last executing test programs: 12m28.064317192s ago: executing program 32 (id=540): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b903000600000000"], 0x66) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000010000000001410000001c"], 0x38}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, 0x0, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r7, &(0x7f00000002c0)=[{0xe, 0x81, 0x0, 0xfd, @time={0x7b7, 0x4}, {}, {0xe}, @raw8={"1f000e000000010000feffff"}}], 0x1c) 9m17.532382034s ago: executing program 33 (id=1110): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r0, 0x8000000000000003, {}, 0x2}, 0x18) epoll_create(0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r2 = socket(0x1e, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000000)={0xffffffff, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(0x0, 0x2, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3f9}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 9m13.885903011s ago: executing program 34 (id=1118): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18ffe4000000000000000000000040008500000013000000180100002069612500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22f7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m4.455417591s ago: executing program 35 (id=1119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}, 0x1, 0x3f00000000000000}, 0x4004) 9m0.752732717s ago: executing program 36 (id=1120): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x10) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000080)) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x5, 0x8}}, 0x28) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040014}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r8, r0}, 0xc) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, 0x0, 0x0) 8m24.395339451s ago: executing program 37 (id=1127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001c000000080000004000000042000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000060000000000000000000000000002000000004000"], 0x50) add_key(0x0, 0x0, &(0x7f00000001c0)="0000000000000004ff6943b80000000800003fecf20000000086", 0x1a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r4, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2003041, 0x0) 6m31.94308486s ago: executing program 7 (id=1440): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0xf2602, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x80002, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0xa, 0x2, {}, 0x58603}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000001640)=[@free_buffer], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"4fc28c4efab6c54e528bda9423ffce79", 0x0, 0x0, {0x7f, 0x3ff}, {0x1, 0x3}, 0xfffffffffffffff3, [0xe, 0xfffffffffffffff8, 0x3, 0x4, 0xf, 0x3, 0xfffffffffffffffa, 0x6, 0x9, 0x9, 0xffffffff, 0x200, 0x9, 0x4, 0x7, 0x6]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001680)={{r0}, r9, 0x0, @unused=[0xcf6, 0x4, 0x0, 0x4], @devid=r10}) 6m27.928160465s ago: executing program 7 (id=1453): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000100)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000a40)={0x0, 0x3, @start={r0, 0x0, "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", "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"}, [0x70000000, 0x48b2c35a, 0x5, 0x1, 0x7d, 0x7, 0x2, 0x0, 0x8, 0x9, 0xfffffffffffffe0a, 0x0, 0x100000001, 0x81, 0x1ff, 0x6, 0x7ff, 0x0, 0xd, 0xa49, 0x7fffffff, 0x9, 0x8, 0x8, 0x1, 0xe19, 0x7f, 0xfffffffffffffff7, 0x3, 0x20000000000000, 0x6, 0x5e70b1b7, 0x1, 0x4, 0x4, 0x8, 0x9, 0x253c, 0x8, 0x7, 0x7, 0x7fff, 0x10000, 0x800, 0xc, 0x5, 0x4, 0x6, 0x8, 0x7, 0x0, 0xffffffff, 0x9, 0x200, 0xfffffffffffffffb, 0x4, 0x101, 0x2, 0x80000001, 0x3, 0x7, 0xdc, 0x7fffffffffffffff, 0x3]}) 6m27.512495409s ago: executing program 7 (id=1455): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001c00)=ANY=[@ANYBLOB="280000002d00018014002080100056800c0096030100000000000000"], 0x28}], 0x1, 0x0, 0x0, 0x4000854}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) getxattr(0x0, &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r1, r2}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={'blake2b-384-generic\x00'}}) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x6, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x5, 0x9, 0x6, 0x7, 0x2, 0x5, 0xfffffffffffffffb, 0xbd, 0x3, 0x102d, 0x8, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x1ed40, 0x6, 0x1ff, 0x80, 0x7, 0x7, 0x7, 0xc, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x3, 0x8fffffffe, 0x403, 0x1, 0x4, 0x1, 0x3f, 0x77d, 0x1, 0x0, 0x6, 0x9, 0x4, 0x8a, 0x50f, 0x9ac0, 0x6fe5, 0xffffffffba36ba58, 0x6, 0xa, 0x9, 0x81, 0x2, 0xffffffffffffffff, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x9, 0x17ffffe, 0x5, 0x82b, 0x8, 0x5, 0x0, 0x4, 0xfffffffffffffffa, 0x5, 0x100000000000006, 0xca4f, 0x2f, 0x1, 0x4, 0x40, 0x2, 0x42843378, 0x1, 0x6, 0x201, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x6, 0x0, 0x7, 0x4, 0x7ffffffffffffffd, 0x7, 0x8, 0x0, 0x9, 0x93, 0x5, 0x401, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x40007, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x5, 0x8, 0x1000, 0x1d68a423, 0x5, 0x7, 0xfffffffffffff000, 0x8, 0xfffffffffffffffb, 0xfffffffffffffff7, 0x6, 0x100000001, 0x8, 0x80000000002, 0x6, 0x20000000004, 0xc3, 0x7f, 0x3]}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000740)=ANY=[], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x82c82, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) recvmsg$unix(r5, &(0x7f00000001c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000d00), 0x0, &(0x7f0000000e00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x80}, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x2) setfsgid(0xee00) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r8, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 6m24.81664385s ago: executing program 8 (id=1468): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) setpgid(r0, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x34) ptrace$peeksig(0x4209, r2, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 6m23.625527557s ago: executing program 2 (id=1470): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f00000007c0)}, 0x4}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000080000000b0000000600000000000000", @ANYRES32, @ANYBLOB="37cb0000000005000000000000000000000094b5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000001800), 0x1000, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) write$rfkill(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0x10, 0x7, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r6, 0x4b32, 0xf1a) (async) sendmmsg$inet(r2, 0x0, 0x0, 0x0) 6m23.486774367s ago: executing program 7 (id=1471): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffd48}}, 0x40408c0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0x30}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x40004) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) 6m23.410454999s ago: executing program 8 (id=1472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'statistic\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}, 0x1, 0x0, 0x300}, 0x0) 6m23.247843942s ago: executing program 6 (id=1473): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x2, 0x300) r1 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f000000c280)=[{{&(0x7f0000000180)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000440)="a9b69279cd882d3a114048963306b1bbf4dd20c9ea5f4284ff3c932aa6115b526ad4e3e0cafd9bf79e1603ad1d645725e20272eb7cd9a5f6a0c46469a4e314f20a395732d2121fd93c22674bba0b208997ff12289c483667b227280a88859e63e10807cab78698afbc215442bbe04302b31cc41f596bb6880e107a67409f08463fc5fc372315832b592bba4603660e29996be19fc186ecbf34d0a191e904e9abe784f0717b4257af11e9a7fd2cb2314faa", 0xb1}, {&(0x7f00000002c0)}], 0x2, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r2]}}], 0x20, 0x8000}}, {{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000600)="834a000c0f2e832d8c19f3a93fc28818b7346dd48efd651335f7216477f353192353996805dc215411a262be1849afdd00f5c0a4c259a6d34db435938a0204296dde48af5559f215d61247dfce269c314b33e9af7b3c0008752d46740d2559ae66924c655bae5e5fa46250b4647a017a3847d8ec6866c771c7c6733b39c7b042c5e0c622d16c1ec8d6049cef96e98a8c31e618", 0x93}, {&(0x7f0000000800)="dd45e1f7293c31b57c6eb10c77074dc617b7ea809de5060689231db3cc8161fee6704a68d05e89a135171638dbea02e149b11a9f1870711c2d750447dfa18e08df7c6ea7ff3971b2e5e86b7cec0491ca8a835b22d7d541261cafbdfba9bf46241c1d9abcb7fcab85f022d1484fadb2cb46a5ac5aab32f59af2dc0612526559b0be66b4f9fca9ad964249e98f2d67e7846c342a0cf49de0a1b510657264ce74473b939d24969a95c09b9f6ebba3d0644b7a7ee11751a3ee", 0xb7}, {&(0x7f00000006c0)="cdccad3c4abb910c19101e8bbe8c11953eac89af7e6614f6b0e73806f026b7115f1048dfde29368c99b6a2984b9881b3352c25f9b552c509f6c7030766dfd90b9430b5a9039c69b9bf751b9f9cb44de2b213e98b27a890823b82bb8da5d6989160bc45cf3920d9", 0x67}, {&(0x7f00000008c0)="a20530c111aaacb5b3dfaafd461cd7fd8ff8681126d47bf841e2b5b967e261d7c16db22dfc7177", 0x27}, {&(0x7f0000000900)="c1e77395047db87aa0b152ee2fab42e83bb5df0daeb54e911b448c2ad956668b5f07aa08dcce8d588d9489d9ceb9cc401e2e0e9e54be445230224c242cb060209c8ddc567891cbefe2acada9e66a3a075f93020a3ab33745f02352a5332b56cf1cc05dfd6c85280562ee18fc6100b69db0330a3903598ad2a0476bb5b1cdd9bd6bcde91e260cba5d4e47a5c9caab8118ace47949eed24caff94440da65f9794ebb007e", 0xa3}, {&(0x7f00000009c0)="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", 0xfc}], 0x6, &(0x7f0000000cc0)=[@cred={{0x1c}}], 0x20, 0x20000000}}, {{&(0x7f0000000ec0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f40)="0cc3ec8fce4c78c361c992810a1b9140fd25c4bd73a3da7eff12e91679918c61f38eb239f16265c66823e122144174af832589e94c292ab5fac68ec57ed059fe0431fb6744ab7b02e4b714ac4f672a62902a77c985f23a95fbc1c8191e1bc741ade5b148072bba3d0f0a76e682277ce76cd6cb3cca356b187a7e0c48aab32f18790c23620efc74b4d1b66eabc8b99921c00b87a0f593adcdf3a5d99a6b18e79d3b3ab05ee500a4f47215fb29d903b4c7162f2565519f157bb296705de137db3226a831d0f3d6e818987eb32727", 0xcd}, {&(0x7f0000001040)="c9ef4ac4cac83617e4152d6d7b5be4648f7723af9a738717c2e132235d264ffd244740f66028924deaef56e1b50e", 0x2e}], 0x2, 0x0, 0x0, 0x10}}, {{&(0x7f00000010c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001140)="5930d54482c50dcd72c4e8fa62ec3c1fe078963bc0db382e80ba17cf15ec27a739b925841e7b020bec762cda7b02a5c38ed8e22855a76ce3f6d3eb308319f559baba780e701da0c2507462edf82a5968996537651be5fa67e2d3afc58d31fb46fd8ad8e50b8b0f07fde66d419d921b9fc894de5821c69b7f0b9c019358438bca9a77b85b6f5859b6476b2bc339fc0fad32fb35dd3fd43d9c9fc056e76da7e93681e61bba80f56441b7fd8c4027f38e41fcc887bdd6", 0xb5}, {&(0x7f0000001200)="0f56e29b4772d6a3153e616064e62d6ef9e5ad35cdb3a0877fc44bca82654aaa3ed530624bfa0cdf021a9e938436ccbcf657369a12ffaf15306e0f6a61484744ae50b5d21e68366af5f34b95ff7d5910d43e292ed3f62e1f5bedad455dc64eaa24c39111b279e9aa3725d27923da6051d9969566decc4c7dbdbce2633c41d8e4555d196c88b815119fd3fe9a6fec0abd5489", 0x92}, {&(0x7f00000012c0)="6fa8c4a5337edad8039faadde2b45f12bce8cc0c73e4367705fb73f96f34a2533f6beca863504109edae24487196f167277b68c8f249d91faf8b1a4f649a06c454aacf75167a9c138305a81d71cebbedb1c694a06c90309e07ed5cb7670103cc1ff0f0613b232bc5f7dbe66933e4f916f330597668e1023ce2c959463f6e5ca76bd5e49f8af23317d392f52792066e415454961a2d913f6f5bffb6c326726b9cfc58f1dfa60f10a97f5fa6bfaa1e4dca386500b546e9c201d1a6297b8a82db7a4f382940de0ce313b2a48171e96cf31e1ebbf8e89105925b8b34ca0508272189d528841dbe3c945b55febe772994baae1fc2ada6", 0xf4}], 0x3, &(0x7f0000001400)=[@cred={{0x1c}}], 0x20, 0x24000080}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001440)="a07aeab67465faa92331e55b11c3661b7a82abc13c830f4e8853340945f7914c5a9c19567dcd08b8b8db590eb4dc5f267989fca83928b83a976374aa39d267eecd69ce02fe7e032a279eb6812a95fe58b5c02490be3192ab239403ac6c8683277b952ca2635e45c689c9", 0x6a}, {&(0x7f00000014c0)="2165add0b50d8c759f195633f7b2e84920b077dc6be2cc93ebd706851cb80ca2fd5464fad24daf15", 0x28}, {&(0x7f0000001500)="35db3fa37081d88cfd55166cb9c81fca203b577a1cfe3275d495d136a98e44b52c081d2b3490783a35ea09429412015bf853b378173143d74c56c9faf7fe7103cd2d7ffa8cf176d371cdb29f319c94e8712309bbeb512657f836bbef52a3aa386d00f0e41e3c8842810ca416b52572127c98b4bbe44eb0554f2d8dc7d402f3fc0ab48827ac3771c3f3c6fa97edcaa4f55823f57a5714", 0x96}], 0x3, &(0x7f0000001640)=[@cred={{0x1c}}], 0x20, 0x20000000}}, {{&(0x7f0000001680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001700)}, {&(0x7f0000001740)="810e199408b423d9aa9c170d9e4e93bccf12a930c2f2b67b54344ba48c13f3a6434b", 0x22}, {&(0x7f0000001780)="a0e65bd466beb5033709c9a772d81fd5ea3d5e1a61258e9faa401a68a887279b0453a00e83256271a582fc36894fcd61df3e0a66e6c34302d90a902599b4d2aa7f2f436d8a86e6d242aa1e53812b6eb7106990903d84af38192542ddcb2e9218b2aea89733ef32830e9dc15681d13936a15e0dfd5abb52f83e3e3922384dfc77d10704fd5b148a11bbee6c7086e0d37994b3d62cb0b457162051bef9782a1272b31e038019c60087", 0xa8}, {&(0x7f0000001840)="fce30d78373da02507fc8126af5bb3c963427648128c82c48f981c88ab6d79de678efc82b907e0d48d391fb71e855d8448cca1ff7465192ed023de41c23ca4b1d90338af93606ae3fe3a5b499f497227bf7b7e30b4e96d4ba8f798a9e9529cbc9a5f74e7ba56709b6860db5dce5a6b017b90bcf9d04cc6a840e7f51166a52f5dd2754a857c00fe25edbe99a24a07da5e3bd9f9d1a5eddd9421d2a08b63cdfa45e89fb5b2042054c514a333152a876eb23b7fb5bce6f1455499d3d196b0931178f655e35fd6f0fe0471912aeda486dbca41510ec3af09122cc0", 0xd9}, {&(0x7f0000001940)="e6e0b06142dd249e23ceca3dc0ecaeb8354929ee5c54a51c5bbb15bf7b4365d2fa72c8e973b55c79c3c7024b9047eec9cefa7a9361249044e9fa3067209fe94bcaa4b4d6bfdd9a8b5b35f450bcc1d97ec0affb1d1a99a9", 0x57}, {&(0x7f00000019c0)="88c49240ced5e733df2864d34dea7cfdfb7c806baf27026a532cad8dd45ad637bda428a1da", 0x25}, {&(0x7f0000001a00)="78ab5811fcbe58dc5fafeb63994d6aec601c0540b9", 0x15}, {&(0x7f0000001a40)="e60182f7c7", 0x5}, {&(0x7f0000001a80)="2e8d6aa89d3344944ee78803a6078d79c8b16bec0a52399fd9a9c205cb37f0ddc3aa70e50abbc35c6931c96c772d9f56743d91aef45e52eb7b282bd359374c34501525149f8aa6235060b6bf617041f1ad7a217e7d7f6329910c8896f49b9327821154911e6fa3ee13791283df8e31f171d5fbf6b0ce1e531238c747d380fadf687c6f88c25c2cc54ba6fcfff29deb1fb5a6b5a147752b71709a7e807a71d76cbcd115325dc6e548082dc1dcf1e18908ded60f0cda125c633af1acd14bea39ae1b6ca3fa6c224823fcb5754797e4f638f2d8a08ee5c09d9a007b95476b3718e7435010bb050b97775cc4a0a9c789c328", 0xf0}], 0x9, &(0x7f0000001c80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x14}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)="e291198cc05d125ff8e0c10e73a51b864b1a320334b4d2cec80865d2d395265eec904ac6f2173b883a980a416aee48a776407933512808aba664a3633b7957ee410d0c18fe274c26a16ecf9a6d2edb73115fd03ddddfbf1b25d9a6210e06ef1831756b2d359e6f9719222b73f6be9047c221ce", 0x73}, {&(0x7f0000001d40)="6b8f047b6ddb826debd8112678cdd26d14", 0x11}], 0x2, &(0x7f0000001e40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x4008884}}, {{&(0x7f0000001ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a940)=[{&(0x7f0000001f40)="d2a420ca6b2126", 0x7}, {&(0x7f0000009800)="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", 0x1000}, {&(0x7f0000001f80)="0e220f7aabb2379486ea5dfb0b1d0e277ae4d2debe7f4139f3e4ab22e2e56ec29b6d3658acd0fde412858444a2607089df1f1cfe4e8242ae3721922cb16b9d3a14078691d2c5ab09929df186d6d60903b31182a2c446a643936815bcead0cb5ce8f8dba77644e65ecaa27b68a5793718f4f839d5e9cf7d6993fd0e8c1c54e6dc4cb2c79ed687bebac93d31b7965cd0a0ed9863f792aa33e4557ffd5ac4df6757acbb1b3c9e86276cf2", 0xa9}, {&(0x7f0000000b80)="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", 0x12f}, {&(0x7f000000a880)="34a3099ac893648052c1fbf5923efc50f2d1f3a49e7c8a4387e84755defa4280341d93b5b8c286b97dbed9a7d4aa87254eb4c30674700bdbd9869051b528aaa51c962abfb06d88c98e6509d1434715c7c11151f9e1ba0f1ba411dc110ade0a71864e88c45a8b11d5ff85bee32c5a297aa022436d7eb3e40dc8de8ab1d68d0ce8df6eeb328b810cd1b55bbe57f5ff2dc0300ae1fa913300", 0x97}], 0x5, 0x0, 0x0, 0x20000800}}, {{&(0x7f000000a9c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000bcc0)=[{&(0x7f000000aa40)="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", 0x1000}, {&(0x7f000000ba40)="594bf8336ff38890a1825010313879bf7db885bc7ecdea9cd528ad46c9d05a7eafe543176dcb62dc9fa741dc60b667edafbdebc3b05ac71d2674bd6bd17ca94cc26eaa4f507bdaae7758471a5d8c2de9ff1b60056670890b99e6436f0d2293d970274a3368907ef74715469dd209a417900290a1a161710e6bef2f644eabecbe9d93ffaa491f49fd7fa32ad5a709c83d6d7e59f035864bab40c077e485b7b50a1d3999b7491cd0c832f76d31c017768e3814fa6baa122fc6521e83732a387cd74df237bc4c0c633154f4227a0f90c3640388c3d2ee21359016cf4dceffb2ded57f04c1", 0xe3}, {&(0x7f000000bb40)="65faa5c117c6c59639489f74c2f2f1dcd0f3657b1d601aca2a20782f239b45e0a6cf2f8fa6f37dd6d2670bbcc5d533c54316d7bdac831d6b0db62f4d", 0x3c}, {&(0x7f000000bb80)="807f88b95c20eebc6f59d6a5e9058f775cd601b3dfd6ab2fc232210ff0deea267e315338ed30bbccdd658aa819fe23f89ec1097f7646739ed0b23fed09fe7ab149ad1fc5c1c50076e16daeacb1c32d5a34f32c897b47c994", 0x58}, {&(0x7f000000bc00)="16b912ce2952902b94b6cd52a574c033cdef196184f16d47739739e4274648e9d7cc77e6777956950df0683a30cd1cba4d01466bd96806d3c1b3b1ce9d5e415639db7594c4c3810bd6a4b1618b214cbe542d89a0f1db1f5904aa5ba9f020ed1ce8cbf00021c122bc21078c9516dd0e229db33428aa517ea3a38b0d0f6c61c3fcf332ac57801bdea0015b8e3642192955f445c57dbc3643610033bf642dc7e01f64", 0xa1}], 0x5, &(0x7f000000bdc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r3, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0, 0x800}}, {{&(0x7f000000be80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000c200)=[{&(0x7f000000bf00)="35361d35efbc8ade8e2ebfbdfc34f5ad91b0db48dc4cdf92015640f151006373816a202322ff1622fd1e0d8f1d95c7e0fb91b33f4fc3c03b6952f0e7671ec32c4494fca37154863edddd89e2b650df8f66185e75042a6b1aeda43f14565cbd151bc050dc", 0x64}, {&(0x7f000000bf80)="926528a0360fece64a0eca244d9ed82fd5c5bdc9958f669dc4baeb7a709e2fe815eb2324fa41d9ea42f7540ba7559376d9ce3a88819dd6f600e40aba7452292dca752bd8d6673e9987c273f0e012d0a918d4678e55db1c254d6b600adba3be15daca962c54e55ce895e626ee45d5b9c341a5d5b942c2e49ab8daef7e2d8d2de7638d25102e4d08ffb9161884f3d27dca4398208f04460a294576d8bdf7a8a303c488732646bd556f9c6d7d1dc1f0932ef1e50001d629d740ab02ee3b64497f0304d18688f30f8529733184cd7aa97e608fd425faf6d7c6d3f5d51a9869fe99ed950b", 0xe2}, {&(0x7f000000c080)="dd2a7461fe0492d063b89c54a407c7d6dc47b420cf6a8f39b6a2513bff88251a17dc1f4704d8a90e0f074c1d71c1fb7220da33e6da6c03a3cf906790742d404b6ee27e6ec0be356a37bce663fe9ebadabaa4676ec16d0e7a76e392275b20e5d8f70cf963332277b1b7eed574de3ee2a55f587d7bbe7af59cc0e7de24e02d81f8e0a3f542560d3974f3da482bf99ea4829aa4cf5931a39d3dfeb5718a415b061221f6ac76581d80cb4afd4391421ad13cc326113d6d7a448e360fcfdafae8133f6de901e5d2be927682b2a2807ea66f1dfc3fd30080bf", 0xd6}, {&(0x7f000000c180)="e5019e0135945f6f1e140a3c7e839a7381cd5d023b68d79b4e0fd93ec706843b1c295a56cb2d8136e0b68710f89cbc6d43b3efc2a1c0991ad58ea9971c3a828cee962a8264c5c40bd1f546", 0x4b}], 0x4, &(0x7f000000c240)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20}}], 0xa, 0x8000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) r4 = socket(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x725800, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa3) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000002140)="4627563e95d073e9c44031e486c6c3c887234dab29bb5d4444d206b6ed7b2b3001b6ed59a692ab0f0251ebf104d3747ab90777b96df4449e5275f86a62902df16f5fba75e202cbdf6fe7cc018a76b412f6485398037d6cb464f1dcf7fda3c76e43cdf64a53f6182a0b7e6476035e8bce74d0582b1ccf32dc8b0cc3b610b143afb4d3c163308a66f2dedd0d45f392d7899f5c4d2ded35c1602f7338dea29e0dff356a32c9e921eeebf8b9845ec2a40b68a8bdcb88009c910e110de23a02648667d740186ee2a3f4a59672477230c4a3a62a1417659b1978cf2b671f836d49fd361ad0af9157916d29cb4fcc1e873a336660b639383485a5322faca6694c74f58fa428582950bd136778dff61da52778dade8b2c3331b31a89259469b0900ab4173202f6256b2d23d3feb8517556292de52662192eca03da5744515c4a92cd3f0f296209bacb28a0267776c9797a784cfd95a52f9de496a5ed70459d55041b663a70d7d471da4f86cd187fd53e667422a0fdfe5eb34e2f2b8c133f2271fe5b1e71533b698169ac8107187533e37765fbd69c327ec608249c44018e3496b2f66fb8bb942f4bd26ed687ee1f7d2a53d7233fbde91cd03f4b4db0c23ed56ff9a61e0d5a1bf6ed50c308e8af0c32b2e0b15df009046ed88d60b772e0cdbfb3d765251aae01b01660df364dce51971ea2034b316a0b0071cb1d28bb86279de377ccb5a18ce981241b5d566e248866f280d71c6775e14fad44342945663bd56ad056f79e49f8071153391f8de78b05496a5f174e812ee0b102e0421c632e4a9f8ffd87ea68df1d7e85af4b30024b2a3cf0e1106871b3427eedfe857f3bc2a021d42fc09224ece3c56e57806a2da229231cc8e3ed5dbd82fd2d3894cba01e36c2ba91a42456eb570446fa3e2eddfe30264572d5d778cbf5d676ad4bd37d11e09573a5566b3656a760c9d3030b2bcd90be0d670866010e2d33c93f223a79ca167bce1a46670db33470c75776582f26b5d9ce847493ddb34612bc829f93f473c24263246011c4ca689f62f4539550ee13b246aeeec477fb2e9e4b223f66c006303abdb003809b9cd4e993b90821750b86608882355e5f587182c1ac6c677b07c26956073ff3a78d4f325139d9c0b8aead052e73fd21b3615ea22acc084bf5060f72936796311e31c038426f0a0e6c304cd2d9c363e7a1a21752032be17adca8b476b0e571b591c9dd923b0066fd5e32e045494c0a9e1e511f147988e0a5fe9652b92ed0e015ef54e3ed2a510b9383f1938dece777ca866f1a21082052827f3a48c2f38482fe3a8286c0ff17d4c24a468a5a0ec0a2eb1165f48cf76fc07450c82294d973a1793dd58008834f0d3aba4e097ceff0ba44656c67839ff3e489975297b334ecf6c7ce4634afbe3d8ab70827563aa75ffafc43429170c3fe3854238485c5a9b567a959a746010c22a92e863e318312e0efc06ab86d1435e06aca5f4b7b7f06a78f90795545c145c9941b74adb9a31ab4f749f81665dd9308acba8d7861856b548eab226377be82611ad79c8d25b176de98003c1ea28b556a2b90360913c39f8f64f0d122c732af5a990603429b354ecd4de797e17722c66546cc38349cb09c40ea54972562734e9816c83103e0bd19451e6144d005e6ce6d6d6fc1ce90238b73d1e0aaa4ee9fd0545054cea97639a404edf3b27c0073be84961084ea685e8ace53c7d7f52b62e378d9ee167aec3e5cbd60ff36c0d3ad40181bad59f111c30e9414112fbc71ad7ede21c288c878dd2509c36f93c31dab5d091107c8e8bdcadffdcb3053eba35b44c70a6421b343922cb11c69b886db0f412e5c23f89dbaff9e5847fd749e28356cab3999f1142449047a3a6c43bf670244e55d888f36ef1dc87bc5bb1460b6c8d1e69efca9a02ba834591906a65102c3e1c1c7dbdeccc7e261795f349d110836445d8ba19cbc699c46d4edc34942a488de1cc1140dc6acf23c8ec1f475e613c85ba025ff7ae639cb2499629eb5f5c88c4057e30bcf41767424af763c9204084856d87cd99f0da06ae6ee5b7382c1f6f2cbb2cf2dfd8320271f16ba7ebd8f0e3c742482f5426530b1ab946c7118f70aa4eac41dd78569341a0f3dd250531aaefdff4cab9e9eed7efdaa865f9b804ade79ced061a1fcd18a6c61a708fdf119841dc232cc5c4e5343cb8a82e9dd9647779bca053b5a2c43481c06ce2a593e388f5f5f4e681771021aaaf0589dac69db22c7285035d1eb89c75935fa4208b3786f2640ce9d65b0e671967dc27808fea5d17ac70a3ac2802f65d45d9c0372aeed530ee58bf04e190f50dac25139caec0b253d17af28eaed173c7043d66567188f04ea51733835c1c66ac7a634d7b90bdac4a6d1075bb277dc6ca420b24485012db44aed5a2e8099f4f3ed53bdb0b35b35905db28169b3e3b3d13ff94bdf2c9549f4a54c64b8d27098b86ff46cfd515f35b1d5a1bbf1bb29df16cdf296e804977a6b583d018c4fdb66264d5f2d9e162059017d6b6cbc6d6c2f1009717c67093f6feaafce1f242f4b730a2e714e9bba79f18c42a158425147b7b2cd9add4ac1d2c1a95b13a4f352d51982a5d967cd611911e6d0777afbc10883c6293f056acc69da89a0a64913be996466ed63f969d5ccd124cd3052d6654e6db0519449f3cbf3a2011541d26e5b76c3c192857905bcf989fd943d42aee9ebd40fee33094eae69154092e9514819ff126040ea7d43a927809149cfaffcc76cb1e332426bf0eb1ac1a3968c70030453a284a0fe39b9ebd704f0950cb5350d4c60d65566b3f24ec4636cd5bb3e23066f4d4f1814e60f286f3ad2d3c10e79c5991c8bf5fdb561723873fe0c75c7bb6ba262aa3a6655349df95f07abb0200d5b9152da4bfdd66a311b29a15755e8465b7b0d99f7f8ccefe9cb3561b5619d4c21b36c9b29442ccd5949882d0167244d84b677685d62074f63b8dc66941f317c78bb093491e2acb7207cc80fe51c22199aae878170af9fa1eb164854587007eb108f23d1c7946bf75aee50eee6fffdae24b992393bd37d268a136b3dcb1b7d2c9b9fbfe0c860b0d344f488e85de2a65a20eb057f0047d0b6b8898bdd68e21f2234a2c66b963a2d86f62297a7d1176c14acaddd4861f5bb74ee91eb3b6ba0c7328433b977e23c02ab67d82a12d620fc034f1c9c3a99a6a07ddf59eaa18384e429101dacbd93ee794e27b774242446fa433a8c03e4312ad56f6c4dfd1ad014d07932480e07caedabda36caaeaaf405dfa1a650843f2e09ae89c666ab8754d9bf9b290f4c4