0x12, 0x24, 0x13, 0x49, "9220488d8fb3b1a0422b0393286f"}, @dmm={0x7, 0x24, 0x14, 0x0, 0x100}, @dmm={0x7, 0x24, 0x14, 0x7, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xf, 0x1, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xac, 0x4, 0x82}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x9, 0x8, 0x8, 0x40, 0xd6}, 0x1f, &(0x7f0000000200)={0x5, 0xf, 0x1f, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0x3, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x4, 0x8000}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x22, 0x39, {0x39, 0xa, "c1e07bed4bb45f5b3b15bda3dfc4dce9dc341ae3dc43505b6c2f3f74e0d93a76338403ca3db6acf579f68ddf947352924aa130589da674"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f0000000480)={0x0, 0xb, 0x9e, "3fb7e21a4f7eb5c141e23f24ac92456c2dfbbf67fbb8ee887e9a09f1f468e376dc6dbddb9f7677cc2b00582ec5583ff233138c2fe8140f81a6c0aa0f5840cfa7b2ecb7f6ea57729eff736a19a24253d5902846413fa8c1b47d17a58c2e14d07b58b871e7bf26bb17392f0721edc4db8eff0f893c53f77602703a73596641ccc6669474b4c6741714986cf8e71bb26bdcb48bdf6d4ec58af6997e73644156"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000640)={0x0, 0x8, 0x1}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0xf7b1, 0x2, 0x59, 0x4, 0x3, 0x6, 0x8, 0xac0c, 0x7ff, 0x9, 0x4, 0x4}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2}, &(0x7f0000000780)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x22, 0x39, {0x39, 0xa, "c1e07bed4bb45f5b3b15bda3dfc4dce9dc341ae3dc43505b6c2f3f74e0d93a76338403ca3db6acf579f68ddf947352924aa130589da674"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f0000000480)={0x0, 0xb, 0x9e, "3fb7e21a4f7eb5c141e23f24ac92456c2dfbbf67fbb8ee887e9a09f1f468e376dc6dbddb9f7677cc2b00582ec5583ff233138c2fe8140f81a6c0aa0f5840cfa7b2ecb7f6ea57729eff736a19a24253d5902846413fa8c1b47d17a58c2e14d07b58b871e7bf26bb17392f0721edc4db8eff0f893c53f77602703a73596641ccc6669474b4c6741714986cf8e71bb26bdcb48bdf6d4ec58af6997e73644156"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000640)={0x0, 0x8, 0x1}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0xf7b1, 0x2, 0x59, 0x4, 0x3, 0x6, 0x8, 0xac0c, 0x7ff, 0x9, 0x4, 0x4}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2}, &(0x7f0000000780)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001804"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001804"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_ifreq(r5, 0x8920, &(0x7f0000000bc0)={'bond_slave_0\x00', @ifru_addrs=@hci={0x1f, 0x2, 0x1}}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf2501000000000000000c4102000008001462726f61"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf2501000000000000000c4102000008001462726f61"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)="a2", 0x1}], 0x1, &(0x7f0000000040)=[@dstaddrv6={0x20, 0x84, 0x8, @dev}], 0x20}, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) (async) sendmmsg$inet_sctp(r7, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) fsopen(&(0x7f0000000000)='omfs\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 8m16.958154349s ago: executing program 2 (id=526): r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000002040)='ns/cgroup\x00') read$msr(r1, &(0x7f00000000c0)=""/130, 0x82) statfs(&(0x7f0000000280)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) r5 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="010120000a00140017007ef52f555f2a0c9f280000000000000019143baa111f1f858ce632f47042195ecf3d77ccc1b6d78839980700f37fe800000000", 0x3d, 0x24000014, &(0x7f00000000c0)={0x11, 0x0, r10, 0x1, 0x6a}, 0x14) syz_fuse_handle_req(r2, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006200)={0x20, 0x0, 0x0, {0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="ee43a8f8855298a8290b47b6eb9ecbe3b5cc7d6c5531c6b9218388565017628705c4c32fd55292c0c3f883dbf2e8034edf548838c491174fa9ac73e1c9cc70bf5a3522661ea6daeb623ad80d7d2c07b34a3c60821044fcdef7787b6571dfdf4179e6fe0b1d1a55e1804b1c64f153b46f3ea2ddeb087377540bd71dd01663b7fcb827815c7f8a0045e3e851ccf0c6e73fee19fedd3098a97fbef63ff5eb7c1c1f2facda43aba1f2cdf493a3539ab05e525711238ea2b5e70c7bf56091e3fdd7de8cc3ff7b43e649b5c7378c1f9538f8cd9adc78d0893204f65f7d3b0c7d4d5dd1441cf6d19035e5382545c8c91521551b6347bf4d2356b015b77d05a492e1f8a5a356afeec8b308d8f2c838bd0c9b28dde9239783312362e311e727d23d8545f171dfad77a54fc618378a8088c4627b29643e40ddabc200ae14284084d327e439fa1901f9bf6c52e9a2b7176cd308b3c0d82f6ac370a95055c37b56478f8f33648164250f2c4ec4ff44ff22fc62308909ac5f6b3ee783169933dd421a77bdc238b6e54ed292d033fc80b2f4f6e9200589ef32be4de445d981ed0df390fa2691cf5a22eb7dd1277eed9f79cc489fcbd424f9e42683b4891d54d93d1d12eb6076af805bd5ab5a6007da7daa9eaa4763c5ff36b4d6547145e90e5b74041e24bd3c4b996412637757dcc343784511f09bce6e91908b1a3d4f2bc8310105bef2474b2a7e3204a475a1aa5b6189ca02892342e4ce48e4e7a34eac5f5a973ad1fdeb2404e8899bfa9e40f411c84f75d76a4c680ca107e8cc134527f942d15a17011ffed9f11947a2054d8875d6a562a10685e73c92b78ed8b8c05ac12bdc7b627f0f00a2048027ef15085179610b3142e65b73e931ffd17a40f207e682cd567213c4b88ece6f8e41917944da92b7b834027b0ca18d3f1d1264a920dda9f494bdc359e060be1298dcf3be313cbbc61a70bc02dadc0bbaa4fcc2ce0575651adf3d277f0d4e0bf7ef449e0a6a9d9ff5a20f659fd0b5515d46dd1ed1b412b19a7ab40eff607d26b71056de718acdf6ac40f5e50bfd2a65984242fc20d69bba826d308e0cbafe1b6bd336bc2f1c205bd454a06e5199a23ca1c0a7595cae2550c21aae006001cfa7cdc428cded037397e6b6d009f6b9bee1615aa52da336538e045bf324c71dad2997d87801f87d4d3e0a9a7038573b6220b0676af9b56240f3db4af583ff2a8b9242a6568bc0994d89639a88fea8ede9c59b04591378ec636088dd6ec82c4de4c9de7776ca070a3e7103551ad58eee1ccc0e4d3a0392285802d23b8b5be7b407bb8e38dd7fb793c295c16167c6761ab88f28d509854314f5b7120eaa00f0665c4131cad14a86cd4a758716426eb189b9ad7736d7c7b4a49e7be11019cd28d8869a9f30d8ae52ce35c5a69163d514884fb0e404f59bb7f378dae93d3b1c77db574c5115136a7a0d751486cb0dfc6231b3e242ef88c0d983f65e78e74001e50019fd124d1a0761362cd0ee6d6212c55f37837e21356db7fb5fe79c05db8e45425222f3c4d1fc09667accd4164b8ef336ae3db5b215c82dc0ae4e44c98db78481b9942555dc0ca311c4cabdddd318c5e4f8d477294aa43820f3e4c334987423acd6736196a2990789b4b2d65f48ba3039eeecb2ab8abbf1004c10cc1b563ad368df3513b152878c08fefe65744210432347bf4a67f09dda78be9f1024e077c7191f39b718eb12d7bc7500e855f40673d9975c12ac0bc3526d5017cbfa2a07263f58293bb8c7500b8e365533161295d9ca65c6b8b29482ce3078295a6454bdb574476249c0f7b4cdf3ae3ef55afa3ef653e712f14dd7e270ef728ff4c4f38d09b03daad2868e922a7723ec00884ddfd19a527744ef6cecbc74e8c74aa37b62734286ef94d400a7f884f20c2891ebe78b70a7ea6535c1f1d2a421fd3a05a45749f1511a10eb6f45e54e1b83a2e437df5127be5b54cdaf39bbc96187e46cde341a948bc6999ff738a8abb8da9b943e8e2de28d37cd07c346d05b18b90dc98310d8de6286c42bad83393f3f57ab3c54ad753588909c7eaa08eaccfbda485af7423bcfb58966a0f2b1362801223a99228865b1dfba3d102b63fe3a1dfedd561d205358a276d3887612ce91de546ce6d0b9f5420b667675bc597964910891bf71f949e186f4fe96324b1690c53a8ac12bcbd86e046f3752453bc8c3abc04ca05aeaa4539419dcc2985eb0ba64faa63733a417c25eb4e0a94d4237c9f305fc1a5575b85835f2a71d9dbebbf13a8f58ae798feac3f36af38970b89a705fdb4964ad62c2e3bcf80078a03bff48b9a7c948010789fcd4930999ab49c8dbac946ae3e51ce06b24d0a96fd51070e79950f4477fa39452180ae8cf0dae34079354e0772283d07f0580fc9e03cdac4b27edcf59587746871b1739daf3db43e78d832039f3d82f2fc9aee5798b4d19ae96b9b81c73bc2633a32db2b0452bd22a0cc557d20d46343b244051e0aa33edb3edf35d26114e59424454225e4468131ba1ab70c320a321d5771f18c8fc48617763f77cd3d0b51d90a0d05bef340cc4d52fd65e6b39f2e4f7a7bb8722641df73ec3931541a6cdc43cafa6c5e885ebcc00d230f5d03e59e46feb996da8fa59d16d1e271b0faf2f3f1e1eeda53b9f6bee341b94f4ac6c2f0431253c2beb3d3dac49ae543643a2a4b6aaf5ae46d85a102b71d7ae6cbcd50ab8c6a7a61a972cd6c0ecc8ac1cb7c2b7b732e268c0155b918559afe4f470a9f3e61a41acdee97605332613bce6cb5eadf3786a6ab6bd90d672cd4861f273b1a16998a22c03a81fd8295f6a3068581844ffee8b1e7b95b246167b367b2696508d51b2fa3ccdaae9edd68a04a85a95603b28c273f24715267b8e066cfbbce136ea2cbcc9087fcfe17da753734ce7c47195d9aa65149dc2d0e6155d52ac5173160b84d21906704ea06b34c6f7696f81f39ea3c3b2e5ccb3866357143da1ea3362fa2567b3822f3cfa547cab553f16c589339cefd6620f290273be6375afe68d09f910c6121c84d787b6fbb46ea6561f78459d08a15d8e712606015709fbf5902e46f84ac3d270df370acb8f6c7ee59f61eccd167a885068da639fb3f1c4c7722d7a0fed2489855dd31783bfe807926dff94b6d98535364ea1117592025d20942d2090b0706ae357f98f1e2b7511a9f37b3a9d3d2bacc5aff1e8b3d5f3d5134e75f8af24bf348d50a5222eb0cb2ac2a53ae4e069bce30cda581df56adfe41f7c1831bb2e4370914be2d3c6b5f33c5414597c7248d402e373aa246535d69385da9da1c4a3584b8d280fea95ab160ac8c4303c3f2800ccb7b5797395418b4f3c7dc728dac80404c576e6731644089bc7fc82bc3c6abbd5e174a40e6f1d56c5023669aa08130eee2a0b7263eb215af283b7422689b1966d0bb8e34b8b2b8acd118f125c3d45c4297ff38e1e45c5eb1f3d9b5ef283a7f188baf6ca030b9dbf624e23f8455bb8afe8314bc1acd0beda0cd477a16d982ddbc9c525c8c24b9e53ddb4ff9d03c6db15b121738c4d5a24e638a0c238e3cb865eb7433d672401f6dae1ce7ffe330045e44644f185b2d47c82108dd6052d2a928d7f49e9e22b7cdd94c09a6c9820ff22169acc82e08b430926c5af7d290ca92598fa2d212154a10e17e5af05b5c2141475d7ab034bd384cf663fec9e1f9d8f50c1d3e0406f2665cb273ca0185281ee3a65cd76a1a350fe9aeae6e49cb8f0eb4dba4c19ecf27479833fc47dfee6ae7806723ba5c2f24c62e26a3d8a74cb43546d28acb0fbf287c03dcdac6699c3c7f9a3b806ac2318118395fa4e052eb620f02a90dc0556e6338266d5529f968359372a21c5b54a46ae61dcd528d7569435311abf1133be800f466dc19ade70b233ab4a5fa04ddcc476ba44aafd2c443a0c6738a422477a8da46420dbc8cf09302e8e59ce967a4832b46e74bf81306ccb497bcd35ae1e550266c5414982ba51151a4f1b13dc1d0065ea65e5272d9a004ffa84574ce96d94561d46664659dd9ebabd1a907b5127b140801720c1d92a40530040c03a869debffa977a57a8d6196cfc24e844f2486639ed630f5eae1dafd32ebaa1d71a7cfbe98badd7f0962fdce731e2ebd4b97fbbfb82a6cbf94d9d67a58f74d0856ae50e757823976f018281590e6adb9b6d5c0e58833d747957196d502f0f96f70bc351fb9599dd3d177162d087f25f4ef07c2796d2b3b1d2ed1d45bd3ee150d0b9569c4ba640526df0c91825fa8442045ca8397aaa16a39f179dd04fa63c9195617849868f0018756391089827fd090b898b165c0528f835d7726c18cd81f1613c5607d54d074d0c3e37a76c884f963ff8070cb25e441d215c02328ea43f518e139a5df4c033e429a27ca9ec62b103578c075baee7a047e070892c169401bd1d3b9b94bb3375af9ef41d75e4199e486042c0c50bf7b2b883251938ec16150cdcd3806b1df7c6bf190567afbfc540145e9f4885a02a2e0a32f878c097799b728eb6db95061c741526f9a8f988f6c6c24b459fa236b27e978628e38c6a4e0a88199f645e64a535a13e8aec318c43c55c7e61160851d534383b76e300718553a710ddbf937f2f16bff9a2cb883d4d96151b2ce87b6269dce42b153d8d4d7cdd1f1d041bd0a58e76f169f8a3ca5fe9d1cd0d5023b9caaec86fbd65b67c7a972a9616cbeee989942b965d6fc0eaa1ac40240dbc910a72cb5ac4af89b390eabfa9fb8740028f0db6c52036df330d65b958d54b92e156a560648e83fc662d63f1a2af989c03a035f539ae047d611c3eff899ea684e02eb0021ab1a7a20ada3a7bc671935238232b785bc740aeda2a9a8107d63aaea386b9b4462921f2a57c9f681ac4d2e5688de78480826fd0c2646c6922a337a121efad078e8032b9adae398d02da7ab5144f9cde3cc6306c4250788f365f7a51f59e4bd7b4944f5c3acf6046e5ac66fb5d0f83ffbd24de6b43ca32547138609099bb2615fb1ffd971a7117b21e2b70002b5de395f14bf5bd96869bb858687c69026453e2f2f058736603f95f80d8c8d0a22f4f547bf5873ec896f46ce6699682f375cc3d460e836ab58e19830d10dd6458eca0b31dc8b568a1d99b7f01ae483f8c9e99245a5437d4af82b3925aee36b3dc77d5b588d9e225050ee847bbf1c4d0a26fa55eed6f8586d979e9b0e0fadafc8cb56bb74f16efdf4967627a11f669aa5eea716f957d2352e158dec9d295f9d50ca846fda87fcbaeac91df406b7250da41177587dc7102f8fcd9086e263feec335ed1312b71d74403f81c7c7d5731d4b8a10475f86bfeb59a52e769d8c1322facd03960286cda9b6fbea84b06b443baf710d29a209e01d572beb43ddd6ffef3c35afd79a3b12099680a377ee7469610fa26210522d8764d93a00d4a63061f7d0c777199984217b34b4f247ceabff49eed8f404739cb76c6a3f3a1c5804074756266294e2ed4fb15ef2f2cbbf98183dc5dfcb568da748ddf2e5ff56688e1ea25410321d0015c45ceb9eff7c855f683e6a7da716ae15363f98a17fa602edc2cda3ba3bf3d0f53adf56618b2629d4feb77bf70f80c68beea0a37034270c6599498d995c91468fcc4c6650471227af2e38eb3ba208bb7c3c7c326ef744c58bb10e548a770caf35e0ee64053bd8820cdcb4cee1f5ef3dc45ecf8f2a6a0d8e3978c5456ea5989316d75ec5743faf8e63c6b1d68186c7dc2bb8b04f239b42af853e39a43d5891ba3479c0efcb885466710ea1112bd2a7561a6ddbb744ba207ab8ff1e755f3f304d286de3a739b2801af5bab3fd7f034ede2dd38da60415393d6b12ea96ee6cf3b1a87b12b034719e9d907497e1114c888ff2ead6cbc00aa4e9db18186913c35147c9ad06748971a7aed0fa87b4c864150ff06e37b2ef984f0d6e2838e099bcfb92939c75082fa5dc9c7c8455b119866939ef78a594d48b1e233ab2530058a7c2ae8f4147528d0ba328aabdd8d61c2270fb9ab790fbf913e97d15d5e20553016791855e617131474ef0b75081a0c43fc5fa1ecb67c7edeeecc97cd7d941845dad2e54b42e18e68ce41f849313143fe0152e104a2a401e42f982145d9bce7ed874705bf7576ce102ebbe11d6187acba2d06e2b3762cdc8c3f67aa66fd1d70e4ee55e739ebe0b390c8205edc63a9895969ec6fd13b798d5a0401c2e18a580f10505d5abc79a799088d59481a6c26b94180efda1c5c23e9b884f658d8fb0cd80e8e6b3a20c81676f47e929433c27bacb24257edf3e8630755e17d800d8db4f2be1fda9317ba2ecb53756fb0ca80701e49e209859f006a4324c0de093b3da7c23be79567990c7d887a03ab64b787832dbaf2579e76d343d41d37431475d11e918393296bff7a33feb659948d554405fac79bf7cc7c4f702e0d74a3cc384f44bdcb800cb24ee11c9531418c1c82453c0410514391cf5679e4d0d9949a8ce20ac70c12694ea6ca08a87307a98a05d48c7608783e0acc829c65425d8677f103a92e1c852164f09ab67f9a155f3575b2ec3ccfd7cb9ad431dd875369abb7ea31b994e2e39a59e5bd93bc8852ea3e2efff3707c8e1319e6c16be14e3386ad2bb5affb435c2436762b58dc6ffeec0743ea0dca0384ef1217db3d6219fb2921861b176fa0b714decb2e5bfe305691d92c4c65a427ab02b8cbf11a701fe74c20de74ef56ed85fd9136ca03b15d0d99e553ba4ebc8ac4e6c41506c97a33c9a05ce53d19bf62cf6ff16ede1bdbee982553bcf11ea5d2d4922f4e7ba82c83a6307610e34da0ca81c43193cdd16a8bd73b6b119461dd245e1f033da72e644614743741b34bc7813a3937a6447e499f036440781a43ccef1bcc15c8b58999e60ad807e82529bd8c819194f0e396b0d93168fc800c0fec2b7b260d1b6c18956d66ad2db20acb3117a2bd17ddb5c046559461f5e91c74b89535c49efb89bf78ec20743017eae6e1f7c393d28f5c8f7c0f0914a30eb2626a294a3ed7ada207e51bd7a95204605af2b8586c29fdf88ece2a3a5a068430a571d98c26e51a45bbb50231197363845c76f58506bf31738a23fe792f678c042e30d7dd5f19ed5ab4bb36536671e160925d4af6ff078c2b7dbdf9c55ed31e61eacc01babc62d9d2e671bc6c1932e170e3dcc5ad67a9ea7d46fca2f256fbf781019782d4066331fe10f62a6ae077a8b9569dc4bac6b90fb730a968f1782cbfc5e005bad8d9b00ae9199c81e317d91196abc75f1887cb8ffcb440f37a972d4ced20f158844e0ee36111a4247dfda14cc5cada6d372e75ee370149d7fa822f73ef0edc835a338c6d5699911fea2fedd7f3e381caff836a690331327f96ab7904a461ef5a36ce5f552bc1d1d9968106a7b8e07eef4aae2e716422a2fb7b0c1e05f09c29ca83f3405adb80e237d6f145383ec4885573e50ca2ad014308ed70477257f4d904089eec809c55d85684265a1d3b00718cfb14d644463623ba225aa95bee2a95e13a0817e2c98d96b822e6e4ef36d18a831699889034d116c84e45467f46140b88c765339b04ee65e3ef12356fe6d7ef1c80653d2e34af6e03c4503431f775e161ab7edbbfd9316372084e5e69d98443d529c9488e26c40734a636d3cb2f3b7e9bf248d647382937e623f1a7119a8deb731db5e2dbb5cc9d7b60e80f35ada2ee398d3a6c1d1d9c485d4c31c4e3beb69017bc92d9d1eba03994832aa7081bc0d29d97154c20f29d183c589e939f2e62ee71ebcbbf42ecdc9b0342920112b6a50bfa1558ca9b8af99008a8a9be29d121b4cb879ad0f61a21d57698cbda61acf65abd1912e1956226ee646c1e87315939ec9d98db2e49101964e26b28350c7fa529bbcad3c1794c2c52fa63755f09b6e1e2ee4d63050f7197b8d013296b1594a8aa16aafbb3cd4cead348e1c1a9cbdcbc09908e8696a72528ecdf12579e3a9d16afcc7b995398e3f0e6c169363195c454c0d761b20a073c962b29d0dc6dc053a586fe928ca31a759781744ed81844ae0c002b039c32538d35cc293d1fe828123110c07a81e6e0ecabf7075cd890c88c4b67a900464a234dc7043ad678f189c4c47068f16d9cc2ea87211cac5d3c3db3e220eb2463a548d4329093d486ea81c020bb72bffaaf205490011900e3dec6dc911343298a47019dd4d18a8bd71cad38ada40ffe14072790ab40c0a586a3ce452dc15940847ce5c794a6840ff6222c934893226bf8315a0be2f2fb6371cfeeedfe94736af945259bee27ce07827b4fa6dfab66e28ebde09053cf8ec25861aad91cfd1efcb69e60cf8ff3c1b8283301c0b5c1122f7b0733fcfe7f71066d74da3a0fa3abe052de9acf07aa091c139120bf5a35fadf7894d494d34f4e10b5cba392de299c971b1cd8eb8c5fcfba94585f58b995c89136383742f318bb3c738ecf00014d9025b7b01b905aafbb58910a873e6dad1227dc062455b1390d8835e1ca0e0799993239fcc387f2bcc85380286c7931000000000000000019b4847c97840fab93d928a2d664edf10c610110188c69cbcba07e95a7659ee5311dbb4fbbdb63c8c561a1d8e6f3c8c940c4ea4d8ebf8e18ca586f8da46e82dfd1fe22a396518f81b97fed2a3b1d36a7e5348e64838594f9f9aacc3494d01f2bf7cf78c5ab4d715aaa3300b384d80265c9675a9db90ea034d91731dd4c0186bdf370df405a8c3aac525aee5dc5174d61e0ea993b79f47f63ca6d7fa2cb2ac622020e7f7b1c4701a248835de588056c4ca462777cca604c3df4d4984ae969c3bfd440906360341b624a234f28de5e5f2fd22b13daae2ce5afcec92a7950930b771c18f18926cedbfe440ec532e343ba80da0ae9f5f5357094052c26d554715a08670aa16bc4d7787a5d81af654e37133e3557d36ca5a9b6206b0d5a0e82c210e4f9693a91d8a5d7d074cce6c9b9f52ca31f0895add87f9fd430b6cf3e9ad17aeae6ed22278b41a2ae03eebb14d679a11372a5850d2456714bf379799d4b8fae37c0e6176c2b6017a73c2234133632a4f0b582a79573e3fb1669a94708da158443266feefe6cfe3b618d1a9cadc213952c420267016deed5cdcfbd521fb8d0f93f5d445b682a67f214d73467c4c76719eef00990fbcbc327ad082a111bc618593bdb67bad926a47c4a5bf18a37abb8f8b6808d69c36520e9dd74799f565cdb5cdea0d89888b4e83b885aaf1c08131f9bb680392b83aae52911f824865a0678160aceebbfb599871399319c4743ae40fdb9d8219ff9ca1c910e42eeb8e79c902b2bfa71ca623ca5ab04b191c50a2a131dbfa051fa4419161285e39ba8eced0fa666b0a83d7677e786396e63efcb0122c437b2396d4b93047320c136e965f24884bbc7f7211c92330205241b1b50013881ba99c1f630f9942be247bbb8db79d517d60d71d16270d7abc0780b812efba3dec50711bd7cbdfa1606bafca8401c44f3672b64a5fd53fd6f8f4dbde88e3dee77df73eba8deeebe60ebbea469fc95e69210be69cf3c483c1ed1e509dd96f4c87e23a2350574e7c6d8560700ced7383176ec275fcec450a0cd3c3762d7646ea93c3dc83914127c344c05f6d951e733da419dc5ffb448cbac887194560a0e6072c4bb6c46678a15e6c4086dcae730ac7100d2fa6885002ee67fdb3191179646fcbffd570d4c788e21557acddb0a169e358b3ad891db2013f5155793a8cd8b30a89081709a9d32abe87b8c659439443c5b2a2b4154a531220c7ed0a1719b379d0586ba129b64c6c648546e127e2a9e12121d7a23d453ced5d1659fae2e8472d0a57837dea21faae210abdc7647491cff768dc4b22a3848be5fa919f475117eb9be58660db072ca53c4496308c75a341deb2637c58b58d33e06659d0ef2b89f2e39d7489365ff42204353887b2911b8ab780ca4939033717223286671fe3a91eace5eb8ef8e613cb2256e9cf98a828f3568e89a8124a23f796f49243a5d9e194f4dc832a756fa800cf25a919ca672d027b9aea023261f8d2e923020f9f80292e9a5288160632ceb2017c3f355d1e87371a2db60d6ef950161c9aab029e9e41d3539ec0b73041586063d060e7c1a03d40347b25f6c304f37babf81ad29acd7e7843a15024de14d6f4eb41ac1bf595938c8c831802bddfda06c714c05ffd88954b230d1bdcc1e186ce5e856483b571b7181770c29df1b1997916949194066134a3ec3ad3ffe2075cc4c327f6a50dedb03c63e791f5d2ecc04fe56c96d7e24175c6d9fa6c0f9bbbc51686ae9ad58c7ce31744610e4ba65c86f19cb03cb93fc570d5b8a3e14b5500df16c8929e263193f57d6dd358a1d958bb43a21b5bb59e218bf7eac475c852a0291fdda5a07c8a35a34ffe25d869c769242bc2ac43b9a7a3c6699a5dc51d5289a075406e893adc7cf3bc460914fe02f287c8bed53fb562c36561caee0a49aeb021235aecfa1897bd118f876d7b10b274ce0328eae9b6586296347c8021ea5d3bb651d7fc7ef7810dd8358850c0f6bd2e17b56cd904c52d6f09f3488c6888e78558cc2c1ec1ae10aee278a3d6aa94ea83e2c62fb3fe9f109e34b1911f87cc37d4ec57f0df5aeae79aa4fa669efef94a35298d9cb0221dceb1579094df98bbbc2f5934c52c4dceca9c3296e8a19ca944c8a9222cd0a98dcdc399fd7ed7eee87d90faa80c5a87a13dd195683e94ff03eed98cc5015a31e587497f9152e43423b8f60df798384be82b41736aba5e40ce8ddfd4197637769fa8143886dd72af1ec9bb9b2860fb23f64ac33e8dfa5496fe2099a0d2a7d6c5991e858b909221981dd426bdaa2f98a4d85d8bc6bbe054861c83c2a7c817ed30aff28942165c0a97e0705a759d38c204b41d757501cf5692645c561e9f74e9fc0e77aa2c72880066d7397be02931ac1e51e3a4a624110e89d782479b7566d711504c62724617648ddae642e45696909bc03f4dee792cb7065ad13b4098400bb1f5b85602f8abb6c3cd0e113a04df48cc27b3524de423bcd2468b96262059958c3b576fd755a3f47e6e8adb9707b781545eff74eba17e3165e0aa070a113c9dfe8e02628581a31284d10b4bae5fed080f3fc34785e388e4ea17107945e3542f103e2991084d55165ddc8a42e66ab8011d030c9b2b8ce7dbbe556b40bd37e8adb463cbcb98f721dbafec0effa06975360cf73d1402f973fad361769f7a6fc58b4e4309e973b180662ce8bcbcd2856dc869cad595c9403c34745f59a48648397c8bac67e3df1f5f9463f4ee0cdb6f0e0e14d88b7b56627bad0e79c9b1449efe71517125591671122b482887b36af65250efb90d6de209b38285305fb4460d418046e422c5726b095ea16396878d2884bf0342f3909b9b497cad70fb25d6a6edd41df986bd4586608c45c9dbe452424f1b339cea49d88b2c4e9968e27da1b6bbb62074fd24368cc0f60dadb5965efaf09788d618a76cec20920bcf1634c93b101f15cdf12ad81ab311a0963679be0b1fa1fddada5c37e0fee1cf92952375133b518edac696889a54c6c42bf655f8b982704ee2356133d78c20ef8ec58bc4b1b3b71b8440aca555ddb82e8c6774970298116369847d443e0fc134aab890c658bce45801df1e1ca6b2eb433e0af4ccf7436d700", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x28, 0x0, 0x80000000000000, {{0x9, 0xfffffffffffffffc, 0x1, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r11, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x1000000}) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000007600000402000000fddbdf25030200000000000008000100fdffffff"], 0x20}}, 0x0) pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) 8m13.214957171s ago: executing program 2 (id=537): syz_io_uring_setup(0x2f67, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3, 0xf2}, &(0x7f0000000380), 0x0) (async) r0 = syz_io_uring_setup(0x2f67, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3, 0xf2}, &(0x7f0000000380)=0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000080)={0x3, 0x4}, 0x0) close(r2) (async) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000980)=ANY=[@ANYBLOB="c83696fed912050000000000000000000000000001ac1414aa0000000000000015e00000004e212100000000000a002000000000000000000000000000000012fab1487c6360f7b01512b2c335709fc050c3506dd1a81387c7362b55af2255a30c33", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1c8}}, 0x800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xcc}}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000100)={0x1, 0x4}, 0x0) r6 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_io_uring_submit(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETPERSIST(r9, 0x400454cb, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r12, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x10, 0xfffffffffffffff7, 0x6, 0x7, 0x7]}) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x4, 0x3, 0x0, 0x1, 0xff, 0x4, 0x7e, 0x5, 0x1, 0xcc, 0x6, 0x0, 0x1000, 0x4, 0x5, 0x0, 0x5, 0x9, '\x00', 0xeb, 0x2}) ioctl$KVM_RUN(r12, 0xae80, 0x0) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12011001fb819608b404021058550102030109022400010400500009042601022bc2be0309050302ff0308420409050003df010b020b54d7fe57ae4f42c7adee8e661ceec94974676f9d3b3bacb63daf2e060280a91dfbe330cbbe52166017bdb6520e374cfd15bdad72bc4548144d7ed4c0544bede288b2e0743c32b69d4712b060fd2bd34dd6549aa66e77ec6fc2c66e53c74dd37a00f7aef3c17b2f5ee3e11d813b2c9bf5dd8e249055c205bafe280fedb55331aada8942d46aea9e2dd2bdd7e13b7ca1849deea3b84e5d96ca872d74189b903717693ca772e995ac0876fa8e7822cdf5327bfecb", @ANYRESHEX=r5, @ANYRES64=r10], 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) 8m12.614471774s ago: executing program 2 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x1, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r2, 0x101, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r3, 0x40046104, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0x4, 0x0, &(0x7f00000001c0)) epoll_create1(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x2d, &(0x7f0000000000)=0x92d2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES16=r0, @ANYBLOB="2b0300000000000030001280010000000000000076650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRESOCT=r7], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0xc015) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x1800848, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dc0e776df92a744de0460c42690f2f2770749d8c7824b149b2ea7af7357f19d85a21309b0b67191b00fd99ba8e60c9aa77f07a8d682ead5a4966f93839c7feefe634d", @ANYRESHEX=r8, @ANYRESHEX, @ANYBLOB=',cache=fscache,msize=0x00000000000007ff,fscache,cache=mmap,fscache,cache=none,cache=mmap,access=user,version=9p2000.u,\x00']) msgget$private(0x0, 