last executing test programs: 15m46.890901224s ago: executing program 32 (id=924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8a"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000001c40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000001b80)=ANY=[@ANYBLOB="a00000000514200025bddbdf25000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r4, &(0x7f0000001b00)=[{&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/72, 0x48}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/171, 0xab}, {&(0x7f00000008c0)=""/156, 0x9c}], 0x7, 0x9, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10004, 0x3, 0xeeee0000, 0x1000, &(0x7f000013f000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) cachestat(r2, &(0x7f0000000240)={0x2033}, &(0x7f0000000280), 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000340)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x61, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x1d) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0xfeffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000001a00010028bd7000fedbdf2481808000000000000000000014000100fc020000000000000000000000000000140002"], 0x44}}, 0x884) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r6) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000002c0)={0xdddd0000, 0x192000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) 15m35.161694618s ago: executing program 33 (id=933): epoll_create1(0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}, 0x3, 0x20000000, 0xffff, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r1, 0xb) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) r5 = syz_open_procfs(0x0, &(0x7f00000021c0)='net/ip_tables_targets\x00') read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2075) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000000480)=""/243, 0xf3) fanotify_mark(0xffffffffffffffff, 0x10, 0x10, r6, &(0x7f00000000c0)='./file0\x00') sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x8060010) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002100)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="07a1000000000000180012800b000100697036746e6c0000080002800400130008001f0002000000239735251bd9b024ce729c8764ed9cc6b5bd15c8fa361c128fdcd853a1a5"], 0x40}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 14m56.582747336s ago: executing program 34 (id=939): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x62001) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x240, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, 0x0, 0x0, 0x185, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier') ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @scatter={0x1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b00)=""/4096, 0x1000}]}, &(0x7f0000000ac0)="a15ae66b1f01", 0xfffffffffffffffd, 0x0, 0x10, 0x0, 0x0}) 14m55.479199707s ago: executing program 35 (id=942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/83, 0x53}], 0x2, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/129, 0xee95}], 0x1}}], 0x2, 0xe9, 0x0) 14m55.322559517s ago: executing program 36 (id=941): epoll_create1(0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}, 0x3, 0x20000000, 0xffff, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r1, 0xb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r5 = syz_open_procfs(0x0, &(0x7f00000021c0)='net/ip_tables_targets\x00') read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2075) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000000480)=""/243, 0xf3) fanotify_mark(0xffffffffffffffff, 0x10, 0x10, r6, &(0x7f00000000c0)='./file0\x00') sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x8060010) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002100)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="07a1000000000000180012800b000100697036746e6c0000080002800400130008001f0002000000239735251bd9b024ce729c8764ed9cc6b5bd15c8fa361c128fdcd853a1a5"], 0x40}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 13m16.074898102s ago: executing program 37 (id=1062): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x9, 0x2}, {0xf}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0xa0}}, 