c9242d8f98533bfdbae191a6fbcba6bdb9096427d2d8efb5dcfbd58df7763cc445bf44a0be6de2335a395ab8157dee25794be81c3d87a7d457b52d88f86cabf91f2ec16a8e05a00f72277943737839a5242163025704c7b938f3f424ef5db6b60d3181e3ef94cbdc6516f0ecf01b52164b92f2e12ed55db595fd8de6862a3b12ebe06b19d1f93132b83b2f5ddbc9808b3ce8fa40352c84664d824edd2631a5e2fddaae887689092007d3d0f22a948f54bfd5c42bea5f0d6bf5018cee5ef232c8b6ea3f54ee6f4997c8ad5ccfd28227eeca811312375a849bdf4d343c1b0ec7035279d1bc0892ef193a74018d5ccd5ccaf0503a697b23abb44b7aa3beced0626daa5e1fbfc4d29d2804292fcc60b775f656179510168bf05929dbc92e009d94561d946f7b4b5a18c08d29678c482d90e07abb029e80546e5cee6c4a30712a9b92d556a29b2de021bd49b6398340a9363b689bedc007416bcb659c0c4b6eaa31ec4976ee4896ff87a7dfab48dc7046d44c9c2db6881f7d6b252e582eb878b0be9b24666e74e8eb565c07582f17817ea2422de5da79cb367e76b9b8a9d056de06ad0483986fef2a3b62d64d5d2128cf55499025ad0739ad3ce5e1bfa6aaac16828bdacad2f86b32ed933a2f672efd1f4a32dd23e59aed872d1015eaaf701a0ef8e1427d59728450c4f1bd561e7ef6f8e34d12ae2120a51746a5c346e739c09854caeec07af0d70dd4d9164b3ae8a098a41c081465fdb5537cb560426bc0de4b735f253dbc779b9dce429d99700cd6c0cbd778caeb56401b2bb5c1ca310ab0c91e1d9f4578b5fb3b4f0dad4c565495797e8e83603f3ef188a896fad5bfec24457e0f6f962b8613434f16acf74308171567eae5ad9ec11186a56493a5394042bd1b29fbe0ce64e5f1b0b56e8910343666d627d71c729c0c90bfae0134e117842d67b160ff50688f7b45f0ae330c2d4890732ace7795ff74b6e36466da623c8eef75528b22199c9bf589a1fcd2aca6c5fe3cce2eddabf1ddc8e87380b815ed5928222613383db7941eb9d55b45487b399a9a35ca4cbd9eaf08c71273fc3334b0acdbd117b13697a9ae475e79a44911ce4fed1490a2ec654fe469c9ea933999dae3616b063769446cfefb4562bd124e42f62a3dd0385fe3d21029ad8fd1c58b0badd42e415a76e3e92f246629d3579dd80d940e6dd9bee3d9a6ef8a7840fb253507e718eca32ff4119eb0bcc02aa210939a3bc41704a63202139c68e276254395ab6b858f4528ea2b3a57328e0b31816de3ad85e50e7f4ec9445eaf21a8b9916ed209bb7e79a7a08c2e4e09644ab831c0ba68d05d5ebf57a9eb36bb9caa8e7ac78a8ccca1bcb03cef0c5eb31fafa6e283632c117031aa3919f72aa80a2b9b2557749951348d5294ed2414ffcbafdf976bfb7a401bedb208fe1285738df515af493047aec962bcacb8ea7bad5fc12d5bf415e66c06c4c87044e694291e104ef53850cbc7ef73ab57982d77a3f941c226a915163e8eebd256cb8a1f0130023d2c5d3be77cab39bae4449711d6f39e50cc83eefaf6cc727b1c0b3fc4f7bd110d18262cd872cee8ca95f1be8005d5b339abbde923ef2d4290d5579e4420ff2beb705c16e96101c38c31cfd05639f252730c145182e4406aab68f556e0290ccf05e25a7bf13cdb5db47a8a0841fbeb880d4f0add608d1badb8992924b548ef1426ec774ec9d86678d4c2aae8f1e3b2dfb295802f75727a308dd1b39460f26858eff99fae8d27f24ea6902adabc89311a5fd18c3d9c606db7295f25acd22624bcc753c4c3acdb3f6c563174441333b69a126e4fcc6b06165f6221539c5ed277c20dac4b7978619e10616475de88810bbac714f3651efaa59b75791080a1086c0f3f1b5edb4b3976cc936665855f6a56788d76c6e771b1c968c859fd1ba995d336d301695fc012b8031a14ca529e3e9bf622db6813417925bb4e1a7a5b786aa90f4d048f1f442a2696970dd442d3a6ee117a3e768644c99951b75e51e98de61bc7ed8eb9e87fd43ec75e948829bd19fc545cddefee7a6f068a419e216982ca4ce6ad3256f1e64d203ba1da27e9e175738124ca86a312d0dd0caae6d64751d459d8134830ebb4f4c7931aa90c1ad6fefd99ea4ded3d246236719d6fd48979ee31eaabbea385e91aea0557a58d73a63660ecee981e3da40a39fec3f01caaffafee3504e9f8dc990cc2d69c513db25f6e722ea4811f778af8a338498b6b908682aca6e02e898cb65377f820529d35707cb83ba69b16c92b571728c58188fb08ed6f6c27d6b70e963b147605714468b90966f082d7175fcbc6e770835efb6e7bac5eeaeb5b2c23eb30ecc102e647f1ff71bc6b35f629a55dd305f8ed5287e35403a91b4dc77a6df2fff354460bf563c071846c84617da4df4c46a9e359c45d217a2b096c830ac8614947d110334ca17f587d86825b2b7ae1039fc11109687c1ad0a16f0180d1700414a4694e7ab73c715436dce437a9b3dff55f62fc1ffffc33d3be037c34c9ee7a0fcfeaec1778268565663f39b69c141304c892ae80da42cc854a87c955e6d8060a731eb16ee91e8ea27f90da85196e4f034d40b85ff59eb4b7c76218342f9c9f8d3749c874562829b7ad0c786c5c25ed240aa14755ff7f5ba5298f9f6b6ec3a46ac36d6a39c59c2ecf7781da77931214ac9a8697691d933b20cb64acde409fc159d748e4f92d83ff7767260fdec04b2e80cc524a2366e8fa5b70eb8684d164dec49fa95f42e7e75daa8c268204beec1fbc58cbbe3317af0993a8676dfdb13db7875f50cebdbc629bcd605dd4c4a65c31870495fb9a9ec51c1867ca8b117a6f9507aa26cee54c4c12f8f22b9d88072639ad765bb7906435128d1c146b9e2029880eccbdf78449bd0630381ad16c13444d709a11890d80fae0d24c037180a8726143306a7cd67abbc830167f524008f9a8e3172df597a63af2e87a92e90b70ce53069657f9b46acc9da241a1b00571540ec5fed4a9acfdd0066ba248cb2bf24540d7296256d4c9a5a5bc821817ada912cdde59876d86d4c53c1d047c6bc3442c2ee78326d7c51b6d01bd4f7ff5bc45db88649220d44099b406ac2e4744996b869ea688ecb4e758e755b29717869d5dfccbf5fd553ad83de0c4cd16b3fd4913451734226e4cf29bc0a860943b3e854d8cf49f07d2bfba1c280efaa85bb8f0f8818d1e58178c338c9e46c873adc0a4b6c832aaf0878956d8a04fcc043ff307f60a263cf1bc57ad0434b6a6f99075d932ff75deb8b017cbd16b272139a4addc24749d9551ba44d5bef0536e58de5e9d0b8985f1044163d542859c699f27f033b01d1e5d4c5598bcc4279f29c56eca82cf40c3b2799277e9b0aea04ba5cdd679e3eb63ceb0eafc21c373356caadc0f5730054a0979d7e32117962af0444b7e0e75bf1d30fd1af656956367bbbddf018531833f6c383b76cd63d014c91f67b41548e558cfae6a953a78c36ba3a896b3a0bf48aaa947d042a456a48c8f323682f560f2679f53578f00746cb04c4ef12b905b37f1b1bac9c75a85d6f173d531198f150ee6dbe7fcdbed4e0baf7610b82a793c17124970924ae32c86f9b7b40a229219958cd2445fca613e264adbf29644b1f405c68ef8afff7f4c1dc86f0e578e3716fa86c53f776dc42e7d28978f1e694428560b923b5d44e3aacb18cb38d3efd90ca0812027d336b011557e9e953cbff769e9ba84b903f5fcf1e6b4ab3e210ceaac574f80607116b196b6ded8668729f9be216bfdd049e88d1cb45581701c6ca7c991488a73e6ae5decdfc6416fa69b76f82e92246ee2b29c91885be24e96ea72438499c5c421ffd199f172667adf7d257947bb47945817930a7f2f0dfc73c2a5f6002fd40b9ea51c4a0c610e9759d43c082ed0c126c0de63c5a079b4c8bac46fcc8a1f74d8929ee2b7878430e3caed5f5aad7378fcbc4d659144a7cdbd654185ffdabd9b36257993ca823990df4aa7809ee58b7a278f38085202f3618fefef67f71b39f8ed35a28b3ff47e6caa3cecdbb41b899ea7ef3179ec3d67d0e3380f61d5a57453b9b790d171e1838c68f988a6914f4b81a7a12a0f50612182de8844a5f18026bc4110a10a31a88dae4bb40a3fea22360830784cf82ccde8187d04635e7e5bc6cda8252fa77d7022ae5fdeb978315f925cdbe7cbe0e3894965795fda4b94068bee89f79f86c420b211411929b9b3074703583c0ba0703a4d282441495110dd167c228079db163febc9ea0bcb02ab400999abfecfbca274fca55a055859eb256fcddc1d1773d72d5c3793ca3ff5f2fbe647b04f5ff2b2dc50a3a897e03634a36d21e391e6b6290cf85064711600de9a74057b78d9c04857017bc762300872f674eed1b68fac65025f3252bb803a9ff8ccf4b2b49028622168439db3bc01ea9ae7618b73dc7f858ba388891da14b88f7fee4f5f49abd687ba947969b8b923c2e119fe172126835ab4d1429133a38bbb80f1f6c308ffd180a179c05d9fb112a70e7658f9e3c7b6545556726e6589ba479edf21afd08da62963b5b724fa7b618c27fba201297dd465217de92395734355e9b34e27ff4916d78dbe0424df3d6110297a7847efda2675f12a3bf5e4b07827cdae6c61b0d969f6bb15be656b394a3f3ca8d705a4cac9c78c66c4be58c40888d49ceb08eb9a90c230faace7e4c837a8cb1aa69b020f9f43532cb7315cd698dfffb0179fb24e135480af4c437170c010e6e8f94108523dca95598c59b9e483753b79bafb02a455ceec727fd271b4cb4af7d958751a747afe6625c1e8b0316af5e13e42dc8d97dc42d5960edcaa391164693250a6f98653fa20c78823e1c1a77b798491f197a647b291cdd04087b3143e5b0fc550ecbbff19666b1c8e2a5bf2cb40f9f54c11828a8dd16489f36583e3128cda7a9abde8abbf61294450af638f56444176b5a11f84e67e4e666d6df58c45c0adc45938a2639fb1717a44c8dedf8471ac82fc1771a704f778fb812acb953493a831be5b28b16b20a112aafcee4e44640a6653c4b3035d5de4fcc16312057046bc3c650057dd9be4450b3e837ff8ac19019e67550a124416d671ccc76de36946c2d91f3d63b212111f4f09f39c24c1a981a7e63dd37a8d94ebfae1df5796d971193a8c723f172a9266af23d1d0e48aae73de4e7545a13f09a1ae3feb147ba1c700776148f027abc7dbdd1f3cb823b9a4c0e9dd43fd0bc411dc3eac2369f10fc9669ffaec5ef76da6b7f8884430b3a00da63a0e5272de159ea047584f4804a14159b1321309db45c55af563081d126300dc3ac446936f6653db92fc09d225716f425997dc247939b8c1e09a11f8b10c36b671cc590922051871ce19f6db85eefac9a666c3cec6fd5a69e7610ae5123413b458024b02521420d8c50c265d7b763f070b8fd1981824da47079135a667ee2395e43cae172e6a5ae96aeb7ce490212792498e427b80036f52cc557d3f94b118b2248af9a75a6d27d084ba423edc616981864cb0069a06f359a953a6e7df6b765d222626030248253e4e93eb0979b0a5550ee15d1489f56cc1d30b1584f37b51dfa029af5b45a85b141f4f8ffdc809a19e01f22f80c8a11e9d35f790a6de2d898462a19f412de4df26896a3d107baa7a661b5482cd71453b5f88f889b93ee6df84363ecaf04cb0dcd4369f9d1a827b955182334a998e8f2edbfe74beb14e9ff50134f03d24d70b068801684e25370c1cfc065d88582389713500f974e8a6c6e7f015b8e84e5b9861e45d4ce4eef79f0e8d4f15eaf7c1b33e64287470b5b3c0b8b6bdadae567f977341b57486c1eb279be8ee1cdf11b6e0dbd42d32c95b6801cea98e6000ea80777c6ad3f62012732859497080b3aa127a0f3a7b80a99182406ccfd54affb463f8eaf01b0c65ab582628b3c2237d039ee68d307dd113e4b593b243bd64eb6f58a0ccdd8e9a78f9ed393e2affde8d616d57c7aa1d12ebb4be718b49843ec6a90d5d8c197f154f27805046c410d4e1b66cbf4a8e495a3a229a2a1d58b4909a240d7ae6ea9e740c055b06e756e57e2ff19c148cbaf37357c0d3273b7f2ec631565e9f6c6c8722ddb0c1180695fb204f35917dc2fe11469801c545b2560a59d0666ec129b88e4f427989e820982329c2c39321f25648666af651f87b495195a95a5d158fd161324796272303114d99d22890385853dbc66d37ce22de0db447260217cf51aaed240e4f4963ca7510522fc6e7dbe164ccdedc334787ddb24bbc8205bf3353d447a1de2407c248775fa7e318d83e3ff18150b3cd9a7cbb0df0703aab6ef8d0f71bf9b5a305dc25fbd200e06b73c7f298320bd90dab05ec62b5f885e7cf95274c656051c71628f31196354460b001b6366c26fd2e92f6ad68ea37d7e3fe91fe98223563b4d23f802b3911a5241a793cb9f5b4f80081ace5877f95da7499f728ab09837120ca75c63d725e46f9f77c3da16318c9bcdd4a9d68379b627c1a71a34b684e5614ab3fabceab8d2741aca921b1b018098060686c56d7ed190e7470f529f6e680ed72e749fe7c9c2f37ea8cf08d4520e496361d2437018bbda93396c05abb2aeba443ea1ee56a3da04a8b880452a3610cb4163154e02df8a08a5e48c03fb0b0cdd4d355142cc736b344b9fd987b49b85791e5bf7805250dfe63b04c7ff56608129ef43664aa2acf82f18b49cdfd2ae5551ea4d486b35cd2ea60e3f032c58f531d4d36054f5ce268a29862ded0a3cc0ff1d30882f7c85b95e9a8599bf1d143d2d25555bbaa6f8b673b76ca8cc17b693519194784833d902581fec4e656ca546eade53abfd7e4650df648cb61a146bef5382f9255bf4a7c380854568495bdb7b33f490d240ead3d1851ce3b6400eda5a370f13ec998605f46b234bc9293c026bd1d648647bf52d506deb522012ae89c4ea75414ae6677c4aef28dd756f877af23d1a5ae3cb2205850c14f27f595d1a1542bb1eaf641293e3ba40e0bb54193a1e5db969d37c97709efbc34ab509f08a51ba71ecc4f9f66c27190115948cffaae914e7eb4e8d0c59ef7368e9b08a05bbbd340e1c1d34319f150d299c0ddf3bb2138359e826f4997068b99d13cc454fea46b8664d413b79b19656d62cbb5b31744aa33f99651fa56703eaec2e6998c7321f69f6cd110c89ae0c612a96f9a84dd751fd81ff66c80563e7091f5c5b67f89d52e7c58eb26218cddeaf5c6def3ad07a610bd4e5785675580c199b8550cbb02e3b4e1d240bb8df8e514fb505f39fd222209584331bef5d271056accaef84c88741ebd9f116cce3fe7b07b78ac4bad346c0d6e71c9daecd8d60aa8ea0914f85c9078dfaff04ba5e9bbbacddbc0cb40fe20f869d7f196c5edb6657c50b82c67f1abab663bff0a8da16422fe31a4a17995ee25081a06154d1c03f1a87a9d4ad5141a9227849bd920d2515ca16a245b635c85a77884cce0b8ae56929b5e22c52f971c2eed4ccfd64f7790a616f719fc0305af71405abae9407ed1cdaa26606331fdcf9b3c19b90e561f646ea15e0e668ef37b349594a335baf26962b89ef33c98aec3ca3e7df47c20dc2928d074e5f87c0edcf37cb25d3b8304f57f8257a5ae96791697e3c6d04f4ec2eb6a69f25346defed5b509368dea2b1960218bc6dd21b567583c229fc7b5fc85f7f2032eb304c3a1f72204f75ee950344cdef846d94e916b29a43d00c789256810de5fff6f9fd1af0fcfc2edd3fff9e2010d88083fc0b9e6a291e9a7a08af62433689a39e34bed8dafc90fec82be5c63a843d82132ce8916e395791dc86c8d11caf57f7fd096c28537ec38d6c14df9782312abc85fba2d04b0b159637b0e09f7e9faa1a6136359d17cf7c58b83994d58674ddbc248b804a82156900ca95a5002ef62de046e2f5ddf8e1e19f00189d4f5169bfc3c67afc149c6bc155767e64eac433cfb787be7f7bae7f869c0ec3d142668c2f90d383af7207a635850c515d69c6a62e24e0d58c5da244a917a17caa6be01992c4f8be0b9fff57522db4756840bdf72cafa6061ff2b86305c180c470b3af589e7c9e5328d98cf737bf01d80762e1e41a4d63a8655387be7f295862fdea629aa97b40c2ba1b563f1a103a860f7dff7fd5ee8423ce3dbf0fad41b66965c67299e35483130d461ac6c68215850fd441323bb856cdf03f624520743f7b445641c72e08994c8f252fe179b29226637b533f0ed6c94a0b84efc1a884af940fbc05c654b59d37a54047de233c496103bb27b657e7f63c24ef3ce29709622f67653f398dc7c4e44", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="500100000000000000000000000000000300000000fdffffff000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000080000000400000067726f75705f6964030000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="00000000000000000000000000000000000000000000000000000000080000000200000067726f75705f6964"], 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r11, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r13, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000000c0)="a611506cec32749448d150a216880ff3bdeb7641a12e213a152d120330c788cadf94d5fc728bdb4c431fb7a5a3e7f61c46afc47b1129b8ffa42e124f2f027df0d836d747695e88752f4852158ff63f3aa848420fed5c9ebface955154e82e6f091d7de84d04c16d5c96c0c0c86fa63b9ced084fade14a61628c978e78e1bb7d166d5ed9b25bb8219f583728f07654ca090e3866ce2b5035780c0d0d8f8f913f56ece17d7fd7b7c29c2bc4c4f11350b425f714812f30000000000000000", 0xbd}], 0x4}, 0x0) 6m23.170987305s ago: executing program 9 (id=1474): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0xfff, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000010c0)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000001100)={0x1d, r1}, 0x10) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000100)=ANY=[@ANYRES16]) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) iopl(0x3) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000002e80)=ANY=[@ANYRES32, @ANYBLOB="00000000008500000086000000183000000300000000000000000000003d142000ffffffff85200000040000002d0446feffffffff85"], 0x0, 0x2, 0x43, &(0x7f0000000480)=""/67, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003000)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x6, 0x5367fe98, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) mount$overlay(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x3, 0x5}) 6m23.14344722s ago: executing program 8 (id=1475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x700, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 6m22.628588759s ago: executing program 8 (id=1476): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbff7f7e, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c) r2 = userfaultfd(0x80801) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40c4010}, 0x44044800) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/86, 0x56) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) close$fd_v4l2_buffer(r0) syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r5, 0x0, 0xf69}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000007f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r7 = semget$private(0x0, 0x5, 0x0) semop(r7, &(0x7f0000000180)=[{0x3, 0x44cf, 0x800}], 0x1f4) getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f0000000240)=""/139, &(0x7f0000000000)=0x8b) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000180)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) syz_usb_connect(0x2, 0x24, &(0x7f00000043c0)=ANY=[], 0x0) 6m22.556085272s ago: executing program 9 (id=1477): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001500)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000008050005000a000000050001000600000005000400030000000900020073797a310000000011000300686173683a69702c706f7274000000000c0007800500150004"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES64=r1, @ANYRES8=r0, @ANYRES32=r2, @ANYRES16=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5, r3}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) ftruncate(r8, 0x7) r9 = fcntl$getown(r0, 0x9) syz_clone3(&(0x7f0000000780)={0x9100100, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)=0x0, {0x3f}, &(0x7f0000000580)=""/207, 0xcf, &(0x7f00000006c0)=""/152, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4, {r3}}, 0x58) r11 = gettid() r12 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000480)) fcntl$getownex(r4, 0x10, &(0x7f0000000800)={0x0, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x12100}, 0xc, &(0x7f0000000980)={&(0x7f0000000a80)={0x124, 0x0, 0x400, 0x870bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES16=r15, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) r16 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r16, 0x11, 0x1, &(0x7f00000003c0)=""/147, &(0x7f0000000040)=0x93) 6m22.32825421s ago: executing program 6 (id=1478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/disk', 0x21a02, 0x13a) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) socket$kcm(0x10, 0x5, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214050, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000180)=0x1) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/2, 0x2}}, 0x120) write$UHID_INPUT(r4, &(0x7f0000003840)={0xc, {"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", 0x1000}}, 0x4) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0x7, 0x101}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2e, 0x25dfdbfb, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000001f80)={0x20, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040900) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000100)={0xba3b, 0x3, 0xe17, 0x5, 0x2}) 6m22.204515473s ago: executing program 9 (id=1479): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="8014000005000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 6m21.181480812s ago: executing program 6 (id=1480): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700180000", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioprio_get$pid(0x1, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x28, 0x20, 0x1, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_TUN_ID={0xc, 0x14, 0x1, 0x0, 0x8000000000000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) sendmsg$NL80211_CMD_JOIN_OCB(r5, 0x0, 0x20000000) unshare(0x62040200) 6m21.1367971s ago: executing program 2 (id=1481): sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x28, 0x5, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x80000) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x3ff}, 0xe) r4 = socket$kcm(0x10, 0x2, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@remote, @empty, 0x0, "e798888beab3af341dbec4427a73b0fbda814c5f5cd6f92215f46e0b091038f9"}, 0x3c) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x27fd}, 0x8) (async) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (async) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f00000000c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000021c0), 0xffffffffffffffff) (async) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 6m19.590943118s ago: executing program 7 (id=1482): socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000800000000500000a40000000060a8bae000000000000001f0a0000010900010073797a31000000001400048010000180090001006d617371000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) 6m19.510184454s ago: executing program 8 (id=1483): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) setpgid(r0, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x34) ptrace$peeksig(0x4209, r2, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 6m19.380690809s ago: executing program 2 (id=1484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000000fff5000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c0001"], 0x92fc}}, 0x0) 6m18.51343589s ago: executing program 7 (id=1485): set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r1, &(0x7f00000001c0)=""/200, 0xc8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000340)) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000340)) syz_open_dev$evdev(0x0, 0x0, 0x60000) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e643000"/55], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) timer_create(0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003020000000403"], 0x0, 0x0}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000180)={0x1, 0xd4, 0x0, 0x81, 0xfffffff9}) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000180)={0x1, 0xd4, 0x0, 0x81, 0xfffffff9}) 6m18.390049032s ago: executing program 2 (id=1486): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x0, 0x6, 0xf7, "dedf65850b6419a1a91c30ecff7db53c8015fcb3de224932019904462a54a0fef510a32901f1fa5e0e3b71ae9f86115f2e213360296f09f63e2ea6e4ddb6edab0eb23b3be982e9f819f1464a2b452db7a1260dafcabef0a08b865c011a9e57e7c3643920da5cdd06e9d2dc92be4a16408118daa06bfea939d3edfb8f2b1002a0a1951d2591a8340133effdba0170ee163be7c685e3b837a9f7a345d702f885d2af281094d8d3bab2fcf6e8a1119c851f23c22c297d3465b88cd00f28625623e1cec512a0c5b9a9ec9c71f82cfa250b0e047e057f160dd6055816910a57cc6d301979f22b4c9eeea2ba6466ff550022343dbd28f59cc65b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r2) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYRES64=r3, @ANYRES16=r3, @ANYRESHEX=r0], 0xac}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x0, 0x303, 0x70bd29, 0x10000000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910380000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 6m17.996537288s ago: executing program 6 (id=1487): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) accept4(r2, 0x0, &(0x7f00000002c0), 0x80800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r5, r6, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000002b40), &(0x7f0000002b80)=0x0, &(0x7f0000002bc0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002c00)={0x76, 0x2, {0xffffffffffffffff}, {0xee00}, 0xffffffffffff0000, 0xc17}) mount$nfs(&(0x7f0000002a80)='@.