0x790) 8m9.383249397s ago: executing program 2 (id=551): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd700000000000019f0a00291dcde92b4eb243ee87eac7af3d7e463fa6c226aba1b80693b6d23ceb128fa9012152075db58a", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32=0x0], 0x114}], 0x1}, 0x0) 8m9.185043299s ago: executing program 2 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c2, 0x0) preadv(r4, 0x0, 0x0, 0x6, 0x800) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r5, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}, 0xffff}, {{&(0x7f0000004280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000004640)=[{&(0x7f0000004300)=""/158, 0x9e}, {&(0x7f0000000fc0)=""/49, 0x31}, {&(0x7f00000043c0)=""/157, 0x9d}, {&(0x7f0000004480)=""/204, 0xcc}, {&(0x7f0000004580)=""/164, 0xa4}], 0x5}, 0x7}, {{&(0x7f0000004780)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000004980)=[{&(0x7f0000004800)=""/171, 0xab}, {0x0}], 0x2, &(0x7f00000049c0)=""/89, 0x59}, 0x7b}], 0x3, 0xc1, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 8m8.225560414s ago: executing program 2 (id=554): sync() r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x80000) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) sync() 7m11.512318883s ago: executing program 34 (id=554): sync() r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x80000) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) sync() 6m46.751138054s ago: executing program 5 (id=713): mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$rfkill(r2, &(0x7f0000000100)={0x7f, 0x1, 0x0, 0x1, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x28, r0, 0x10, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x2c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 6m45.937006226s ago: executing program 5 (id=714): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = gettid() r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4050, &(0x7f0000000000)=0xfd2) syz_pidfd_open(r1, 0x0) recvmmsg(r0, &(0x7f0000003540)=[{{&(0x7f0000000200)=@isdn, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/199}], 0x0, &(0x7f00000003c0)=""/58}, 0x3}, {{&(0x7f0000000400)=@qipcrtr, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/28}], 0x0, &(0x7f0000000500)=""/211}, 0x5}, {{&(0x7f0000000600)=@nfc, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)=""/175}, {&(0x7f0000000740)=""/101}, {&(0x7f00000007c0)=""/177}, {&(0x7f0000000880)=""/78}]}, 0x2}, {{&(0x7f0000000940)=@generic, 0x0, &(0x7f0000001d40)=[{&(0x7f00000009c0)=""/54}, {&(0x7f0000000a00)=""/4096}, {&(0x7f0000001a00)=""/195}, {&(0x7f0000001b00)=""/30}, {&(0x7f0000001b40)=""/220}, {&(0x7f0000001c40)=""/52}, {&(0x7f0000001c80)=""/159}], 0x0, &(0x7f0000001dc0)=""/44}, 0x8}, {{&(0x7f0000001e00)=@isdn, 0x0, &(0x7f0000001e80), 0x0, &(0x7f0000001ec0)=""/108}, 0x5}, {{&(0x7f0000001f40)=@sco={0x1f, @fixed}, 0x0, &(0x7f0000002180)=[{&(0x7f0000001fc0)=""/229}, {&(0x7f00000020c0)=""/160}], 0x0, &(0x7f00000021c0)=""/27}, 0x4}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000002200)=""/46}, {&(0x7f0000002240)=""/230}, {&(0x7f0000002340)=""/4096}, {&(0x7f0000003340)=""/245}], 0x0, &(0x7f0000003480)=""/180}, 0xafb}], 0x4000000000003b5, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mincore(&(0x7f0000532000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/47) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01020000ffe700000000010020000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000000004000580040004800900010073797a30"], 0x108}}, 0x0) process_vm_writev(r1, &(0x7f0000001e80)=[{&(0x7f0000005c80)=""/4096, 0x1000}, {&(0x7f0000003700)=""/120, 0x78}, {&(0x7f0000003780)=""/187, 0xbb}], 0x3, &(0x7f0000003b40)=[{&(0x7f0000006c80)=""/4096, 0x1000}, {&(0x7f0000007c80)=""/4096, 0x1000}, {&(0x7f0000003840)=""/48, 0x30}, {&(0x7f0000003880)=""/146, 0x92}, {&(0x7f0000003940)=""/192, 0xc0}, {&(0x7f0000003a00)=""/189, 0xbd}, {&(0x7f0000003ac0)=""/106, 0x6a}], 0x7, 0x0) read$FUSE(r3, &(0x7f0000003c40)={0x2020}, 0xfffffdd9) 6m44.723401789s ago: executing program 5 (id=720): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r3, &(0x7f0000000040)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8}, 0xfff, 0x0, 0x34, 0x3, 0x1, 0x0, "", [{0x2, 0x5, 0x2, 0x5961}, {0x1, 0x7fffffff, 0x7, 0x8}, {0x6, 0x8, 0x1, 0x7fffffff}]}, 0x60) (async) write$usbip_server(r3, &(0x7f0000000040)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8}, 0xfff, 0x0, 0x34, 0x3, 0x1, 0x0, "", [{0x2, 0x5, 0x2, 0x5961}, {0x1, 0x7fffffff, 0x7, 0x8}, {0x6, 0x8, 0x1, 0x7fffffff}]}, 0x60) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008060001080006040001aaaaaaaaaaaa00000000"], 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008060001080006040001aaaaaaaaaaaa00000000"], 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32, @ANYBLOB="050003"], 0x28}}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3282b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 6m43.677474039s ago: executing program 5 (id=726): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000040c597b3a4ddf118bc00430001000000000000000000000000002a000100aaaaaaaaaac437a56d2230004e7800458a80000000000000007e4d73872802c24923ccf220"], 0x24}}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e"], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000000) r3 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) r10 = pidfd_getfd(r9, r9, 0x0) setns(r10, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 6m42.636461414s ago: executing program 5 (id=728): r0 = socket(0x10, 0x3, 0x0) mlockall(0x2) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) capset(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1301, 0x9f) socket(0xf, 0x2, 0x6ec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 6m42.294705586s ago: executing program 5 (id=732): socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r2 = userfaultfd(0x80801) r3 = dup(r2) syz_io_uring_setup(0x10e, &(0x7f0000001480)={0x0, 0x4008d2dc, 0x400, 0xfffffffd, 0xd6, 0x0, r3}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) recvmmsg(r3, &(0x7f00000009c0)=[{{&(0x7f00000004c0)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/48, 0x30}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/235, 0xeb}], 0x5, &(0x7f0000000940)=""/85, 0x55}, 0x8}], 0x1, 0x20163, &(0x7f0000000a00)={0x0, 0x989680}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) mount$9p_fd(0x0, 0x0, 0x0, 0x18004, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES64=r2, @ANYRESDEC=r1]) getresgid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="640000e30100e019000000010000000300049200000000002120028000000000046eac7a230000776c616e31000600776c616b01000600776c616e31000600776c616e31000400283a230400000000000000b65e7f72a8b668b958470a9bc52bed6084cae6d51daf06c80f0b0feb6c0b8236fc1064e8bd787e4d0afc5da8970dd3ce4da83ebe42b02e0c1d2c4075574ca791e523da9bca0c8921a086f5fe6c1cfd3be59d734cbe5fe62f6b51773dc4702c61d77a67f0a250d55e65a5b88d9afcd0081d1b9850f47b5834", @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r7], 0x64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r10, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0xf, 0x6, 0x5, 0x1, 0x8, 0x0, 0x6, 0x0, 0xfffffffa, 0xf3, 0x2324, 0xffffffff, 0x5, 0x5, 0x5, 0x7, 0xb, 0x0, 0x4, 0x6, 0x82, 0x6, 0xfff, 0x2, 0x7, 0x101, 0x100, 0x8, 0x4, 0x4, 0x1, 0x1]}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 6m41.878178557s ago: executing program 35 (id=732): socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r2 = userfaultfd(0x80801) r3 = dup(r2) syz_io_uring_setup(0x10e, &(0x7f0000001480)={0x0, 0x4008d2dc, 0x400, 0xfffffffd, 0xd6, 0x0, r3}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) recvmmsg(r3, &(0x7f00000009c0)=[{{&(0x7f00000004c0)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/48, 0x30}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/235, 0xeb}], 0x5, &(0x7f0000000940)=""/85, 0x55}, 0x8}], 0x1, 0x20163, &(0x7f0000000a00)={0x0, 0x989680}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) mount$9p_fd(0x0, 0x0, 0x0, 0x18004, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES64=r2, @ANYRESDEC=r1]) getresgid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="640000e30100e019000000010000000300049200000000002120028000000000046eac7a230000776c616e31000600776c616b01000600776c616e31000600776c616e31000400283a230400000000000000b65e7f72a8b668b958470a9bc52bed6084cae6d51daf06c80f0b0feb6c0b8236fc1064e8bd787e4d0afc5da8970dd3ce4da83ebe42b02e0c1d2c4075574ca791e523da9bca0c8921a086f5fe6c1cfd3be59d734cbe5fe62f6b51773dc4702c61d77a67f0a250d55e65a5b88d9afcd0081d1b9850f47b5834", @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r7], 0x64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r10, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0xf, 0x6, 0x5, 0x1, 0x8, 0x0, 0x6, 0x0, 0xfffffffa, 0xf3, 0x2324, 0xffffffff, 0x5, 0x5, 0x5, 0x7, 0xb, 0x0, 0x4, 0x6, 0x82, 0x6, 0xfff, 0x2, 0x7, 0x101, 0x100, 0x8, 0x4, 0x4, 0x1, 0x1]}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 8.728200981s ago: executing program 7 (id=2374): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) (async) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) (async) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001", 0x3, r7) keyctl$get_security(0x11, r8, 0x0, 0x0) r9 = syz_open_dev$audion(&(0x7f0000000000), 0x8, 0x202) ioctl$BTRFS_IOC_SCRUB_CANCEL(r9, 0x941c, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r9, 0x941c, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) mmap(&(0x7f00002e2000/0x2000)=nil, 0x2000, 0x9, 0x40010, r2, 0x0) (async) mmap(&(0x7f00002e2000/0x2000)=nil, 0x2000, 0x9, 0x40010, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r10, 0xc0984124, &(0x7f0000000940)) 7.144103796s ago: executing program 7 (id=2377): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000b40)={0x3, @pix_mp={0x0, 0x0, 0x32314752, 0x0, 0x0, [{0x0, 0x10000}, {0xfffffffd}, {0x9}, {0xfffffffd}, {}, {}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x0, 0x0, 0x45d9700b8b2b9d4f}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r1, &(0x7f0000019180)=""/102355, 0x18fd3, 0x3ff) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000080)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x3, r2, 0x0, 0x3, 0x26, &(0x7f00000000c0)="b5108a7b338b36194ea03979e3b860bbca1fdb53fbdfd54cc0a6b5aa0525525f2a58dea2aad7"}) eventfd2(0x8, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) socket(0x2b, 0x1, 0x1) r5 = dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0/file0\x00', 0x144) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000380)={r7, @in6={{0xa, 0x4e22, 0x0, @loopback, 0x5}}}, &(0x7f00000000c0)=0x84) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="38000000031401002abd7000fcdbdf250900020073797a300000000008004100736977001400330077673100000000000000000000000000f817ae3c697eb8633fc41b54a0f3f6eaf8ee33590c53c8044ed4a4d13c0b937991e3912dc25aeedab09233c9e1c742a3c639834f34c3b7293b06677b65c7fb41cce1bc165a958dcfc0f8cf4602e48e9033b7011c4721191a7957686da01169f5dd47f16a1eb22a8a66b2b70e9766f09ccdb7575053b49c6b39d1eebc90a49149435f4b3f07f7363ef3d15c601234b5fafa311aaa9b6ba75ce3fa1e0cb9a9d40529a33357ad2864b33a95881770dd9b3d3ad294a595914cc6"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x114, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4050}, 0x4040) read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a12000300686173683a6e65742c706f7274000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000640000000009afe76671d1451a710813ac9d642f4efd99ff4503ab3feec1f148ea57e2d66ebfd2aaf48ab26af7bf85643649837f919b9934527460cf395b097c7539816a68b0f2d7233df200fa005c588353665d50dfbad"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 6.802841778s ago: executing program 7 (id=2379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000000206010100000000006000000000000005000500000000000900020073797a3000000000100003006269746d61703a706f7274000c000780060004400000000005000100070000000500040000000000"], 0x54}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r1, 0x0, 0x1}, 0xffffffffffffff07) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000680)={0xaa, 0x6c4}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) shutdown(r7, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xf}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @ldst={0x0, 0x0, 0x0, 0xa, 0xa, 0x8, 0x10}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7bf, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xe, 0xb, 0x5}, 0x10, 0xffffffffffffffff, r4, 0x5, &(0x7f0000000400)=[r3, r3, r3, r3], &(0x7f0000000540)=[{0x4, 0x1, 0x7, 0x7}, {0x4, 0x3, 0x9, 0xb}, {0x3, 0x4, 0x8, 0x7}, {0x5, 0x4, 0x8, 0xa}, {0x4, 0x20000001, 0x4, 0x5}], 0x10, 0x6}, 0x94) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) 6.761367578s ago: executing program 7 (id=2380): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="40012e0000006651"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, &(0x7f0000000100)) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000910}, 0x20004040) 5.169099899s ago: executing program 0 (id=2384): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x4048004) io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='btrfs\x00', 0x5, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x10) 4.872839465s ago: executing program 6 (id=2387): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c00018005000100f9000000d22271151a645623f831f2700418deefc5bac537264af0422875839abb2540d479120192c64316db77b687a7cbc0a585acb17398e051e48d6c7bae0f43ac64226e18e40374e787bc603378278a9a2586d3a0682a93992b82df58fe91b936e1cf9ce22691e886faebc455cb61173998ace658712b201f5200777478abed3191802d6d905330eb4042d267d48ce2"], 0x40}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3233c3, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200, 0x0, 0x3, 0xb, 0x13ec, 0x1}, 0x20) syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x4000000) inotify_init() syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') 4.872121654s ago: executing program 4 (id=2388): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)) r0 = syz_io_uring_setup(0x236, &(0x7f0000000080)={0x0, 0x20000, 0x8, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x55, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff8e, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x2, 0x4030800, 0xff, 0x2, 0x9, 0xbad, 0x0, 0x0, 0x40, 0x2}}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x100000) ioctl$SNDRV_PCM_IOCTL_XRUN(r6, 0x4148, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setrlimit(0x6, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="3c0004ed", @ANYRES16=r7, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4044840}, 0x48000) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x40a40) ioctl$USBDEVFS_SETINTERFACE(r8, 0x41045508, &(0x7f0000000340)) syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.187040323s ago: executing program 0 (id=2389): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000500)="c21744c4ccce954fe5186db1421bdf3c35352a2517e8968293bc14a94ffe84c563e2fb07677c06cf59ca8324447b6ab4be65da42ac1bfe70629ff0d32e7aa7eb88a78de0171b9661529a03e62c57bee0796219ad2075bd776b5af159469322b6f81b0d40d93d4f692dc78983bb9843cdbae9b1324c2a668d5ce7c2cc583b6616125e4ef2f9b55266cf9e7cbcc16c291d109ace9477cf6132115482871c604592909ed90d4791b4e71329678ca907d3b0cd", 0xb1}, {&(0x7f00000000c0)="027befd154be48ce4abdc374459e757bfb0fe6efce50715b1c3b0aa8768e10b1faa06d05c95a2621cebd89723c8ad8009f57da219005e08bc93cf8a9352072dcd0a40c2cc66e090fc73d1bdd5f26d8676b54fc982f6beb69a44785bddce87966c37e535c3304b1b9", 0x68}, {&(0x7f0000000040)="e44e", 0x2}, {&(0x7f00000005c0)="2aca4f9cb8273eb624ba0d5b02dac2effcc91bbfcf675a34893d6ca9b4656ff6ae1da4374d132f78c5572c11bfe2598f6b8744bd4e58ddb229bc892701b14f83aef9c9cf205f20ef0b2df80cf32b04db5105a9e230c7a827dcca5e64365dfc2901adb944eeba8df7d9cf59892758d3ed40b4d538b44272a484ac09a5f55ad410df9ba6a28989844cdaf13ea7a94090e65d1301e9dc43230a3c19ed18645b9941afa60959db7d13aeb3208d796cb597673ee0ac4d0441a792437b282947f5936ccc2b22bcae27304f44196b87a2fa6a02cc28b1cc1e456fa62db9", 0x12d}, {&(0x7f00000002c0)="d74e54c35a67156928dfd9554ded75fc0576a982ed8f9e0748c06209676349a4445fd80ba9ee088cb8c857addcf4c6fe95bfccd6ace9db359720be294ada9919081e6d", 0x43}, {&(0x7f00000001c0)="af7932a8faa1f3a3a8b74b4f6c1740f1bfbe1ea48ed56808ef2904a7265e01d72ad5bc0a1fcd09f9bf5c2c", 0x2b}, {&(0x7f00000006c0)="457b5c8b350970ee90f25cefef326b5858d502acb4eceda3467f1cc910a0a945ff1e1ce3df8ebc7281bbe230b538eb09d71627d3b8299efb428c83070e08f5869d1212fc7ae3cbe0fda836c2b7806923ad7c2eb165c6dea280e6a701168ee56b153465409d496cea1a379fd8", 0x6c}, {&(0x7f0000000740)="1c90467ceb80fe68ff6c9938c416890b3c2e5e331131ae4daf89abfb267b08b1938110c4f685d218ad00698c07924050cfb32cbcd4b1f7299618c23313718171b968dd5eef78a3dc9e1310d9d7b4f55a7879afb862b2da9615364f3150d6965e24b0ce79e01622eafa22f40fb98ce4ef120fedf11d82427038bdd002cf90b3bbc113d9202baa8848d65b25e5d8a26a6aa4", 0x91}, {&(0x7f0000000800)="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", 0x1000}], 0x9, 0x0, 0x0, 0x800}}, {{&(0x7f00000018c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000001940)="187ffa7824c04976402b612ef0fe50e0b7496288bb2e908378bab714c9b5bfaa03b683c5418506a634425978dd96111b30daed1f9b4d8c60a95a3458e07ac088c5cf7d58b22fead214c34fb1f6c588b94b155cc92e6c47f6509dbb0ffb036d2f5aa866b584a47e3dffb70e141ddc761f24e49002727bfd48e9e4a1440d067b54aeed92322e4e8c00a7504eebbe4914e15a66c19d7d71ef7d1be890bb84e5d128e1cea7253eb9476504e739655e1d615996dcc9ed421d7a13d5413669af05b482d07d14065e6f58b0bb55eb181d2f4f16ff27cb82ab7ba437361ef644f426211bed44dafe0034fcc8ee3ac273cd2823785112233cb3cc8e795d7410f6bc68a8d716b693dc62945f4ad8da9047e449a391f4c086f79503d8d1b2c63deb09b008e724d0f10d61cdcf909189dfd109bd6fe0b5c520479dc1022e7d291c8c2ed9dd6a79236ca907b28a8b4c0b7bbed0d2bdc566d22eef4ab068ae733a8d701b0fb096925d180bb8b2c7ffb3d339624cc1f49077dd5dbc451bd94c47623e50811386599251160fdbf27f9805f5a479063761ade7fbf393629b4772c5a3c4085f527e6274a06d24ce490af72b7acf10c4c463282a24ab2767847a8012829794e5860ab2c75fc7fcb1ba55070fdd9373a5024dcf88530281f39856c1a42ed9079821899b1724c9debf682166d7b3e66e45f6a28cd4e65825da81362c150b8a08401b40cd392e0b7a64ca41bc98e58795253cb37a0c79ca55dd46447022c0ba1432e6ab5b233e86ed6fa4f8d95aa13e557dab999cb15d5f8f928e217db3ea490c5f84c2bfc59e65d444fcfc6b3c1b87c7616a6ae394a900dd4334f495ff09697af80db2d644604b53af9326a8dad4687e6f6bf068dff4e5d43a493640b96be802170b6bf746faa29f424cc20e8fa1db1ce7922fb6347f70b25c675328f3394e85f3c6bf277d6453a6c24d6d5c351555bacde80cc978d06a9b9116405a95e789cb1432f3bdd190da30cbe6c17a382196b5705ba52e9658613978ae023febb022a07a2156fcbc1a8630cf8098fd11f2199850ac03e301d8c1474fafe53c4e686f6a54161f835b7b0c96df22e63b134e71e825a175d6aa031b4e98dedd16fece4f369adabe83f7207f28c536f700c60ed8d84382fcaa82eec1316813dc2ef751e6337c9ec686e08b5c5fc38f570fb8755e163583fc14d2e8da18a0d3755ae04d12432f0a42809927856372a37fcd7090504dc49b9ea696ca58e0568865d96e17bf722e77531438d10147a20ad9c7c9993df1c087ec20bc67414060447b4038ab2d09f6c5fda8daa1297764e7f29f346ef81f58b18b25f9ac539d562afce096c28671c97e7f9e2791db224e5815f42ece4ad68c09c26a9b2e4d1f4ca53309dc767218c8f7b5387fad673c2cf8470834902a28d8dbcf3df7b0ade9cb17f25ea1d5fb78eace0e77836efd909059a611b71d79342fb73e4aa806a3741b59a3f8bdabe2566e30543d3671ffcd08ede6ecf49142f438e8a946d7f9a273c01bf89b2e9f1571facd1d14cf4ccd809a8979b3e2ddc02b2a1e2b9b6d39b137e0fabb6c1a427e9f3275513642dd633fe3e2900e3f67e2387fe2844efa637c63a9b614a28e2ba483346ff7c1e51cb8c7854e61c07aad6d3d1dc7140472976194d5c3878cb212a69c758247b2bf223c863c5db0b75cbf728f7360a89151db7f6dab597cf2a89de9f02c0a87d08645ff03317cd2d6b5ff41f5ddbae65e930c65156b8498cf5f16d161e2f70009643ece906c0eb3c2aab79359abf8adeab8ef60c4a37f213a4283161eef97024ca14b56703739742774f790c861f7988747ed0a8ea6d1b43bf841e98d67227510da82376e5addd3db19546053b2145eeb9597ab787c0b2cd29d1732bc168ee565615d2a71f35919098e4738661dfdb01eec90931d2f7fc6c81b5248154149a2861679d09059c636ceba8c2ba441a74cfb395e2bfc1ec0f98edc8e9e7c123e667c6f798b429aa0b6dbb06703e805301a7ab0a64e21db617c581260e0e9dce44ef590cef625232cd340021029db1f7296199b993add5ab2b790046e03a299b6e141b9d73ef1112b27ec82f9ebad8ccbb01d9bde25558c975541ee75716f6d30cf1e309453081f454c61689d0891e9ce18bd71a67e2fd4e74eec6dd8c08a1fa8a0888be167c4ab961f55a83aa26ecf7abdfcf9f5e9ac9b331a0aeafb685946e096bf18231058e7bbc5e20a42177596298c103f28a283148ee6b0528b6c294a684cde98fdd4d871c3146163c7400a98e5cbdd150f46f689e6b8bbdf89c023352c75348dea202476d6907ee5948777cc80934b8db9eeece9fcbff3799de29ad495e4826d392b34e905adee201f83d665bc853d7511ec4c5e923ce57bc6d8fdb52344e9c67e26e8ab55155f36d28b0a08077fbc2f4105d720de98ed8381af5b5071a9d9f7fed91ebfeac1f7f8e7a783851e05dba5363be8a825cdb518267d1f1c848d953a54a6aaa4ed57d0ee5bb28f37823541b6922928cca7d1fe740e397d143180d7dfad2cbb8d859faaabe06734eac73af2630a4f131e2889c8f3922bcf78564b4341f8f91b296e0acf0a2bf146142d3f29cc7d397cdd7f8b25f8dba4f96d9733f14e0db80f91c8509168e5e51721f85205cef8c2785892fd56e479e52fa19a326d286c807e2ffd0d2cb36f52221acdb3bc229779c6f52b1289bfcf22ee9a42906ecec42849c9bdd7d947daf195ae3280791a18b2a83f16d74b0552db99654a22e69ba083e0a5789cca2db32cf6fa664231795a9b5668721d31b17fe7cc54ab8e9636ffd25f9e56ad537aae25f0029d6ce33722faf7dfb8799e869664bac1ec9a75553178d5895f017e1c1b0f834f37fe3e3b8875820c21466930cf458e748678c610adb74c559fe8d40e9dea59f0ab4a1b711a8a876e4416a419af8301ebcc09f3c9a2fb603e45150bc2de40b79a2974e622674e85b27eaff8457c9b5e77e34b6fbe208659c129e1f3c2006d8ec88555a497cd3d8df6e0b4be69296f04c0c281dee735bd6d0f77e8a69187e7b5aa5e972b6312181bb14908f8281cc99802b08dcce032f06082bb0d1cccd745b9182652cf9770473cd7b06e2965b4033cfefb111977eff0236b53773a12455c737f302737f6e2960cc65e347c54eed661236f9acf1c997e122df9f003c638f7b44de8f61b5024ecbc5b5d4927f05c48f986e620d91d6356e4fc8ca699bd096dc97646291086427dd668c5447c44f518c4a69420c5bc627120d721807d3cbcd94e96f442a7081584d82bed8d6b55bef83bcb9984411a4a3949712f3c0e8bc132091ff0a8ae29058ba4860cfb2d323ffd5d3b28bfae3ac812f273094e9d53f70bd2e1ac250202e749520093285502fc7e82bf485d3451c488ca12968b609fd15e5accfab4e5e83648dc969840db39bc56600cf5a2d9245c2e4189bb1912241962dec541da594a19afcee00de006f870d1b2504b18a1dd4f80d9052841d70f4bcb25355100df12396849b669aa5bb4f874fe0eb29e50a47660c60ad48ae7eca610f12fd62cbc679560743d3f82b0d3e82791f6de56c4e0786db57a33379101e2f2f72c07603af2cf0b96fad4d7aceb98a3d214982dc5b00a22234f0490713071eb132ae8c6991f58b9d992f55332fd24892ef9248a78a7da75222ed841071a7baffad8377dbc6415421802ebcdc2a5ef7bf4f5ba65fde0a2da1403878a184841c34d943a66fb37b04a1e13b9737f6c99868058597335afb9349ef1e96837f2ec566f2d0a64ce4fdc4bf60f283aa40f23d34927d5ee7e88e4968622aba402ba7974f08a80dcc44073e2e0c039b45e8ebf78d9c111b19879d07270f7c101a30765ff9938a6efb06f1add76b9b9e6aa017f4f8ce7b62fe714d0a777c09e0f3be29cae1e5ca5de0163bc92121012cdb303b63f12a2bca20def58f5e32f4b5c4e8718a23fb849aded3527b54465e85d9d45041ef0f23d20d82ae3f277ea720feaf1480c23033cd024a74617e9818381e55f07d20e83c5b8e2339e6ae6d283f9196bf4d9d616f040da9d9396d08078ff3164627535e1f8119a20bbf93fa4a9858acc12b9f13a1fcaec405d7943da4704cf0d61066ae2b4ff225da8d022409437af3b46e71d749b007b4b3491608c7e54bef5ea272108b14c7f198825bd264b37c666412cf23acf84188313891c921dd9d742b7d6b018492f168c536555ea0fd708569a925986e613b380c22273042016049f86e8bee295db4174f7e5ef0d441a867c5fda1b869b9c181e5cac3d10017a48f739fdba14ff7f025e91fe1cce2924f1cc669405537c15ec269e26d5f1105254bf59caf38ad0eb8b3db501ba6ca7c06ce8112a5341f31d3311922ca9e095cec3e366461ad5a18d749b080d21be0c6a6d8b6ff801e5af8220779412a8265533cc029286d0b46cb420530a491004b80901135659a23c423303692b52f4147c55712370e4cd8a68e47af76380c8486bb93440f8743153a84d1e7a1782631793c634d4c474e041fe14a856c057c038cd856e39a5e50059856eb0945ca128a9f30edcb5e13521ada0cd64ba5e288ca41d35221905056aea7f4566c6d772790e5d8e44a1dd1bebb2fa1bc36db561135c6c5709f1f6f515c847642a1dc0eef41847e929a94fa901f1741a24fdb4e3cee9b50334c16c2a873af0c3bf764072bf558288b3b14440551605148fbd990f1e97f3b35ababef2029979815ba61a2cba745352c1ec379d110a71da3103b909ed48efd0b1609185a3c0b3a3f1312d1a1d338bbf6e23cb829abd87bc71786d7842f482a3bbe4a4d13e1a625aea47084faff961554f0632474ce05d1b5de65ca23c66236747b92f93e70a5a8c8cc10e4c014cc950193c1306f7f70b8a81bde5fd54e610ad3128ad9b8bd181d9b13bed90d73838ffe9d1afdbc7f86a208e6c8e9b46d22e7edaef6fd37040778d0dc233a102d4a8ec43831f6fe71eeaa1a30e97f9b20d460dca8a88fa8f86b37667f7ff15ed92b12a4df41817fec714c67eb3437e1440500e4f6bd542e3d0768c9d3786d176ecc38c45ec971c42d169075012dc955cce2c8ade4e439ec73c2ab89552df0c133eadf753e0a37dd59874bbf5528b0a39ff8fd9ce20c65324ada68af88eb0f71aeec238c8ea5d4c9aa23fb602822f4ae946587d8bd5b7d0d516d374e3109e43695346d76314ae985b0f05ed98a049c3bc56bace3d603085893ffd902cef120583d134e74aae004a688997cf2795ce2f0a0eb736dc893415eba7792b0215cf8e23a91addafc3af7d4ff885a12cbb84fd9590423a13402b51180a2c6d89babe83afc2279fa14bd33c5dd825f2847043fce96e8edd2d3bf751c38f6c091cba91fb1146d47ae18eff693c8e9a5ccc274ec04ebb182064f2da19708435c55ada546b27084e2dc431a0f7ef839ddb47fc6013759322e5a54bf10207c217d0ce278455a4b95d712bbb692e51c157ee264ab3f3698095b7e84ad6b8461cfc9fd8b641802381e9b8831ecac84598c7ca87ad717ee1cff1f7fa3414e5878a65ff2c43f4ef9f6bcf0c2ed0150de6da2b62327c1fbcda5c07a0922207b131d5906093b3cd04380fa87bba75fe418ffb1a2e94e6f9ff4d72a2e548dc33a30a1c2d880054b0ec6396cd255aa70bced37363eaa46f8d1282a64dd5c15494ee97b25270e9350b34f7f6e592404588773175258953e55dfbe9d32a6f59d1debb47b864b1b493bc4448b3bea7194042ef48ce1aedc602b7e5e122f405a38e298b3abd674c97b9b826f887ba02f213cda112daa4c331", 