0x4000040) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r5, 0x8000, 0x7, 0xffff, 0x8009, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @multicast1}}}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x6, [0xc000000000, 0x8, 0x3, 0x0, 0x0, 0x0]}}) r6 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r6, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @multicast2}, &(0x7f00000003c0)=0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8937, &(0x7f00000000c0)={'netdevsim0\x00', @random="0100012010ff"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) 12m15.497968061s ago: executing program 6 (id=1291): keyctl$session_to_parent(0x12) 12m14.848982107s ago: executing program 6 (id=1293): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x9, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x0, 0x5}, 0xe) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002880)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002a80)={{r5, 0xffffffffffffffff}, 0x0, &(0x7f0000002a40)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2500f900000000000000000000000000000000007e"], 0x34}}, 0x20008000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x6, r8, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000001}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000140)={0xc, r8}) ioctl$IOMMU_VFIO_SET_IOMMU(r7, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000010000000500000098be111420000400", @ANYRES32, @ANYBLOB="2e3c0000000000000000000000000000000000001bc4166fda3e30bf4685b3ab036c04faf7903d890499fa3f53dab3feae323f8e896cb8bfe7adbd42e866e851326128344ab647f93ee943e0bfc0d67379d42d806f82bda2214b371b67025d5258f4e2", @ANYRES32=r4, @ANYRES8=r5, @ANYBLOB="0200000004000000000000000f00"/28], 0x50) pipe2$watch_queue(&(0x7f0000002c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2000000000000169, &(0x7f00000003c0)=ANY=[@ANYBLOB="ebd0", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000300186700000d0000000000000010000000186600000e00002ee977b3d199551a825404119499", @ANYRES32=r9, @ANYRES16], &(0x7f0000002bc0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x8, '\x00', r4, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f9}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) recvfrom$packet(r3, &(0x7f00000028c0)=""/224, 0xe0, 0x12040, &(0x7f00000029c0)={0x11, 0x7, r11, 0x1, 0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086602, 0x110e22fff2) 12m13.639482747s ago: executing program 6 (id=1296): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="23f39ae02bb698c572486a6fb99a4b726cb4f9adf093d85f033e4186350c2d48a0ee60504567dc51c86148f1fcc456b403c2db1f57d37e5eff0dd69667e2602dae4a73149fceeccb6ab5041adfbe5b36fe881fc03938a40233d6cc05773040208d5c1ed3ad6a49851a717747898b19a25c4ddf27e73e4c", &(0x7f0000000080)=""/60, &(0x7f00000003c0)="008b91c7f250f9bc716eb772258cf33c7e1002e6321e63e591fd17b5cdb0381a76770e5652d0cc0341e3fa46e981d03c75d08840b9aa05e311e8fdde48f8922bb98886e0d73eca465ccf99682b9baa2ef0b59dfd320bbb22cd1ab7e59a4430c3218938f6e7839fd0975dce8498e341216d27b067461045", &(0x7f0000000440), 0x5, r2, 0x4}, 0x38) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, &(0x7f0000000300)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r7}, 0x38) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r9], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0xb, 0x3, 0x6, 0x7ffffffe, 0x7, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11c7, 0x101, 0x9, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) 12m12.303985321s ago: executing program 6 (id=1304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf2512", 0x11}, {&(0x7f0000000500)="2383ed05a03bcd82d08ab0f0b511655f05b10533665cd136692af7", 0x1b}], 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) (async) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x242d42, 0x82) open_tree(r5, &(0x7f0000000000)='./file0/file0\x00', 0x89901) mount(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) 12m10.46027575s ago: executing program 6 (id=1313): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 12m9.511921271s ago: executing program 6 (id=1320): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x4, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) timerfd_create(0x0, 0x80000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 12m8.914189646s ago: executing program 38 (id=1320): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x4, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) timerfd_create(0x0, 0x80000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 9m13.017404405s ago: executing program 2 (id=1852): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="23f39ae02bb698c572486a6fb99a4b726cb4f9adf093d85f033e4186350c2d48a0ee60504567dc51c86148f1fcc456b403c2db1f57d37e5eff0dd69667e2602dae4a73149fceeccb6ab5041adfbe5b36fe881fc03938a40233d6cc05773040208d5c1ed3ad6a49851a717747898b19a25c4ddf27e73e4c", &(0x7f0000000080)=""/60, &(0x7f00000003c0)="008b91c7f250f9bc716eb772258cf33c7e1002e6321e63e591fd17b5cdb0381a76770e5652d0cc0341e3fa46e981d03c75d08840b9aa05e311e8fdde48f8922bb98886e0d73eca465ccf99682b9baa2ef0b59dfd320bbb22cd1ab7e59a4430c3218938f6e7839fd097", &(0x7f0000000440)="0785ec4418780e0b2dbcbf8378c4f9db13b0c6ac11d0647742b5e3e0cb61b08afa2e2122fd0d35ce806ab3b794c93092c0fff5efa37eef91734c7cf1efd07e6b57317aece06d0c0fc06fcf3a4203e69e1a56a167f913fdbaba4936492da3e8bf9f2d73a3a19ab1b6cb353db59a20db6082a1abb444f981f67a8be8364027fec737f5823d368a152fa4b50e2745f7979d476d66484e5798b4b5e83a5b7d994b19374171563110d980cea6c9617e37b33c3fec5014a1975b88535884a3334b313d752e6b4a60de9122747ee1030cd8b2e845902c47d25c745e74c46d251617dc87ef63685b1d0bc31f2176ab2c32a1eb8ff003788e3e36e8", 0x5, r2, 0x4}, 0x38) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, &(0x7f0000000300)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r6}, 0x38) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0xb, 0x3, 0x6, 0x7ffffffe, 0x7, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11c7, 0x101, 0x9, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) 9m11.975244795s ago: executing program 2 (id=1854): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0xff}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0xff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x401c000, 0x3fe, 0x403, 0x200006, 0x3, 0x9, 0x5, 0x7, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x9, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x6, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000008, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) (async) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfe}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) setresgid(0x0, 0x0, 0xee01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) (async) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x0, 0x2, 0x0, "a66d077a5c000800ec4283772a2ca2d7000000007800", 0xa0363159}) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) 9m10.523797772s ago: executing program 2 (id=1857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x0, r5}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func={0xa, 0x0, 0x0, 0xc, 0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}]}, {0x0, [0x2e, 0x2e, 0x30, 0x0, 0x2e]}}, &(0x7f0000000780)=""/41, 0x4f, 0x29, 0x7fff, 0x8}, 0x28) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) ioctl$COMEDI_BUFCONFIG(r5, 0x8020640d, &(0x7f0000000600)={0x7, 0x3, 0xd8, 0x3536}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r8, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ptrace$getregs(0xc, 0x0, 0x2, &(0x7f0000000540)=""/191) 9m7.988521445s ago: executing program 2 (id=1866): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="23f39ae02bb698c572486a6fb99a4b726cb4f9adf093d85f033e4186350c2d48a0ee60504567dc51c86148f1fcc456b403c2db1f57d37e5eff0dd69667e2602dae4a73149fceeccb6ab5041adfbe5b36fe881fc03938a40233d6cc05773040208d5c1ed3ad6a49851a717747898b19a25c4ddf27e73e4c", &(0x7f0000000080)=""/60, &(0x7f00000003c0)="008b91c7f250f9bc716eb772258cf33c7e1002e6321e63e591fd17b5cdb0381a76770e5652d0cc0341e3fa46e981d03c75d08840b9aa05e311e8fdde48f8922bb98886e0d73eca465ccf99682b9baa2ef0b59dfd320bbb22cd1a", &(0x7f0000000440), 0x5, r2, 0x4}, 0x38) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, &(0x7f0000000300)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r7}, 