\x00', &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00), 0x20c004a, &(0x7f0000002c40)={[{}, {'TIPCv2\x00'}, {'TIPCv2\x00'}, {}, {'TIPCv2\x00'}, {'TIPCv2\x00'}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@uid_gt={'uid>', r5}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r7}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r8}}, {@audit}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) recvmmsg$unix(r2, &(0x7f0000002880)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000000)=""/47, 0x2f}, {&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f00000003c0)=""/195, 0xc3}, {&(0x7f0000000200)=""/104, 0x68}, {&(0x7f00000004c0)=""/55, 0x37}], 0x6, &(0x7f0000000580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)=""/184, 0xb8}], 0x1, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000800)=""/94, 0x5e}], 0x1, &(0x7f00000008c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000001140)=[{&(0x7f00000009c0)=""/112, 0x70}, {&(0x7f0000000a40)=""/221, 0xdd}, {&(0x7f0000000b40)=""/160, 0xa0}, {&(0x7f0000000c00)=""/152, 0x98}, {&(0x7f0000000cc0)=""/7, 0x7}, {&(0x7f0000000d00)=""/192, 0xc0}, {&(0x7f0000000dc0)=""/129, 0x81}, {&(0x7f0000000e80)=""/174, 0xae}, {&(0x7f0000000f40)=""/231, 0xe7}, {&(0x7f0000001040)=""/234, 0xea}], 0xa, &(0x7f0000001200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000001340)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f00000013c0)=""/119, 0x77}], 0x1, &(0x7f0000001480)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000001580)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001600)=""/171, 0xab}, {&(0x7f00000016c0)=""/53, 0x35}], 0x2}}, {{&(0x7f0000001740)=@abs, 0x6e, &(0x7f00000027c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x7, 0x140, &(0x7f0000002a40)) 6m17.380273738s ago: executing program 9 (id=1488): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x5, 0x8}}, 0x28) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040014}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r7, r0}, 0xc) r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x40) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 6m16.663353312s ago: executing program 2 (id=1489): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="23b8c638344ca929e7075acc3e9834a6cd039a14824285d39d85703c53e97e5a0d80c8fc00000000c6340909882d609c66b9ee89cc3432c5da4415a10fd135a56eb71ecbefe790873e0aaa4e0e30c8dfd51072000000000000002ee0ecc6fad80336f6af0e2c1ece958963715bcb930ae0a336229b702f0eea4c9488a71702da4394ff95af6eac00665bcae3ba8e78112945eaa90daec7d703f2d86620c1f8fc037cd665272754af4509a28dd2ea1fd560803e66a7dd21944db1", 0xfffffffffffffe1b, 0x4000082, 0x0, 0x0) 6m16.180174535s ago: executing program 9 (id=1490): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value=0x18}, 0x50) set_robust_list(&(0x7f0000000280), 0x18) r1 = msgget$private(0x0, 0x790) msgsnd(r1, &(0x7f0000000800)=ANY=[@ANYRES8], 0x401, 0x0) msgsnd(r1, 0x0, 0x401, 0x0) 6m15.60847466s ago: executing program 8 (id=1491): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0x3) (async) syz_clone3(&(0x7f0000000300)={0x110080000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x21}, &(0x7f00000000c0)=""/81, 0x51, &(0x7f00000001c0)=""/36, &(0x7f0000000200)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) socket$inet(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x2, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0xb, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffe01}]}]}]}}]}, 0xb0}}, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r4 = socket$netlink(0x10, 0x3, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040), 0x1) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="f3b73800ff0f10000108ffffff00004c00210000000000000007c3f4dbb9eee458ff4e7e82a82e2ed52fa711f47dcc97537125d8b34ba2363f380f8c5200"/75, @ANYRES32=0x0, @ANYBLOB="c90002000005000008001b000000000005001000050000000800280029450000"], 0x38}, 0x1, 0xffffa888}, 0x20000880) 6m15.331526291s ago: executing program 2 (id=1492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xb, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001340)={@val={0x0, 0x6558}, @void, @x25={0x1, 0xfe, 0x0, "42fc4abf43dd85c4bc7eb200195dde075541e97df35ee37b637e2934dceefbcc515742e281975c02fc19c5474e02aacd5074c4fbe9d6df268cdaf88f303faa35c9edba83ec0822647cb4ffe6af96c9c767b9aa973ee25baf9210f235b37a601256ff7e0ac35073d421132fb005d609ec46c5d28c3304c6cdbbb05ff27946a44e43ed9a65353a5cf3076ca0349d6f4e93418a78af398b940cf8a7b7f7f28ce6fe6ca29bd2f18d4edea3bfe1"}}, 0xb2) 6m14.877032565s ago: executing program 9 (id=1493): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffd48}}, 0x40408c0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0x30}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) 6m5.37395349s ago: executing program 6 (id=1494): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b903000600000000"], 0x66) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000010000000001410000001c"], 0x38}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, 0x0, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r7, &(0x7f00000002c0)=[{0xe, 0x81, 0x0, 0xfd, @time={0x7b7, 0x4}, {}, {0xe}, @raw8={"1f000e00000001000000fffe"}}], 0x1c) 6m1.965723489s ago: executing program 38 (id=1485): set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r1, &(0x7f00000001c0)=""/200, 0xc8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000340)) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000340)) syz_open_dev$evdev(0x0, 0x0, 0x60000) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e643000"/55], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) timer_create(0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003020000000403"], 0x0, 0x0}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000180)={0x1, 0xd4, 0x0, 0x81, 0xfffffff9}) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000180)={0x1, 0xd4, 0x0, 0x81, 0xfffffff9}) 5m59.144185747s ago: executing program 39 (id=1493): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffd48}}, 0x40408c0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0x30}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) 5m58.14830683s ago: executing program 40 (id=1491): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0x3) (async) syz_clone3(&(0x7f0000000300)={0x110080000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x21}, &(0x7f00000000c0)=""/81, 0x51, &(0x7f00000001c0)=""/36, &(0x7f0000000200)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) socket$inet(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x2, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0xb, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffe01}]}]}]}}]}, 0xb0}}, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r4 = socket$netlink(0x10, 0x3, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040), 0x1) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="f3b73800ff0f10000108ffffff00004c00210000000000000007c3f4dbb9eee458ff4e7e82a82e2ed52fa711f47dcc97537125d8b34ba2363f380f8c5200"/75, @ANYRES32=0x0, @ANYBLOB="c90002000005000008001b000000000005001000050000000800280029450000"], 0x38}, 0x1, 0xffffa888}, 0x20000880) 5m51.554866591s ago: executing program 41 (id=1492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xb, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001340)={@val={0x0, 0x6558}, @void, @x25={0x1, 0xfe, 0x0, "42fc4abf43dd85c4bc7eb200195dde075541e97df35ee37b637e2934dceefbcc515742e281975c02fc19c5474e02aacd5074c4fbe9d6df268cdaf88f303faa35c9edba83ec0822647cb4ffe6af96c9c767b9aa973ee25baf9210f235b37a601256ff7e0ac35073d421132fb005d609ec46c5d28c3304c6cdbbb05ff27946a44e43ed9a65353a5cf3076ca0349d6f4e93418a78af398b940cf8a7b7f7f28ce6fe6ca29bd2f18d4edea3bfe1"}}, 0xb2) 5m51.452205473s ago: executing program 6 (id=1499): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) (async, rerun: 32) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) (async) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a0703, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000013000500000000000000647204002ada4c94b10007000000bcd76f147f14", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a801800058014000780080001000000000008000200c7490000"], 0x3c}}, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) (rerun: 64) timerfd_create(0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r6, @ANYRESDEC=r10], 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$selinux_validatetrans(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='system_u:object_r\x00\x00gp_device_t:s0 system_u:object_r:inetd_var_run_t:s0 00000000000000057658 /usp/lib/tecontrol-5\x00'], 0x81) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r12, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r7}, 0x20) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r13, r9, 0x25, 0x2, @val=@tcx={@void, @value=r6}}, 0x1c) 5m33.077370315s ago: executing program 42 (id=1499): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) (async, rerun: 32) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) (async) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a0703, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000013000500000000000000647204002ada4c94b10007000000bcd76f147f14", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a801800058014000780080001000000000008000200c7490000"], 0x3c}}, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) (rerun: 64) timerfd_create(0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r6, @ANYRESDEC=r10], 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$selinux_validatetrans(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='system_u:object_r\x00\x00gp_device_t:s0 system_u:object_r:inetd_var_run_t:s0 00000000000000057658 /usp/lib/tecontrol-5\x00'], 0x81) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r12, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r7}, 0x20) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r13, r9, 0x25, 0x2, @val=@tcx={@void, @value=r6}}, 0x1c) 27.584685052s ago: executing program 1 (id=2413): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)={0x40, 0xa, 0x6, "acedf1d2a68b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @random="67e2174ada18"}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "71d5"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0xdb}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x40}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 27.519515351s ago: executing program 3 (id=2415): mmap(&(0x7f0000a45000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385a01e7b3011373dd0c9ee9c6646a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4004001}, 0x48040) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000000), 0x12) splice(r2, 0x0, r1, 0x0, 0xfdef, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mq_unlink(0x0) syslog(0x4, &(0x7f00000000c0)=""/27, 0x1b) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 26.70328024s ago: executing program 5 (id=2417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0xff9de1bcb3367476, 0x5003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x4000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xa32951b3431eaecb) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) socket$netlink(0x10, 0x3, 0x27) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010}) shmget(0x1, 0x2000, 0xd, &(0x7f0000ffd000/0x2000)=nil) bind$llc(r1, 0x0, 0x61) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd(0xffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'veth0_to_team\x00', 0x2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x20040040) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000080)=0xa, 0x4) 26.14637373s ago: executing program 5 (id=2421): socket$inet_udplite(0x2, 0x2, 0x88) r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ffa108000200", @ANYBLOB="35874207"], 0x44}}, 0x0) 25.844713842s ago: executing program 0 (id=2423): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ff3200ff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 25.790903908s ago: executing program 0 (id=2424): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1, 0x0, 0x0, 0x40000000}}], 0x2, 0x0) shutdown(r0, 0x1) 25.620683557s ago: executing program 4 (id=2425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}, 0x1, 0x0, 0xfffe}, 0x0) 25.424447029s ago: executing program 3 (id=2426): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r1 = epoll_create1(0x80000) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_TMR_START(r5, 0x5402) pread64(r4, &(0x7f0000001600)=""/4103, 0x1007, 0x97) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='ext4_es_find_extent_range_exit\x00', r4, 0x0, 0x31573f4d}, 0x18) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000200)={0xa000000c}) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000480)=0xffffffffffffff40, 0x4) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x7f280, @local, 0x6a7}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000029000000360000002b000000000000001800000000000000290000003600000089000000000000008ef3fbe137a2b3b6c3e0d123319991af8963d39dc544bc3802e6f9"], 0x30}}], 0x2, 0x4001c00) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, 0x0, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4a42, 0xffffff7f, 0xa, 0x617, 0x9, 0x0}) ptrace$peekuser(0x3, r10, 0x800) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r9, r11, 0x0, 0x201f00) 25.424046448s ago: executing program 0 (id=2427): socket$unix(0x1, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) accept(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdfffd00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x6056000000000000, 0x5, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x7fffffff}, 0x0, 0x0) 25.421415227s ago: executing program 4 (id=2428): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffe, 0x143002) readv(r0, &(0x7f0000000d80)=[{&(0x7f0000000240)=""/31, 0x1f}], 0x1) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000340), 0xd74, 0x0) setrlimit(0xb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40c4c0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x1, 0x42002) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000480)={0x3, [[0xfffff821, 0x7ff, 0x0, 0x8000, 0x1, 0x4, 0xa4, 0x8], [0x1, 0x7, 0x9, 0xdac, 0x3, 0xe, 0x3, 0x1], [0x80000001, 0x6ff, 0xa, 0x9, 0xb, 0x7, 0x2, 0x1f9a]], '\x00', [{0x6, 0x3ff, 0x1, 0x1}, {0x9ce, 0x4, 0x1, 0x1, 0x1}, {0x7f, 0x5, 0x1, 0x0, 0x1}, {0x5, 0x200, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x3ff, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x431a, 0x0, 0x1}, {0x23cd, 0xff1, 0x0, 0x0, 0x1, 0x1}, {0xfc2, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x60000000, 0x7, 0x1}], '\x00', 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7, 0xcccccccc}) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000040), 0x0, 0x300}) 24.494968925s ago: executing program 1 (id=2429): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000440)=""/185, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000740)=[{0x2, 0x5, 0xe, 0x1}, {0x5, 0x3}, {0x3, 0x2, 0x10, 0x3d0fad6d7b6fcb7a}, {0x4, 0x2, 0x1}, {0x3, 0x2, 0x0, 0xa}, {0x3, 0x4, 0x4, 0x6}, {0x1, 0x3, 0xc, 0x7}, {0x2, 0x5, 0x7, 0x4}], 0x10, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000280)={@private, @loopback}, &(0x7f00000002c0)=0xc) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000000200000002"], 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r5, &(0x7f0000000000)=""/42, 0x2a) getdents64(r5, &(0x7f0000000080)=""/147, 0x93) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat2(0xffffffffffffffff, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x5) lseek(0xffffffffffffffff, 0x2004, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r7, 0x84, 0x17, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) syz_emit_vhci(&(0x7f0000001400)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x2, 0xa}, {0x5, 0x2, 0xd3, 0xcb, 0x5}}}}, 0x17) 24.237630609s ago: executing program 4 (id=2430): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000440)=""/185, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000740)=[{0x2, 0x5, 0xe, 0x1}, {0x5, 0x3}, {0x3, 0x2, 0x10, 0x3d0fad6d7b6fcb7a}, {0x4, 0x2, 0x1}, {0x3, 0x2, 0x0, 0xa}, {0x3, 0x4, 0x4, 0x6}, {0x1, 0x3, 0xc, 0x7}, {0x2, 0x5, 0x7, 0x4}], 0x10, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000280)={@private, @loopback}, &(0x7f00000002c0)=0xc) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000000200000002"], 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r4, &(0x7f0000000000)=""/42, 0x2a) getdents64(r4, &(0x7f0000000080)=""/147, 0x93) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat2(0xffffffffffffffff, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x5) lseek(0xffffffffffffffff, 0x2004, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) syz_emit_vhci(&(0x7f0000001400)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x2, 0xa}, {0x5, 0x2, 0xd3, 0xcb, 0x5}}}}, 0x17) 23.786866494s ago: executing program 0 (id=2431): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000100)=ANY=[@ANYRES16]) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) iopl(0x3) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x8, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="24010000130002002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x124}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB], 0x44}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r11 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) r12 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) 23.786431589s ago: executing program 3 (id=2432): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r0, &(0x7f0000000080)="4c0899d72781f2a68911cb16c704f03552ccd3ea711cb3129b541409d45f6b", 0x1f, 0x4048004, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x24000040) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') 23.784485299s ago: executing program 5 (id=2433): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback, 0x3f}, 0x1c) 23.54880101s ago: executing program 5 (id=2434): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x5, 0x8}}, 0x28) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040014}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r7, r0}, 0xc) r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x40) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 23.194522274s ago: executing program 1 (id=2435): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x29, "c46e9fd1a84b7fafa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c1eca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x2000001}, 0x60) r1 = dup(r0) read$msr(r1, &(0x7f00000194c0)=""/102353, 0x18fd1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000480)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r2, 0x90004) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140), 0x4) 23.060761462s ago: executing program 3 (id=2436): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2, 0x0, 0x0, 0xe00}}], 0x2, 0x0) 22.304435176s ago: executing program 3 (id=2437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d000000000001000000000000000141f000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 22.152539974s ago: executing program 4 (id=2438): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x8403, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) (async) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x1}], 0x1, 0x40800) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x7, 0x80, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0x0, 0x1f, 0xfc, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfd}]}) (async) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x7, 0x80, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0x0, 0x1f, 0xfc, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfd}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000000)='2\x00', 0x2) (async) write$sysctl(r6, &(0x7f0000000000)='2\x00', 0x2) 22.032081846s ago: executing program 1 (id=2439): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "9611e6d6ffc88885083200000000000000000300000000000000230083df00fd", 0x39565559}) 21.324683583s ago: executing program 5 (id=2440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 20.989609883s ago: executing program 0 (id=2441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000030000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 20.185717983s ago: executing program 5 (id=2442): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700011800", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioprio_get$pid(0x1, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x28, 0x20, 0x1, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_TUN_ID={0xc, 0x14, 0x1, 0x0, 0x8000000000000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) sendmsg$NL80211_CMD_JOIN_OCB(r5, 0x0, 0x20000000) unshare(0x62040200) 20.008643702s ago: executing program 1 (id=2443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000140), 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x7, 0x1000000, 0x0}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000040)=""/9, 0x9}, {&(0x7f00000011c0)=""/4109, 0x100d}], 0x3, 0x0, 0x0) 20.00608531s ago: executing program 4 (id=2444): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x24, r2, 0x8, 0x1, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}}, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)=0x7d) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x9) syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) pselect6(0x40, &(0x7f0000000280)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002, 0x300000000000000}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.376447047s ago: executing program 0 (id=2445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)=0x11) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x38100) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000080)=0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000100)=""/16, 0x10}) ioctl(r2, 0x8b2a, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 16.706141814s ago: executing program 3 (id=2446): r0 = socket$netlink(0x10, 0x3, 0x12) r1 = gettid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0xf9f8, 0x1ff, 0x6f015074, 0x7fc, 0x1, 0xffffffffffffffff}) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x144, 0x25, 0x8, 0x70bd2d, 0x25dfdbfb, {0x2}, [@typed={0x8, 0x62, 0x0, 0x0, @u32=0x7}, @generic="f4a323c3c190c4213004145f6fb02dbc691458cc4a48ff9ae342ab8b92211b0931096daf70d5e8bb4abd24d2dca2c0ffd534a1bb84cb2123d031c66731dea9e8eee119b46ac7a3868fc1f8006254bad421aa03faa686e1627f84284108e66635706c1a876ce46756131e1b40f4f699eaa5874830f84aa99eaf180c57cf0499adf7c3f70878254201ff4dffef526cbac7e64a089cde9d54ad2ae2438e08f91e18e556b7353a6fe588ffe8fc7f424a1cb202358a63b6e9b20ba243818265e4397b757a603aa77ef5cf8d2d6470f066c191846f2bca1c947ba54ccffe7c1b36df1d4c2ec0aa6e387b00198d3a58337ed8b5ed1c3321b77c68c7a92f5a19", @nested={0x24, 0xcf, 0x0, 0x1, [@typed={0x7, 0x120, 0x0, 0x0, @str='(\'\x00'}, @nested={0x4, 0x64}, @nested={0x4, 0x31}, @typed={0x8, 0x48, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x133, 0x0, 0x0, @pid=r2}]}, @typed={0x6, 0x43, 0x0, 0x0, @str='*\x00'}]}, 0x144}, 0x1, 0x0, 0x0, 0x84}, 0x24004001) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x40, 0xb, 0xaa, {0xaa, 0xf, "d10ce400d5a9dd8714759265332798723f846903fa4848d813e32a0058fbf1293dd7e1ed0b8410b754fea7610d51e3de1c53210317d8f0443f7d701fbc6d63349d0308e2fae7e4cfb72642d7999e34f2c6ca61b285f0befebf96584bf4937a26b8c6a3795773a281ff08a4d668cc38eae4951258f623f182662ac98108037e853c2b461a48c1bd00fb79d28f5cfbec1fc2d533d3ab45388acfc14c93e31e1375247b1846a83b5d2b"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x20, 0x6, 0xd5, "33a7789113d5974beb1da416679c270dc219ccd62e67dd2826e9695d86514bdb6bf2378d7c4fce7257fe0a7af064090adc44038ee1ad57517e534f66305794de4a12e0b4304a7550192bf0a5c3b7f9bc06685134ac74a3129812dd8024f058a4ae77350b388a6eab4ddb733ed169f24cb5039ffa2d339c379945d767b9257c147d2ecf39545e9648c0c8671b3b1d835a220df642b2fa8272561640404689645fcc1d4a2ca1a212401c2ac154f8c52276577f8f430584161028f6cc0496a1f572a9829e4c366480d604b3eafe234db12aa2c9375346"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x81, 0x100, 0xff, 0xeb, 0xaa6, 0x1, 0x1800, 0x5365, 0x7, 0xa39, 0x3, 0xfff7}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x7f}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) r3 = msgget(0x1, 0x314) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@dev}}, &(0x7f0000000980)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) msgctl$IPC_SET(r3, 0x1, &(0x7f0000002a00)={{0x3, r4, r5, r7, r8, 0x4, 0x800}, 0x0, 0x0, 0x7, 0xfffffffffffff2e7, 0x6, 0x0, 0x100, 0x90, 0x0, 0x1, r2, r1}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000002a80)={0x1, 0x4, 0xf5, 0x1000200, @vifc_lcl_ifindex=r6, @rand_addr=0x64010101}, 0x10) r10 = socket(0x12, 0x80000, 0x9) acct(&(0x7f0000002ac0)='./file0\x00') ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000002bc0)={{{0x6}}, 0xb3, 0x0, &(0x7f0000002b00)="054d346b9cc8c63b301e32574cc7defc3c0520039a6b56de927e3378f455c284eeb9afabe9942adb8dbbf3b472c73ab2fa445183cdc17eb11bf7ae28a96272e7225e4f6dd33ba17522499b89ad86d3f731bacec034bb14e6de9759dfe1fe8ea8481699bfe0b91beccc6801801886279a7f954a40c36fee6591eedf941a4d12cd86d26fb6a334fa37d5a4458c772d1c3c4229849548ae6524f9a2f476c11d355c30de2cb45436c329f6d19dba68c332fb2e007c"}) r11 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002c00), 0x159942, 0x0) ioctl$TIOCGICOUNT(r11, 0x545d, 0x0) getsockopt$inet6_udp_int(r10, 0x11, 0x1, &(0x7f0000002c40), &(0x7f0000002c80)=0x4) r12 = socket$netlink(0x10, 0x3, 0x7) connect$unix(r10, &(0x7f0000002cc0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r12, 0x10e, 0x8, &(0x7f0000002d40)=0x4, 0x4) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000002e80)={0x14, &(0x7f0000002d80)={0x0, 0xa, 0x9f, {0x9f, 0x10, "d0edebee27c770bb7d57ea112eaa46c3925b3bf12691204a3c1f2c3c2e66c4380865f60c17943bb22eca87120d83cab0509007e2f986c7bbe7a938bc6919eeb89b3f1988165c97766525f95e0e38a06fc99a1f114657d758fae088d9c6ebe027e9415a9d4b106f9b35caa1bbcb9c476dc4715e53220ee89e7d0a7c2d69f3c3e0162b736266ab335a03e2346568ed9dc800109c8ba0d3d567b14d683aad"}}, &(0x7f0000002e40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003100)={0x44, &(0x7f0000002ec0)={0x20, 0xe, 0x75, "68efc33105a1d543d58b718c406507887c2f658f5e157c1991406f9e89cb423341530a2f4586567875563bd8c3ee37583a2aac11929c19c58b59bacecb594c2e2aabc8f9745ddfffe6905ba42ed71b180b195d7566c53504f9e1aec78ca6678aee6ae4470b3283f2392292643881b987084385f70d"}, &(0x7f0000002f40)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000002f80)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000002fc0)={0x20, 0x80, 0x1c, {0x1, 0x7, 0x1, 0x1, 0x9, 0x7, 0x0, 0xffff4bda, 0x0, 0x6, 0x1, 0xe}}, &(0x7f0000003000)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000003040)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000003080)={0x20, 0x87, 0x2, 0xfffb}, &(0x7f00000030c0)={0x20, 0x89, 0x2, 0x1}}) r13 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000003180), 0x0, 0x0) mknodat(r13, &(0x7f00000031c0)='./file0\x00', 0x20, 0xf51f) mount$9p_xen(&(0x7f0000003200), &(0x7f0000003240)='./file0\x00', &(0x7f0000003280), 0x100000, &(0x7f00000032c0)={'trans=xen,', {[{@debug={'debug', 0x3d, 0x9}}, {@cache_fscache}, {@privport}, {@noxattr}], [{@dont_measure}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r7}}, {@dont_measure}, {@permit_directio}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@subj_role={'subj_role', 0x3d, '\\*'}}, {@obj_type={'obj_type', 0x3d, '.