0x1000}, {&(0x7f0000002940)="3d5687291c330411386710aa9d7b9d63e71d806568c5bbd920f163badf65213763eac727fcb4b6f8b50537bfe5265fa0861baae2ab0161d47f5ae27a521b3456c0748f39235960ad98bb2565020e7fe76ba45b37e3915157b7f091b61208d951bdccf5ad5a716edc491193c1b4118933fa87545a81359fdc49a59086b31fbd0703c7e9779c81c822ef358513bc44dd14ed10ab6ad0a528cd454a", 0x9a}, {&(0x7f0000002a00)="309f9932bc1359fa1177e0", 0xb}], 0x3, &(0x7f0000002d40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r0, r0]}}], 0x48, 0x4004850}}], 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 3.892649677s ago: executing program 6 (id=2391): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x1e, 0x80004, 0x0) socket(0x1e, 0x4, 0x0) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) write$cgroup_pid(r4, 0x0, 0x0) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (rerun: 32) 3.821265079s ago: executing program 6 (id=2392): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x60c40, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r1, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40000121, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @loopback, 0x4}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x80, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./bus/../file0\x00', &(0x7f0000000240), 0x400, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',fscontext=user_u,measure,dont_appraise,\x00']) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x94) (async) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xa0b80, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000040)={0x1, 0x4}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4020, &(0x7f0000000140)={[{@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) lseek(r5, 0x0, 0x4) r6 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.744241472s ago: executing program 8 (id=2393): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async, rerun: 64) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000109d195690000346fd005"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xabe00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 64) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x5, 0x1, 0x0, 0x0, @msi={0x0, 0x40, 0x43d2, 0x6}}]}) (rerun: 64) write$sndseq(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x2, 0x1f636290}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 3.67647791s ago: executing program 7 (id=2394): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getpeername(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x108, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.591178314s ago: executing program 6 (id=2395): gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 2.848586334s ago: executing program 4 (id=2396): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000003c0)=""/245, 0xf5, 0x0, &(0x7f00000004c0)=""/249, 0xf9}}, 0x10) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) (async) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) (async) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="8eda6b42896693a9815372a6a757c655995070cf3c19d7e754f13cd47744d75349c131216ba7cbbe40ca", @ANYRESDEC=r2, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') (async) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f0000000000)='./bus\x00', 0x14927c, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05002bbd7000fedbdf250600000008000300", @ANYRES32=r7, @ANYBLOB="0800580e060000001c00e7e04451df1ed02fb700e6cb313bb74202e4a6798329958fde5a"], 0x40}, 0x1, 0x0, 0x0, 0x40048}, 0x0) (async) syz_clone(0x2001100, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 2.741079992s ago: executing program 8 (id=2397): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r2}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0xfff, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r5}, 0x10) (async) setgroups(0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) writev(r6, &(0x7f0000000780)=[{&(0x7f0000000240)="de0150907b", 0x5}], 0x1) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES8=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.601512358s ago: executing program 6 (id=2398): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setitimer(0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r6) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, 0x0) (rerun: 64) clock_settime(0x0, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 64) 2.59148742s ago: executing program 4 (id=2399): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x4048004) io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='btrfs\x00', 0x5, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x10) 2.088915069s ago: executing program 8 (id=2400): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (rerun: 64) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r4, r3, 0x2f}, 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000080000000800"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="706c66bd5f6dd0579de8d5fec336647d2f000000282000000400000023c78cb4f6877c16d48589ba28a513de74b29a79c8906e82443a78d7c19c090b6f67ec8598209f0fe22d96b648e62744b953f1374d71f6a7dd878bd1358acb82560f13719f1d3a157a", @ANYRES32=r5, @ANYBLOB, @ANYRES64=0x0], 0x20) (async, rerun: 64) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) (async) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xc70}, 0x1c) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000101bb40702006e6c383032313100"/32], 0x20}}, 0x0) (async) recvmmsg(r8, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) r9 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) 2.088201472s ago: executing program 0 (id=2401): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0xefe0, @mcast1, 0xe}}, 0x94, 0x7e1}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYRESOCT], &(0x7f0000000700)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x861e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xbe00, 0x0, 0x1000}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) tee(r2, r2, 0x4d74, 0x2) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r9 = openat$rdma_cm(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r9, &(0x7f00000004c0)={0x9, 0x108, 0xfa00, {r10, 0xb, '\x00', "33186954b9267d4e6271c3ea4c32bcef2493fb49978f106275967735fedcb8dfd1bf019f15a64938d9c9c6b17f41097c276d55c23876f92d226f912fd923bbc5951ebd2e0d53787a594f7e0f1b94d06b72164385269dc87788691ce700000000000000f68b9016a6b4dd84d3ed193ed1c23447f485ae8a8b020fc904f5fe3a0e85eaad314ed18cfe0935186d859709e6ce8c65858d30a4015a9b9bc21f370f0c2eae01bfde5978402a23c9ec00d397db93b010d707000000539ebf33ab4403da41510a1dd5f4059b7dedcaa87d774c795f5e05118dc8ac8d1f37986d06d1e400"}}, 0x110) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r11 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) syz_io_uring_setup(0x20bdc, &(0x7f0000000040)={0x0, 0x2ddb, 0x100, 0x200001, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r13, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r11, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/202, 0xca}], 0x1}) 1.99867663s ago: executing program 8 (id=2402): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xfc, 0x60080) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x80879) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000001222d31ea289b040500000000000000d6272fd1b4b4174909d66001d59ae7c225b3d4e63db52d0866de28cfdc4f3b64ab9d4b8cbbebb246d1b24311e405fd720e56"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) r1 = accept(0xffffffffffffffff, &(0x7f0000000380)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000240)=0x80) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000500), 0xffffffffffffff90) listen(r2, 0x6) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000200)={0x800, 0x8}, 0x18) r4 = openat(r3, &(0x7f0000000080)='./file1\x00', 0x80042, 0x185) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x4004000) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0xffffffffffffffc5, 0x10, 0xa, 0x301, 0x0, 0x0, {0xd, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044040}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000040)={0xffb0, 0x8000000008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000004c0), 0x4000000000000fd, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000080)={0x0, 0xbf, 0x1000}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000002, 0x13, 0xffffffffffffffff, 0x8000000) r7 = socket$kcm(0x11, 0x5, 0x0) sendmsg$kcm(r7, 0x0, 0x24008005) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) r9 = gettid() kcmp$KCMP_EPOLL_TFD(r9, r9, 0x7, r2, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0xffff}) 1.977055836s ago: executing program 0 (id=2403): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) r2 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) (async) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) (async) munlockall() (async) madvise(&(0x7f00002af000/0x2000)=nil, 0x2000, 0x15) r5 = dup(r3) (async) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r7 = syz_io_uring_setup(0x2000466c, &(0x7f0000000940)={0x0, 0x6d23, 0x6bf64627825dbf66, 0x7, 0x8fb, 0x0, r5}, 0x0, &(0x7f0000000300)) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000480)={0x2b, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x66a3, &(0x7f00000008c0)={0x0, 0x100f691, 0x200, 0x0, 0x2b1, 0x0, r7}, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async) syz_io_uring_submit(0x0, r8, 0x0) (async) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 1.836909979s ago: executing program 0 (id=2404): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34a7bf6a5102ae", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x50) r3 = socket$inet6(0xa, 0x3, 0xffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x33) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff010000000000000000000000000001050003"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) 1.786601059s ago: executing program 6 (id=2405): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34a7bf6a5102ae", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00dee83e3fb0adc6420000"], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000004000020000052c00048028000180080001006f7366001c0002800800014000000009080003400000040105000200020000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x33) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff010000000000000000000000000001050003"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000068ff717f7ffe7b5000010003001000fdffff7f00000000150000000c000c8006000100d73f000006000300010000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) 1.65534251s ago: executing program 4 (id=2406): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000680)=@gettclass={0x24, 0x2a, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0x0, 0x5fad9784a8a6d20c}, {0x2, 0xf}}, ["", "", ""]}, 0x24}}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) setrlimit(0xa, &(0x7f0000000040)={0x0, 0x2}) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) prlimit64(r7, 0x7, &(0x7f0000000080)={0x893, 0xfffffffffffffff7}, &(0x7f00000000c0)) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r8, &(0x7f0000019200)=""/102400, 0x19000, 0x1000000000) getgroups(0x5, &(0x7f0000019080)=[0xee01, 0x0, 0x0, 0x0, 0xffffffffffffffff]) r10 = getgid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000019200)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000019280)={0x2, 0x3, {0x0}, {}, 0x9, 0xf22e}) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000192c0)={{0x3, 0x0, r9, 0x0, r10, 0x80, 0xfbff}, 0x0, 0x0, 0x2, 0xfffffffffffffff8, 0x8, 0x1000, 0x1, 0xf, 0xd5bb, 0x1, r11, r12}) fsetxattr$system_posix_acl(r1, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02030000000009bdf60400", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="040001000000000008000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=r10, @ANYBLOB="10000000000000002000020000000000"], 0x5c, 0x2) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x5) 1.516977245s ago: executing program 8 (id=2407): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014"], 0x48}, 0x1, 0x2}, 0x0) 1.489766629s ago: executing program 7 (id=2408): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r1 = dup2(r0, r0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001800989749168fe58e5d2553ec000018000000020000000000002000000003000013f794aa223778b751b1aef5373ff3f2e30fcb06c7b8e4df035dc9401713c710ec63be207ad32adb7b6041d64788e2a702ae96488dbc48c6127e1bee3cc985c4bd11171c000000018808000000ef061518a3e7aca191541cd822f85896124101200a51b3c000"/159], 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) (async) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040e704300000000000000109022400010000000009040000010300005ff4437100008100000009058103000000000412098a642e728d0b728a7842cc22c71afa54314ece7ededa634ddc0fe48683a70764ec3e8293a915212e5d36f7f773c474229bcdde5a95be68d02b7d77"], 0x0) timer_create(0x1, &(0x7f0000000240)={0x0, 0x19, 0x4, @thr={&(0x7f0000000080)="7fd9bcfbf449ce5e8c79", &(0x7f0000000100)="6509103e"}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x1, &(0x7f0000000300)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000340)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x8001, 0xff, 0x6, 0x8}]}) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000002d80)=ANY=[@ANYBLOB="00240701000007a85c5f6b02"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.314888574s ago: executing program 4 (id=2409): gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 1.196799533s ago: executing program 8 (id=2410): syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@gettfilter={0x64, 0x2e, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x2, 0x5}, {0xfff1, 0x10}, {0x8}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x100000}]}, 0x64}, 0x1, 0x0, 0x0, 0x20c0001}, 0x40004) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005d4d539741a5be3568b5bb006bb924b3418372cdc5d17540c3ed770a813fc3c776b21636d318"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="0dea4e16ef617e8258027a26aebcc152bfab106abfbe0e0d6f66c9867152feb89da1a473dc1fcd5501ae64bc4e15f8be128bd071d6b986dd63127a26a6671441884b9d12f7fd2521846fcc013820ff2be75ec48d40c64ec12cf0eb3fd2b79bedc93585cb18a35f806bc17f899b5dd71794a2ab4c7285b09b5e7520e655872ea2c907"], 0x10) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)='}', 0x1}, {&(0x7f0000000900)="1e61e37b4324c3aeb269877b42c5f19d0594444bad8c241f90f6a716899bf2c254a203346b2c300718633c47009c555ba0bd83cd3898be21eeddf0b2d636951932aa71ce", 0x44}], 0x2}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) mq_unlink(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) msgsnd(0x0, 0x0, 0x0, 0x800) socket$netlink(0x10, 0x3, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) 337.413384ms ago: executing program 4 (id=2411): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x004']) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xc, 0x8001, 0xffff, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_io_uring_setup(0x405a, &(0x7f0000019140)={0x0, 0xd5f3, 0x80, 0x3, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000019100)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) syz_open_procfs(0x0, &(0x7f00000193c0)='net/protocols\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x54, 0x0, @fd, 0x0, 0x0, 0x3, 0x2}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x4, 0x8, 0xffffffff, 0x3bf}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c) connect$rose(r8, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) close_range(r7, 0xffffffffffffffff, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 0s ago: executing program 0 (id=2412): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0/file0\x00'}, 0x6e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x40015) recvmmsg(r0, &(0x7f00000001c0), 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) r2 = socket(0xb, 0x3, 0xba) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x54d181, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1006, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000001c0), 0x4) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000200)="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") r5 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x80000) ioctl$EVIOCGLED(r5, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x1068) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000d010004a016008000f8b50d307d74af3707da9707f653e8130f40ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80ff92d02bc041fa11b1dd4586f5daecbaaf8b332233f7aa2c5bc733749dcc206807bc7541a9eadead3d75963e65fdd1684bb7010572ce1cb86f56fe169633c8b36ef8ae8a40981ab4def06973b5e47a3efa726c73fa4622475fa701ee2214552246ad513c9bd95c9a475fa99d56530fb0d86ecfaee0a470b22516b327094453ffea69af5d4d019a4c38915f09a36854762c8b35aeaa8cc9108eb2a44f0443657133bceedb9875e2c827fcea089bf7279a01ad163b375ab5ed8d24b24c8612202000103bcf675bc81842dca0a13a8844dc722"], 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x10001, 0x3}, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c110000020601080000000000000098000000000900020073797a310000000005000400000000001400078008001240000100000800144000000000050001000600000005000500000000000d000300686173683a6d616300000000"], 0x5c}}, 0x4004804) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) kernel console output (not intermixed with test programs): etooth: hci7: Error when powering off device on rfkill (-4) [ 489.114680][T18511] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 489.132525][T18511] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 490.082085][T18677] sctp: [Deprecated]: syz.8.1387 (pid 18677) Use of struct sctp_assoc_value in delayed_ack socket option. [ 490.082085][T18677] Use struct sctp_sack_info instead [ 490.124484][ T978] usb 5-1: USB disconnect, device number 65 [ 490.265995][ T30] audit: type=1400 audit(1755475387.022:1208): avc: denied { getopt } for pid=18706 comm="syz.7.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 491.195385][T18728] tty tty29: ldisc open failed (-12), clearing slot 28 [ 491.326050][ T30] audit: type=1400 audit(1755475388.074:1209): avc: denied { setopt } for pid=18750 comm="syz.8.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 491.533812][T15665] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 491.715101][ T5957] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 491.735417][T15665] usb 8-1: Using ep0 maxpacket: 32 [ 491.788558][T15665] usb 8-1: unable to get BOS descriptor or descriptor too short [ 491.805838][T15665] usb 8-1: config 3 has an invalid interface number: 187 but max is 0 [ 491.816265][T15665] usb 8-1: config 3 has no interface number 0 [ 491.827021][T15665] usb 8-1: config 3 interface 187 has no altsetting 0 [ 491.845738][T15665] usb 8-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=71.88 [ 491.862820][ T5957] usb 9-1: device descriptor read/64, error -71 [ 491.876392][T15665] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.915649][T15665] usb 8-1: Product: syz [ 491.929689][T15665] usb 8-1: Manufacturer: syz [ 491.938126][T15665] usb 8-1: SerialNumber: syz [ 491.946143][ T30] audit: type=1400 audit(1755475388.680:1210): avc: denied { map } for pid=18767 comm="syz.6.1400" path="socket:[34801]" dev="sockfs" ino=34801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 492.037798][ T30] audit: type=1400 audit(1755475388.710:1211): avc: denied { ioctl } for pid=18767 comm="syz.6.1400" path="socket:[34801]" dev="sockfs" ino=34801 ioctlcmd=0x510a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 492.063274][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.168018][ T5957] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 492.183927][T15665] HFC-S_USB 8-1:3.187: probe with driver HFC-S_USB failed with error -5 [ 492.208519][T15665] usb 8-1: USB disconnect, device number 26 [ 492.510174][ T5957] usb 9-1: device descriptor read/64, error -71 [ 492.628399][ T5957] usb usb9-port1: attempt power cycle [ 492.983211][ T5957] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 493.017515][ T5957] usb 9-1: device descriptor read/8, error -71 [ 493.416503][ T5957] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 493.451573][ T5957] usb 9-1: device descriptor read/8, error -71 [ 493.557458][ T5957] usb usb9-port1: unable to enumerate USB device [ 493.923759][T18809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1405'. [ 496.229221][ T5957] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 496.463645][ T5957] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 496.471884][ T5957] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.488529][ T5957] usb 5-1: config 0 has no interface number 0 [ 496.548480][T18864] netlink: 'syz.7.1414': attribute type 1 has an invalid length. [ 496.556346][T18864] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1414'. [ 496.604580][T18865] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.1414'. [ 496.614009][T18865] netlink: get zone limit has 8 unknown bytes [ 496.867166][ T5957] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 496.880323][ T5957] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 496.924296][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.030255][ T5957] usb 5-1: Product: syz [ 497.043457][ T5957] usb 5-1: Manufacturer: syz [ 497.070963][ T5957] usb 5-1: SerialNumber: syz [ 497.090663][ T5957] usb 5-1: config 0 descriptor?? [ 497.105173][T18842] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 497.122261][T18842] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 497.245519][ T5957] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 497.428299][ T24] usb 5-1: USB disconnect, device number 66 [ 497.874475][ T30] audit: type=1400 audit(1755475394.219:1212): avc: denied { bind } for pid=18883 comm="syz.8.