0x38) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r9], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0xb, 0x3, 0x6, 0x7ffffffe, 0x7, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11c7, 0x101, 0x9, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) 9m6.733883728s ago: executing program 2 (id=1871): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x1, 0x7fff, 0x8, 0x8000005, 0x20, 0x99, 0xee}, &(0x7f0000000000)=0x9c) 9m5.685599502s ago: executing program 2 (id=1873): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x4004040) syz_genetlink_get_family_id$batadv(0x0, r2) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) r6 = syz_open_dev$dri(&(0x7f0000003700), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f00000003c0), 0x3, r8, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r8], &(0x7f0000000200), &(0x7f00000000c0)=[r9], &(0x7f0000000040), 0x0, 0x300}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], r9, 0x0, '\x00', 0x6, 0x8}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8m50.597077799s ago: executing program 39 (id=1873): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x4004040) syz_genetlink_get_family_id$batadv(0x0, r2) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) r6 = syz_open_dev$dri(&(0x7f0000003700), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f00000003c0), 0x3, r8, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r8], &(0x7f0000000200), &(0x7f00000000c0)=[r9], &(0x7f0000000040), 0x0, 0x300}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], r9, 0x0, '\x00', 0x6, 0x8}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m51.779994076s ago: executing program 9 (id=2638): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000369000/0x1000)=nil, &(0x7f0000277000/0x3000)=nil, 0x1000, 0x3}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 4m49.352209488s ago: executing program 9 (id=2644): syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x60, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x819) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x90) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x2, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40801}, 0x48040) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r1, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x64674ce1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x18}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="07a1000000000000180012800b000100697036746e6c0000080002800400130008001f"], 0x40}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 4m46.133185982s ago: executing program 9 (id=2655): arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x7f8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x24, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r4, 0x5501) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xfffffffffffffc5b, 0x720, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, '\t\x00', "9f1b21bfcdd63f97d0778b079513f25d", "27bbde0a", "bcc42c7cc2eb2a34"}, 0x28) 4m43.716418978s ago: executing program 9 (id=2662): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x80000000008}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000fe07124081173809499b010203010902240001000000000904ff00028b8647000905e8ff00090000000905", @ANYRES64], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4m41.015914803s ago: executing program 9 (id=2668): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$kcm(0x29, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x5f501}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010100}}}], 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}}], 0x2, 0x4000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@var={0x8, 0x0, 0x0, 0xe, 0x3, 0x1}, @restrict, @fwd={0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x2}}]}, {0x0, [0x5f, 0x5f, 0x5f]}}, &(0x7f0000000580)=""/211, 0x5d, 0xd3, 0x1, 0x3, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x3, 0x2, 0x5}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002cc0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x1, 0x25dfdbfb, {0x7, 0x0, 0x0, r4, 0x2, 