&!!],'}}]}}) r14 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r14, &(0x7f00000033c0)={0x23, 0x4, 0x47, 0x93}, 0x10) r15 = syz_open_dev$sndctrl(&(0x7f0000003400), 0x1, 0x200) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r15, 0x80045530, &(0x7f0000003440)=""/48) 16.648511125s ago: executing program 1 (id=2447): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0xffffffffffffff62, &(0x7f0000000280)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ed", @ANYRES32=0x1, @ANYBLOB="1700"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="04000000000000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000006433e8cef2703554000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85513, &(0x7f0000000b00)={{0xa, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000004, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8, 0x10001, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x10000, 0xa3b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0xfffffffffffff1c5, 0x8, 0x0, 0x3, 0x3, 0x20000, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x80000001, 0x6, 0x0, 0x7, 0x0, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0xc675, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) socket$nl_route(0x10, 0x3, 0x0) socket(0x3, 0x80000, 0x5) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x100, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='geneve0\x00', 0x2, 0x3, 0x80}) r7 = syz_io_uring_setup(0x3b, &(0x7f0000000480)={0x0, 0x36c7, 0x10100}, 0x0, &(0x7f0000000240)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000280)=""/204, 0xcc}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r7, 0xd81, 0x0, 0x0, 0x0, 0x0) 16.363993518s ago: executing program 4 (id=2448): ioperm(0x0, 0x12e, 0x8000000000008) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() ioctl$SIOCRSACCEPT(r0, 0x89e3) syz_emit_ethernet(0x72, &(0x7f0000000180)={@link_local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, [@hopopts={0x3a}]}}}}}}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlockall(0x7) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$inet(0x2, 0x3, 0x5) getsockopt$MRT(r3, 0x0, 0xd0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00070800030000000000080001"], 0x44}}, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 0s ago: executing program 43 (id=2442): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700011800", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioprio_get$pid(0x1, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x28, 0x20, 0x1, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_TUN_ID={0xc, 0x14, 0x1, 0x0, 0x8000000000000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) sendmsg$NL80211_CMD_JOIN_OCB(r5, 0x0, 0x20000000) unshare(0x62040200) kernel console output (not intermixed with test programs): 2][ T5929] usb 1-1: config 152 interface 241 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 763.578443][ T5929] usb 1-1: config 152 interface 241 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 13 [ 763.578457][ T5929] usb 1-1: too many endpoints for config 152 interface 145 altsetting 223: 84, using maximum allowed: 30 [ 763.578476][ T5929] usb 1-1: config 152 interface 145 altsetting 223 has an invalid descriptor for endpoint zero, skipping [ 763.578489][ T5929] usb 1-1: config 152 interface 145 altsetting 223 has a duplicate endpoint with address 0xD, skipping [ 763.578502][ T5929] usb 1-1: config 152 interface 145 altsetting 223 has a duplicate endpoint with address 0xF, skipping [ 763.578515][ T5929] usb 1-1: config 152 interface 145 altsetting 223 has 5 endpoint descriptors, different from the interface descriptor's value: 84 [ 763.578535][ T5929] usb 1-1: config 152 interface 110 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 763.578548][ T5929] usb 1-1: config 152 interface 110 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 763.578561][ T5929] usb 1-1: config 152 interface 110 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 763.578574][ T5929] usb 1-1: config 152 interface 110 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 763.578588][ T5929] usb 1-1: config 152 interface 110 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 763.578599][ T5929] usb 1-1: config 152 interface 110 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 763.578611][ T5929] usb 1-1: config 152 interface 110 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 763.578623][ T5929] usb 1-1: config 152 interface 110 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 763.578635][ T5929] usb 1-1: config 152 interface 110 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 763.578646][ T5929] usb 1-1: config 152 interface 110 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 763.578658][ T5929] usb 1-1: config 152 interface 110 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 763.578671][ T5929] usb 1-1: config 152 interface 110 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 763.578686][ T5929] usb 1-1: config 152 interface 20 altsetting 229 has an invalid descriptor for endpoint zero, skipping [ 763.578698][ T5929] usb 1-1: config 152 interface 20 altsetting 229 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 763.578712][ T5929] usb 1-1: config 152 interface 20 altsetting 229 has a duplicate endpoint with address 0xD, skipping [ 763.578723][ T5929] usb 1-1: config 152 interface 20 altsetting 229 has a duplicate endpoint with address 0xF, skipping [ 763.578736][ T5929] usb 1-1: config 152 interface 20 altsetting 229 has an invalid descriptor for endpoint zero, skipping [ 763.578747][ T5929] usb 1-1: config 152 interface 20 altsetting 229 has a duplicate endpoint with address 0xC, skipping [ 763.578760][ T5929] usb 1-1: config 152 interface 20 altsetting 229 has a duplicate endpoint with address 0x1, skipping [ 763.578771][ T5929] usb 1-1: config 152 interface 20 altsetting 229 has an invalid descriptor for endpoint zero, skipping [ 763.578782][ T5929] usb 1-1: config 152 interface 145 has no altsetting 0 [ 763.578792][ T5929] usb 1-1: config 152 interface 110 has no altsetting 0 [ 763.578801][ T5929] usb 1-1: config 152 interface 20 has no altsetting 0 [ 763.585151][ T5929] usb 1-1: New USB device found, idVendor=1b3d, idProduct=011a, bcdDevice=82.b7 [ 763.585171][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.585183][ T5929] usb 1-1: Product: syz [ 763.585192][ T5929] usb 1-1: Manufacturer: ⤰ᾜ꛻鿲è¤å¥ì¹œì¯³ëœ³ë­à·Žé··êƒ€ÒŸå¿íž½ïŒ·êµºë¸¦î¦¸ë³„⌀黦ꩶ⠉í”ꒂ뭪⑮啕â傈砊憭㢜徎テ训å¿á«…掦븲ᤈ暶斟䜶â¡ç½®ê”¶êªë‡ ã¾ˆË’㟃ɕ᫩瘼퟽츥픡ᶌ絧ëŠê€„㬀࿼ë‚é¹è’䯷熽ͦ옰뷽姧门릫ⶨ鿋âœëŽË“êƒãƒâ¶¾Ñ‹á­­ë§€î•¾á¹žë†‡ê‘®æœ—쬇瞮慠봱å㜃塉á¦è¤¹ÌÆŸë‡âƒ¬éºŠïž³à»”é› [ 763.585211][ T5929] usb 1-1: SerialNumber: syz [ 763.656505][T13864] geneve2: entered promiscuous mode [ 763.954334][T13871] tmpfs: Unknown parameter ';Dì$ºåÑ’Çblock_hardlimit' [ 764.479579][ T5929] ftdi_sio 1-1:152.241: FTDI USB Serial Device converter detected [ 764.479996][ T5929] ftdi_sio ttyUSB0: unknown device type: 0x82b7 [ 764.759188][ T5929] ftdi_sio 1-1:152.145: FTDI USB Serial Device converter detected [ 764.759625][ T5929] ftdi_sio ttyUSB1: unknown device type: 0x82b7 [ 764.854838][ T5929] ftdi_sio 1-1:152.110: FTDI USB Serial Device converter detected [ 764.855554][ T5929] ftdi_sio ttyUSB2: unknown device type: 0x82b7 [ 764.943202][ T5929] ftdi_sio 1-1:152.20: FTDI USB Serial Device converter detected [ 764.944414][ T5929] ftdi_sio ttyUSB3: unknown device type: 0x82b7 [ 765.066581][ T5929] usb 1-1: USB disconnect, device number 23 [ 765.070920][ T5929] ftdi_sio 1-1:152.241: device disconnected [ 765.116660][ T5929] ftdi_sio 1-1:152.145: device disconnected [ 765.262561][ C0] vkms_vblank_simulate: vblank timer overrun [ 765.318653][ T5929] ftdi_sio 1-1:152.110: device disconnected [ 765.377877][ T5929] ftdi_sio 1-1:152.20: device disconnected [ 765.768339][T13889] bridge_slave_0: left allmulticast mode [ 765.774369][T13889] bridge_slave_0: left promiscuous mode [ 765.780509][T13889] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.853015][T13889] bridge_slave_1: left allmulticast mode [ 765.882655][T13889] bridge_slave_1: left promiscuous mode [ 765.888873][T13889] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.877472][T13889] bond0: (slave bond_slave_0): Releasing backup interface [ 766.880529][ T30] audit: type=1400 audit(1754692640.799:649): avc: denied { mounton } for pid=13892 comm="syz.3.1769" path="/file0" dev="ramfs" ino=45318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 766.926731][T13889] bond0: (slave bond_slave_1): Releasing backup interface [ 766.961583][T13889] team0: Port device team_slave_0 removed [ 767.252401][T13889] team0: Port device team_slave_1 removed [ 767.258806][T13889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.279841][T13889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.298597][T13889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.306232][T13889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.388146][T13890] team0: Mode changed to "loadbalance" [ 768.592262][T13927] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 768.600119][T13927] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 768.609196][T13927] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 768.617161][T13927] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 768.745160][T11484] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 769.015267][T13928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1775'. [ 769.076778][T11484] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 769.086730][T11484] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 769.108630][T11484] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 769.247790][T11484] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 769.261789][T11484] usb 6-1: config 1 has no interface number 0 [ 769.272251][T11484] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 769.291490][T11484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.365385][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1778'. [ 769.400018][T11484] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 769.462329][ T5910] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 769.626280][T11484] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 769.651127][T11484] snd_usb_pod 6-1:1.1: invalid control EP [ 769.690548][T11484] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 769.690654][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.765914][ T5910] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 769.772491][T11484] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 769.793944][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.851048][ T5910] usb 1-1: config 0 descriptor?? [ 769.907873][T11484] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 769.943406][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 769.968767][T11484] usb 6-1: USB disconnect, device number 10 [ 770.835649][ T5910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 770.843318][ T5910] pwc: recv_control_msg error -32 req 02 val 2700 [ 770.856510][ T5910] pwc: recv_control_msg error -32 req 02 val 2c00 [ 770.874233][ T5910] pwc: recv_control_msg error -32 req 04 val 1000 [ 770.885791][ T5910] pwc: recv_control_msg error -32 req 04 val 1300 [ 770.905623][ T5910] pwc: recv_control_msg error -32 req 04 val 1400 [ 770.918586][ T5910] pwc: recv_control_msg error -32 req 02 val 2000 [ 770.935516][ T5910] pwc: recv_control_msg error -32 req 02 val 2100 [ 770.948088][ T5910] pwc: recv_control_msg error -32 req 04 val 1500 [ 770.970252][ T5910] pwc: recv_control_msg error -32 req 02 val 2500 [ 770.991362][ T5910] pwc: recv_control_msg error -32 req 02 val 2400 [ 771.032640][ T5910] pwc: recv_control_msg error -32 req 02 val 2600 [ 771.134240][ T5910] pwc: recv_control_msg error -32 req 02 val 2900 [ 772.168630][T11484] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 772.323986][T11484] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.342505][ T5910] pwc: recv_control_msg error -32 req 02 val 2800 [ 772.352779][ T5910] pwc: recv_control_msg error -71 req 04 val 1100 [ 772.359643][ T5910] pwc: recv_control_msg error -71 req 04 val 1200 [ 772.380977][T11484] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 772.402618][ T5910] pwc: Registered as video103. [ 772.408885][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42 [ 772.430301][ T5910] usb 1-1: USB disconnect, device number 24 [ 772.463146][T14005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.473883][T14005] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1790'. [ 772.557239][T11484] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 772.582445][T11484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.754448][T11484] usb 4-1: config 0 descriptor?? [ 772.827815][T14013] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1791'. [ 773.420479][T14022] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1797'. [ 773.725122][T14025] overlayfs: missing 'workdir' [ 773.891608][T14029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.978556][T14029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.002908][T14027] veth3: entered promiscuous mode [ 774.342098][T14040] lo speed is unknown, defaulting to 1000 [ 774.512426][T10591] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 775.402380][T10591] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.430267][T10591] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 775.441902][T10591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.462809][T10591] usb 5-1: config 0 descriptor?? [ 775.471240][T10591] pwc: Askey VC010 type 2 USB webcam detected. [ 776.234026][T10591] pwc: recv_control_msg error -32 req 02 val 2b00 [ 776.257248][T10591] pwc: recv_control_msg error -32 req 02 val 2700 [ 776.281227][T10591] pwc: recv_control_msg error -32 req 02 val 2c00 [ 776.337374][T10591] pwc: recv_control_msg error -32 req 04 val 1000 [ 776.365908][ T5975] usb 4-1: USB disconnect, device number 22 [ 776.396680][T10591] pwc: recv_control_msg error -32 req 04 val 1300 [ 776.405562][T10591] pwc: recv_control_msg error -32 req 04 val 1400 [ 776.621495][T10591] pwc: recv_control_msg error -32 req 02 val 2100 [ 776.646511][T10591] pwc: recv_control_msg error -32 req 04 val 1500 [ 776.653694][T10591] pwc: recv_control_msg error -32 req 02 val 2500 [ 776.663823][T10591] pwc: recv_control_msg error -32 req 02 val 2400 [ 776.671198][T10591] pwc: recv_control_msg error -32 req 02 val 2600 [ 776.679251][T10591] pwc: recv_control_msg error -32 req 02 val 2900 [ 776.700680][T10591] pwc: recv_control_msg error -32 req 02 val 2800 [ 776.701324][ T30] audit: type=1400 audit(1754692650.619:650): avc: denied { listen } for pid=14083 comm="syz.3.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 776.715870][T14085] netlink: 'syz.3.1809': attribute type 1 has an invalid length. [ 776.735101][T10591] pwc: recv_control_msg error -32 req 04 val 1100 [ 776.803864][T10591] pwc: Registered as video103. [ 776.809576][T10591] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 776.830448][T14086] bridge2: entered promiscuous mode [ 776.862092][T14090] bridge2: entered promiscuous mode [ 776.964927][T10591] usb 5-1: USB disconnect, device number 32 [ 777.077858][T14101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.117453][T14101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.492344][ T5910] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 777.647303][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 777.654826][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.689888][ T5910] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 777.712302][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.753676][ T5910] usb 1-1: config 0 descriptor?? [ 777.789065][ T5910] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 777.833717][T14124] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1820'. [ 777.943546][T14131] 9pnet_fd: Insufficient options for proto=fd [ 779.032248][ T5910] gspca_vc032x: reg_w err -71 [ 779.037042][ T5910] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 779.068939][ T5910] usb 1-1: USB disconnect, device number 25 [ 779.512332][ T5975] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 779.592353][T10591] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 779.675577][ T5975] usb 6-1: config 0 has an invalid interface number: 128 but max is 1 [ 779.694510][ T5975] usb 6-1: config 0 has an invalid interface number: 175 but max is 1 [ 779.722977][ T5975] usb 6-1: config 0 has no interface number 0 [ 779.729303][ T5975] usb 6-1: config 0 has no interface number 1 [ 780.175235][ T5975] usb 6-1: config 0 interface 128 has no altsetting 0 [ 780.183584][T10591] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.202553][T10591] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 780.204879][T14170] Device name cannot be null; rc = [-22] [ 780.250701][T10591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.277041][ T5975] usb 6-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=55.83 [ 780.326912][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.373489][T10591] usb 5-1: config 0 descriptor?? [ 780.385067][ T5975] usb 6-1: Product: syz [ 780.399424][ T5975] usb 6-1: Manufacturer: syz [ 780.412057][ T5975] usb 6-1: SerialNumber: syz [ 780.463166][ T5975] usb 6-1: config 0 descriptor?? [ 780.558738][T10591] pwc: Askey VC010 type 2 USB webcam detected. [ 780.655798][T14174] netlink: zone id is out of range [ 780.660979][T14174] netlink: zone id is out of range [ 780.674147][T14174] netlink: zone id is out of range [ 780.699798][T14174] netlink: zone id is out of range [ 780.702422][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 780.706503][T14174] netlink: zone id is out of range [ 780.731492][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 780.732335][T14174] netlink: zone id is out of range [ 780.749873][ T5975] cdc_mbim 6-1:0.175: CDC Union missing and no IAD found [ 780.854890][ T5975] cdc_mbim 6-1:0.175: bind() failure [ 780.864806][ T5975] usb 6-1: USB disconnect, device number 11 [ 780.871582][T14174] netlink: zone id is out of range [ 780.884614][T14174] netlink: zone id is out of range [ 780.899513][T14174] netlink: zone id is out of range [ 780.905883][T14174] netlink: zone id is out of range [ 780.918414][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 780.928859][T10591] pwc: recv_control_msg error -32 req 02 val 2b00 [ 780.936253][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 780.946360][T10591] pwc: recv_control_msg error -32 req 02 val 2700 [ 780.970835][T10591] pwc: recv_control_msg error -32 req 02 val 2c00 [ 780.990887][T10591] pwc: recv_control_msg error -32 req 04 val 1000 [ 781.005709][T10591] pwc: recv_control_msg error -32 req 04 val 1300 [ 781.026450][T10591] pwc: recv_control_msg error -32 req 04 val 1400 [ 781.115712][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 781.130802][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 781.198454][ T30] audit: type=1400 audit(1754692655.119:651): avc: denied { getopt } for pid=14191 comm="syz.0.