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 497.893758][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.943768][ T30] audit: type=1400 audit(1755475394.219:1213): avc: denied { write } for pid=18883 comm="syz.8.1419" path="socket:[35982]" dev="sockfs" ino=35982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 497.970196][T18898] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 497.975854][T18898] pim6reg0: group set to 60928 [ 497.982266][T18898] netlink: 'syz.7.1420': attribute type 10 has an invalid length. [ 498.008857][T18898] bridge0: port 3(netdevsim0) entered blocking state [ 498.016764][T18898] bridge0: port 3(netdevsim0) entered disabled state [ 498.025350][T18898] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 498.038108][T18898] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 498.128250][T18913] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(72) [ 498.134894][T18913] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 498.144757][T18913] vhci_hcd vhci_hcd.0: Device attached [ 498.365590][ T30] audit: type=1400 audit(1755475395.046:1214): avc: denied { read } for pid=18914 comm="syz.7.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 498.444199][ T5906] vhci_hcd: vhci_device speed not set [ 498.493801][T18928] hub 2-0:1.0: USB hub found [ 498.499317][T18928] hub 2-0:1.0: 1 port detected [ 498.531953][ T5906] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 498.843166][T18916] vhci_hcd: connection reset by peer [ 498.858604][ T8600] vhci_hcd: stop threads [ 498.866619][ T8600] vhci_hcd: release socket [ 498.884782][ T8600] vhci_hcd: disconnect device [ 500.743218][ T30] audit: type=1400 audit(1755475397.426:1215): avc: denied { write } for pid=18978 comm="syz.7.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 501.534237][ T5958] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 501.556705][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.565121][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.955556][ T5958] usb 8-1: Using ep0 maxpacket: 32 [ 502.034013][ T5958] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 8 [ 502.097429][ T5958] usb 8-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 502.258599][ T5958] usb 8-1: config 1 interface 0 has no altsetting 0 [ 502.328250][ T5958] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.356009][ T5958] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.392869][ T5958] usb 8-1: Product: ⴊ룇麻鑕貫ⅺ닕⽜୾잊㠾ᛞ鱪ሂﻓ킨陻ైፊད畐퀑ฒ㍄﷼≘륇힍먫쟹᛹库瘀뷌걾ሯﻱ噕麑ֆ웊䇚ꏈ헑̨釼鮠ᡠͅ錼肤썆䶻℁섓䃎洿褺∢Ϯ쨙淖瑝ကᴤ䝕帷굉ﺳ酫竮挿牌ᗦ饫붫킡쭌颞퉓໖햡俜瑋胛 [ 502.426902][ T30] audit: type=1400 audit(1755475399.120:1216): avc: denied { module_load } for pid=19014 comm="syz.4.1439" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 502.630441][ T5958] usb 8-1: Manufacturer: Ⰺ [ 502.655428][ T5958] usb 8-1: SerialNumber: ␊ [ 502.699095][T18984] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 502.718796][ T5957] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 502.726273][ T30] audit: type=1400 audit(1755475399.409:1217): avc: denied { bind } for pid=19036 comm="syz.0.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 502.767836][T18984] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 502.878113][ T5957] usb 5-1: device descriptor read/64, error -71 [ 503.035159][ T5958] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 503.169053][ T5957] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 503.218876][T19055] tty tty37: ldisc open failed (-12), clearing slot 36 [ 503.310059][ T5957] usb 5-1: device descriptor read/64, error -71 [ 503.389953][ T48] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 503.431509][ T5957] usb usb5-port1: attempt power cycle [ 503.681707][ T5906] vhci_hcd: vhci_device speed not set [ 503.802998][ T5957] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 503.879524][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1446'. [ 504.325959][ T5957] usb 5-1: device descriptor read/8, error -71 [ 504.406406][ T24] usb 8-1: USB disconnect, device number 27 [ 504.623699][ T5957] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 504.657074][ T5957] usb 5-1: device descriptor read/8, error -71 [ 504.805845][ T5957] usb usb5-port1: unable to enumerate USB device [ 504.816888][ T30] audit: type=1326 audit(1755475401.502:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19097 comm="syz.0.1449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35c998ebe9 code=0x0 [ 505.218942][ T30] audit: type=1400 audit(1755475401.901:1219): avc: denied { setattr } for pid=19105 comm="syz.7.1451" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 506.032148][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 508.097124][ T30] audit: type=1400 audit(1755475404.724:1220): avc: denied { bind } for pid=19146 comm="syz.4.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 508.166984][ T30] audit: type=1400 audit(1755475404.734:1221): avc: denied { accept } for pid=19146 comm="syz.4.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 508.385593][ T30] audit: type=1400 audit(1755475405.063:1222): avc: denied { ioctl } for pid=19158 comm="syz.8.1459" path="socket:[36470]" dev="sockfs" ino=36470 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 508.633812][ T5958] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 509.384508][ T5958] usb 5-1: device descriptor read/64, error -71 [ 509.540667][T19175] 9pnet_fd: Insufficient options for proto=fd [ 509.651996][T19176] tmpfs: Bad value for 'mpol' [ 509.656753][ T5958] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 509.786375][ T5958] usb 5-1: device descriptor read/64, error -71 [ 509.907902][ T5958] usb usb5-port1: attempt power cycle [ 510.648185][ T5958] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 510.670176][ T5958] usb 5-1: device descriptor read/8, error -71 [ 511.037664][T19218] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 511.037664][T19218] program syz.4.1469 not setting count and/or reply_len properly [ 511.822213][T19236] input: syz0 as /devices/virtual/input/input36 [ 511.900371][ T5906] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 511.919095][ T30] audit: type=1400 audit(1755475408.576:1223): avc: denied { mount } for pid=19235 comm="syz.4.1473" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 512.110628][ T5906] usb 8-1: Using ep0 maxpacket: 32 [ 512.124196][ T5906] usb 8-1: config 8 has an invalid interface number: 203 but max is 0 [ 512.140769][ T5906] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 512.151798][ T5906] usb 8-1: config 8 has no interface number 0 [ 512.157946][ T5906] usb 8-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 512.170275][ T5906] usb 8-1: config 8 interface 203 altsetting 1 endpoint 0x83 has invalid wMaxPacketSize 0 [ 512.181636][ T5906] usb 8-1: config 8 interface 203 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 512.195648][ T5906] usb 8-1: config 8 interface 203 has no altsetting 0 [ 512.206125][ T5906] usb 8-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 512.216461][ T5906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.224762][ T5906] usb 8-1: Product: syz [ 512.244678][ T5906] usb 8-1: Manufacturer: syz [ 512.249400][ T5906] usb 8-1: SerialNumber: syz [ 512.911346][T19265] netlink: 'syz.6.1477': attribute type 10 has an invalid length. [ 512.919599][T19265] bridge0: port 3(syz_tun) entered disabled state [ 512.926452][T19265] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.935098][T19265] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.066806][ T5906] port100 8-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 513.089918][ T5906] usb 8-1: USB disconnect, device number 28 [ 514.184808][ T30] audit: type=1400 audit(1755475410.842:1224): avc: denied { mount } for pid=19288 comm="syz.7.1481" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 514.418372][T19300] syz.0.1483: attempt to access beyond end of device [ 514.418372][T19300] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 514.622987][ T30] audit: type=1400 audit(1755475411.242:1225): avc: denied { write } for pid=19299 comm="syz.0.1483" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 514.737494][T19300] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 514.770059][ T30] audit: type=1400 audit(1755475411.381:1226): avc: denied { getattr } for pid=19299 comm="syz.0.1483" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 514.883242][ T30] audit: type=1400 audit(1755475411.401:1227): avc: denied { accept } for pid=19290 comm="syz.8.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 514.973690][ T30] audit: type=1400 audit(1755475411.631:1228): avc: denied { unmount } for pid=11277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 514.997454][ T30] audit: type=1400 audit(1755475411.661:1229): avc: denied { map } for pid=19314 comm="syz.8.1487" path="/dev/v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 515.051286][T19321] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 515.068921][T19321] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 515.302945][ T30] audit: type=1326 audit(1755475411.961:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c998ebe9 code=0x7ffc0000 [ 515.326478][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.797682][T19330] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 515.808083][T19330] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 516.296923][ T30] audit: type=1326 audit(1755475411.961:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c998ebe9 code=0x7ffc0000 [ 516.321464][ T30] audit: type=1326 audit(1755475411.961:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c998ebe9 code=0x7ffc0000 [ 516.344954][ C0] vkms_vblank_simulate: vblank timer overrun [ 516.822617][T19345] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 517.808436][T19345] bridge1: entered allmulticast mode [ 517.907549][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 517.907565][ T30] audit: type=1400 audit(1755475414.557:1261): avc: denied { accept } for pid=19340 comm="syz.7.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 519.318116][T19373] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1497'. [ 519.341189][ T5958] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 519.360854][T19378] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1500'. [ 519.504336][ T5958] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 519.517184][ T30] audit: type=1326 audit(1755475416.175:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.7.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 519.543774][ T5958] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 519.571143][ T5958] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 519.571148][ T30] audit: type=1326 audit(1755475416.175:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.7.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 519.611172][ T5958] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 519.655060][ T5958] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 519.815772][ T5958] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.831630][ T30] audit: type=1326 audit(1755475416.175:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.7.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 519.898866][ T5958] usb 9-1: config 0 descriptor?? [ 520.112400][ T30] audit: type=1326 audit(1755475416.175:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.7.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 520.148247][T19398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1504'. [ 520.166071][ T30] audit: type=1326 audit(1755475416.175:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.7.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 520.182780][ T5958] hdpvr 9-1:0.0: firmware version 0x51 dated [ 520.196929][ T30] audit: type=1326 audit(1755475416.175:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.7.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 520.221163][ T5958] hdpvr 9-1:0.0: untested firmware, the driver might not work. [ 520.426241][ T5957] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 520.469513][ T30] audit: type=1326 audit(1755475416.175:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.7.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 520.508924][ T30] audit: type=1326 audit(1755475416.175:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.7.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 520.538537][ T30] audit: type=1326 audit(1755475416.175:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19379 comm="syz.7.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 520.549828][ T5958] hdpvr 9-1:0.0: Could not setup controls [ 520.613008][ T5958] hdpvr 9-1:0.0: registering videodev failed [ 520.632634][ T5957] usb 8-1: Using ep0 maxpacket: 8 [ 520.692645][ T5958] hdpvr 9-1:0.0: probe with driver hdpvr failed with error -71 [ 520.732161][ T5957] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 520.771417][ T5958] usb 9-1: USB disconnect, device number 24 [ 520.779951][ T5957] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 520.801772][ T5957] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 520.812445][ T5957] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.875893][ T5957] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 520.885068][ T5957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.939973][T19424] SELinux: Context system_u:object_r:event_device_t:s0 is not valid (left unmapped). [ 521.313350][ T5906] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 521.323248][ T5958] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 521.477819][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 521.478540][ T5958] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 521.497669][ T5906] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 521.507653][ T5958] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.509890][ T5906] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 521.524675][ T5958] usb 9-1: config 0 descriptor?? [ 521.531076][ T5906] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 521.542310][ T5906] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.557739][ T5906] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 521.568560][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.789145][ T5906] usb 5-1: GET_CAPABILITIES returned 0 [ 521.795562][ T5906] usbtmc 5-1:16.0: can't read capabilities [ 521.837869][ T5906] usb 5-1: USB disconnect, device number 75 [ 522.220235][T19487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1516'. [ 522.374202][ T5906] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 522.435760][ T5957] usb 8-1: usb_control_msg returned -71 [ 522.449666][ T5957] usbtmc 8-1:16.0: can't read capabilities [ 522.469907][ T5957] usb 8-1: USB disconnect, device number 29 [ 522.505034][ T5906] usb 5-1: device descriptor read/64, error -71 [ 522.602115][T19505] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=19505 comm=syz.7.1518 [ 522.774573][ T5906] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 522.924842][ T5906] usb 5-1: device descriptor read/64, error -71 [ 523.045248][ T5906] usb usb5-port1: attempt power cycle [ 523.287339][T19523] 9pnet_fd: Insufficient options for proto=fd [ 523.296567][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 523.296576][ T30] audit: type=1400 audit(1755475419.941:1318): avc: denied { append } for pid=19520 comm="syz.0.1521" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 523.346437][T19523] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.353544][T19523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.402659][ T30] audit: type=1400 audit(1755475420.051:1319): avc: denied { ioctl } for pid=19520 comm="syz.0.1521" path="/dev/usbmon5" dev="devtmpfs" ino=731 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 523.439072][ T5906] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 523.465999][ T5906] usb 5-1: device descriptor read/8, error -71 [ 523.815629][ T5906] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 523.846076][ T5906] usb 5-1: device descriptor read/8, error -71 [ 523.895698][ T48] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 523.956706][ T5906] usb usb5-port1: unable to enumerate USB device [ 524.025263][ T30] audit: type=1400 audit(1755475420.671:1320): avc: denied { shutdown } for pid=19542 comm="syz.0.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 524.079984][ T48] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 524.091743][ T48] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.132422][ T48] usb 8-1: config 0 descriptor?? [ 524.151565][ T48] cp210x 8-1:0.0: cp210x converter detected [ 524.733526][T19558] ubi: mtd0 is already attached to ubi31 [ 525.406492][T19548] cgroup: fork rejected by pids controller in /syz0 [ 525.550474][ T48] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 526.205296][ T48] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 526.296341][ T48] cp210x 8-1:0.0: GPIO initialisation failed: -121 [ 526.354939][ T48] usb 8-1: cp210x converter now attached to ttyUSB0 [ 526.761430][ T5958] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 526.877854][ T5958] asix 9-1:0.0: probe with driver asix failed with error -71 [ 526.964536][ T5958] usb 9-1: USB disconnect, device number 25 [ 527.378149][ T5958] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 527.447097][ T24] usb 8-1: USB disconnect, device number 30 [ 527.465593][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 527.486675][ T24] cp210x 8-1:0.0: device disconnected [ 527.526891][T19657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1533'. [ 527.618561][ T5958] usb 9-1: Using ep0 maxpacket: 32 [ 527.633183][ T5958] usb 9-1: config 0 has an invalid interface number: 151 but max is 0 [ 527.727444][ T5958] usb 9-1: config 0 has no interface number 0 [ 527.793513][ T5958] usb 9-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 527.802750][ T5958] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.838920][ T5958] usb 9-1: Product: syz [ 527.870376][ T5958] usb 9-1: Manufacturer: syz [ 527.890953][ T5958] usb 9-1: SerialNumber: syz [ 527.926205][ T5958] usb 9-1: config 0 descriptor?? [ 527.957283][T19640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 528.032295][T19640] bond3: entered promiscuous mode [ 528.049474][T19640] bond3: entered allmulticast mode [ 528.058797][T19640] team0: Port device bond3 added [ 528.198574][ T5958] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.374053][ T5958] usb 9-1: USB disconnect, device number 26 [ 528.614807][T12668] udevd[12668]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.785644][T19738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=19738 comm=syz.6.1536 [ 528.831062][T19738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=19738 comm=syz.6.1536 [ 529.004342][T19738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=19738 comm=syz.6.1536 [ 529.034868][T19738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=19738 comm=syz.6.1536 [ 529.614981][T19738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=19738 comm=syz.6.1536 [ 529.675082][T19738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=19738 comm=syz.6.1536 [ 529.717415][T19764] rdma_rxe: rxe_newlink: failed to add wg1 [ 529.815989][T19738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=19738 comm=syz.6.1536 [ 530.481176][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1546'. [ 532.602103][T19851] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 532.931214][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.374801][ T30] audit: type=1326 audit(1755475430.005:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.8.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 533.793926][ T30] audit: type=1326 audit(1755475430.005:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.8.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 533.834888][ T30] audit: type=1326 audit(1755475430.005:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.8.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 533.858380][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.873950][T19876] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1561'. [ 534.218792][ T30] audit: type=1326 audit(1755475430.005:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.8.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 534.242259][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.291613][ T30] audit: type=1326 audit(1755475430.005:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.8.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 534.398834][ T30] audit: type=1326 audit(1755475430.005:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.8.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 534.422235][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.510504][ T30] audit: type=1326 audit(1755475430.005:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.8.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 534.582056][ T30] audit: type=1326 audit(1755475430.005:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.8.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 534.615643][T19891] lo speed is unknown, defaulting to 1000 [ 534.660987][ T30] audit: type=1326 audit(1755475430.005:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.8.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 534.684702][ T30] audit: type=1326 audit(1755475430.005:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.8.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 534.762478][T19904] tmpfs: Bad value for 'mpol' [ 534.968350][T19927] 9pnet_fd: Insufficient options for proto=fd [ 536.268027][T19964] lo speed is unknown, defaulting to 1000 [ 537.061639][T19999] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 1, id = 0 [ 538.574964][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 538.574981][ T30] audit: type=1400 audit(1755475621.221:1348): avc: denied { map } for pid=20043 comm="syz.0.1584" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 538.605902][T20045] binder: BINDER_SET_CONTEXT_MGR already set [ 538.628337][T20045] binder: 20043:20045 ioctl 4018620d 200000004a80 returned -16 [ 538.701575][T20049] lo speed is unknown, defaulting to 1000 [ 539.138706][ T30] audit: type=1400 audit(1755475621.781:1349): avc: denied { mount } for pid=20072 comm="syz.6.1588" name="/" dev="ramfs" ino=39324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 539.268322][T20083] ubi: mtd0 is already attached to ubi31 [ 539.399275][T20110] syzkaller0: entered promiscuous mode [ 539.405020][T20110] syzkaller0: entered allmulticast mode [ 539.419534][T20110] tipc: Started in network mode [ 539.437896][T20110] tipc: Node identity , cluster identity 4711 [ 539.469504][T20110] tipc: Failed to obtain node identity [ 539.475859][T20110] tipc: Enabling of bearer rejected, failed to enable media [ 539.586338][ T30] audit: type=1400 audit(1755475622.231:1350): avc: denied { bind } for pid=20118 comm="syz.8.