0xd420}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x48090) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x4, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) timerfd_create(0x0, 0x80000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000340), 0x2, 0x1) 4m40.396009202s ago: executing program 9 (id=2671): r0 = fanotify_init(0x2, 0x80000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) (async, rerun: 64) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) recvmmsg(r1, &(0x7f00000053c0)=[{{&(0x7f00000000c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000140)=""/214, 0xd6}, {&(0x7f0000000240)=""/192, 0xc0}, {&(0x7f0000000300)=""/199, 0xc7}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x4, &(0x7f0000001440)=""/26, 0x1a}, 0x8}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001480)=""/34, 0x22}, {&(0x7f00000014c0)=""/199, 0xc7}, {&(0x7f00000015c0)=""/58, 0x3a}, {&(0x7f0000001600)=""/163, 0xa3}], 0x4, &(0x7f0000001700)=""/142, 0x8e}, 0x3}, {{&(0x7f00000017c0)=@xdp, 0x80, &(0x7f0000002900)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/111, 0x6f}, {&(0x7f00000028c0)=""/16, 0x10}], 0x3, &(0x7f0000002940)=""/101, 0x65}, 0xd6}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000029c0)=""/89, 0x59}, {&(0x7f0000002a40)=""/7, 0x7}], 0x2, &(0x7f0000002ac0)=""/47, 0x2f}, 0x4}, {{&(0x7f0000002b00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b80)=""/53, 0x35}, {&(0x7f0000002bc0)=""/65, 0x41}, {&(0x7f0000002c40)=""/54, 0x36}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x5, &(0x7f0000004d00)=""/227, 0xe3}, 0xff}, {{&(0x7f0000004e00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004e80)=""/236, 0xec}, {&(0x7f0000004f80)=""/15, 0xf}, {&(0x7f0000004fc0)=""/241, 0xf1}], 0x3, &(0x7f0000005100)=""/77, 0x4d}, 0xfffffffd}, {{&(0x7f0000005180)=@phonet, 0x80, &(0x7f00000052c0)=[{&(0x7f0000005200)=""/180, 0xb4}], 0x1, &(0x7f0000005300)=""/168, 0xa8}, 0x5}], 0x7, 0x0, &(0x7f0000005580)={0x77359400}) (async) r3 = syz_io_uring_setup(0x1a92, &(0x7f00000055c0)={0x0, 0x5527, 0x800, 0x2, 0x17, 0x0, r1}, &(0x7f0000005640), &(0x7f0000005680)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000056c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) syz_usb_connect(0x3, 0xd20, &(0x7f0000005700)={{0x12, 0x1, 0x110, 0x88, 0x19, 0x86, 0x20, 0xbb4, 0xa33, 0xcc7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0e, 0x4, 0x8, 0xe, 0x10, 0x10, [{{0x9, 0x4, 0x68, 0x4, 0x5, 0x57, 0x13, 0x5d, 0x7, [@generic={0x46, 0x22, "63ce5c963ce3ca6a7ad717a37c6becbb2867a222b8605fbde962569d440dfb4090ca0c9b7d39852bf37e590205cf8a86e89f1663cb55f3148f84fdd61eadc7076b3d0129"}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x5, 0xaf, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x59, 0x7, 0x2, [@generic={0x74, 0x7, "6d0ae8cc0bea7dea08701db94fe8e6a722fab4693e0bb07fd577e3eda6c85109034246a920c554abd1b9c4120a05b1757d8bea01be6de04f6373fa7e9c1bf23d2723880ef4a3d96c5710a0ad5524d4c1dfbc293ee3c1b3f0aaafa006bb50f95074b0e66881575b1527fb783dc14bc9084dc7"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x8, 0xf9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfe, 0x101}]}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0xf9, 0x4, 0x3, [@generic={0xaa, 0x30, "0c1559cf575718ede8b4f221447e322f3d9c8b9257c24eec1d10cbc0fa70ea00e3cb8c98281dccfa9e742f12be5d1d7e2186325719758e762ef3d692696f36eff3bb61b60f467c9deb981ec8844906573aba1011b9c09d690bb33053d7fc2936eb598094746c0296eb58b2c635b1effac2e174f06ab9a10c057e67e86bf71a4285b6c3db5bcea32e64900affa1810246da428844f8a96de7a7ff53bad487d3f88136faa6301e46cc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x5}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x5, 0x3, 0x0, [@generic={0x3b, 0x8, "b6407dec4f2b8e28550f8180f578ef5dcd2c0d29d31feb09ac90a3d7a31afae0003d52497c203579d0dba02e2e11ebe6ba894374ab4122e247"}]}}]}}, {{0x9, 0x4, 0x30, 0x8, 0x6, 0xff, 0x0, 0x40, 0xc, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x1, 0x1, 0x8, "05fa1f59da56034d7a"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x12, 0x6, "df5b"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x101, 0x9, 0x6, "4903c883"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x36, 0x7, "5287"}, @as_header={0x7, 