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 781.270116][T10591] pwc: recv_control_msg error -32 req 02 val 2100 [ 781.286706][T10591] pwc: recv_control_msg error -32 req 04 val 1500 [ 781.307469][T10591] pwc: recv_control_msg error -32 req 02 val 2500 [ 781.318249][T10591] pwc: recv_control_msg error -32 req 02 val 2400 [ 781.326044][T10591] pwc: recv_control_msg error -32 req 02 val 2600 [ 781.333603][T10591] pwc: recv_control_msg error -32 req 02 val 2900 [ 781.341412][T10591] pwc: recv_control_msg error -32 req 02 val 2800 [ 781.350731][T10591] pwc: recv_control_msg error -32 req 04 val 1100 [ 781.360682][T10591] pwc: Registered as video103. [ 781.368069][T10591] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input44 [ 781.432709][T14209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1838'. [ 781.565572][ T5855] usb 5-1: USB disconnect, device number 33 [ 781.664894][ T30] audit: type=1400 audit(1754692655.579:652): avc: denied { ioctl } for pid=14212 comm="syz.3.1839" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 781.705836][T10591] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 781.750472][T14222] input: syz0 as /devices/virtual/input/input45 [ 781.866672][T10591] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 781.876722][T10591] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.885753][T10591] usb 6-1: Product: syz [ 781.890103][T10591] usb 6-1: Manufacturer: syz [ 781.898375][T10591] usb 6-1: SerialNumber: syz [ 781.915655][T10591] usb 6-1: config 0 descriptor?? [ 782.097928][T14232] 9pnet_fd: Insufficient options for proto=fd [ 782.118596][T14231] 9pnet_fd: Insufficient options for proto=fd [ 782.143989][T14231] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1843'. [ 782.336835][T10591] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 782.444629][T12284] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 782.751346][T10591] asix 6-1:0.0: probe with driver asix failed with error -71 [ 782.761094][T10591] usb 6-1: USB disconnect, device number 12 [ 782.905093][T14252] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.1847'. [ 783.438700][T14263] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 783.458320][T14263] cramfs: wrong magic [ 784.825514][ T5975] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 785.076456][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.098568][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.110353][ T5975] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 785.121001][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.137567][ T5975] usb 4-1: config 0 descriptor?? [ 785.312582][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 785.998634][T14295] lo speed is unknown, defaulting to 1000 [ 786.068994][ T30] audit: type=1400 audit(1754692659.989:653): avc: denied { write } for pid=14270 comm="syz.3.1853" path="socket:[46163]" dev="sockfs" ino=46163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 786.279052][ T5910] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 786.529147][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.576648][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 786.669146][ T5910] usb 6-1: config 0 has an invalid interface number: 9 but max is 0 [ 786.703273][T12284] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 786.712378][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.731583][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.876467][ T10] usb 5-1: config 0 descriptor?? [ 786.930195][ T5910] usb 6-1: config 0 has no interface number 0 [ 787.006998][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 787.030458][ T5910] usb 6-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 787.081774][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.146373][ T5910] usb 6-1: config 0 descriptor?? [ 787.191076][ T5910] rndis_host 6-1:0.9: More than one union descriptor, skipping ... [ 787.245094][ T5910] usb 6-1: bad CDC descriptors [ 787.272984][ T5910] cdc_acm 6-1:0.9: More than one union descriptor, skipping ... [ 787.355210][T14318] TCP: TCP_TX_DELAY enabled [ 787.387160][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 787.417019][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 787.417625][T14326] wg1: entered promiscuous mode [ 787.443995][T14326] wg1: entered allmulticast mode [ 787.446037][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 787.476454][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 787.488218][T14283] vivid-000: disconnect [ 787.494173][T10591] usb 6-1: USB disconnect, device number 13 [ 787.494818][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 787.500712][T14281] vivid-000: reconnect [ 787.525627][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 787.540152][T14330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.566172][T14330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.743339][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 787.760674][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 787.771011][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 787.779331][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 787.796649][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 787.821225][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 787.828578][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 787.840187][ T10] pwc: recv_control_msg error -32 req 04 val 1100 [ 787.850649][ T10] pwc: Registered as video103. [ 787.858494][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input46 [ 788.074022][T10540] usb 5-1: USB disconnect, device number 34 [ 788.572258][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 788.840120][T10591] libceph: connect (1)[c::]:6789 error -101 [ 788.917093][T10591] libceph: mon0 (1)[c::]:6789 connect error [ 788.982300][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 788.995792][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 789.010681][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 789.025092][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 789.037260][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 789.048745][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 789.078702][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 789.106802][T14362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.117650][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 789.132859][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 789.149813][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 789.161489][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 789.182047][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 789.192876][T11484] libceph: connect (1)[c::]:6789 error -101 [ 789.199036][T11484] libceph: mon0 (1)[c::]:6789 connect error [ 789.219963][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 789.270375][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 789.300707][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 789.313757][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 789.634556][T14366] ceph: No mds server is up or the cluster is laggy [ 789.748581][ T24] usb 6-1: string descriptor 0 read error: -22 [ 789.765717][ T24] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 789.790198][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.942952][ T24] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 790.218536][T12284] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 790.272849][T14396] net_ratelimit: 19 callbacks suppressed [ 790.278581][T14396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 790.357914][T11484] usb 6-1: USB disconnect, device number 14 [ 790.488439][T14405] netlink: 'syz.4.1881': attribute type 4 has an invalid length. [ 790.569097][T14358] tipc: Started in network mode [ 790.585453][T14358] tipc: Node identity b66eb12c766d, cluster identity 4711 [ 790.611808][T14358] tipc: Enabled bearer , priority 0 [ 790.659097][T14358] batadv_slave_1: mtu less than device minimum [ 790.662282][T14415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1882'. [ 790.685725][T14356] tipc: Disabling bearer [ 791.229285][T14415] vlan2: entered promiscuous mode [ 791.276548][T14415] gretap0: entered promiscuous mode [ 791.322254][T10540] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 791.337988][T14427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.575344][T14427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.076816][ T5975] usbhid 4-1:0.0: can't add hid device: -110 [ 792.090537][ T5975] usbhid 4-1:0.0: probe with driver usbhid failed with error -110 [ 792.132499][T10540] usb 5-1: device descriptor read/64, error -71 [ 792.687394][ T30] audit: type=1400 audit(1754692666.609:654): avc: denied { append } for pid=14439 comm="syz.1.1888" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 792.874342][ T5975] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 793.229551][ T5975] usb 6-1: Using ep0 maxpacket: 32 [ 793.364154][ T5975] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 793.928579][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.943577][ T5975] usb 6-1: config 0 descriptor?? [ 793.955576][ T5975] gspca_main: sq930x-2.14.0 probing 041e:403c [ 793.971111][T14469] netlink: 'syz.4.1892': attribute type 39 has an invalid length. [ 793.978018][T14469] veth0_macvtap: left promiscuous mode [ 794.286688][T14474] syzkaller0: entered promiscuous mode [ 794.423757][T14474] syzkaller0: entered allmulticast mode [ 794.520476][T12284] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 794.652673][ T5975] gspca_sq930x: ucbus_write failed -110 [ 794.844433][ T5975] sq930x 6-1:0.0: probe with driver sq930x failed with error -110 [ 794.910187][ T30] audit: type=1400 audit(1754692668.829:655): avc: denied { relabelfrom } for pid=14480 comm="syz.1.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 794.934730][T14481] tmpfs: Bad value for 'size' [ 794.940214][ T30] audit: type=1400 audit(1754692668.829:656): avc: denied { relabelto } for pid=14480 comm="syz.1.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 795.087213][T12284] Bluetooth: hci7: command 0x0406 tx timeout [ 795.093423][T12284] Bluetooth: hci6: command 0x0406 tx timeout [ 795.099506][T12284] Bluetooth: hci5: command 0x0406 tx timeout [ 795.099510][T14490] Bluetooth: hci3: command 0x0406 tx timeout [ 795.099543][T14490] Bluetooth: hci4: command 0x0406 tx timeout [ 795.432415][ T5929] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 795.542719][ T5975] usb 6-1: USB disconnect, device number 15 [ 795.667647][ T5929] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.102350][ T5929] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 796.119702][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.135134][ T5929] usb 1-1: config 0 descriptor?? [ 796.166982][ T5929] pwc: Askey VC010 type 2 USB webcam detected. [ 796.531996][T14525] gretap0: entered promiscuous mode [ 796.538317][T14525] vlan2: entered promiscuous mode [ 796.960501][ T5929] pwc: recv_control_msg error -32 req 02 val 2b00 [ 796.980655][ T5929] pwc: recv_control_msg error -32 req 02 val 2700 [ 796.990960][ T5929] pwc: recv_control_msg error -32 req 02 val 2c00 [ 797.005457][T14524] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14524 comm=syz.4.1905 [ 797.020475][ T5929] pwc: recv_control_msg error -32 req 04 val 1000 [ 797.042045][ T5929] pwc: recv_control_msg error -32 req 04 val 1300 [ 797.122978][ T5929] pwc: recv_control_msg error -32 req 04 val 1400 [ 797.155289][ T30] audit: type=1400 audit(1754692671.079:657): avc: denied { setopt } for pid=14523 comm="syz.4.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 797.172669][T14533] tipc: Enabling of bearer rejected, media not registered [ 797.344019][ T5929] pwc: recv_control_msg error -32 req 02 val 2100 [ 797.400697][ T5929] pwc: recv_control_msg error -32 req 04 val 1500 [ 797.571754][ T5929] pwc: recv_control_msg error -32 req 02 val 2500 [ 797.791791][ T5929] pwc: recv_control_msg error -32 req 02 val 2400 [ 797.867155][ T5929] pwc: recv_control_msg error -32 req 02 val 2600 [ 797.894825][ T5929] pwc: recv_control_msg error -32 req 02 val 2900 [ 797.920263][ T5929] pwc: recv_control_msg error -32 req 02 val 2800 [ 797.950038][ T5929] pwc: recv_control_msg error -32 req 04 val 1100 [ 797.983502][ T5929] pwc: Registered as video103. [ 798.004200][ T5929] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input47 [ 798.270036][T11484] usb 1-1: USB disconnect, device number 26 [ 798.549767][ T5858] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 800.753420][T14579] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1913'. [ 802.209421][ T5858] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 802.992682][T14630] bridge_slave_0: left allmulticast mode [ 802.998513][T14630] bridge_slave_0: left promiscuous mode [ 803.008056][T14630] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.166814][T14635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.201977][T14635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.229797][T14630] bridge_slave_1: left allmulticast mode [ 804.236824][T14630] bridge_slave_1: left promiscuous mode [ 804.254203][T14630] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.338527][T14630] bond0: (slave bond_slave_0): Releasing backup interface [ 804.480137][T14630] bond0: (slave bond_slave_1): Releasing backup interface [ 804.661210][T14630] team0: Port device team_slave_0 removed [ 804.699187][ T30] audit: type=1400 audit(1754692678.619:658): avc: denied { append } for pid=14646 comm="syz.4.1929" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 804.728333][T14630] team0: Port device team_slave_1 removed [ 804.879271][T10540] lo speed is unknown, defaulting to 1000 [ 804.912812][T14631] team0: Mode changed to "loadbalance" [ 805.120110][ T30] audit: type=1804 audit(1754692679.039:659): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1932" name="/newroot/79/file0" dev="tmpfs" ino=431 res=1 errno=0 [ 805.145187][T14669] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 805.175087][T14669] ref_ctr increment failed for inode: 0x1af offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88806c30e0c0 [ 805.472275][ T5975] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 805.702233][T14680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1933'. [ 805.743965][ T5975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 805.829266][ T5975] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 805.899983][ T5975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 805.961306][ T5975] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 806.000865][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.020087][ T5975] usb 2-1: Product: syz [ 806.032489][ T5975] usb 2-1: Manufacturer: syz [ 806.037327][ T5975] usb 2-1: SerialNumber: syz [ 806.262838][ T5858] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 806.285992][ T5975] usb 2-1: config 0 descriptor?? [ 806.584337][T14672] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 806.607485][T14672] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 806.725554][ T5975] usb 2-1: ucan: probing device on interface #0 [ 807.286017][T14702] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1936'. [ 807.861163][T14728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.922536][T14728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.573243][ T5975] usb 2-1: ucan: failed to retrieve device info [ 808.580192][ T5975] usb 2-1: ucan: probe failed; try to update the device firmware [ 808.580605][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.594450][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.732687][ T5975] usb 2-1: USB disconnect, device number 28 [ 809.538295][T14754] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1945'. [ 810.022234][ T5975] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 810.512284][ T5975] usb 2-1: Using ep0 maxpacket: 8 [ 810.659776][ T5975] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 811.256026][ T5975] usb 2-1: config 179 has no interface number 0 [ 811.392215][ T5975] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 811.404935][T14761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 811.512353][ T5858] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 811.819462][ T5975] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 811.831878][ T5975] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 811.843354][ T5975] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 811.854769][ T5975] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 811.886552][ T5975] usb 2-1: config 179 interface 65 has no altsetting 0 [ 811.941671][ T5975] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 811.964455][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.035515][ T5975] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input48 [ 812.102494][ T5201] input input48: unable to receive magic message: -110 [ 812.130584][ T5975] usb 2-1: USB disconnect, device number 29 [ 812.136639][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 812.137002][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 812.355275][T14797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.853030][T14797] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1958'. [ 812.892280][T11484] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 813.087153][T11484] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.106129][T11484] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 813.936147][T14820] FAULT_INJECTION: forcing a failure. [ 813.936147][T14820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 813.950911][T14820] CPU: 1 UID: 0 PID: 14820 Comm: syz.4.1962 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 813.950938][T14820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 813.950949][T14820] Call Trace: [ 813.950955][T14820] [ 813.950962][T14820] dump_stack_lvl+0x16c/0x1f0 [ 813.950997][T14820] should_fail_ex+0x512/0x640 [ 813.951019][T14820] should_fail_alloc_page+0xe7/0x130 [ 813.951042][T14820] prepare_alloc_pages+0x3c2/0x610 [ 813.951067][T14820] ? lock_acquire+0x179/0x350 [ 813.951097][T14820] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 813.951119][T14820] ? rcu_is_watching+0x12/0xc0 [ 813.951141][T14820] ? finish_task_switch.isra.0+0x221/0xc10 [ 813.951165][T14820] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 813.951189][T14820] ? rcu_is_watching+0x12/0xc0 [ 813.951211][T14820] ? trace_sched_exit_tp+0xd1/0x120 [ 813.951231][T14820] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 813.951265][T14820] ? __pfx___schedule+0x10/0x10 [ 813.951289][T14820] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 813.951311][T14820] ? policy_nodemask+0xea/0x4e0 [ 813.951335][T14820] alloc_pages_mpol+0x1fb/0x550 [ 813.951357][T14820] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 813.951378][T14820] ? irqentry_exit+0x3b/0x90 [ 813.951402][T14820] ? lockdep_hardirqs_on+0x7c/0x110 [ 813.951432][T14820] alloc_pages_noprof+0x131/0x390 [ 813.951453][T14820] get_free_pages_noprof+0x10/0xb0 [ 813.951474][T14820] __do_sys_mincore+0xf6/0x620 [ 813.951502][T14820] ? __x64_sys_mincore+0x6e/0xb0 [ 813.951521][T14820] do_syscall_64+0xcd/0x4c0 [ 813.951540][T14820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.951558][T14820] RIP: 0033:0x7f5f7398ebe9 [ 813.951573][T14820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.951590][T14820] RSP: 002b:00007f5f747ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 813.951608][T14820] RAX: ffffffffffffffda RBX: 00007f5f73bb6180 RCX: 00007f5f7398ebe9 [ 813.951619][T14820] RDX: 0000200000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 813.951630][T14820] RBP: 00007f5f747ca090 R08: 0000000000000000 R09: 0000000000000000 [ 813.951640][T14820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.951650][T14820] R13: 00007f5f73bb6218 R14: 00007f5f73bb6180 R15: 00007ffdad582a78 [ 813.951674][T14820] [ 814.212647][T11484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.224294][T11484] usb 1-1: config 0 descriptor?? [ 814.548239][ T5975] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 814.558192][T11484] pwc: Askey VC010 type 2 USB webcam detected. [ 814.742210][ T5975] usb 2-1: Using ep0 maxpacket: 8 [ 814.791702][ T5975] usb 2-1: config 136 has an invalid interface number: 92 but max is 3 [ 814.801401][T11484] pwc: recv_control_msg error -32 req 02 val 2b00 [ 814.919398][T11484] pwc: recv_control_msg error -32 req 02 val 2700 [ 814.926355][ T5975] usb 2-1: config 136 has an invalid interface number: 45 but max is 3 [ 815.287072][ T5975] usb 2-1: config 136 contains an unexpected descriptor of type 0x1, skipping [ 815.297277][T11484] pwc: recv_control_msg error -32 req 02 val 2c00 [ 815.303961][ T5975] usb 2-1: config 136 has an invalid interface number: 182 but max is 3 [ 815.321125][T11484] pwc: recv_control_msg error -32 req 04 val 1000 [ 815.330456][ T5975] usb 2-1: config 136 has an invalid descriptor of length 1, skipping remainder of the config [ 815.341477][T11484] pwc: recv_control_msg error -32 req 04 val 1300 [ 815.358803][T11484] pwc: recv_control_msg error -32 req 04 val 1400 [ 815.375565][ T5975] usb 2-1: config 136 has no interface number 0 [ 815.392344][ T5975] usb 2-1: config 136 has no interface number 1 [ 815.411103][ T5975] usb 2-1: config 136 has no interface number 3 [ 815.449506][ T5975] usb 2-1: config 136 interface 92 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 815.481227][ T5975] usb 2-1: config 136 interface 92 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 815.516651][ T5975] usb 2-1: config 136 interface 92 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 815.547882][ T5975] usb 2-1: config 136 interface 45 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 815.587929][T11484] pwc: recv_control_msg error -32 req 02 val 2100 [ 815.631782][T11484] pwc: recv_control_msg error -32 req 04 val 1500 [ 815.654006][ T5975] usb 2-1: config 136 interface 45 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 815.694688][T11484] pwc: recv_control_msg error -32 req 02 val 2500 [ 815.713184][T11484] pwc: recv_control_msg error -32 req 02 val 2400 [ 815.727507][ T5975] usb 2-1: config 136 interface 45 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 815.742951][T11484] pwc: recv_control_msg error -32 req 02 val 2600 [ 815.764699][T11484] pwc: recv_control_msg error -32 req 02 val 2900 [ 815.780723][ T5975] usb 2-1: config 136 interface 45 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 815.798268][T11484] pwc: recv_control_msg error -32 req 02 val 2800 [ 815.828854][T11484] pwc: recv_control_msg error -32 req 04 val 1100 [ 815.839957][ T5975] usb 2-1: config 136 interface 45 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 815.867720][T11484] pwc: Registered as video103. [ 815.885107][T11484] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input49 [ 815.901053][ T5975] usb 2-1: config 136 interface 45 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 815.930023][ T5975] usb 2-1: config 136 interface 45 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 815.941840][ T5975] usb 2-1: config 136 interface 45 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 815.962178][ T5975] usb 2-1: config 136 interface 45 altsetting 4 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 815.979670][ T5975] usb 2-1: config 136 interface 45 altsetting 4 has an endpoint descriptor with address 0x41, changing to 0x1 [ 815.992286][ T5975] usb 2-1: config 136 interface 45 altsetting 4 endpoint 0x1 has invalid maxpacket 48262, setting to 1024 [ 816.021282][ T5975] usb 2-1: config 136 interface 45 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1024 [ 816.059311][ T24] usb 1-1: USB disconnect, device number 27 [ 816.072798][ T5975] usb 2-1: config 136 interface 45 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 816.085322][ T5975] usb 2-1: config 136 interface 45 altsetting 4 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 816.100862][ T5975] usb 2-1: config 136 interface 2 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 816.122377][ T5975] usb 2-1: config 136 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 816.152471][ T5975] usb 2-1: config 136 interface 2 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 816.173782][ T5975] usb 2-1: config 136 interface 2 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 816.267975][ T5975] usb 2-1: config 136 interface 2 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 816.295915][ T5975] usb 2-1: config 136 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 816.405524][ T5858] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 816.725752][ T5975] usb 2-1: config 136 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 816.751543][ T5975] usb 2-1: config 136 interface 2 altsetting 0 has an endpoint descriptor with address 0x79, changing to 0x9 [ 816.776971][ T5975] usb 2-1: config 136 interface 2 altsetting 0 endpoint 0x9 has an invalid bInterval 76, changing to 10 [ 816.794214][ T5975] usb 2-1: config 136 interface 2 altsetting 0 endpoint 0x9 has invalid maxpacket 25912, setting to 1024 [ 816.821575][ T5975] usb 2-1: config 136 interface 2 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 816.847177][T14866] netlink: 'syz.5.1970': attribute type 10 has an invalid length. [ 816.850795][ T5975] usb 2-1: config 136 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 816.866792][ T5975] usb 2-1: config 136 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 816.877842][ T5975] usb 2-1: config 136 interface 2 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 816.899567][ T5975] usb 2-1: config 136 interface 2 altsetting 0 has a duplicate endpoint with address 0x8E, skipping [ 816.925205][ T5975] usb 2-1: config 136 interface 2 altsetting 0 has 15 endpoint descriptors, different from the interface descriptor's value: 16 [ 816.946737][T14866] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.963139][ T5975] usb 2-1: config 136 interface 182 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 817.035888][T14866] bond0: (slave team0): Enslaving as an active interface with an up link [ 817.055289][ T5975] usb 2-1: config 136 interface 92 has no altsetting 0 [ 817.145293][ T5975] usb 2-1: config 136 interface 45 has no altsetting 0 [ 817.152750][ T5975] usb 2-1: config 136 interface 182 has no altsetting 0 [ 817.160971][ T5975] usb 2-1: string descriptor 0 read error: -71 [ 817.175677][ T5975] usb 2-1: New USB device found, idVendor=2040, idProduct=b123, bcdDevice= 4.32 [ 817.199723][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.660681][ T5975] usb 2-1: can't set config #136, error -71 [ 817.690147][T14875] bridge5: entered promiscuous mode [ 817.705243][ T5975] usb 2-1: USB disconnect, device number 30 [ 817.747078][T14879] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1974'. [ 817.840435][T14887] bridge1: entered promiscuous mode [ 817.893741][T14880] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1974'. [ 818.522313][ T30] audit: type=1400 audit(1754692692.429:660): avc: denied { write } for pid=14896 comm="syz.4.1977" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 819.777420][ T5929] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 819.934011][ T5858] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 819.988068][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.301541][ T5929] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 820.349595][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.370672][ T5929] usb 2-1: config 0 descriptor?? [ 820.387616][ T5929] pwc: Askey VC010 type 2 USB webcam detected. [ 820.407775][T14933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.509499][T14933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.656026][T14943] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1986'. [ 820.788025][ T5929] pwc: recv_control_msg error -32 req 02 val 2b00 [ 820.801147][ T5929] pwc: recv_control_msg error -32 req 02 val 2700 [ 820.833058][ T5929] pwc: recv_control_msg error -32 req 02 val 2c00 [ 820.855467][ T5929] pwc: recv_control_msg error -32 req 04 val 1000 [ 820.883593][ T5929] pwc: recv_control_msg error -32 req 04 val 1300 [ 820.903521][ T5929] pwc: recv_control_msg error -32 req 04 val 1400 [ 820.994518][T14956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.062547][T14956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.134151][ T5929] pwc: recv_control_msg error -32 req 02 val 2100 [ 821.134602][ T5929] pwc: recv_control_msg error -32 req 04 val 1500 [ 821.135026][ T5929] pwc: recv_control_msg error -32 req 02 val 2500 [ 821.177351][T14961] netlink: 'syz.3.1988': attribute type 10 has an invalid length. [ 821.177376][T14961] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1988'. [ 821.198065][ T5929] pwc: recv_control_msg error -32 req 02 val 2400 [ 821.222958][ T5929] pwc: recv_control_msg error -32 req 02 val 2600 [ 821.230620][T14962] tipc: Can't bind to reserved service type 0 [ 821.237754][ T30] audit: type=1400 audit(1754692695.159:661): avc: denied { bind } for pid=14954 comm="syz.3.