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 539.605812][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.743512][T20122] netlink: 'syz.8.1592': attribute type 4 has an invalid length. [ 539.809240][T20127] netlink: 'syz.8.1592': attribute type 4 has an invalid length. [ 539.882842][T20122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=20122 comm=syz.8.1592 [ 540.276056][ T30] audit: type=1400 audit(1755475622.901:1351): avc: denied { mount } for pid=20138 comm="syz.4.1595" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 540.302219][ T30] audit: type=1400 audit(1755475622.911:1352): avc: denied { read } for pid=20138 comm="syz.4.1595" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 540.324145][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.337625][T20142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1595'. [ 540.507211][ T30] audit: type=1400 audit(1755475622.911:1353): avc: denied { open } for pid=20138 comm="syz.4.1595" path="/325/file0" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 540.595161][ T30] audit: type=1400 audit(1755475622.911:1354): avc: denied { mounton } for pid=20138 comm="syz.4.1595" path="/325/file0" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 540.655535][ T30] audit: type=1400 audit(1755475623.141:1355): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 542.238302][T20182] comedi comedi2: comedi_config --init_data is deprecated [ 542.292007][T20185] trusted_key: encrypted_key: keyword 'ew' not recognized [ 543.319522][T20202] netlink: 'syz.7.1608': attribute type 10 has an invalid length. [ 543.337385][T20202] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.545932][T20202] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.553112][T20202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.574396][T20206] trusted_key: encrypted_key: insufficient parameters specified [ 543.577267][T20202] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 543.833483][ T24] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 543.961230][T20218] loop8: detected capacity change from 0 to 79 [ 544.056284][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 544.066648][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 544.077412][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 544.094646][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 544.107415][T20224] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 1, id = 0 [ 544.119990][ T24] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 544.135007][T20218] loop8: detected capacity change from 79 to 78 [ 544.343523][ T30] audit: type=1400 audit(1755475626.868:1356): avc: denied { ioctl } for pid=20219 comm="syz.4.1612" path="socket:[38798]" dev="sockfs" ino=38798 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 544.431136][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.612399][ T24] usb 9-1: config 0 descriptor?? [ 544.710154][T20234] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1613'. [ 544.950206][ T24] hdpvr 9-1:0.0: firmware version 0x51 dated [ 545.028834][T20241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1614'. [ 545.050079][ T24] hdpvr 9-1:0.0: untested firmware, the driver might not work. [ 545.183648][ T24] hdpvr 9-1:0.0: device init failed [ 545.188997][ T24] hdpvr 9-1:0.0: probe with driver hdpvr failed with error -12 [ 545.318230][T20246] vlan2: entered allmulticast mode [ 545.351977][ T24] usb 9-1: USB disconnect, device number 27 [ 545.991291][ T30] audit: type=1400 audit(1755475628.628:1357): avc: denied { read } for pid=20264 comm="syz.4.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 546.184688][T20276] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20000 [ 546.289922][T20262] binder: 20261:20262 ioctl c0306201 200000000280 returned -11 [ 547.153364][ T30] audit: type=1400 audit(1755475629.788:1358): avc: denied { read } for pid=20294 comm="syz.0.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 547.232930][T20301] 9pnet_fd: Insufficient options for proto=fd [ 547.401926][ T30] audit: type=1400 audit(1755475629.868:1359): avc: denied { ioctl } for pid=20300 comm="syz.6.1626" path="socket:[39659]" dev="sockfs" ino=39659 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 547.483890][ T24] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 547.683657][ T24] usb 5-1: device descriptor read/64, error -71 [ 547.731035][T20318] openvswitch: netlink: Message has 4 unknown bytes. [ 547.953360][ T24] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 548.093549][ T24] usb 5-1: device descriptor read/64, error -71 [ 548.203639][ T24] usb usb5-port1: attempt power cycle [ 548.509499][T20341] netlink: 'syz.6.1634': attribute type 8 has an invalid length. [ 548.643391][ T24] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 548.714001][ T24] usb 5-1: device descriptor read/8, error -71 [ 549.143592][ T24] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 549.469075][ T30] audit: type=1400 audit(1755475632.108:1360): avc: denied { write } for pid=20358 comm="syz.0.1639" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 549.595132][ T24] usb 5-1: device descriptor read/8, error -71 [ 550.057050][ T24] usb usb5-port1: unable to enumerate USB device [ 551.681318][T20391] tmpfs: Bad value for 'mpol' [ 551.693346][T17231] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 551.823386][T17231] usb 5-1: device descriptor read/64, error -71 [ 552.063375][T17231] usb 5-1: new low-speed USB device number 85 using dummy_hcd [ 552.298608][T17231] usb 5-1: device descriptor read/64, error -71 [ 552.423522][T17231] usb usb5-port1: attempt power cycle [ 552.977703][T17231] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 553.106225][T20418] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1651'. [ 553.243825][T17231] usb 5-1: device descriptor read/8, error -71 [ 553.483346][T17231] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 553.644062][T17231] usb 5-1: device descriptor read/8, error -71 [ 553.756712][T17231] usb usb5-port1: unable to enumerate USB device [ 554.051895][T20428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1653'. [ 554.196054][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1653'. [ 554.584112][T15665] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 555.053476][T15665] usb 5-1: Using ep0 maxpacket: 16 [ 555.076374][T15665] usb 5-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 555.111315][T15665] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.120058][T15665] usb 5-1: Product: syz [ 555.125294][T15665] usb 5-1: Manufacturer: syz [ 555.130791][T15665] usb 5-1: SerialNumber: syz [ 555.144868][T15665] usb 5-1: config 0 descriptor?? [ 555.292103][T12580] udevd[12580]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.367997][T20434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.384921][T20434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.414550][T15665] usb 5-1: USB disconnect, device number 88 [ 556.399223][T17231] IPVS: starting estimator thread 0... [ 557.914036][T20502] IPVS: using max 45 ests per chain, 108000 per kthread [ 558.881518][T20526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.903093][T20526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.036237][T20536] Invalid source name [ 559.040301][T20536] UBIFS error (pid: 20536): cannot open "./file0", error -22 [ 559.123399][ T48] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 559.924707][ T48] usb 9-1: config 0 interface 0 has no altsetting 0 [ 559.931506][ T48] usb 9-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 559.978231][T20546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1672'. [ 560.142770][T20551] 9pnet_fd: Insufficient options for proto=fd [ 560.152868][T20550] 9pnet_fd: Insufficient options for proto=fd [ 560.170266][ T48] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.214271][ T48] usb 9-1: config 0 descriptor?? [ 560.436291][T20555] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1674'. [ 560.839174][ T48] betop 0003:20BC:5500.0019: hidraw0: USB HID v1.01 Device [HID 20bc:5500] on usb-dummy_hcd.8-1/input0 [ 560.920684][ T48] betop 0003:20BC:5500.0019: no inputs found [ 561.085828][T20526] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1669'. [ 561.666192][T20584] atomic_op ffff888029c4a998 conn xmit_atomic 0000000000000000 [ 562.033409][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1680'. [ 562.042436][T20587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.428230][ T48] usb 9-1: USB disconnect, device number 28 [ 562.683435][ T5957] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 562.813586][T20619] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1686'. [ 562.908273][ T5957] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 562.930866][ T5957] usb 5-1: can't read configurations, error -22 [ 562.948896][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.955271][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.173538][ T5957] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 563.845146][ T5957] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 563.853689][ T5957] usb 5-1: can't read configurations, error -22 [ 563.860823][ T5957] usb usb5-port1: attempt power cycle [ 564.273742][ T5957] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 564.305908][ T5957] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 564.305931][ T5957] usb 5-1: can't read configurations, error -22 [ 564.403824][ T8590] Bluetooth: hci3: Frame reassembly failed (-84) [ 564.427150][T20642] @: renamed from vlan0 (while UP) [ 564.449552][ T5957] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 564.479949][ T5957] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 564.492252][ T5957] usb 5-1: can't read configurations, error -22 [ 564.521437][T20652] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 564.528037][T20652] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 564.536760][T20652] vhci_hcd vhci_hcd.0: Device attached [ 564.568522][ T5957] usb usb5-port1: unable to enumerate USB device [ 564.607061][T20586] rdma_op ffff88807c76a9f0 conn xmit_rdma 0000000000000000 [ 564.664762][T20653] vhci_hcd: connection closed [ 564.670844][ T8590] vhci_hcd: stop threads [ 564.689918][ T8590] vhci_hcd: release socket [ 564.702493][ T8590] vhci_hcd: disconnect device [ 564.785460][ T5906] vhci_hcd: vhci_device speed not set [ 565.027103][T20659] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1692'. [ 565.629604][T20669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1693'. [ 565.995938][T20677] Bluetooth: (null): Invalid header checksum [ 566.393865][T15398] Bluetooth: (null): Invalid header checksum [ 566.452479][T15398] Bluetooth: (null): Invalid header checksum [ 566.460883][ T5168] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 566.622358][T15398] Bluetooth: (null): Invalid header checksum [ 566.631641][T15398] Bluetooth: (null): Invalid header checksum [ 567.408414][T20711] netlink: 'syz.6.1705': attribute type 4 has an invalid length. [ 567.493833][T17231] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 567.643352][T15665] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 567.723575][T17231] usb 5-1: device descriptor read/64, error -71 [ 567.794005][ T30] audit: type=1400 audit(1755475650.438:1361): avc: denied { map } for pid=20726 comm="syz.0.1709" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 567.825308][T15665] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.863444][T15665] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.888595][T15665] usb 9-1: config 0 interface 0 has no altsetting 0 [ 567.898703][T15665] usb 9-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 567.912214][T15665] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.931487][T15665] usb 9-1: config 0 descriptor?? [ 568.022614][T17231] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 568.153459][T17231] usb 5-1: device descriptor read/64, error -71 [ 568.624642][T17231] usb usb5-port1: attempt power cycle [ 568.640353][T15665] input: HID 054c:03d5 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:03D5.001A/input/input37 [ 568.822286][T15665] sony 0003:054C:03D5.001A: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.8-1/input0 [ 568.847906][T15665] usb 9-1: USB disconnect, device number 29 [ 568.972234][ T30] audit: type=1400 audit(1755475651.608:1362): avc: denied { setattr } for pid=20770 comm="syz.6.1714" name="NETLINK" dev="sockfs" ino=41196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 569.003339][T17231] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 569.024748][T17231] usb 5-1: device descriptor read/8, error -71 [ 569.045899][T20765] fido_id[20765]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 569.060504][ T30] audit: type=1400 audit(1755475651.688:1363): avc: denied { mount } for pid=20781 comm="syz.6.1715" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 569.263476][T17231] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 569.283981][T17231] usb 5-1: device descriptor read/8, error -71 [ 569.395183][T17231] usb usb5-port1: unable to enumerate USB device [ 569.419552][ T5906] IPVS: starting estimator thread 0... [ 569.613556][T20792] IPVS: using max 76 ests per chain, 182400 per kthread [ 571.906367][ T978] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 572.236399][ T978] usb 5-1: config 0 has an invalid interface number: 28 but max is 0 [ 572.244714][ T978] usb 5-1: config 0 has no interface number 0 [ 572.250816][ T978] usb 5-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.261924][ T978] usb 5-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.271861][ T978] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 572.281052][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.291845][ T978] usb 5-1: config 0 descriptor?? [ 572.553292][ T30] audit: type=1400 audit(1755475655.168:1364): avc: denied { mounton } for pid=20819 comm="syz.4.1719" path="/syzcgroup/unified/syz4" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 572.676320][ T30] audit: type=1326 audit(1755475655.318:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.8.1725" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4d998ebe9 code=0x0 [ 572.794170][ T978] logitech-djreceiver 0003:046D:C534.001B: unbalanced collection at end of report description [ 572.815386][ T978] logitech-djreceiver 0003:046D:C534.001B: logi_dj_probe: parse failed [ 572.831543][ T978] logitech-djreceiver 0003:046D:C534.001B: probe with driver logitech-djreceiver failed with error -22 [ 573.129245][ T978] usb 5-1: USB disconnect, device number 97 [ 573.174471][T17231] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 573.323318][T17231] usb 9-1: Using ep0 maxpacket: 16 [ 573.331438][T17231] usb 9-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 573.340906][T17231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.352770][T17231] usb 9-1: Product: syz [ 573.356994][T17231] usb 9-1: Manufacturer: syz [ 573.361580][T17231] usb 9-1: SerialNumber: syz [ 573.368991][T17231] usb 9-1: config 0 descriptor?? [ 573.376623][T17231] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 573.625997][T20881] netlink: 'syz.6.1728': attribute type 20 has an invalid length. [ 573.646653][T20881] dvmrp1: entered allmulticast mode [ 573.656920][T20881] dvmrp1: left allmulticast mode [ 573.689067][T20888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'. [ 573.712248][T20889] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1728'. [ 574.087807][T17231] gspca_sn9c2028: read1 error -110 [ 574.095672][T17231] gspca_sn9c2028: read1 error -32 [ 574.100847][T17231] sn9c2028 9-1:0.0: probe with driver sn9c2028 failed with error -32 [ 574.766405][T20908] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1733'. [ 575.103659][ T978] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 575.276894][ T978] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 575.295642][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.311435][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.323050][ T978] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 575.334687][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.367609][ T978] usb 5-1: config 0 descriptor?? [ 575.639003][ T48] usb 9-1: USB disconnect, device number 30 [ 575.796505][ T978] sony 0003:054C:024B.001C: unexpected long global item [ 575.829045][ T978] sony 0003:054C:024B.001C: parse failed [ 575.839261][ T978] sony 0003:054C:024B.001C: probe with driver sony failed with error -22 [ 576.616761][T20950] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 576.893382][ T978] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 577.044200][ T978] usb 9-1: not running at top speed; connect to a high speed hub [ 577.062155][ T978] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.085248][ T978] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 577.103049][ T978] usb 9-1: config 1 has no interface number 1 [ 577.110401][ T978] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 577.134122][ T978] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.155404][ T978] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.165271][ T978] usb 9-1: Product: syz [ 577.177081][ T978] usb 9-1: Manufacturer: syz [ 577.187898][ T978] usb 9-1: SerialNumber: syz [ 577.855909][T15665] usb 5-1: USB disconnect, device number 98 [ 578.014663][T20982] netlink: 129704 bytes leftover after parsing attributes in process `syz.4.1744'. [ 578.176877][T20996] bridge0: entered promiscuous mode [ 578.323058][T21006] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1747'. [ 579.959423][ T978] usb 9-1: USB disconnect, device number 31 [ 580.028740][T21041] bridge_slave_1: default FDB implementation only supports local addresses [ 580.509250][T12580] udevd[12580]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.370718][T21075] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 581.518185][T21075] bridge2: entered allmulticast mode [ 582.216686][ T30] audit: type=1326 audit(1755475664.858:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21092 comm="syz.4.1766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d5658ebe9 code=0x0 [ 582.304595][ T30] audit: type=1400 audit(1755475664.928:1367): avc: denied { mounton } for pid=21086 comm="syz.8.1767" path="/proc/689/task" dev="proc" ino=40793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 582.774634][T21138] bridge: RTM_NEWNEIGH with invalid ether address [ 583.572854][T21169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1775'. [ 583.594637][T21170] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1774'. [ 585.236075][T21185] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1778'. [ 585.292492][T21187] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1779'. [ 588.118637][T21268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.424912][T21282] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1798'. [ 588.821673][T21297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1802'. [ 589.594666][T21324] lo speed is unknown, defaulting to 1000 [ 589.757573][T21353] ksmbd: Unknown IPC event: 3, ignore. [ 589.913342][T17231] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 590.187073][T17231] usb 5-1: Using ep0 maxpacket: 32 [ 590.573673][T21359] 9pnet_virtio: no channels available for device syz [ 590.595205][T17231] usb 5-1: unable to get BOS descriptor or descriptor too short [ 590.603990][T17231] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 590.612746][T17231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.626383][T17231] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.637590][T17231] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 590.648002][T17231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.656254][T17231] usb 5-1: Product: syz [ 590.660571][T17231] usb 5-1: Manufacturer: syz [ 590.665420][T17231] usb 5-1: SerialNumber: syz [ 590.950677][T17231] usb 5-1: 0:2 : does not exist [ 591.029504][T17231] usb 5-1: USB disconnect, device number 99 [ 591.082761][T12580] udevd[12580]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.841898][T21397] netlink: 182 bytes leftover after parsing attributes in process `syz.7.1812'. [ 592.983319][T17231] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 593.183343][T17231] usb 5-1: Using ep0 maxpacket: 32 [ 593.189910][T17231] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 593.201952][T17231] usb 5-1: config 0 interface 0 has no altsetting 0 [ 593.208639][T17231] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 593.217830][T17231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.287388][T17231] usb 5-1: config 0 descriptor?? [ 593.295563][T21435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1821'. [ 594.015099][T21416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1819'. [ 595.285192][T17231] corsair-cpro 0003:1B1C:0C10.001D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 595.903858][T17231] corsair-cpro 0003:1B1C:0C10.001D: probe with driver corsair-cpro failed with error -110 [ 596.778247][ T30] audit: type=1400 audit(1755475679.418:1368): avc: denied { connect } for pid=21502 comm="syz.8.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 596.800459][T21507] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1831'. [ 596.837078][T15665] usb 5-1: USB disconnect, device number 100 [ 596.850822][ T30] audit: type=1400 audit(1755475679.488:1369): avc: denied { getopt } for pid=21502 comm="syz.8.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 596.905877][T21521] binder: 21520:21521 ioctl c0306201 200000000640 returned -22 [ 597.223416][T15665] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 597.373650][T15665] usb 5-1: device descriptor read/64, error -71 [ 597.562845][T21538] 9pnet: Could not find request transport: fN+rfdno=0xffffffffffffffff [ 597.633504][T15665] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 597.773356][T17231] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 597.781044][T15665] usb 5-1: device descriptor read/64, error -71 [ 597.903717][T15665] usb usb5-port1: attempt power cycle [ 597.934367][T17231] usb 9-1: Using ep0 maxpacket: 8 [ 597.941571][T17231] usb 9-1: config 0 has an invalid interface number: 179 but max is 0 [ 597.949938][T17231] usb 9-1: config 0 has no interface number 0 [ 597.956176][T17231] usb 9-1: config 0 interface 179 has no altsetting 0 [ 597.964660][T17231] usb 9-1: New USB device found, idVendor=1b3d, idProduct=0173, bcdDevice= 3.c2 [ 597.974044][T17231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.982479][T17231] usb 9-1: Product: syz [ 597.986662][T17231] usb 9-1: Manufacturer: syz [ 597.991246][T17231] usb 9-1: SerialNumber: syz [ 597.998054][T17231] usb 9-1: config 0 descriptor?? [ 598.210718][T17231] ftdi_sio 9-1:0.179: FTDI USB Serial Device converter detected [ 598.219603][T17231] ftdi_sio ttyUSB0: unknown device type: 0x3c2 [ 598.228090][T17231] usb 9-1: USB disconnect, device number 32 [ 598.236371][T17231] ftdi_sio 9-1:0.179: device disconnected [ 598.264165][T15665] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 598.294160][T15665] usb 5-1: device descriptor read/8, error -71 [ 598.554071][T15665] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 598.594411][T15665] usb 5-1: device descriptor read/8, error -71 [ 598.706361][T15665] usb usb5-port1: unable to enumerate USB device [ 599.043430][ T5906] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 599.185297][ T5906] usb 9-1: device descriptor read/64, error -71 [ 599.409001][ T30] audit: type=1400 audit(1755475682.048:1370): avc: denied { write } for pid=21597 comm="syz.0.1849" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 599.432356][ T5906] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 599.553372][ T5906] usb 9-1: device descriptor read/64, error -71 [ 599.590006][T21611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.598795][T21611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.663712][ T5906] usb usb9-port1: attempt power cycle [ 600.013599][ T5906] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 600.069042][ T5906] usb 9-1: device descriptor read/8, error -71 [ 600.216767][ T30] audit: type=1400 audit(1755475682.858:1371): avc: denied { accept } for pid=21638 comm="syz.7.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 600.323474][ T5906] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 600.354199][ T5906] usb 9-1: device descriptor read/8, error -71 [ 600.503858][ T5906] usb usb9-port1: unable to enumerate USB device [ 603.021810][T21687] Invalid ELF header magic: != ELF [ 603.067114][ T30] audit: type=1400 audit(1755475685.658:1372): avc: denied { module_load } for pid=21666 comm="syz.4.1863" path="/sys/kernel/notes" dev="sysfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 603.103975][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1866'. [ 604.180981][T21705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 604.264541][T21706] overlayfs: failed to clone upperpath [ 604.488175][ T30] audit: type=1400 audit(1755475687.098:1373): avc: denied { shutdown } for pid=21707 comm="syz.7.1872" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 604.603812][T21706] netlink: 566 bytes leftover after parsing attributes in process `syz.6.1869'. [ 604.810875][ T30] audit: type=1400 audit(1755475687.448:1374): avc: denied { bind } for pid=21707 comm="syz.7.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 606.725162][T21775] lo speed is unknown, defaulting to 1000 [ 607.669328][T21823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1889'. [ 608.247406][T21830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1891'. [ 609.137266][ T30] audit: type=1400 audit(1755475691.758:1375): avc: denied { read } for pid=21833 comm="syz.4.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 609.404815][T21842] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1895'. [ 609.876093][T21852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'. [ 609.906465][T21852] vxcan2: entered allmulticast mode [ 610.311031][ T30] audit: type=1400 audit(1755475692.948:1376): avc: denied { listen } for pid=21868 comm="syz.0.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 610.468966][T21877] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1900'. [ 611.924045][T21890] loop6: detected capacity change from 0 to 2560 [ 611.932002][T21890] Buffer I/O error on dev loop6, logical block 0, async page read [ 611.940178][T21890] Buffer I/O error on dev loop6, logical block 0, async page read [ 611.948304][T21890] Buffer I/O error on dev loop6, logical block 0, async page read [ 611.956399][T21890] Buffer I/O error on dev loop6, logical block 0, async page read [ 611.964494][T21890] Buffer I/O error on dev loop6, logical block 0, async page read [ 611.972680][T21890] Buffer I/O error on dev loop6, logical block 0, async page read [ 611.980757][T21890] Buffer I/O error on dev loop6, logical block 0, async page read [ 611.988906][T21890] Buffer I/O error on dev loop6, logical block 0, async page read [ 611.996858][T21890] ldm_validate_partition_table(): Disk read failed. [ 612.003910][T21890] Buffer I/O error on dev loop6, logical block 0, async page read [ 612.012365][T21890] Buffer I/O error on dev loop6, logical block 0, async page read [ 612.021834][T21890] Dev loop6: unable to read RDB block 0 [ 612.030145][T21890] loop6: unable to read partition table [ 612.037063][T21890] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 612.555279][T21896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1906'. [ 613.453498][T21935] tipc: Enabling of bearer rejected, media not registered [ 613.675116][T21948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1916'. [ 614.205557][ T30] audit: type=1400 audit(1755475696.851:1377): avc: denied { mounton } for pid=21955 comm="syz.8.1918" path="/211/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 614.544497][T21958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.680375][ T30] audit: type=1804 audit(1755475697.231:1378): pid=21956 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.1918" name="file0" dev="ramfs" ino=43561 res=1 errno=0 [ 614.749623][ T30] audit: type=1804 audit(1755475697.231:1379): pid=21956 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.1918" name="file0" dev="ramfs" ino=43561 res=1 errno=0 [ 615.176017][T21972] tipc: Enabling of bearer rejected, failed to enable media [ 615.185820][T21972] netlink: 788 bytes leftover after parsing attributes in process `syz.8.1921'. [ 615.540052][T21988] vivid-004: ================= START STATUS ================= [ 615.549364][T21988] vivid-004: Radio HW Seek Mode: Bounded [ 615.557360][T21988] vivid-004: Radio Programmable HW Seek: false [ 615.564178][T21988] vivid-004: RDS Rx I/O Mode: Block I/O [ 615.570121][T21988] vivid-004: Generate RBDS Instead of RDS: false [ 615.577132][T21988] vivid-004: RDS Reception: true [ 615.582488][T21988] vivid-004: RDS Program Type: 0 inactive [ 615.591660][T21988] vivid-004: RDS PS Name: inactive [ 615.597940][T21988] vivid-004: RDS Radio Text: inactive [ 615.603867][T21988] vivid-004: RDS Traffic Announcement: false inactive [ 615.610814][T21988] vivid-004: RDS Traffic Program: false inactive [ 615.617368][T21988] vivid-004: RDS Music: false inactive [ 615.624404][T21988] vivid-004: ================== END STATUS ================== [ 615.700682][T15665] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 615.886342][T15665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 615.898855][T15665] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 615.930010][T15665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 615.940191][T15665] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 615.950419][T15665] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 615.960696][T15665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.979138][T15665] usb 5-1: config 0 descriptor?? [ 616.005355][T21991] IPVS: length: 144 != 24 [ 616.096075][T21997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 616.208598][T15665] hdpvr 5-1:0.0: firmware version 0x51 dated [ 616.312919][T15665] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 616.452722][T15665] hdpvr 5-1:0.0: device init failed [ 616.459000][T15665] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 616.474761][T15665] usb 5-1: USB disconnect, device number 105 [ 617.363457][ T978] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 617.436019][ T30] audit: type=1326 audit(1755475700.081:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22032 comm="syz.6.1932" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ec598ebe9 code=0x0 [ 617.700732][T22034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.756116][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.767442][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.820903][ T978] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 617.860481][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.880350][ T978] usb 5-1: config 0 descriptor?? [ 618.011149][T22052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1933'. [ 618.743112][ T978] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 618.795067][ T978] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 619.271575][ T978] cp2112 0003:10C4:EA90.001E: Part Number: 0x00 Device Version: 0x00 [ 619.506031][ T30] audit: type=1400 audit(1755475702.151:1381): avc: denied { checkpoint_restore } for pid=22079 comm="syz.7.1937" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 621.225774][ T978] cp2112 0003:10C4:EA90.001E: error setting SMBus config [ 621.265214][ T978] cp2112 0003:10C4:EA90.001E: probe with driver cp2112 failed with error -71 [ 621.314209][ T978] usb 5-1: USB disconnect, device number 106 [ 621.341031][ T30] audit: type=1400 audit(1755475703.981:1382): avc: denied { call } for pid=22128 comm="syz.0.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 621.359193][T22129] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.197674][ T30] audit: type=1326 audit(1755475704.841:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.4.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5658ebe9 code=0x7ffc0000 [ 622.251648][ T30] audit: type=1326 audit(1755475704.871:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.4.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5658ebe9 code=0x7ffc0000 [ 622.301370][ T30] audit: type=1326 audit(1755475704.871:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.4.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d5658d550 code=0x7ffc0000 [ 622.348998][ T30] audit: type=1326 audit(1755475704.871:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.4.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5658ebe9 code=0x7ffc0000 [ 622.403609][ T30] audit: type=1326 audit(1755475704.871:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.4.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5d5658ebe9 code=0x7ffc0000 [ 622.426916][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.440019][ T30] audit: type=1326 audit(1755475704.871:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.4.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5658ebe9 code=0x7ffc0000 [ 622.463481][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.471538][ T30] audit: type=1326 audit(1755475704.871:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.4.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d5658ebe9 code=0x7ffc0000 [ 622.494849][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.505103][ T30] audit: type=1326 audit(1755475705.151:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.4.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5658ebe9 code=0x7ffc0000 [ 622.528554][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.823344][ T978] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 622.999390][T22181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1952'. [ 623.063421][ T978] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 623.076696][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 4096, setting to 64 [ 623.328056][ T978] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 623.337405][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.390677][ T978] usb 5-1: Product: syz [ 623.401164][ T978] usb 5-1: Manufacturer: syz [ 623.409293][ T978] usb 5-1: SerialNumber: syz [ 623.424893][ T978] usb 5-1: config 0 descriptor?? [ 623.533624][ T978] rc_core: IR keymap rc-streamzap not found [ 623.539736][ T978] Registered IR keymap rc-empty [ 623.556615][ T978] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 623.732387][ T978] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input41 [ 624.026054][ T978] usb 5-1: USB disconnect, device number 107 [ 624.388776][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.403501][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.451880][T22218] netlink: 'syz.6.1955': attribute type 11 has an invalid length. [ 624.555332][T22233] 9pnet_fd: Insufficient options for proto=fd [ 624.805728][T15665] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 624.951348][T22245] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 624.968057][T22245] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 624.999149][T15665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 625.406761][T15665] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 625.793545][T15665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 625.823376][T15665] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 625.833595][T15665] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 625.843490][T15665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.859037][T22261] /dev/nullb0: Can't open blockdev [ 625.866231][T15665] usb 5-1: config 0 descriptor?? [ 626.152843][T15665] hdpvr 5-1:0.0: firmware version 0x51 dated [ 626.201786][T22281] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1965'. [ 626.310982][T15665] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 626.444523][T15665] hdpvr 5-1:0.0: device init failed [ 626.449922][T15665] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 626.478335][T15665] usb 5-1: USB disconnect, device number 108 [ 626.810708][T22298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22298 comm=syz.7.1967 [ 628.143157][T22325] sp0: Synchronizing with TNC [ 628.233452][ T5906] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 628.403397][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 628.409858][ T5906] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 81, changing to 10 [ 628.413679][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056075c00: rx timeout, send abort [ 628.422927][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 628.422939][ T30] audit: type=1400 audit(1755475711.061:1431): avc: denied { read } for pid=5199 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 628.429250][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058583400: rx timeout, send abort [ 628.435447][ T5906] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 50876, setting to 1024 [ 628.457633][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056075c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 628.492398][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058583400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 628.517024][ T30] audit: type=1400 audit(1755475711.061:1432): avc: denied { search } for pid=5199 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.548140][ T5906] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 628.561331][ T30] audit: type=1400 audit(1755475711.061:1433): avc: denied { append } for pid=5199 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 628.585346][T22340] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1976'. [ 628.587196][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.606488][ T30] audit: type=1400 audit(1755475711.061:1434): avc: denied { open } for pid=5199 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 628.642329][T22317] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 628.662995][ T30] audit: type=1400 audit(1755475711.061:1435): avc: denied { getattr } for pid=5199 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 628.851422][ T5906] usb 5-1: string descriptor 0 read error: -71 [ 628.864635][ T5906] hub 5-1:32.0: USB hub found [ 628.870239][ T5906] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 629.354773][ T5906] usb 5-1: USB disconnect, device number 109 [ 629.706483][T22374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1981'. [ 630.037713][T22387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1983'. [ 630.322739][T22399] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1986'. [ 630.353153][ T30] audit: type=1400 audit(1755475712.991:1436): avc: denied { create } for pid=22398 comm="syz.6.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 630.363533][T15665] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 630.595778][T15665] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 630.608651][T15665] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 630.619552][T15665] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.652833][T15665] usb 9-1: config 0 descriptor?? [ 630.660514][T22389] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 631.299670][T22422] Context (ID=0x0) not attached to queue pair (handle=0x4db:0x0) [ 631.394305][T15665] usbhid 9-1:0.0: can't add hid device: -71 [ 631.474795][T15665] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 631.511546][T15665] usb 9-1: USB disconnect, device number 37 [ 631.601343][T22432] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 632.815736][T22452] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1992'. [ 632.850810][T22452] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1992'. [ 632.898278][T22453] overlayfs: failed to clone upperpath [ 633.497397][T22478] 9pnet_fd: Insufficient options for proto=fd [ 634.092362][T22483] Bluetooth: MGMT ver 1.23 [ 634.180345][T22485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2000'. [ 634.353101][ T30] audit: type=1400 audit(1755475716.991:1437): avc: denied { connect } for pid=22482 comm="syz.8.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 635.681716][ T30] audit: type=1400 audit(1755475718.261:1438): avc: denied { accept } for pid=22501 comm="syz.4.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 636.059836][T22520] netlink: 'syz.8.2007': attribute type 1 has an invalid length. [ 636.147418][T22520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 636.174952][T22526] ip6tnl1: entered allmulticast mode [ 636.202577][T22526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 636.212884][T22526] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 636.225297][T22526] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 636.541852][T22571] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2011'. [ 637.089551][T22579] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2012'. [ 637.292148][ T30] audit: type=1400 audit(1755475719.931:1439): avc: denied { watch_mount } for pid=22586 comm="syz.4.2014" path="/396" dev="tmpfs" ino=2126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 637.382625][T22598] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2017'. [ 637.391839][T22598] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2017'. [ 637.403900][T22598] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 637.486025][T22601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2016'. [ 638.772339][ T30] audit: type=1400 audit(1755475721.411:1440): avc: denied { execute } for pid=22612 comm="syz.0.2021" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 639.121542][T22625] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2024'. [ 642.519115][T22683] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2036'. [ 643.037297][T22688] virtio-fs: tag not found [ 643.043337][ T30] audit: type=1326 audit(1755475725.531:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22687 comm="syz.8.2037" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4d998ebe9 code=0x0 [ 643.068132][T22688] syz.8.2037: attempt to access beyond end of device [ 643.068132][T22688] nbd8: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 643.081721][T22688] gfs2: error -5 reading superblock [ 645.136760][T22720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.152317][T22720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.270785][ T5906] syz1: Port: 1 Link DOWN [ 645.382112][ T8603] netdevsim netdevsim6 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.404891][T22744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 645.427322][ T8603] netdevsim netdevsim6 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.450563][ T8603] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.466153][ T8603] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.494598][ T8603] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.508797][ T8603] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.517973][ T8603] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.530922][ T8603] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.107387][T22789] 9pnet_fd: Insufficient options for proto=fd [ 648.333793][ T48] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 648.495621][ T48] usb 5-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=35.7f [ 648.523275][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.644108][T22803] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=22803 comm=syz.6.2060 [ 648.742668][T22803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2060'. [ 648.898039][ T48] usb 5-1: string descriptor 0 read error: -71 [ 648.927233][ T48] usb 5-1: NDI device with a latency value of 1 [ 648.940533][ T48] ftdi_sio 5-1:129.0: FTDI USB Serial Device converter detected [ 648.987728][T22820] overlayfs: failed to clone upperpath [ 649.003344][ T48] ftdi_sio ttyUSB0: unknown device type: 0x357f [ 649.020205][ T48] usb 5-1: USB disconnect, device number 110 [ 649.052505][ T48] ftdi_sio 5-1:129.0: device disconnected [ 649.341272][ T9] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 649.714955][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 649.740257][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 650.924085][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 650.944458][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 650.954371][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 650.966057][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.984980][ T9] usb 9-1: config 0 descriptor?? [ 651.603312][ T9] hdpvr 9-1:0.0: firmware version 0x51 dated [ 651.603332][ T9] hdpvr 9-1:0.0: untested firmware, the driver might not work. [ 651.617333][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2070'. [ 651.714050][ T9] hdpvr 9-1:0.0: device init failed [ 651.719516][ T9] hdpvr 9-1:0.0: probe with driver hdpvr failed with error -12 [ 651.861903][ T9] usb 9-1: USB disconnect, device number 38 [ 652.299503][T22909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.308518][T22909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.554846][T22909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.139100][T22909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.219062][T22955] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2081'. [ 655.890232][ T30] audit: type=1400 audit(1755475738.531:1442): avc: denied { connect } for pid=22969 comm="syz.4.