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 821.265139][ T5929] pwc: recv_control_msg error -32 req 02 val 2900 [ 821.272700][ T5929] pwc: recv_control_msg error -32 req 02 val 2800 [ 821.287634][ T5929] pwc: recv_control_msg error -32 req 04 val 1100 [ 821.324089][ T5929] pwc: Registered as video103. [ 821.325618][ T5929] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input51 [ 821.534750][ T5975] usb 2-1: USB disconnect, device number 31 [ 821.566115][T14953] syzkaller0: entered promiscuous mode [ 821.766716][T14953] syzkaller0: entered allmulticast mode [ 821.796481][T14961] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 822.072701][T14990] 9pnet_fd: Insufficient options for proto=fd [ 822.352491][ T5975] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 822.612314][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 822.624750][ T5975] usb 5-1: config 8 has an invalid interface number: 203 but max is 0 [ 822.646954][ T5975] usb 5-1: config 8 has no interface number 0 [ 822.735057][ T5975] usb 5-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 822.758501][ T30] audit: type=1400 audit(1754692696.669:662): avc: denied { audit_read } for pid=15002 comm="syz.1.1995" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 822.866447][ T5975] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 822.883421][ T5975] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 823.741201][ T5975] usb 5-1: config 8 interface 203 has no altsetting 0 [ 823.761151][ T5975] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 823.775843][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.796881][T12278] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 824.080925][ T5975] usb 5-1: Product: syz [ 824.088163][ T5975] usb 5-1: Manufacturer: syz [ 824.093124][ T5975] usb 5-1: SerialNumber: syz [ 824.100660][T14991] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 824.126518][T14991] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 824.469882][ T30] audit: type=1400 audit(1754692698.389:663): avc: denied { connect } for pid=15022 comm="syz.1.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 824.507326][T15027] Device name cannot be null; rc = [-22] [ 824.696645][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2000'. [ 824.705533][ C1] port100 5-1:8.203: NFC: Urb failure (status -71) [ 824.730248][ C1] port100 5-1:8.203: NFC: Urb failure (status -71) [ 824.785081][ T5975] port100 5-1:8.203: NFC: Could not get supported command types [ 824.864286][ T5975] usb 5-1: USB disconnect, device number 37 [ 825.182499][T10540] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 825.242748][ T5844] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 825.332300][T10540] usb 2-1: Using ep0 maxpacket: 32 [ 825.339187][T10540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.404423][T10540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.421382][ T5844] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.466377][T10540] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 825.476044][ T5844] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 825.487224][T10540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.501993][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.530534][T10540] usb 2-1: config 0 descriptor?? [ 825.539483][ T5844] usb 6-1: config 0 descriptor?? [ 825.551424][ T5844] pwc: Askey VC010 type 2 USB webcam detected. [ 825.751827][T15039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2002'. [ 825.765373][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2002'. [ 826.218765][T12278] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 826.233541][ T5844] pwc: recv_control_msg error -32 req 02 val 2b00 [ 826.245983][ T5844] pwc: recv_control_msg error -32 req 02 val 2700 [ 826.290732][ T5844] pwc: recv_control_msg error -32 req 02 val 2c00 [ 826.303533][ T5844] pwc: recv_control_msg error -32 req 04 val 1000 [ 826.316370][ T5844] pwc: recv_control_msg error -32 req 04 val 1300 [ 826.337689][ T5844] pwc: recv_control_msg error -32 req 04 val 1400 [ 826.534801][T10540] kone 0003:1E7D:2CED.0013: unbalanced collection at end of report description [ 826.585343][ T5844] pwc: recv_control_msg error -32 req 02 val 2100 [ 826.594999][T10540] kone 0003:1E7D:2CED.0013: parse failed [ 826.600730][T10540] kone 0003:1E7D:2CED.0013: probe with driver kone failed with error -22 [ 826.610112][ T5844] pwc: recv_control_msg error -32 req 04 val 1500 [ 826.688617][T15089] tipc: Started in network mode [ 826.697952][ T5844] pwc: recv_control_msg error -32 req 02 val 2500 [ 826.713014][T15089] tipc: Node identity ac1414aa, cluster identity 4711 [ 826.722925][ T5844] pwc: recv_control_msg error -32 req 02 val 2400 [ 826.744141][T15089] tipc: Enabling of bearer rejected, failed to enable media [ 826.759780][ T5844] pwc: recv_control_msg error -32 req 02 val 2600 [ 826.769811][T10540] usb 2-1: USB disconnect, device number 32 [ 826.785317][ T5844] pwc: recv_control_msg error -32 req 02 val 2900 [ 827.264802][ T5844] pwc: recv_control_msg error -32 req 02 val 2800 [ 827.276991][ T5844] pwc: recv_control_msg error -32 req 04 val 1100 [ 827.306606][ T5844] pwc: Registered as video103. [ 827.324405][ T5844] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input52 [ 827.505391][ T5975] usb 6-1: USB disconnect, device number 16 [ 828.992858][T15117] netlink: 'syz.4.2017': attribute type 21 has an invalid length. [ 829.001248][T15117] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2017'. [ 829.098756][T15117] netlink: 'syz.4.2017': attribute type 21 has an invalid length. [ 829.131039][T15117] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2017'. [ 829.266628][T12278] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 830.347766][T15153] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2024'. [ 830.801046][ T30] audit: type=1400 audit(1754692704.719:664): avc: denied { read } for pid=15152 comm="syz.5.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 831.016752][T15165] netlink: 'syz.0.2027': attribute type 83 has an invalid length. [ 832.152228][ T5975] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 832.302278][T11484] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 834.306495][T11484] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.329748][T11484] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 834.386543][T15191] lo speed is unknown, defaulting to 1000 [ 834.437362][T12278] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 835.357261][T11484] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.660072][T15214] wg1: entered promiscuous mode [ 835.684093][T15214] wg1: entered allmulticast mode [ 835.876993][T11484] usb 5-1: config 0 descriptor?? [ 835.902684][T11484] usb 5-1: can't set config #0, error -71 [ 835.912729][T11484] usb 5-1: USB disconnect, device number 38 [ 836.053446][T15226] netlink: 'syz.1.2042': attribute type 29 has an invalid length. [ 836.087501][T15226] netlink: 'syz.1.2042': attribute type 29 has an invalid length. [ 836.208050][T15226] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2042'. [ 837.327531][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2048'. [ 837.412259][ T5844] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 837.612288][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.612469][ T5844] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 837.612520][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.655232][ T5858] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 838.015220][ T5844] usb 1-1: config 0 descriptor?? [ 838.020013][ T5844] pwc: Askey VC010 type 2 USB webcam detected. [ 838.067887][T15265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2052'. [ 838.073147][T15265] vlan2: entered promiscuous mode [ 838.185372][T15273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.194339][T15273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.405770][T15273] tipc: Started in network mode [ 838.455095][T15273] tipc: Node identity ae04f2f905ab, cluster identity 4711 [ 838.474772][T15273] tipc: Enabled bearer , priority 0 [ 838.632254][ T5844] pwc: recv_control_msg error -32 req 02 val 2b00 [ 838.657480][ T5844] pwc: recv_control_msg error -32 req 02 val 2700 [ 838.676477][T15273] batadv_slave_1: mtu less than device minimum [ 838.683314][T15284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2050'. [ 838.693246][ T5844] pwc: recv_control_msg error -32 req 02 val 2c00 [ 838.711460][ T5844] pwc: recv_control_msg error -32 req 04 val 1000 [ 838.740283][T15271] tipc: Disabling bearer [ 838.886693][ T5844] pwc: recv_control_msg error -32 req 04 val 1300 [ 838.974346][ T5844] pwc: recv_control_msg error -32 req 04 val 1400 [ 839.197191][ T5844] pwc: recv_control_msg error -32 req 02 val 2100 [ 839.204684][ T5844] pwc: recv_control_msg error -32 req 04 val 1500 [ 839.217047][ T5844] pwc: recv_control_msg error -32 req 02 val 2500 [ 839.242843][ T5844] pwc: recv_control_msg error -32 req 02 val 2400 [ 839.263470][ T5844] pwc: recv_control_msg error -32 req 02 val 2600 [ 839.279558][ T5844] pwc: recv_control_msg error -32 req 02 val 2900 [ 839.293702][ T5844] pwc: recv_control_msg error -32 req 02 val 2800 [ 839.312942][ T5844] pwc: recv_control_msg error -32 req 04 val 1100 [ 839.324035][ T5844] pwc: Registered as video103. [ 839.338705][ T5844] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input53 [ 839.750698][ T5844] usb 1-1: USB disconnect, device number 29 [ 840.005810][T15306] syzkaller0: entered promiscuous mode [ 840.075563][T15306] syzkaller0: entered allmulticast mode [ 840.497139][T15321] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 840.736585][T15335] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=15335 comm=syz.1.2066 [ 840.809605][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'. [ 840.812550][ T30] audit: type=1400 audit(1754692714.729:665): avc: denied { ioctl } for pid=15331 comm="syz.1.2066" path="socket:[49475]" dev="sockfs" ino=49475 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 840.922853][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 841.509962][ T24] usb 1-1: device descriptor read/64, error -71 [ 841.640158][ T30] audit: type=1400 audit(1754692715.559:666): avc: denied { ioctl } for pid=15331 comm="syz.1.2066" path="socket:[48516]" dev="sockfs" ino=48516 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 841.782266][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 841.972970][ T24] usb 1-1: device descriptor read/64, error -71 [ 842.102846][ T24] usb usb1-port1: attempt power cycle [ 842.492296][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 842.532894][ T24] usb 1-1: device descriptor read/8, error -71 [ 842.772569][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 843.015300][ T24] usb 1-1: device descriptor read/8, error -71 [ 843.057655][T10540] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 843.153226][ T24] usb usb1-port1: unable to enumerate USB device [ 843.234372][T10540] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.255652][T10540] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 843.275979][T10540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.295558][T10540] usb 2-1: config 0 descriptor?? [ 843.309655][T10540] pwc: Askey VC010 type 2 USB webcam detected. [ 843.442791][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 843.846368][T10540] pwc: recv_control_msg error -32 req 02 val 2b00 [ 843.853563][T10540] pwc: recv_control_msg error -32 req 02 val 2700 [ 843.860926][T10540] pwc: recv_control_msg error -32 req 02 val 2c00 [ 843.869411][T10540] pwc: recv_control_msg error -32 req 04 val 1000 [ 843.879135][T10540] pwc: recv_control_msg error -32 req 04 val 1300 [ 843.885915][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 843.898173][T10540] pwc: recv_control_msg error -32 req 04 val 1400 [ 843.902506][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.916515][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 843.946068][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 843.970123][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 843.998018][T15410] bridge0: entered promiscuous mode [ 844.003999][T15410] macsec1: entered promiscuous mode [ 844.014760][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2078'. [ 844.050625][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 844.060359][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 844.073920][ T24] usb 6-1: SerialNumber: syz [ 844.089616][T15385] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 844.104741][ T24] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 844.124608][T10540] pwc: recv_control_msg error -32 req 02 val 2100 [ 844.160665][ T24] usb-storage 6-1:1.0: USB Mass Storage device detected [ 844.161137][T10540] pwc: recv_control_msg error -32 req 04 val 1500 [ 844.178720][ T24] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 844.195362][T10540] pwc: recv_control_msg error -32 req 02 val 2500 [ 844.211786][T10540] pwc: recv_control_msg error -32 req 02 val 2400 [ 844.221999][T10540] pwc: recv_control_msg error -32 req 02 val 2600 [ 844.235025][T10540] pwc: recv_control_msg error -32 req 02 val 2900 [ 844.244975][T10540] pwc: recv_control_msg error -32 req 02 val 2800 [ 844.265462][T10540] pwc: recv_control_msg error -32 req 04 val 1100 [ 844.282106][T10540] pwc: Registered as video103. [ 844.296538][T10540] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input54 [ 844.305889][ T24] scsi host1: usb-storage 6-1:1.0 [ 844.526161][ T5975] usb 2-1: USB disconnect, device number 33 [ 845.299435][ T5858] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 845.814224][T15420] usb 6-1: reset high-speed USB device number 18 using dummy_hcd [ 846.466438][T15483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2086'. [ 846.654241][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2092'. [ 846.753539][T15501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.778558][ T5844] usb 6-1: USB disconnect, device number 18 [ 846.778655][T15501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.848444][T15488] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2089'. [ 848.132521][ T5858] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 848.825517][T15530] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2099'. [ 849.274378][T15533] autofs4:pid:15533:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(20.11), cmd(0xc018937e) [ 849.328127][T15533] autofs4:pid:15533:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 850.581153][T15566] bridge_slave_0: left allmulticast mode [ 850.587142][T15566] bridge_slave_0: left promiscuous mode [ 850.593603][T15566] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.658513][T10540] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 851.722290][ T5910] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 851.845790][T10540] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 851.855108][T10540] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.021198][T10540] usb 6-1: Product: syz [ 852.070224][T15566] bridge_slave_1: left allmulticast mode [ 852.074636][T10540] usb 6-1: Manufacturer: syz [ 852.097071][T15566] bridge_slave_1: left promiscuous mode [ 852.127899][T10540] usb 6-1: SerialNumber: syz [ 852.134782][T15566] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.145426][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.158201][ T5910] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 852.180199][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.204066][ T5910] usb 5-1: config 0 descriptor?? [ 852.226258][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 852.234227][T15566] bond0: (slave bond_slave_0): Releasing backup interface [ 852.290647][T15566] bond0: (slave bond_slave_1): Releasing backup interface [ 852.376329][T15556] fuse: Unknown parameter 'ft' [ 852.414679][T15566] team0: Port device team_slave_0 removed [ 852.558863][T15566] team0: Port device team_slave_1 removed [ 852.954590][T15556] netlink: 'syz.5.2107': attribute type 2 has an invalid length. [ 853.328746][ T5910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 853.337454][ T5910] pwc: recv_control_msg error -32 req 02 val 2700 [ 853.356669][ T5910] pwc: recv_control_msg error -32 req 02 val 2c00 [ 853.361748][T15567] team0: Mode changed to "loadbalance" [ 853.669925][ T5910] pwc: recv_control_msg error -32 req 04 val 1000 [ 853.686607][T15605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 853.698387][T15605] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2115'. [ 853.733480][ T5910] pwc: recv_control_msg error -32 req 04 val 1300 [ 853.783607][ T5910] pwc: recv_control_msg error -32 req 04 val 1400 [ 854.020254][ T5910] pwc: recv_control_msg error -32 req 02 val 2100 [ 854.035213][T10540] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 854.041852][T10540] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 854.052543][ T5910] pwc: recv_control_msg error -32 req 04 val 1500 [ 854.082898][ T5910] pwc: recv_control_msg error -32 req 02 val 2500 [ 854.108355][ T5910] pwc: recv_control_msg error -32 req 02 val 2400 [ 854.160648][ T5910] pwc: recv_control_msg error -32 req 02 val 2600 [ 854.178361][ T5910] pwc: recv_control_msg error -32 req 02 val 2900 [ 854.230768][ T5910] pwc: recv_control_msg error -32 req 02 val 2800 [ 854.299343][T10540] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 854.373149][ T5910] pwc: recv_control_msg error -32 req 04 val 1100 [ 854.637873][T10540] usb 6-1: USB disconnect, device number 19 [ 854.682614][T10540] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 854.732687][ T5910] pwc: Registered as video103. [ 854.738292][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input55 [ 854.859562][T15620] bridge3: entered promiscuous mode [ 854.877214][T15622] bridge6: entered promiscuous mode [ 854.891159][ T24] usb 5-1: USB disconnect, device number 39 [ 856.078275][T15647] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2124'. [ 856.166998][ T30] audit: type=1400 audit(1754692730.089:667): avc: denied { connect } for pid=15652 comm="syz.0.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 856.191007][T15653] nftables ruleset with unbound set [ 856.266677][T15659] tmpfs: Bad value for 'mpol' [ 856.276522][ T30] audit: type=1400 audit(1754692730.189:668): avc: denied { map } for pid=15658 comm="syz.4.2128" path="socket:[49847]" dev="sockfs" ino=49847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 856.433729][ T5910] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 856.534341][ T5858] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 856.635453][ T5910] usb 2-1: device descriptor read/64, error -71 [ 856.905740][ T30] audit: type=1400 audit(1754692730.829:669): avc: denied { listen } for pid=15669 comm="syz.3.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 856.934094][ T30] audit: type=1400 audit(1754692730.859:670): avc: denied { setopt } for pid=15669 comm="syz.3.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 857.092946][ T5910] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 857.444308][ T5910] usb 2-1: device descriptor read/64, error -71 [ 857.555167][ T5910] usb usb2-port1: attempt power cycle [ 857.782630][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 857.903152][ T5910] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 857.944526][ T5910] usb 2-1: device descriptor read/8, error -71 [ 857.951969][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.962978][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 858.007748][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.034740][ T24] usb 6-1: config 0 descriptor?? [ 858.061999][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 858.192564][ T5910] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 858.233136][ T5910] usb 2-1: device descriptor read/8, error -71 [ 858.355251][ T5910] usb usb2-port1: unable to enumerate USB device [ 858.443214][ T30] audit: type=1400 audit(1754692732.359:671): avc: denied { connect } for pid=15689 comm="syz.3.