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 658.559368][T23027] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2095'. [ 658.789522][T23031] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2096'. [ 658.821989][T23030] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2096'. [ 659.045613][T23047] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2097'. [ 659.325334][ T9] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 659.483370][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 659.492005][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.513783][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.545872][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 659.571610][ T9] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 659.597242][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.642314][ T9] usb 5-1: config 0 descriptor?? [ 659.869598][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 659.877138][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 659.983371][ T9] usb 5-1: USB disconnect, device number 111 [ 660.993875][ T9] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 661.293275][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 661.300856][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 661.310805][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.330506][ T9] usb 5-1: config 0 has no interface number 0 [ 661.341709][ T9] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 661.363008][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.372548][ T9] usb 5-1: Product: syz [ 661.377071][ T9] usb 5-1: Manufacturer: syz [ 661.381929][ T9] usb 5-1: SerialNumber: syz [ 661.391509][ T9] usb 5-1: config 0 descriptor?? [ 661.408352][ T9] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 661.417732][ T9] cx231xx 5-1:0.1: Not found matching IAD interface [ 661.624083][ T9] usb 5-1: USB disconnect, device number 112 [ 661.870396][T23128] trusted_key: encrypted_key: insufficient parameters specified [ 662.549540][T23141] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2111'. [ 663.372867][T23157] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2116'. [ 664.295074][T23183] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2119'. [ 665.495622][T23211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=284 sclass=netlink_route_socket pid=23211 comm=syz.6.2126 [ 665.514196][T23211] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 665.663843][T23218] netlink: 'syz.8.2128': attribute type 20 has an invalid length. [ 665.851939][T23218] dvmrp17: entered allmulticast mode [ 665.983366][ T24] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 666.084253][T23228] netlink: 'syz.6.2129': attribute type 10 has an invalid length. [ 666.093065][T23228] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.100622][T23228] bond0: (slave team0): Enslaving as an active interface with an up link [ 666.133830][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 666.144811][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 666.161298][ T24] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 666.174096][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.182282][ T24] usb 5-1: Product: syz [ 666.187543][ T24] usb 5-1: Manufacturer: syz [ 666.192174][ T24] usb 5-1: SerialNumber: syz [ 666.209289][ T24] usb 5-1: config 0 descriptor?? [ 666.218525][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 666.308675][T23237] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2131'. [ 666.422094][ T9] usb 5-1: USB disconnect, device number 113 [ 667.508674][ T24] libceph: connect (1)[c::]:6789 error -101 [ 667.517634][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 667.590156][T23270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=23270 comm=syz.6.2136 [ 667.639226][T23275] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2137'. [ 667.661314][T23264] ceph: No mds server is up or the cluster is laggy [ 669.023519][ T30] audit: type=1400 audit(1755475751.659:1443): avc: denied { mounton } for pid=23303 comm="syz.4.2144" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 669.031531][T23305] 9pnet_fd: p9_fd_create_tcp (23305): problem connecting socket to 127.0.0.1 [ 669.674573][T23324] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2149'. [ 672.871250][ T30] audit: type=1400 audit(1755475755.509:1444): avc: denied { search } for pid=23396 comm="syz.4.2164" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 673.463318][ T30] audit: type=1400 audit(1755475755.539:1445): avc: denied { search } for pid=23396 comm="syz.4.2164" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 673.566990][ T30] audit: type=1400 audit(1755475755.539:1446): avc: denied { search } for pid=23396 comm="syz.4.2164" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 673.676714][ T30] audit: type=1400 audit(1755475755.539:1447): avc: denied { search } for pid=23396 comm="syz.4.2164" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 673.755419][ T30] audit: type=1400 audit(1755475755.539:1448): avc: denied { search } for pid=23396 comm="syz.4.2164" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 674.072882][ T30] audit: type=1400 audit(1755475755.539:1449): avc: denied { search } for pid=23396 comm="syz.4.2164" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 674.097558][ T30] audit: type=1400 audit(1755475755.539:1450): avc: denied { search } for pid=23396 comm="syz.4.2164" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 674.132471][T23421] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 674.140383][T23421] macsec1: entered allmulticast mode [ 674.147177][T23421] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 674.180621][ T30] audit: type=1400 audit(1755475756.259:1451): avc: denied { setattr } for pid=23405 comm="syz.8.2168" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 674.244225][ T30] audit: type=1326 audit(1755475756.889:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23425 comm="syz.8.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 674.278793][T23421] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 674.287956][T23421] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 674.432033][ T30] audit: type=1326 audit(1755475756.889:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23425 comm="syz.8.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 674.468034][T23429] tipc: Started in network mode [ 674.473041][T23429] tipc: Node identity 32b68504a813, cluster identity 4711 [ 674.482570][T23429] tipc: Enabled bearer , priority 0 [ 674.562896][T23429] tipc: Disabling bearer [ 674.608254][ T30] audit: type=1326 audit(1755475756.889:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23425 comm="syz.8.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 674.617508][T23438] fuse: Unknown parameter 'groC@' [ 674.821409][ T30] audit: type=1326 audit(1755475756.889:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23425 comm="syz.8.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 674.943308][ T30] audit: type=1326 audit(1755475756.889:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23425 comm="syz.8.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 675.101745][ T30] audit: type=1326 audit(1755475756.889:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23425 comm="syz.8.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 675.170077][ T30] audit: type=1326 audit(1755475756.889:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23425 comm="syz.8.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d998ebe9 code=0x7ffc0000 [ 676.762962][T23489] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2187'. [ 677.116000][T23504] : Can't lookup blockdev [ 678.995148][T23551] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 679.001743][T23551] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 679.013395][T23551] vhci_hcd vhci_hcd.0: Device attached [ 679.459378][T23553] vhci_hcd: connection closed [ 679.461520][T15399] vhci_hcd: stop threads [ 679.470829][T15399] vhci_hcd: release socket [ 679.493318][T15399] vhci_hcd: disconnect device [ 679.509848][T23559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2199'. [ 680.080677][T23571] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 680.128029][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 680.128045][ T30] audit: type=1400 audit(1755475762.769:1489): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 680.157379][T23568] ucma_write: process 1010 (syz.8.2202) changed security contexts after opening file descriptor, this is not allowed. [ 680.904924][T23588] Device name cannot be null; rc = [-22] [ 681.319050][ T30] audit: type=1400 audit(1755475763.949:1490): avc: denied { audit_write } for pid=23597 comm="syz.4.2210" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 681.354602][ T30] audit: type=1107 audit(1755475763.989:1491): pid=23597 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 681.664144][ T30] audit: type=1400 audit(1755475764.299:1492): avc: denied { bind } for pid=23597 comm="syz.4.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 681.806788][ T30] audit: type=1107 audit(1755475764.309:1493): pid=23597 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 681.871972][T23616] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2213'. [ 681.972794][T17231] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 682.034562][T23619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2214'. [ 682.166285][T17231] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.177913][T17231] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 682.188684][T17231] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 682.206092][T17231] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 682.230033][T17231] usb 9-1: SerialNumber: syz [ 682.336639][ T30] audit: type=1400 audit(1755475764.979:1494): avc: denied { ioctl } for pid=23631 comm="syz.6.2218" path="socket:[46881]" dev="sockfs" ino=46881 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 682.450131][T17231] usb 9-1: 0:2 : does not exist [ 682.455182][T17231] usb 9-1: unit 5: unexpected type 0x09 [ 682.489000][T17231] usb 9-1: USB disconnect, device number 39 [ 682.538596][T12580] udevd[12580]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 682.858751][T23660] loop9: detected capacity change from 0 to 16 [ 682.876734][T23660] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 682.883300][T23660] loop9: partition table partially beyond EOD, truncated [ 682.896040][T23660] loop9: p1 size 81768186 extends beyond EOD, truncated [ 682.962824][ T30] audit: type=1326 audit(1755475765.599:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23659 comm="syz.4.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5658ebe9 code=0x7ffc0000 [ 682.988853][ T30] audit: type=1326 audit(1755475765.599:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23659 comm="syz.4.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5658ebe9 code=0x7ffc0000 [ 683.015664][T12580] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 683.022435][T12580] loop9: partition table partially beyond EOD, truncated [ 683.042160][T12580] loop9: p1 size 81768186 extends beyond EOD, truncated [ 683.073301][ T30] audit: type=1326 audit(1755475765.599:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23659 comm="syz.4.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5d5658ebe9 code=0x7ffc0000 [ 683.073344][ T30] audit: type=1326 audit(1755475765.599:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23659 comm="syz.4.2221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d5658ebe9 code=0x0 [ 683.126395][T23665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.139936][T23661] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 683.165807][T23661] loop9: partition table partially beyond EOD, truncated [ 683.182433][T23661] loop9: p1 size 81768186 extends beyond EOD, truncated [ 683.771531][T12580] udevd[12580]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 683.872502][T23709] overlayfs: failed to clone upperpath [ 683.881574][T12580] udevd[12580]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 684.676762][T23721] could not allocate digest TFM handle cryptd(blake2b-160) [ 684.803324][ T5906] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 684.967278][ T5906] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 684.982777][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.998457][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.008615][ T5906] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 685.026992][ T5906] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 685.045515][ T5906] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 685.055846][ T5906] usb 9-1: Manufacturer: syz [ 685.062462][ T5906] usb 9-1: config 0 descriptor?? [ 685.080300][T23754] netlink: 'syz.4.2235': attribute type 29 has an invalid length. [ 685.658432][T23766] overlayfs: failed to clone upperpath [ 685.739990][T23768] fuse: Unknown parameter 'user_i00000000000000000000' [ 685.806544][ T5906] usbhid 9-1:0.0: can't add hid device: -71 [ 685.817683][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.824182][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.842371][ T5906] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 685.941281][ T5906] usb 9-1: USB disconnect, device number 40 [ 686.436393][T23800] tmpfs: Bad value for 'mpol' [ 686.442023][T23800] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2244'. [ 686.455569][T23800] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2244'. [ 686.521597][T23805] netlink: 'syz.8.2245': attribute type 1 has an invalid length. [ 686.529752][T23805] netlink: 228 bytes leftover after parsing attributes in process `syz.8.2245'. [ 686.544626][T23805] syz.8.2245: attempt to access beyond end of device [ 686.544626][T23805] nbd8: rw=0, sector=2, nr_sectors = 1 limit=0 [ 686.573463][ T5906] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 686.836381][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 686.858186][ T5906] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 686.873367][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.881357][ T5906] usb 5-1: Product: syz [ 686.889256][ T5906] usb 5-1: Manufacturer: syz [ 686.893882][ T5906] usb 5-1: SerialNumber: syz [ 686.929857][ T5906] usb 5-1: config 0 descriptor?? [ 687.189611][ T5906] airspy 5-1:0.0: Board ID: 00 [ 687.221320][ T5906] airspy 5-1:0.0: Firmware version: [ 687.231505][ T5906] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 687.248559][ T5906] airspy 5-1:0.0: Registered as swradio24 [ 687.255047][ T5906] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 687.271564][ T5906] usb 5-1: USB disconnect, device number 114 [ 687.350783][T23840] mkiss: ax0: crc mode is auto. [ 687.603987][ T5906] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 687.754769][ T5906] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 687.764766][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 687.775025][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 687.786033][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 687.794219][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 687.804897][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 687.816987][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 687.824797][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 687.833866][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 687.844781][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 687.852284][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 687.861210][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 687.872155][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 687.879625][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 687.888557][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 687.899551][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 687.906918][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 687.924579][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 687.935538][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 687.943162][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 687.952255][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 687.978163][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 687.988253][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.002784][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.020714][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 688.030627][T23856] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2252'. [ 688.042681][ T5906] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 688.054986][ T5906] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 688.065805][ T5906] usb 5-1: Product: syz [ 688.079761][ T5906] usb 5-1: Manufacturer: syz [ 688.088609][ T5906] usb 5-1: SerialNumber: syz [ 688.103816][ T5906] usb 5-1: config 0 descriptor?? [ 688.140604][ T5906] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 688.222467][ T30] audit: type=1400 audit(1755475770.859:1499): avc: denied { connect } for pid=23872 comm="syz.8.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 688.340526][ T5906] usb 5-1: USB disconnect, device number 115 [ 688.350393][ T5906] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 688.456529][T23890] binder: 23889:23890 ioctl 541b 0 returned -22 [ 689.319786][T23901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.862922][T23938] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2265'. [ 692.685845][ T9] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 692.841010][T23945] delete_channel: no stack [ 692.866399][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 692.873151][ T9] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 692.889251][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.911278][ T9] usb 5-1: config 0 descriptor?? [ 692.957096][ T9] usb 5-1: invalid MIDI EP [ 692.966560][ T9] usb 5-1: snd-bcd2000: error during probing [ 692.984944][ T9] snd-bcd2000 5-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 693.310404][T23955] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2270'. [ 693.325221][ T9] usb 5-1: USB disconnect, device number 116 [ 693.341394][T23990] netlink: 10 bytes leftover after parsing attributes in process `syz.7.2278'. [ 693.960787][ T30] audit: type=1400 audit(1755475776.599:1500): avc: denied { mounton } for pid=24017 comm="syz.6.2281" path="/file0" dev="rootfs" ino=48077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 694.004472][ T30] audit: type=1400 audit(1755475776.629:1501): avc: denied { associate } for pid=24019 comm="syz.6.2281" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 694.048754][ T30] audit: type=1400 audit(1755475776.639:1502): avc: denied { unmount } for pid=24017 comm="syz.6.2281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 694.162691][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 694.168918][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 694.204375][T24035] overlayfs: failed to resolve './file0': -2 [ 694.283416][ T9] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 694.444615][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 694.449648][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 694.450682][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 694.469547][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 694.483119][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 694.497166][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 694.507481][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 694.520593][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.538446][ T9] usb 5-1: config 0 descriptor?? [ 694.818536][ T9] hdpvr 5-1:0.0: firmware version 0x51 dated [ 694.824765][ T9] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 694.983483][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 694.989658][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 695.173322][ T5856] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 695.179294][ T5168] Bluetooth: hci3: command 0x1003 tx timeout [ 695.893618][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 695.899816][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 695.943243][T17231] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 696.026599][ T30] audit: type=1326 audit(1755475778.669:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24071 comm="syz.7.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 696.050733][ T30] audit: type=1326 audit(1755475778.669:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24071 comm="syz.7.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 696.076582][ T30] audit: type=1326 audit(1755475778.699:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24071 comm="syz.7.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 696.100556][T17231] usb 9-1: Using ep0 maxpacket: 16 [ 696.108154][ T30] audit: type=1326 audit(1755475778.699:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24071 comm="syz.7.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 696.137115][ T30] audit: type=1326 audit(1755475778.699:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24071 comm="syz.7.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 696.161880][ T30] audit: type=1326 audit(1755475778.699:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24071 comm="syz.7.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 696.162008][T17231] usb 9-1: config 0 has an invalid interface number: 48 but max is 0 [ 696.186094][T17231] usb 9-1: config 0 has no interface number 0 [ 696.200176][ T30] audit: type=1326 audit(1755475778.699:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24071 comm="syz.7.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614998ebe9 code=0x7ffc0000 [ 696.201053][T17231] usb 9-1: config 0 interface 48 has no altsetting 0 [ 696.235068][T17231] usb 9-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 696.245296][T17231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.253434][T17231] usb 9-1: Product: syz [ 696.257694][T17231] usb 9-1: Manufacturer: syz [ 696.262312][T17231] usb 9-1: SerialNumber: syz [ 696.268846][T17231] usb 9-1: config 0 descriptor?? [ 696.478442][T24052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.487420][T24052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.496190][ T5906] usb 9-1: USB disconnect, device number 41 [ 697.095150][ T9] hdpvr 5-1:0.0: Could not setup controls [ 697.101379][ T9] hdpvr 5-1:0.0: registering videodev failed [ 697.141426][T24031] ceph: No mds server is up or the cluster is laggy [ 697.192500][ T9] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 697.477937][ T9] usb 5-1: USB disconnect, device number 117 [ 697.954780][T24120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2293'. [ 697.968148][T24120] vlan0: entered promiscuous mode [ 697.973252][T24120] bond0: entered promiscuous mode [ 697.978261][T24120] bond_slave_0: entered promiscuous mode [ 697.984155][T24120] bond_slave_1: entered promiscuous mode [ 697.989855][T24120] bridge0: entered promiscuous mode [ 697.995137][T24120] team0: entered promiscuous mode [ 698.000132][T24120] team_slave_0: entered promiscuous mode [ 698.005858][T24120] team_slave_1: entered promiscuous mode [ 698.223358][ T9] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 698.383741][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 698.395688][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.421160][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 698.451654][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 698.487819][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 698.497511][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 698.505591][ T9] usb 5-1: Manufacturer: syz [ 698.514383][ T9] usb 5-1: config 0 descriptor?? [ 698.972905][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 698.972920][ T30] audit: type=1400 audit(1755475781.609:1557): avc: denied { write } for pid=24160 comm="syz.0.2300" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 699.089980][T24170] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2302'. [ 700.200308][ T9] usb 5-1: USB disconnect, device number 118 [ 700.360122][T24195] netlink: 'syz.7.2309': attribute type 33 has an invalid length. [ 700.381780][T24214] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2310'. [ 700.399197][T24195] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 700.671040][ T30] audit: type=1326 audit(1755475783.299:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.6.2312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ec598ebe9 code=0x0 [ 700.902465][T24225] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20000 [ 700.961876][T24227] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2314'. [ 701.309998][ T30] audit: type=1326 audit(1755475783.949:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24233 comm="syz.6.2316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ec598ebe9 code=0x0 [ 701.343280][ T9] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 701.493612][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 701.502991][ T9] usb 5-1: too many configurations: 29, using maximum allowed: 8 [ 701.527999][ T9] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 701.537412][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.552232][ T9] usb 5-1: Product: syz [ 701.559832][ T9] usb 5-1: Manufacturer: syz [ 701.576612][ T9] usb 5-1: SerialNumber: syz [ 701.588849][ T9] usb 5-1: config 0 descriptor?? [ 701.644224][ T9] hub 5-1:0.0: Invalid hub with more than one config or interface [ 701.652441][ T9] hub 5-1:0.0: probe with driver hub failed with error -22 [ 701.662882][ T9] gspca_main: 0ac8:c301 too many config [ 701.840549][T24229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.063616][T24229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.160200][ T9] usb 5-1: USB disconnect, device number 119 [ 702.356479][T24280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2321'. [ 702.428718][ T30] audit: type=1400 audit(1755475785.059:1560): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 702.637006][ T30] audit: type=1800 audit(1755475785.269:1561): pid=24292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2323" name="bus" dev="overlay" ino=2476 res=0 errno=0 [ 703.033357][ T5906] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 704.650473][T24341] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2330'. [ 705.163524][ T30] audit: type=1400 audit(1755475787.779:1562): avc: denied { listen } for pid=24357 comm="syz.4.