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 858.469793][T15690] netlink: 'syz.3.2136': attribute type 2 has an invalid length. [ 858.541801][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 858.584925][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 858.597630][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 858.605639][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 858.614494][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 858.622071][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 858.831057][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 858.838789][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 858.846719][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 858.854112][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 858.862429][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 858.870484][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 858.910491][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 858.919797][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 858.920019][T15725] tipc: Enabling of bearer rejected, failed to enable media [ 858.936224][ T24] pwc: Registered as video103. [ 858.947047][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input56 [ 859.029602][T15730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.081108][T15730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.139165][ T10] usb 6-1: USB disconnect, device number 20 [ 860.930694][T15770] comedi comedi3: comedi_config --init_data is deprecated [ 861.210298][T15791] wg1: entered promiscuous mode [ 861.241117][T15791] wg1: entered allmulticast mode [ 861.402522][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 861.492486][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 861.531290][ T30] audit: type=1326 audit(1754692735.449:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd951b8ebe9 code=0x7ffc0000 [ 861.622240][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 861.627566][ T5960] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 861.629510][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 861.652238][ T30] audit: type=1326 audit(1754692735.449:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd951b8ebe9 code=0x7ffc0000 [ 861.679512][T15809] ptrace attach of "./syz-executor exec"[12333] was attempted by "./syz-executor exec"[15809] [ 861.717943][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.718066][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 861.738007][ T30] audit: type=1326 audit(1754692735.449:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd951b8ebe9 code=0x7ffc0000 [ 861.761891][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 861.792319][ T24] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 861.801267][ T24] usb 2-1: config 179 has no interface number 0 [ 861.811700][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 861.832444][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 861.847765][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 861.848748][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 861.859558][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 861.880519][ T24] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 861.907329][ T24] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 861.918576][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.926819][ T5960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.942722][ T5960] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 861.955241][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.966313][ T30] audit: type=1326 audit(1754692735.449:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd951b8ebe9 code=0x7ffc0000 [ 861.994524][ T5960] usb 5-1: config 0 descriptor?? [ 861.999735][T15793] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 862.011694][ T5960] pwc: Askey VC010 type 2 USB webcam detected. [ 862.019509][ T24] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 862.073626][ T30] audit: type=1326 audit(1754692735.449:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd951b8ebe9 code=0x7ffc0000 [ 862.102378][ T30] audit: type=1326 audit(1754692735.449:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd951b8ebe9 code=0x7ffc0000 [ 862.103819][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 862.137993][ T30] audit: type=1326 audit(1754692735.449:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd951b8ebe9 code=0x7ffc0000 [ 862.170637][ T30] audit: type=1326 audit(1754692735.449:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd951b8ebe9 code=0x7ffc0000 [ 862.198037][ T30] audit: type=1326 audit(1754692735.449:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd951b8ebe9 code=0x7ffc0000 [ 862.264728][ T10] usb 6-1: SerialNumber: syz [ 862.267827][T15793] SELinux: Context system_u:object_r:console_device_t:s0 is not valid (left unmapped). [ 862.276154][ T10] hub 6-1:1.0: bad descriptor, ignoring hub [ 862.280720][ T30] audit: type=1326 audit(1754692735.449:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd951b8ebe9 code=0x7ffc0000 [ 862.311609][ T10] hub 6-1:1.0: probe with driver hub failed with error -5 [ 862.327384][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 862.454227][ T5960] pwc: recv_control_msg error -32 req 02 val 2b00 [ 862.461571][ T5960] pwc: recv_control_msg error -32 req 02 val 2700 [ 862.469557][ T5960] pwc: recv_control_msg error -32 req 02 val 2c00 [ 862.494108][ T5960] pwc: recv_control_msg error -32 req 04 val 1000 [ 862.515846][ T5960] pwc: recv_control_msg error -32 req 04 val 1300 [ 862.543602][T10591] usb 2-1: USB disconnect, device number 38 [ 862.592473][ T24] usb 6-1: USB disconnect, device number 21 [ 862.609523][ T5960] pwc: recv_control_msg error -32 req 04 val 1400 [ 862.695058][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2162'. [ 862.818248][ T5960] pwc: recv_control_msg error -32 req 02 val 2100 [ 862.825808][ T5960] pwc: recv_control_msg error -32 req 04 val 1500 [ 862.850054][ T5960] pwc: recv_control_msg error -32 req 02 val 2500 [ 862.880744][ T5960] pwc: recv_control_msg error -32 req 02 val 2400 [ 862.890414][ T5960] pwc: recv_control_msg error -32 req 02 val 2600 [ 862.905771][ T5960] pwc: recv_control_msg error -32 req 02 val 2900 [ 862.913572][ T5960] pwc: recv_control_msg error -32 req 02 val 2800 [ 862.922959][ T5960] pwc: recv_control_msg error -32 req 04 val 1100 [ 862.941807][ T5960] pwc: Registered as video103. [ 862.948424][ T5960] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input57 [ 863.128229][T15860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2168'. [ 863.148381][ T5960] usb 5-1: USB disconnect, device number 40 [ 863.203219][T15863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.219592][T15863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.430442][T15857] tipc: Enabled bearer , priority 0 [ 863.447404][T15857] batadv_slave_1: mtu less than device minimum [ 863.454035][ T10] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 863.480729][T15855] tipc: Disabling bearer [ 863.646438][ T10] usb 2-1: LPM exit latency is zeroed, disabling LPM. [ 863.664954][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 863.676589][ T10] usb 2-1: can't read configurations, error -61 [ 863.814148][ T10] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 864.032087][ T10] usb 2-1: LPM exit latency is zeroed, disabling LPM. [ 864.046346][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 864.052324][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 864.062245][ T10] usb 2-1: can't read configurations, error -61 [ 864.072576][ T10] usb usb2-port1: attempt power cycle [ 864.179347][ T5858] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 864.492963][ T10] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 864.586740][ T10] usb 2-1: LPM exit latency is zeroed, disabling LPM. [ 864.625929][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 864.643188][ T10] usb 2-1: can't read configurations, error -61 [ 864.663359][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 864.674928][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 864.715466][ T24] usb 5-1: config 0 has no interface number 0 [ 864.737066][ T24] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 864.758102][ T24] usb 5-1: config 0 interface 1 has no altsetting 0 [ 864.770056][ T24] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 864.799533][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.822719][ T24] usb 5-1: Product: syz [ 864.826920][ T24] usb 5-1: Manufacturer: syz [ 864.832259][ T10] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 864.852346][ T24] usb 5-1: SerialNumber: syz [ 864.925846][ T24] usb 5-1: config 0 descriptor?? [ 865.004142][ T10] usb 2-1: LPM exit latency is zeroed, disabling LPM. [ 865.012904][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 865.020497][ T10] usb 2-1: can't read configurations, error -61 [ 865.031033][ T10] usb usb2-port1: unable to enumerate USB device [ 865.052407][ T5910] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 865.534520][ T24] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 865.555464][ T24] cx231xx 5-1:0.1: Not found matching IAD interface [ 865.578629][ T24] usb 5-1: USB disconnect, device number 41 [ 865.792300][ T5910] usb 6-1: device descriptor read/64, error -71 [ 866.471102][ T5910] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 868.133547][T15951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.152920][T15951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.208307][T15956] virtio-fs: tag not found [ 869.073551][T15960] gretap0: entered promiscuous mode [ 869.085907][T15960] vlan2: entered promiscuous mode [ 869.262497][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 869.262531][ T30] audit: type=1400 audit(1754692743.129:727): avc: denied { setopt } for pid=15955 comm="syz.1.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 869.334798][T15955] delete_channel: no stack [ 869.475020][ T30] audit: type=1400 audit(1754692743.129:728): avc: denied { ioctl } for pid=15955 comm="syz.1.2184" path="socket:[51245]" dev="sockfs" ino=51245 ioctlcmd=0x48e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 870.060795][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.067306][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.043287][ T5855] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 871.396919][ T5858] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 871.783542][ T5855] usb 6-1: Using ep0 maxpacket: 32 [ 871.802651][ T5855] usb 6-1: config 0 interface 0 has no altsetting 0 [ 871.824498][ T5855] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 871.833894][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.841985][ T5855] usb 6-1: Product: syz [ 871.847081][ T5855] usb 6-1: Manufacturer: syz [ 871.851817][ T5855] usb 6-1: SerialNumber: syz [ 871.880862][ T5855] usb 6-1: config 0 descriptor?? [ 872.047743][ T30] audit: type=1804 audit(1754692745.959:729): pid=15994 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2191" name="file0" dev="ramfs" ino=51297 res=1 errno=0 [ 872.265618][T16002] netlink: 'syz.1.2192': attribute type 10 has an invalid length. [ 872.332780][T16002] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.348778][T16002] bond0: (slave team0): Enslaving as an active interface with an up link [ 872.543560][ T5855] gs_usb 6-1:0.0: Configuring for 35 interfaces [ 872.554806][ T5855] gs_usb 6-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 872.579949][ T5855] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 872.837460][T16023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.870022][T16023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.028881][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 873.125061][T16030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2199'. [ 873.192224][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 873.198711][ T10] usb 5-1: config 8 has an invalid interface number: 203 but max is 0 [ 873.215818][ T10] usb 5-1: config 8 has no interface number 0 [ 873.237765][ T10] usb 5-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 873.291586][ T10] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 873.333666][ T10] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 873.347742][ T10] usb 5-1: config 8 interface 203 has no altsetting 0 [ 873.361237][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 873.371134][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.381506][ T10] usb 5-1: Product: syz [ 873.386109][ T10] usb 5-1: Manufacturer: syz [ 873.390859][ T10] usb 5-1: SerialNumber: syz [ 873.400245][T16017] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 873.409567][T16017] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 873.747622][ C0] port100 5-1:8.203: NFC: Urb failure (status -71) [ 873.754222][ C0] port100 5-1:8.203: NFC: Urb failure (status -71) [ 874.063939][ T5858] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 874.073044][ T10] port100 5-1:8.203: NFC: Could not get supported command types [ 874.543938][ T10] usb 5-1: USB disconnect, device number 42 [ 874.570686][ T5844] usb 6-1: USB disconnect, device number 24 [ 876.337312][T16074] netlink: 'syz.5.2204': attribute type 4 has an invalid length. [ 876.748593][T16089] overlay: Unknown parameter 'volatile:/' [ 876.889101][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 877.367288][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.873818][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 877.885122][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.907985][ T10] usb 1-1: config 0 descriptor?? [ 877.925850][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 878.719173][ T5858] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 878.723448][T12278] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 878.995626][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 879.014509][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 879.023720][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 879.036707][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 879.073592][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 879.087883][T16118] bridge4: entered promiscuous mode [ 879.101607][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 879.349558][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 879.362655][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 879.381280][ T30] audit: type=1326 audit(1754692753.299:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16127 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2dbf8ebe9 code=0x7fc00000 [ 879.465314][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 879.575973][ T30] audit: type=1326 audit(1754692753.299:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16127 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2dbf8ebe9 code=0x7fc00000 [ 879.612706][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 879.620203][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 879.645788][ T30] audit: type=1326 audit(1754692753.299:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16127 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2dbf8ebe9 code=0x7fc00000 [ 879.761835][ T30] audit: type=1326 audit(1754692753.599:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16127 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2dbf2add9 code=0x7fc00000 [ 879.832164][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 879.840128][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 879.866294][ T10] pwc: recv_control_msg error -32 req 04 val 1100 [ 880.002648][T16138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2220'. [ 880.060622][T16151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.070215][ T30] audit: type=1400 audit(1754692753.989:734): avc: denied { read } for pid=16135 comm="syz.4.2221" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 880.087208][T16151] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2222'. [ 880.292703][ T10] pwc: Registered as video103. [ 880.303744][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input58 [ 880.314313][T16152] sctp: [Deprecated]: syz.4.2221 (pid 16152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 880.314313][T16152] Use struct sctp_sack_info instead [ 880.322097][ T30] audit: type=1400 audit(1754692753.989:735): avc: denied { open } for pid=16135 comm="syz.4.2221" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 880.457079][ T10] usb 1-1: USB disconnect, device number 34 [ 880.621940][T16158] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2223'. [ 880.858122][T16165] tmpfs: Unknown parameter 'usrquota0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 880.858122][T16165] 0 [ 881.109452][T16169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.131717][T16169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.376391][ T5858] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 882.122846][ T5167] Bluetooth: hci7: command 0x0406 tx timeout [ 882.484260][T16142] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 882.836151][T12278] Bluetooth: hci3: command 0x0406 tx timeout [ 882.838135][T16142] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 882.866574][T16142] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 882.880918][T16142] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 882.896780][T16142] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 883.225605][ T30] audit: type=1400 audit(1754692757.149:736): avc: denied { ioctl } for pid=16213 comm="syz.1.2233" path="/dev/input/mouse0" dev="devtmpfs" ino=984 ioctlcmd=0x64c7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 883.226361][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 883.260181][T10591] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 883.270179][T16214] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 883.297792][T16219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 883.442264][ T5844] IPVS: starting estimator thread 0... [ 883.484483][T10591] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 883.508993][T10591] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 883.545111][T16221] IPVS: using max 49 ests per chain, 117600 per kthread [ 883.552335][T10591] usb 1-1: config 0 has no interface number 0 [ 883.572447][T10591] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 883.624521][T10591] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 883.659887][T10591] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 883.681703][T10591] usb 1-1: config 0 interface 52 has no altsetting 0 [ 883.692239][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 883.843152][T10591] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 883.852513][T10591] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 883.860770][T10591] usb 1-1: Product: syz [ 883.865254][T10591] usb 1-1: SerialNumber: syz [ 883.872038][T10591] usb 1-1: config 0 descriptor?? [ 884.155114][ T5167] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 884.182211][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 884.196573][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 884.245444][T10591] input: syz (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input59 [ 884.255250][T16235] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 884.261763][T16235] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 884.280563][ T10] usb 5-1: can't read configurations, error -61 [ 884.288747][T16235] vhci_hcd vhci_hcd.0: Device attached [ 884.422367][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 884.662993][T10591] usb 1-1: USB disconnect, device number 35 [ 884.889844][T16240] vhci_hcd: connection closed [ 884.920126][ T6169] vhci_hcd: stop threads [ 884.924949][ T5167] Bluetooth: hci4: command 0x0406 tx timeout [ 884.932573][ T5167] Bluetooth: hci7: command 0x0406 tx timeout [ 884.936019][T12278] Bluetooth: hci6: command 0x0406 tx timeout [ 884.941693][ T5858] Bluetooth: hci5: command 0x0406 tx timeout [ 885.413548][ T6169] vhci_hcd: release socket [ 885.422957][ T6169] vhci_hcd: disconnect device [ 885.452296][ T5844] usb 40-1: enqueue for inactive port 0 [ 885.945518][T16256] tipc: Enabled bearer , priority 10 [ 886.032407][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 886.048969][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 886.072381][ T10] usb 5-1: can't read configurations, error -61 [ 886.089408][ T10] usb usb5-port1: attempt power cycle [ 886.273902][ T5844] usb usb40-port1: attempt power cycle [ 887.080105][ T5960] tipc: Node number set to 3221467436 [ 888.842355][T16293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2252'. [ 888.918706][T16296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 889.224828][ T5844] usb usb40-port1: unable to enumerate USB device [ 889.381860][T16320] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2257'. [ 889.391314][T16320] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2257'. [ 889.980194][ T5858] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 890.124989][T16340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2260'. [ 890.141842][T16342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.192502][T16342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.662885][T16354] tipc: Enabled bearer , priority 0 [ 890.795696][T16358] syzkaller0: entered promiscuous mode [ 890.804345][T16358] syzkaller0: entered allmulticast mode [ 890.854301][T16353] tipc: Resetting bearer [ 890.897746][T16353] tipc: Disabling bearer [ 892.118788][ T30] audit: type=1400 audit(1754692766.039:737): avc: denied { map } for pid=16400 comm="syz.4.2276" path="socket:[52126]" dev="sockfs" ino=52126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 892.123315][T16405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12118 sclass=netlink_route_socket pid=16405 comm=syz.4.2276 [ 893.448336][T16437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.498329][T16437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.829613][T16437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.843089][T16437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.862910][T16437] netlink: 'syz.3.2285': attribute type 7 has an invalid length. [ 894.009043][T16437] netlink: 'syz.3.2285': attribute type 3 has an invalid length. [ 894.107879][T16437] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2285'. [ 896.635858][T16478] team0: Unable to change to the same mode the team is in [ 897.627729][T16481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2294'. [ 897.891961][T16492] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2295'. [ 898.519260][T16494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2296'. [ 899.262270][ T5844] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 899.331142][ T5858] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 899.842526][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.858952][ T5844] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 899.885832][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.898055][ T5844] usb 1-1: config 0 descriptor?? [ 900.152339][ T5929] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 900.329219][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.698642][ T5929] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 900.815475][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.839551][ T5929] usb 2-1: config 0 descriptor?? [ 900.940326][ T5929] pwc: Askey VC010 type 2 USB webcam detected. [ 901.313288][ T5929] pwc: recv_control_msg error -32 req 02 val 2b00 [ 901.320819][ T5929] pwc: recv_control_msg error -32 req 02 val 2700 [ 901.369586][ T5929] pwc: recv_control_msg error -32 req 02 val 2c00 [ 901.613094][ T5929] pwc: recv_control_msg error -32 req 04 val 1000 [ 901.620417][ T5929] pwc: recv_control_msg error -32 req 04 val 1300 [ 901.634378][ T5929] pwc: recv_control_msg error -32 req 04 val 1400 [ 901.893088][ T5929] pwc: recv_control_msg error -32 req 02 val 2100 [ 902.003148][ T5929] pwc: recv_control_msg error -32 req 04 val 1500 [ 902.086650][ T5929] pwc: recv_control_msg error -32 req 02 val 2500 [ 902.130399][ T5929] pwc: recv_control_msg error -32 req 02 val 2400 [ 902.206084][ T5844] usbhid 1-1:0.0: can't add hid device: -71 [ 902.229854][ T5929] pwc: recv_control_msg error -32 req 02 val 2600 [ 902.243420][ T5844] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 902.255683][ T5929] pwc: recv_control_msg error -32 req 02 val 2900 [ 902.263163][ T5929] pwc: recv_control_msg error -32 req 02 val 2800 [ 902.270264][ T5929] pwc: recv_control_msg error -32 req 04 val 1100 [ 902.288529][T16567] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2314'. [ 902.293548][T16563] bridge4: entered promiscuous mode [ 902.304369][ T5844] usb 1-1: USB disconnect, device number 36 [ 902.313277][ T5929] pwc: Registered as video103. [ 902.323066][ T5929] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input60 [ 902.511012][ T5929] usb 2-1: USB disconnect, device number 43 [ 903.121793][T16586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 903.133813][T16586] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2318'. [ 903.164478][T16588] binder: 16587:16588 ioctl c00c620f 200000000300 returned -22 [ 903.554163][ T5929] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 903.697057][ T5929] usb 2-1: device descriptor read/64, error -71 [ 903.942809][ T5929] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 904.082219][ T5929] usb 2-1: device descriptor read/64, error -71 [ 904.192910][ T5929] usb usb2-port1: attempt power cycle [ 904.543553][ T5929] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 904.684013][ T5929] usb 2-1: device descriptor read/8, error -71 [ 905.264162][ T5929] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 905.294238][ T5929] usb 2-1: device descriptor read/8, error -71 [ 905.404422][ T5929] usb usb2-port1: unable to enumerate USB device [ 905.412528][T16639] CIFS: VFS: Malformed UNC in devname [ 905.741145][T16648] tipc: Started in network mode [ 905.764560][T16648] tipc: Node identity ac1414aa, cluster identity 4711 [ 905.771798][T16648] tipc: Enabling of bearer rejected, failed to enable media [ 906.135357][T10591] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 906.373706][T10591] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.422411][T10591] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 906.432763][T10591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.450464][T10591] usb 1-1: config 0 descriptor?? [ 906.466750][T10591] pwc: Askey VC010 type 2 USB webcam detected. [ 906.507021][T16686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2334'. [ 906.872358][T10591] pwc: recv_control_msg error -32 req 02 val 2b00 [ 906.896813][T10591] pwc: recv_control_msg error -32 req 02 val 2700 [ 907.012227][T16700] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 907.315387][T10591] pwc: recv_control_msg error -32 req 02 val 2c00 [ 907.342535][T10591] pwc: recv_control_msg error -32 req 04 val 1000 [ 907.457041][T16708] pim6reg: entered allmulticast mode [ 907.507997][ T30] audit: type=1326 audit(1754692781.309:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.3.