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 706.061963][T24368] overlayfs: failed to clone upperpath [ 706.253423][ T5906] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 706.503289][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 706.512986][ T5906] usb 5-1: config 32 has an invalid interface number: 40 but max is 0 [ 706.526123][ T5906] usb 5-1: config 32 has no interface number 0 [ 706.532330][ T5906] usb 5-1: config 32 interface 40 has no altsetting 0 [ 706.999000][ T5906] usb 5-1: New USB device found, idVendor=050d, idProduct=1203, bcdDevice=60.3f [ 707.023166][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.031464][ T5906] usb 5-1: Product: syz [ 707.035885][ T5906] usb 5-1: Manufacturer: syz [ 707.040483][ T5906] usb 5-1: SerialNumber: syz [ 707.056841][ T5906] belkin_sa 5-1:32.40: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 707.080665][ T5906] usb 5-1: bcdDevice: 603f, bfc: 0 [ 707.096191][ T5906] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 707.376127][T24364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.387113][T24364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.587508][T24406] 9pnet_fd: Insufficient options for proto=fd [ 708.160348][T24413] lo speed is unknown, defaulting to 1000 [ 709.360637][ T9] usb 5-1: USB disconnect, device number 121 [ 709.388384][ T9] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 709.457492][ T9] belkin_sa 5-1:32.40: device disconnected [ 709.837153][T24485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2352'. [ 710.413640][T24497] mkiss: ax0: crc mode is auto. [ 711.020320][ T30] audit: type=1326 audit(1755475793.069:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24491 comm="syz.8.2356" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4d998ebe9 code=0x0 [ 711.836373][ T30] audit: type=1400 audit(1755475794.439:1564): avc: denied { getopt } for pid=24511 comm="syz.8.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 712.570222][T24531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7952 sclass=netlink_route_socket pid=24531 comm=syz.7.2364 [ 712.591356][T24531] cgroup: Name too long [ 712.665874][T24546] 9pnet_fd: Insufficient options for proto=fd [ 712.692233][T24546] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 715.665198][T24599] siw: device registration error -23 [ 716.135437][T24607] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2378'. [ 717.388412][T24624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.419835][T24624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.857114][T24643] lo speed is unknown, defaulting to 1000 [ 719.980547][ T30] audit: type=1400 audit(1755475802.624:1565): avc: denied { ioctl } for pid=24718 comm="syz.8.2397" path="socket:[50233]" dev="sockfs" ino=50233 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 720.027616][ T30] audit: type=1400 audit(1755475802.664:1566): avc: denied { getattr } for pid=24718 comm="syz.8.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 721.077852][T24759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2404'. [ 721.264508][T24771] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2407'. [ 721.398012][ T30] audit: type=1400 audit(1755475804.044:1567): avc: denied { write } for pid=24773 comm="syz.7.2408" name="file0" dev="tmpfs" ino=1803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 721.455895][T24768] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2405'. [ 721.469772][ T30] audit: type=1400 audit(1755475804.044:1568): avc: denied { open } for pid=24773 comm="syz.7.2408" path="/337/file0" dev="tmpfs" ino=1803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 721.522691][T24768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65384 sclass=netlink_route_socket pid=24768 comm=syz.6.2405 [ 721.548427][ T30] audit: type=1400 audit(1755475804.044:1569): avc: denied { ioctl } for pid=24773 comm="syz.7.2408" path="/337/file0" dev="tmpfs" ino=1803 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 722.916357][T24800] [ 722.918697][T24800] ===================================================== [ 722.925609][T24800] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 722.933042][T24800] 6.17.0-rc1-syzkaller #0 Not tainted [ 722.938388][T24800] ----------------------------------------------------- [ 722.945286][T24800] syz.0.2412/24800 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 722.952969][T24800] ffff8880350662b8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 722.961641][T24800] [ 722.961641][T24800] and this task is already holding: [ 722.968974][T24800] ffff888054f83028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 722.978774][T24800] which would create a new lock dependency: [ 722.984629][T24800] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 722.992684][T24800] [ 722.992684][T24800] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 723.002097][T24800] (&client->buffer_lock){..-.}-{3:3} [ 723.002112][T24800] [ 723.002112][T24800] ... which became SOFTIRQ-irq-safe at: [ 723.015115][T24800] lock_acquire+0x179/0x350 [ 723.019684][T24800] _raw_spin_lock+0x2e/0x40 [ 723.024247][T24800] evdev_pass_values+0x10e/0x9b0 [ 723.029242][T24800] evdev_events+0x1bb/0x390 [ 723.033803][T24800] input_pass_values+0x74e/0x880 [ 723.038797][T24800] input_handle_event+0xb29/0x14d0 [ 723.043968][T24800] input_event+0x8e/0xd0 [ 723.048282][T24800] hidinput_hid_event+0xa10/0x2420 [ 723.053448][T24800] hid_process_event+0x4b7/0x5e0 [ 723.058458][T24800] hid_report_raw_event+0xa0a/0x1290 [ 723.063803][T24800] __hid_input_report.constprop.0+0x33f/0x450 [ 723.069930][T24800] hid_irq_in+0x35e/0x870 [ 723.074330][T24800] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 723.079772][T24800] usb_hcd_giveback_urb+0x39b/0x450 [ 723.085031][T24800] dummy_timer+0x1814/0x3a30 [ 723.089675][T24800] __hrtimer_run_queues+0x202/0xad0 [ 723.094943][T24800] hrtimer_run_softirq+0x17d/0x350 [ 723.100111][T24800] handle_softirqs+0x216/0x8e0 [ 723.104936][T24800] __irq_exit_rcu+0x109/0x170 [ 723.109682][T24800] irq_exit_rcu+0x9/0x30 [ 723.113982][T24800] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 723.119691][T24800] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 723.125725][T24800] _raw_spin_unlock_irqrestore+0x31/0x80 [ 723.131430][T24800] snd_rawmidi_transmit+0x117/0x160 [ 723.136688][T24800] snd_vmidi_output_work+0x111/0x390 [ 723.142030][T24800] process_one_work+0x9cc/0x1b70 [ 723.147022][T24800] worker_thread+0x6c8/0xf10 [ 723.151665][T24800] kthread+0x3c5/0x780 [ 723.155788][T24800] ret_from_fork+0x5d7/0x6f0 [ 723.160433][T24800] ret_from_fork_asm+0x1a/0x30 [ 723.165252][T24800] [ 723.165252][T24800] to a SOFTIRQ-irq-unsafe lock: [ 723.172233][T24800] (tasklist_lock){.+.+}-{3:3} [ 723.172249][T24800] [ 723.172249][T24800] ... which became SOFTIRQ-irq-unsafe at: [ 723.184816][T24800] ... [ 723.184820][T24800] lock_acquire+0x179/0x350 [ 723.191942][T24800] _raw_read_lock+0x5f/0x70 [ 723.196505][T24800] __do_wait+0x105/0x890 [ 723.200808][T24800] do_wait+0x21e/0x5a0 [ 723.204935][T24800] kernel_wait+0x9f/0x160 [ 723.209319][T24800] call_usermodehelper_exec_work+0xf1/0x170 [ 723.215282][T24800] process_one_work+0x9cc/0x1b70 [ 723.220273][T24800] worker_thread+0x6c8/0xf10 [ 723.224916][T24800] kthread+0x3c5/0x780 [ 723.229037][T24800] ret_from_fork+0x5d7/0x6f0 [ 723.233681][T24800] ret_from_fork_asm+0x1a/0x30 [ 723.238513][T24800] [ 723.238513][T24800] other info that might help us debug this: [ 723.238513][T24800] [ 723.248718][T24800] Chain exists of: [ 723.248718][T24800] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 723.248718][T24800] [ 723.261798][T24800] Possible interrupt unsafe locking scenario: [ 723.261798][T24800] [ 723.270081][T24800] CPU0 CPU1 [ 723.275413][T24800] ---- ---- [ 723.280754][T24800] lock(tasklist_lock); [ 723.284964][T24800] local_irq_disable(); [ 723.291685][T24800] lock(&client->buffer_lock); [ 723.299022][T24800] lock(&new->fa_lock); [ 723.305750][T24800] [ 723.309171][T24800] lock(&client->buffer_lock); [ 723.314162][T24800] [ 723.314162][T24800] *** DEADLOCK *** [ 723.314162][T24800] [ 723.322283][T24800] 7 locks held by syz.0.2412/24800: [ 723.327445][T24800] #0: ffff888146f5a118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 723.336542][T24800] #1: ffff8881466e4230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 723.346599][T24800] #2: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 723.356215][T24800] #3: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 723.365744][T24800] #4: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 723.374839][T24800] #5: ffff888054f83028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 723.385061][T24800] #6: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 723.394073][T24800] [ 723.394073][T24800] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 723.404442][T24800] -> (&client->buffer_lock){..-.}-{3:3} { [ 723.410135][T24800] IN-SOFTIRQ-W at: [ 723.414084][T24800] lock_acquire+0x179/0x350 [ 723.420209][T24800] _raw_spin_lock+0x2e/0x40 [ 723.426334][T24800] evdev_pass_values+0x10e/0x9b0 [ 723.432890][T24800] evdev_events+0x1bb/0x390 [ 723.439011][T24800] input_pass_values+0x74e/0x880 [ 723.445583][T24800] input_handle_event+0xb29/0x14d0 [ 723.452315][T24800] input_event+0x8e/0xd0 [ 723.458179][T24800] hidinput_hid_event+0xa10/0x2420 [ 723.464911][T24800] hid_process_event+0x4b7/0x5e0 [ 723.471470][T24800] hid_report_raw_event+0xa0a/0x1290 [ 723.478377][T24800] __hid_input_report.constprop.0+0x33f/0x450 [ 723.486067][T24800] hid_irq_in+0x35e/0x870 [ 723.492016][T24800] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 723.499012][T24800] usb_hcd_giveback_urb+0x39b/0x450 [ 723.505830][T24800] dummy_timer+0x1814/0x3a30 [ 723.512040][T24800] __hrtimer_run_queues+0x202/0xad0 [ 723.518859][T24800] hrtimer_run_softirq+0x17d/0x350 [ 723.525590][T24800] handle_softirqs+0x216/0x8e0 [ 723.531975][T24800] __irq_exit_rcu+0x109/0x170 [ 723.538273][T24800] irq_exit_rcu+0x9/0x30 [ 723.544139][T24800] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 723.551393][T24800] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 723.558991][T24800] _raw_spin_unlock_irqrestore+0x31/0x80 [ 723.566250][T24800] snd_rawmidi_transmit+0x117/0x160 [ 723.573071][T24800] snd_vmidi_output_work+0x111/0x390 [ 723.579975][T24800] process_one_work+0x9cc/0x1b70 [ 723.586534][T24800] worker_thread+0x6c8/0xf10 [ 723.592744][T24800] kthread+0x3c5/0x780 [ 723.598437][T24800] ret_from_fork+0x5d7/0x6f0 [ 723.604658][T24800] ret_from_fork_asm+0x1a/0x30 [ 723.611050][T24800] INITIAL USE at: [ 723.614918][T24800] lock_acquire+0x179/0x350 [ 723.620962][T24800] _raw_spin_lock+0x2e/0x40 [ 723.627003][T24800] evdev_pass_values+0x10e/0x9b0 [ 723.633487][T24800] evdev_events+0x1bb/0x390 [ 723.639524][T24800] input_pass_values+0x74e/0x880 [ 723.646054][T24800] input_handle_event+0xb29/0x14d0 [ 723.652717][T24800] input_event+0x8e/0xd0 [ 723.658508][T24800] hidinput_hid_event+0xa10/0x2420 [ 723.665155][T24800] hid_process_event+0x4b7/0x5e0 [ 723.671626][T24800] hid_report_raw_event+0xa0a/0x1290 [ 723.678445][T24800] __hid_input_report.constprop.0+0x33f/0x450 [ 723.686047][T24800] hid_irq_in+0x35e/0x870 [ 723.691910][T24800] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 723.698818][T24800] usb_hcd_giveback_urb+0x39b/0x450 [ 723.705552][T24800] dummy_timer+0x1814/0x3a30 [ 723.711671][T24800] __hrtimer_run_queues+0x202/0xad0 [ 723.718414][T24800] hrtimer_run_softirq+0x17d/0x350 [ 723.725058][T24800] handle_softirqs+0x216/0x8e0 [ 723.731356][T24800] __irq_exit_rcu+0x109/0x170 [ 723.737582][T24800] irq_exit_rcu+0x9/0x30 [ 723.743358][T24800] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 723.750540][T24800] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 723.758051][T24800] _raw_spin_unlock_irqrestore+0x31/0x80 [ 723.765221][T24800] snd_rawmidi_transmit+0x117/0x160 [ 723.771960][T24800] snd_vmidi_output_work+0x111/0x390 [ 723.778780][T24800] process_one_work+0x9cc/0x1b70 [ 723.785251][T24800] worker_thread+0x6c8/0xf10 [ 723.791371][T24800] kthread+0x3c5/0x780 [ 723.796970][T24800] ret_from_fork+0x5d7/0x6f0 [ 723.803100][T24800] ret_from_fork_asm+0x1a/0x30 [ 723.809396][T24800] } [ 723.811862][T24800] ... key at: [] __key.1+0x0/0x40 [ 723.818938][T24800] [ 723.818938][T24800] the dependencies between the lock to be acquired [ 723.818944][T24800] and SOFTIRQ-irq-unsafe lock: [ 723.832399][T24800] -> (tasklist_lock){.+.+}-{3:3} { [ 723.837670][T24800] HARDIRQ-ON-R at: [ 723.841792][T24800] lock_acquire+0x179/0x350 [ 723.848264][T24800] _raw_read_lock+0x5f/0x70 [ 723.854741][T24800] __do_wait+0x105/0x890 [ 723.860960][T24800] do_wait+0x21e/0x5a0 [ 723.866997][T24800] kernel_wait+0x9f/0x160 [ 723.873290][T24800] call_usermodehelper_exec_work+0xf1/0x170 [ 723.881163][T24800] process_one_work+0x9cc/0x1b70 [ 723.888067][T24800] worker_thread+0x6c8/0xf10 [ 723.894623][T24800] kthread+0x3c5/0x780 [ 723.900655][T24800] ret_from_fork+0x5d7/0x6f0 [ 723.907208][T24800] ret_from_fork_asm+0x1a/0x30 [ 723.913950][T24800] SOFTIRQ-ON-R at: [ 723.918069][T24800] lock_acquire+0x179/0x350 [ 723.924541][T24800] _raw_read_lock+0x5f/0x70 [ 723.931015][T24800] __do_wait+0x105/0x890 [ 723.937241][T24800] do_wait+0x21e/0x5a0 [ 723.943282][T24800] kernel_wait+0x9f/0x160 [ 723.949572][T24800] call_usermodehelper_exec_work+0xf1/0x170 [ 723.957441][T24800] process_one_work+0x9cc/0x1b70 [ 723.964343][T24800] worker_thread+0x6c8/0xf10 [ 723.970897][T24800] kthread+0x3c5/0x780 [ 723.976929][T24800] ret_from_fork+0x5d7/0x6f0 [ 723.983483][T24800] ret_from_fork_asm+0x1a/0x30 [ 723.990224][T24800] INITIAL USE at: [ 723.994257][T24800] lock_acquire+0x179/0x350 [ 724.000642][T24800] _raw_write_lock_irq+0x36/0x50 [ 724.007465][T24800] copy_process+0x4caf/0x7690 [ 724.014034][T24800] kernel_clone+0xfc/0x930 [ 724.020330][T24800] user_mode_thread+0xc7/0x110 [ 724.026975][T24800] rest_init+0x23/0x2b0 [ 724.033010][T24800] start_kernel+0x3ee/0x4d0 [ 724.039397][T24800] x86_64_start_reservations+0x18/0x30 [ 724.046740][T24800] x86_64_start_kernel+0x130/0x190 [ 724.053738][T24800] common_startup_64+0x13e/0x148 [ 724.060562][T24800] INITIAL READ USE at: [ 724.065029][T24800] lock_acquire+0x179/0x350 [ 724.071849][T24800] _raw_read_lock+0x5f/0x70 [ 724.078671][T24800] __do_wait+0x105/0x890 [ 724.085243][T24800] do_wait+0x21e/0x5a0 [ 724.091627][T24800] kernel_wait+0x9f/0x160 [ 724.098267][T24800] call_usermodehelper_exec_work+0xf1/0x170 [ 724.106475][T24800] process_one_work+0x9cc/0x1b70 [ 724.113726][T24800] worker_thread+0x6c8/0xf10 [ 724.120631][T24800] kthread+0x3c5/0x780 [ 724.127012][T24800] ret_from_fork+0x5d7/0x6f0 [ 724.133917][T24800] ret_from_fork_asm+0x1a/0x30 [ 724.141005][T24800] } [ 724.143656][T24800] ... key at: [] tasklist_lock+0x18/0x40 [ 724.151518][T24800] ... acquired at: [ 724.155462][T24800] _raw_read_lock+0x5f/0x70 [ 724.160125][T24800] send_sigurg+0xed/0xc80 [ 724.164599][T24800] sk_send_sigurg+0x76/0x360 [ 724.169335][T24800] unix_stream_sendmsg+0xfa5/0x1340 [ 724.174674][T24800] ____sys_sendmsg+0xa98/0xc70 [ 724.179580][T24800] ___sys_sendmsg+0x134/0x1d0 [ 724.184398][T24800] __sys_sendmmsg+0x200/0x420 [ 724.189217][T24800] __x64_sys_sendmmsg+0x9c/0x100 [ 724.194293][T24800] do_syscall_64+0xcd/0x4c0 [ 724.198937][T24800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.204969][T24800] [ 724.207261][T24800] -> (&f_owner->lock){....}-{3:3} { [ 724.212522][T24800] INITIAL USE at: [ 724.216469][T24800] lock_acquire+0x179/0x350 [ 724.222680][T24800] _raw_write_lock_irq+0x36/0x50 [ 724.229328][T24800] __f_setown+0x61/0x3c0 [ 724.235278][T24800] fcntl_dirnotify+0x7b1/0xb60 [ 724.241750][T24800] do_fcntl+0xe62/0x15a0 [ 724.247713][T24800] __x64_sys_fcntl+0x163/0x200 [ 724.254186][T24800] do_syscall_64+0xcd/0x4c0 [ 724.260404][T24800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.268000][T24800] INITIAL READ USE at: [ 724.272380][T24800] lock_acquire+0x179/0x350 [ 724.279026][T24800] _raw_read_lock_irqsave+0x74/0x90 [ 724.286369][T24800] send_sigio+0x31/0x3e0 [ 724.292753][T24800] dnotify_handle_event+0x15e/0x2b0 [ 724.300094][T24800] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 724.308648][T24800] fsnotify+0x13d6/0x1dc0 [ 724.315114][T24800] vfs_mkdir+0x71d/0x8c0 [ 724.321499][T24800] do_mkdirat+0x304/0x3e0 [ 724.327968][T24800] __x64_sys_mkdirat+0x83/0xb0 [ 724.334870][T24800] do_syscall_64+0xcd/0x4c0 [ 724.341511][T24800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.349552][T24800] } [ 724.352105][T24800] ... key at: [] __key.1+0x0/0x40 [ 724.359268][T24800] ... acquired at: [ 724.363123][T24800] _raw_read_lock_irqsave+0x74/0x90 [ 724.368469][T24800] send_sigio+0x31/0x3e0 [ 724.372855][T24800] kill_fasync+0x214/0x510 [ 724.377416][T24800] lease_break_callback+0x23/0x30 [ 724.382586][T24800] __break_lease+0x674/0x1810 [ 724.387403][T24800] vfs_truncate+0x4d3/0x6e0 [ 724.392048][T24800] __x64_sys_truncate+0x172/0x1e0 [ 724.397214][T24800] do_syscall_64+0xcd/0x4c0 [ 724.401857][T24800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.407895][T24800] [ 724.410187][T24800] -> (&new->fa_lock){....}-{3:3} { [ 724.415274][T24800] INITIAL USE at: [ 724.419134][T24800] lock_acquire+0x179/0x350 [ 724.425173][T24800] _raw_write_lock_irq+0x36/0x50 [ 724.431648][T24800] fasync_remove_entry+0xb2/0x1e0 [ 724.438207][T24800] fasync_helper+0xaf/0xd0 [ 724.444173][T24800] pipe_fasync+0xc7/0x200 [ 724.450033][T24800] __fput+0x968/0xb70 [ 724.455549][T24800] task_work_run+0x150/0x240 [ 724.461671][T24800] exit_to_user_mode_loop+0xeb/0x110 [ 724.468487][T24800] do_syscall_64+0x3f6/0x4c0 [ 724.474609][T24800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.482046][T24800] INITIAL READ USE at: [ 724.486342][T24800] lock_acquire+0x179/0x350 [ 724.492816][T24800] _raw_read_lock_irqsave+0x74/0x90 [ 724.499984][T24800] kill_fasync+0x138/0x510 [ 724.506369][T24800] lease_break_callback+0x23/0x30 [ 724.513361][T24800] __break_lease+0x674/0x1810 [ 724.520001][T24800] vfs_truncate+0x4d3/0x6e0 [ 724.526470][T24800] __x64_sys_truncate+0x172/0x1e0 [ 724.533462][T24800] do_syscall_64+0xcd/0x4c0 [ 724.539929][T24800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.547787][T24800] } [ 724.550254][T24800] ... key at: [] __key.0+0x0/0x40 [ 724.557330][T24800] ... acquired at: [ 724.561098][T24800] lock_acquire+0x179/0x350 [ 724.565748][T24800] _raw_read_lock_irqsave+0x74/0x90 [ 724.571092][T24800] kill_fasync+0x138/0x510 [ 724.575653][T24800] evdev_pass_values+0x619/0x9b0 [ 724.580737][T24800] evdev_events+0x1bb/0x390 [ 724.585386][T24800] input_pass_values+0x74e/0x880 [ 724.590466][T24800] input_handle_event+0xf00/0x14d0 [ 724.595720][T24800] input_inject_event+0x1e8/0x3b0 [ 724.600889][T24800] evdev_write+0x457/0x750 [ 724.605449][T24800] vfs_write+0x29d/0x11d0 [ 724.609920][T24800] ksys_write+0x1f8/0x250 [ 724.614390][T24800] do_syscall_64+0xcd/0x4c0 [ 724.619048][T24800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.625081][T24800] [ 724.627386][T24800] [ 724.627386][T24800] stack backtrace: [ 724.633245][T24800] CPU: 1 UID: 0 PID: 24800 Comm: syz.0.2412 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 724.633259][T24800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 724.633266][T24800] Call Trace: [ 724.633270][T24800] [ 724.633274][T24800] dump_stack_lvl+0x116/0x1f0 [ 724.633285][T24800] check_irq_usage+0x7dc/0x920 [ 724.633301][T24800] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 724.633316][T24800] ? check_path.constprop.0+0x24/0x50 [ 724.633332][T24800] ? __lock_acquire+0x12bc/0x1ce0 [ 724.633347][T24800] __lock_acquire+0x12bc/0x1ce0 [ 724.633365][T24800] lock_acquire+0x179/0x350 [ 724.633381][T24800] ? kill_fasync+0x138/0x510 [ 724.633397][T24800] _raw_read_lock_irqsave+0x74/0x90 [ 724.633413][T24800] ? kill_fasync+0x138/0x510 [ 724.633426][T24800] kill_fasync+0x138/0x510 [ 724.633441][T24800] evdev_pass_values+0x619/0x9b0 [ 724.633456][T24800] evdev_events+0x1bb/0x390 [ 724.633470][T24800] input_pass_values+0x74e/0x880 [ 724.633484][T24800] input_handle_event+0xf00/0x14d0 [ 724.633497][T24800] ? _copy_from_user+0x59/0xd0 [ 724.633512][T24800] input_inject_event+0x1e8/0x3b0 [ 724.633527][T24800] evdev_write+0x457/0x750 [ 724.633542][T24800] ? __pfx_evdev_write+0x10/0x10 [ 724.633556][T24800] ? bpf_lsm_file_permission+0x9/0x10 [ 724.633570][T24800] ? security_file_permission+0x71/0x210 [ 724.633586][T24800] ? rw_verify_area+0xcf/0x6c0 [ 724.633602][T24800] ? __pfx_evdev_write+0x10/0x10 [ 724.633623][T24800] vfs_write+0x29d/0x11d0 [ 724.633634][T24800] ? __pfx_vfs_write+0x10/0x10 [ 724.633643][T24800] ? find_held_lock+0x2b/0x80 [ 724.633655][T24800] ? __fget_files+0x204/0x3c0 [ 724.633668][T24800] ? __fget_files+0x20e/0x3c0 [ 724.633680][T24800] ksys_write+0x1f8/0x250 [ 724.633690][T24800] ? __pfx_ksys_write+0x10/0x10 [ 724.633702][T24800] do_syscall_64+0xcd/0x4c0 [ 724.633713][T24800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.633723][T24800] RIP: 0033:0x7f35c998ebe9 [ 724.633733][T24800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.633747][T24800] RSP: 002b:00007f35ca7cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 724.633757][T24800] RAX: ffffffffffffffda RBX: 00007f35c9bb5fa0 RCX: 00007f35c998ebe9 [ 724.633763][T24800] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000009 [ 724.633770][T24800] RBP: 00007f35c9a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 724.633776][T24800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.633782][T24800] R13: 00007f35c9bb6038 R14: 00007f35c9bb5fa0 R15: 00007ffe89b02148 [ 724.633792][T24800] [ 724.903471][ T30] audit: type=1400 audit(1755475807.544:1570): avc: denied { connect } for pid=24793 comm="syz.4.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1