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0bf8ebe9 code=0x7ffc0000 [ 907.519996][T16708] pim6reg: left allmulticast mode [ 907.547544][T10591] pwc: recv_control_msg error -32 req 04 val 1300 [ 907.557962][T10591] pwc: recv_control_msg error -32 req 04 val 1400 [ 907.613135][ T30] audit: type=1326 audit(1754692781.309:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.3.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0bf8ebe9 code=0x7ffc0000 [ 907.652456][ T30] audit: type=1400 audit(1754692781.359:740): avc: denied { mounton } for pid=16683 comm="syz.3.2333" path="/proc/630/cgroup" dev="proc" ino=53485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 907.695991][ T30] audit: type=1326 audit(1754692781.389:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.3.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f5d0bf8ebe9 code=0x7ffc0000 [ 907.866870][T10591] pwc: recv_control_msg error -32 req 02 val 2100 [ 907.893222][ T30] audit: type=1326 audit(1754692781.709:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.3.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0bf8ebe9 code=0x7ffc0000 [ 907.916832][T10591] pwc: recv_control_msg error -32 req 04 val 1500 [ 907.937692][T10591] pwc: recv_control_msg error -32 req 02 val 2500 [ 907.996851][T16730] lo speed is unknown, defaulting to 1000 [ 908.047027][T10591] pwc: recv_control_msg error -32 req 02 val 2400 [ 908.062605][ T30] audit: type=1326 audit(1754692781.709:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.3.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0bf8ebe9 code=0x7ffc0000 [ 908.091603][T10591] pwc: recv_control_msg error -32 req 02 val 2600 [ 908.137104][T10591] pwc: recv_control_msg error -32 req 02 val 2900 [ 908.167776][T10591] pwc: recv_control_msg error -32 req 02 val 2800 [ 908.186404][T10591] pwc: recv_control_msg error -32 req 04 val 1100 [ 908.218014][T10591] pwc: Registered as video103. [ 908.320080][T10591] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input61 [ 908.420713][T10591] usb 1-1: USB disconnect, device number 37 [ 908.813105][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 908.979700][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 909.054096][ T30] audit: type=1400 audit(1754692782.669:744): avc: denied { mount } for pid=16755 comm="syz.4.2348" name="/" dev="rpc_pipefs" ino=52630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 909.079461][ T24] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 909.110916][ T30] audit: type=1400 audit(1754692782.679:745): avc: denied { mounton } for pid=16755 comm="syz.4.2348" path="/166/file0" dev="rpc_pipefs" ino=52630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 909.116757][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.180716][ T24] usb 6-1: config 0 descriptor?? [ 909.323756][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2351'. [ 909.456442][T11484] usb 6-1: USB disconnect, device number 25 [ 909.465582][ T30] audit: type=1400 audit(1754692783.369:746): avc: denied { unmount } for pid=12325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 909.683722][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 910.082385][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 910.095249][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 910.109227][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 910.121788][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 910.132769][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 910.147062][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 910.156881][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.400122][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 910.407076][ T24] usbtmc 1-1:16.0: can't read capabilities [ 910.562831][ T30] audit: type=1400 audit(1754692784.469:747): avc: denied { read } for pid=16800 comm="syz.3.2358" path="socket:[53648]" dev="sockfs" ino=53648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 910.600868][T16769] bridge3: entered allmulticast mode [ 910.654893][ T10] usb 1-1: USB disconnect, device number 38 [ 911.122404][ T5858] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 911.588048][T16824] syzkaller0: entered promiscuous mode [ 911.597488][T16824] syzkaller0: entered allmulticast mode [ 911.635728][T16824] tipc: Enabled bearer , priority 0 [ 911.651173][T16823] tipc: Resetting bearer [ 911.693172][T16823] tipc: Disabling bearer [ 911.742297][ T5975] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 911.895441][ T5975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.169343][ T5975] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 912.201138][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.231507][ T5975] usb 5-1: config 0 descriptor?? [ 912.246640][ T5975] pwc: Askey VC010 type 2 USB webcam detected. [ 912.737209][ T5975] pwc: recv_control_msg error -32 req 02 val 2b00 [ 912.761427][ T5975] pwc: recv_control_msg error -32 req 02 val 2700 [ 912.769979][ T5975] pwc: recv_control_msg error -32 req 02 val 2c00 [ 912.777625][ T5975] pwc: recv_control_msg error -32 req 04 val 1000 [ 912.785082][ T5975] pwc: recv_control_msg error -32 req 04 val 1300 [ 912.792298][ T5960] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 912.801227][ T5975] pwc: recv_control_msg error -32 req 04 val 1400 [ 912.959018][T16856] lo speed is unknown, defaulting to 1000 [ 913.218602][ T5975] pwc: recv_control_msg error -32 req 02 val 2100 [ 913.226207][ T5975] pwc: recv_control_msg error -32 req 04 val 1500 [ 913.233880][ T5975] pwc: recv_control_msg error -32 req 02 val 2500 [ 913.241219][ T5975] pwc: recv_control_msg error -32 req 02 val 2400 [ 913.249024][ T5975] pwc: recv_control_msg error -32 req 02 val 2600 [ 913.256452][ T5975] pwc: recv_control_msg error -32 req 02 val 2900 [ 913.272026][ T5975] pwc: recv_control_msg error -32 req 02 val 2800 [ 913.296502][ T5975] pwc: recv_control_msg error -32 req 04 val 1100 [ 913.317477][ T5975] pwc: Registered as video103. [ 913.362400][ T5960] usb 2-1: Using ep0 maxpacket: 8 [ 913.477734][ T5960] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 913.497129][ T5960] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 913.517144][ T5960] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 913.529302][ T5960] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 913.561771][ T5975] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input62 [ 913.591613][ T5960] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 913.759798][ T5975] usb 5-1: USB disconnect, device number 46 [ 913.928298][ T5960] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 913.942598][ T5960] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 913.958401][ T5960] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 914.177286][ T5960] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 914.498158][ T5960] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 914.511231][ T5960] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 914.519143][ T5960] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 914.530738][ T5960] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 914.544078][ T5960] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 914.668194][ T5858] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 914.702937][ T5960] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 914.724389][ T5960] usb 2-1: string descriptor 0 read error: -22 [ 914.732004][ T5960] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 914.741938][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.039507][ T5960] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 915.356033][T16884] IPVS: Error connecting to the multicast addr [ 915.480577][ T5960] usb 2-1: USB disconnect, device number 48 [ 915.491398][ T30] audit: type=1400 audit(1754692789.409:748): avc: denied { read } for pid=16897 comm="syz.5.2378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 915.602833][ T5975] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 915.689207][T16843] tipc: Enabled bearer , priority 0 [ 915.908170][T16917] batadv_slave_1: mtu less than device minimum [ 915.923553][T16916] tipc: Enabling of bearer rejected, failed to enable media [ 915.973672][T16842] tipc: Disabling bearer [ 916.054834][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 916.071339][ T5975] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 916.091196][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.093173][T16922] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 916.122638][ T5975] usb 5-1: config 0 descriptor?? [ 916.143571][ T5975] gspca_main: sq930x-2.14.0 probing 041e:403c [ 916.575866][ T5975] gspca_sq930x: ucbus_write failed -71 [ 916.591755][ T5975] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 916.613999][ T5975] usb 5-1: USB disconnect, device number 47 [ 916.686542][T16944] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2383'. [ 917.344859][T16959] team0: Unable to change to the same mode the team is in [ 917.406190][T16894] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 918.493179][T16894] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 918.506434][T16894] usb 1-1: config 0 has no interface number 0 [ 918.635052][T16894] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 918.644746][T16894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.654017][T16894] usb 1-1: Product: syz [ 918.658622][T16894] usb 1-1: Manufacturer: syz [ 919.084454][ T5858] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 919.109614][T16894] usb 1-1: SerialNumber: syz [ 919.132360][T16894] usb 1-1: config 0 descriptor?? [ 919.152281][ T5975] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 919.304176][ T5975] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.318693][ T5975] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 919.334422][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.345187][T16894] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 919.451345][T16894] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 919.461909][ T5975] usb 6-1: config 0 descriptor?? [ 919.481313][ T5975] pwc: Askey VC010 type 2 USB webcam detected. [ 919.487917][T16894] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 919.509924][T16894] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 919.532758][T16894] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 919.750080][T16894] usb 1-1: USB disconnect, device number 39 [ 919.829439][ T5858] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 919.996696][ T5975] pwc: recv_control_msg error -32 req 02 val 2b00 [ 920.154197][ T5975] pwc: recv_control_msg error -32 req 02 val 2700 [ 920.161780][ T5975] pwc: recv_control_msg error -32 req 02 val 2c00 [ 920.171703][T16894] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 920.186160][T16894] keyspan 1-1:0.133: device disconnected [ 920.203130][ T5975] pwc: recv_control_msg error -32 req 04 val 1000 [ 920.216831][ T5975] pwc: recv_control_msg error -32 req 04 val 1300 [ 920.232596][ T5975] pwc: recv_control_msg error -32 req 04 val 1400 [ 920.458347][ T5975] pwc: recv_control_msg error -32 req 02 val 2100 [ 920.470163][ T5975] pwc: recv_control_msg error -32 req 04 val 1500 [ 920.490234][ T5975] pwc: recv_control_msg error -32 req 02 val 2500 [ 920.498627][ T5975] pwc: recv_control_msg error -32 req 02 val 2400 [ 920.509704][ T5975] pwc: recv_control_msg error -32 req 02 val 2600 [ 920.527023][ T5975] pwc: recv_control_msg error -32 req 02 val 2900 [ 920.538969][ T5975] pwc: recv_control_msg error -32 req 02 val 2800 [ 920.551973][ T5975] pwc: recv_control_msg error -32 req 04 val 1100 [ 920.564889][ T5975] pwc: Registered as video103. [ 920.584037][ T5975] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input63 [ 920.665954][T17008] trusted_key: syz.3.2396 sent an empty control message without MSG_MORE. [ 920.729836][T17008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2396'. [ 920.767870][ T10] usb 6-1: USB disconnect, device number 26 [ 922.267297][T17053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2407'. [ 922.396595][T17046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2401'. [ 922.456453][T17056] tipc: Enabling of bearer rejected, failed to enable media [ 922.570006][T17058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 922.579704][T17058] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2405'. [ 922.997703][T17074] 9pnet_fd: Insufficient options for proto=fd [ 923.572238][T17076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2412'. [ 924.039309][ T5855] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 924.525338][ T5855] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.537222][ T5855] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 924.691469][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.762750][ T5855] usb 2-1: config 0 descriptor?? [ 924.909023][T17105] mkiss: ax0: crc mode is auto. [ 925.054440][ T5855] pwc: Askey VC010 type 2 USB webcam detected. [ 925.279296][ T5855] pwc: recv_control_msg error -32 req 02 val 2b00 [ 925.353836][ T5855] pwc: recv_control_msg error -32 req 02 val 2700 [ 925.406206][ T5855] pwc: recv_control_msg error -32 req 02 val 2c00 [ 925.492615][ T5855] pwc: recv_control_msg error -32 req 04 val 1000 [ 925.507658][ T5855] pwc: recv_control_msg error -32 req 04 val 1300 [ 925.515931][ T5855] pwc: recv_control_msg error -32 req 04 val 1400 [ 925.725618][ T5855] pwc: recv_control_msg error -32 req 02 val 2100 [ 925.737106][ T5855] pwc: recv_control_msg error -32 req 04 val 1500 [ 925.747688][ T5855] pwc: recv_control_msg error -32 req 02 val 2500 [ 925.768449][ T5855] pwc: recv_control_msg error -32 req 02 val 2400 [ 925.775728][ T5855] pwc: recv_control_msg error -32 req 02 val 2600 [ 925.786656][ T5855] pwc: recv_control_msg error -32 req 02 val 2900 [ 925.815962][ T5855] pwc: recv_control_msg error -32 req 02 val 2800 [ 925.823663][ T5855] pwc: recv_control_msg error -32 req 04 val 1100 [ 925.831825][ T5855] pwc: Registered as video103. [ 925.838695][ T5855] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input64 [ 926.048847][ T5855] usb 2-1: USB disconnect, device number 49 [ 926.710731][T17144] pim6reg1: entered promiscuous mode [ 926.717643][T17144] pim6reg1: entered allmulticast mode [ 927.192337][ T5858] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 927.601370][T17168] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 927.698504][ T30] audit: type=1400 audit(1754692801.609:749): avc: denied { create } for pid=17165 comm="syz.0.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 927.718180][ C1] vkms_vblank_simulate: vblank timer overrun [ 927.723800][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2431'. [ 928.074516][ T5858] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 928.132597][T17166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 928.491774][T17183] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 928.563071][ T30] audit: type=1400 audit(1754692802.239:750): avc: denied { read } for pid=17180 comm="syz.1.2435" path="socket:[54239]" dev="sockfs" ino=54239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 929.280817][T17199] syzkaller0: entered promiscuous mode [ 929.716525][T17199] syzkaller0: entered allmulticast mode [ 930.452887][T17209] tipc: Enabled bearer , priority 0 [ 931.198374][T17198] tipc: Resetting bearer [ 931.334283][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.343952][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.512241][ T975] tipc: Node number set to 2880434937 [ 934.080426][T17198] tipc: Disabling bearer [ 934.189793][T17223] binder: 17222:17223 ioctl c0306201 200000000040 returned -14 [ 934.360498][T17226] lo speed is unknown, defaulting to 1000 [ 935.095180][T17239] pimreg: entered allmulticast mode [ 937.133463][ T30] audit: type=1400 audit(1754692809.089:751): avc: denied { bind } for pid=17238 comm="syz.3.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 992.966723][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.984174][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1046.392054][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1046.399037][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17226/1:b..l [ 1046.407602][ C0] rcu: (detected by 0, t=10503 jiffies, g=73345, q=1990 ncpus=2) [ 1046.415405][ C0] task:syz.5.2442 state:R running task stack:27112 pid:17226 tgid:17218 ppid:12315 task_flags:0x400140 flags:0x00004006 [ 1046.430112][ C0] Call Trace: [ 1046.433403][ C0] [ 1046.436338][ C0] __schedule+0x1190/0x5de0 [ 1046.440852][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1046.445813][ C0] ? __pfx___schedule+0x10/0x10 [ 1046.450667][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1046.455617][ C0] ? mark_held_locks+0x49/0x80 [ 1046.460394][ C0] preempt_schedule_irq+0x51/0x90 [ 1046.465422][ C0] irqentry_exit+0x36/0x90 [ 1046.469839][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1046.475819][ C0] RIP: 0010:unwind_next_frame+0xa3b/0x20a0 [ 1046.481632][ C0] Code: 6d f9 ff ff 80 3d f4 13 71 12 00 0f 85 60 f9 ff ff 4c 89 ef c6 05 e4 13 71 12 01 e8 cf f0 ff ff e9 4c f9 ff ff e8 45 c4 35 00 <84> c0 0f 85 9c f6 ff ff e8 68 c2 27 0a 85 c0 0f 84 8f f6 ff ff 80 [ 1046.501241][ C0] RSP: 0018:ffffc9000eaa72b0 EFLAGS: 00000286 [ 1046.507338][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 000000008f942b80 [ 1046.515312][ C0] RDX: 0000000000000000 RSI: ffffffff8c161100 RDI: ffffffff8df5ce60 [ 1046.523286][ C0] RBP: ffffc9000eaa7368 R08: ac212efc3f9d7c44 R09: 0000000000000000 [ 1046.531259][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffffffff81a6dd60 [ 1046.539221][ C0] R13: ffffc9000eaa7320 R14: 0000000000000000 R15: ffff888050dd0000 [ 1046.547190][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1046.553361][ C0] ? stack_trace_save+0x8e/0xc0 [ 1046.558217][ C0] ? __unwind_start+0x45f/0x7f0 [ 1046.563067][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1046.569226][ C0] arch_stack_walk+0x94/0x100 [ 1046.573914][ C0] ? stack_trace_save+0x8e/0xc0 [ 1046.578770][ C0] stack_trace_save+0x8e/0xc0 [ 1046.583535][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1046.588908][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1046.593853][ C0] save_stack+0x160/0x1f0 [ 1046.598179][ C0] ? __pfx_save_stack+0x10/0x10 [ 1046.603051][ C0] ? page_ext_put+0x3e/0xd0 [ 1046.607644][ C0] __reset_page_owner+0x84/0x1a0 [ 1046.612580][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 1046.617789][ C0] __put_partials+0x165/0x1c0 [ 1046.622473][ C0] qlist_free_all+0x4d/0x120 [ 1046.627062][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 1046.632516][ C0] __kasan_slab_alloc+0x69/0x90 [ 1046.637365][ C0] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1046.643263][ C0] ? __alloc_skb+0x2b2/0x380 [ 1046.647860][ C0] __alloc_skb+0x2b2/0x380 [ 1046.652279][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1046.657217][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 1046.662586][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1046.667795][ C0] inet_netconf_notify_devconf+0x8b/0x1f0 [ 1046.673520][ C0] inetdev_event+0xed5/0x18a0 [ 1046.678206][ C0] ? ib_netdevice_event+0xfc/0x330 [ 1046.683334][ C0] ? __pfx_inetdev_event+0x10/0x10 [ 1046.688446][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1046.694255][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1046.700150][ C0] notifier_call_chain+0xbc/0x410 [ 1046.705178][ C0] ? __pfx_inetdev_event+0x10/0x10 [ 1046.710289][ C0] call_netdevice_notifiers_info+0xbe/0x140 [ 1046.716183][ C0] unregister_netdevice_many_notify+0xf76/0x24c0 [ 1046.722518][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1046.729278][ C0] ? unregister_netdevice_queue+0x22e/0x3f0 [ 1046.735168][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1046.741406][ C0] ? __pfx___might_resched+0x10/0x10 [ 1046.746690][ C0] ? __rtnl_unlock+0x68/0xf0 [ 1046.751279][ C0] default_device_exit_batch+0x853/0xaf0 [ 1046.756911][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1046.763061][ C0] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1046.768519][ C0] ? __pfx___might_resched+0x10/0x10 [ 1046.773801][ C0] ? __pfx_cfg802154_pernet_exit+0x10/0x10 [ 1046.779610][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1046.785760][ C0] ops_undo_list+0x360/0xab0 [ 1046.790350][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 1046.795471][ C0] ? ops_init+0x2fa/0x5f0 [ 1046.799807][ C0] setup_net+0x1f1/0x380 [ 1046.804043][ C0] ? lockdep_set_lock_cmp_fn+0x81/0xe0 [ 1046.809503][ C0] ? __pfx_setup_net+0x10/0x10 [ 1046.814260][ C0] ? debug_mutex_init+0x37/0x70 [ 1046.819112][ C0] copy_net_ns+0x2a6/0x5f0 [ 1046.823528][ C0] create_new_namespaces+0x3ea/0xa90 [ 1046.828820][ C0] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1046.834454][ C0] ksys_unshare+0x45b/0xa40 [ 1046.838960][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 1046.843984][ C0] ? xfd_validate_state+0x61/0x180 [ 1046.849096][ C0] __x64_sys_unshare+0x31/0x40 [ 1046.853859][ C0] do_syscall_64+0xcd/0x4c0 [ 1046.858361][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.864253][ C0] RIP: 0033:0x7f873358ebe9 [ 1046.868669][ C0] RSP: 002b:00007f87343bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1046.877080][ C0] RAX: ffffffffffffffda RBX: 00007f87337b6270 RCX: 00007f873358ebe9 [ 1046.885053][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 1046.893017][ C0] RBP: 00007f8733611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1046.900984][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.908956][ C0] R13: 00007f87337b6308 R14: 00007f87337b6270 R15: 00007ffc389887b8 [ 1046.916956][ C0] [ 1054.525429][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.537374][ T1297] ieee802154 phy1 wpan1: encryption failed: -22