0x24, 0x1, 0xa, 0x40, 0x2}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x3, 0x5b, 0x6b, "4fc7319a"}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "4142801a"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x4, 0xf}, {0x6, 0x24, 0x1a, 0xa, 0xb}, [@acm={0x4, 0x24, 0x2, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x6, 0x81}, @acm={0x4, 0x24, 0x2, 0x14}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xc}]}], [{{0x9, 0x5, 0xe, 0x10, 0x10, 0x5, 0x5, 0x0, [@generic={0xdb, 0x10, "b26ba370c1ec38cdb2d6cdeb1f4e56d31b587b09e825791586e19fd3c98248018903fd62562d53fccda041050aecfc1149077a53f0cc421a0c6d1528e62a61d4c954ccdf9e298919919eccf11a4e73ca15a6b4778975f69fdc76808b70c1db6f3f2d5e6c7e4ab372babf4bdd4c7600909c1124488ccf31cc4549e5b345b9ba2c9d3557655f65c19dbc93394a2f65e25e9757170166594658a32d592bb37323c97dfae391b207d39f0613cccd1b096b19f4ceddfc6922e754c8221e2b961ada2673d8badf84ff34a02084ceb153c4f40bdca0de210bfe94a0a5"}, @generic={0x7, 0x6, "41acaf06b1"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x2, 0x4, 0x7, [@generic={0x94, 0x31, "1d80491dadaa5e499a266b30cffe184bc00244c2e1ba55ffc82a7435dfbcf6d616fcf9b3a47e5c630b0acaa49adacde81337e2c5306ca5b9e2cf9fe4bba5e283c5850b2a4df8a84cabe1effb7bdb4fbc5542ae7923f065c18c3d7a21311f7ca01a3168de2b5598e9e8afe47ed1d67c78a7b0c18f5215576cde5755db15f4550408c84e5a12c9cdbe251e644077c22e3d6505"}]}}, {{0x9, 0x5, 0x8d, 0xc, 0x20, 0xf, 0x40, 0xe, [@generic={0x54, 0x10, "067232fd990b2b2edc11117e499b621d1dac0bd3e97d9551bcc32d77c57acf081d325ec2e8fff15c46b795b77e93aff671dec36d1ceaf876af5f4521fb05858f9717e932b1d377a131c6ca4b24bc328d2429"}, @generic={0x4a, 0xb, "ed8c9b568befef16a2788d40e4cc8763bff9a27c8921073b81226e24eada1f9203ba8411f6187ae1981b4c69373877cdbdb995847893c6c967fb9e12285d06f52cd88a3ba2c35bc0"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x8, 0x20, 0x3, 0x67, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6a, 0x1}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x1, 0x7f, 0x5}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x4, 0xa, 0x6}}]}}, {{0x9, 0x4, 0x6f, 0xac, 0x10, 0xd8, 0xa5, 0xb3, 0x5, [], [{{0x9, 0x5, 0xa, 0x10, 0x0, 0x81, 0x65, 0x4, [@generic={0xf4, 0x1, "202fa5a61466c93cf6a5df544110e7d54ab85dd71db0423c3cb362a4aefa07f43de2eba2fce8179baef48553cb4225c65ba31e4baef1138a4b5828c9df7c10a89c7b29883b11f46f38cdb255e6212b0754bbf0a863c5e2b3bba157eb3ec14b2ba0b5afd7a317b6dbfffae3cf5fea37f0b7d0078917608cbef4a0587f2a35af5fe9f34fde1f69d2c0a0057107de9bcf3e13d8363a2bde5c2532c05fa93eb22ab20be7b60010a1e760652bd57fb21a7d34d9aa752de23199f6cfb4ccef39d416c46242aadd21ed73eddc1565056f64351515a573441a976efbc768987a3b7b2858b7d99bdc3a25af6af08fa5cdf1c04f321dd4"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xf4, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x4}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x6, 0x5, 0x7, [@generic={0xb0, 0x11, "29715e2f7543ced729249d0bad220bc1a02543a642b06ee41bb06d50c3874814d2f3de72419b0ea6432c4de6822ca49fed4690431be3c76a331fe3da6c40f10fc49882fbe3df7b77122eef3370e00bc9c0b7841e2ad83ee8d59c5564c38c6bfd0393d9fa385a1d669f6a8bb4edaeab12c01589e54982e6415a40c54371be27faedb812016c89ae94f9dfda3a735ca76dcd5fc8f252b9a6082d61cc2b5c535676518375ecacf7835b3f2cfad29596"}, @generic={0x24, 0x22, "166ab23bb24ac2cce58f06f41f7916aafebf714da52a2c37ac0e3d967a717f84a5f8"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x8, 0x48, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0x7, 0x4, 0xd94e1ce6787a47df, 0x73, 0x10, 0xc, [@generic={0x52, 0x23, "c4142f1a26a43fbca14a208bc96dcfa18705e23f37a13793ad59e53f7d8b8b9f00d723cd530ca85bf322d68caf996847dbb527bcebdd2d240900a3a920b334cec2e646949c90465c28ea962b6a9d854e"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x4, 0xc, 0x2b, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x1}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x9, 0x0, 0x5, [@generic={0x9c, 0x23, "ef2ee39a38948811086dd615cdfbb0835786e589155dbfc8e4b80f7ac4dc5ad0702d772b20d5d9d182405c41ed45a0c7d85adecdd7130eeed9c59b725afe67e0208d55677d9d2f95947420622f59439aa52e83a80bfccdf51fc6abffe0678acda95b1fde69028333f763de9be38f4840e8ed2cc3a79813188e99b376a4fd32057de0886c41f5a7fe3f4a161bb4115f07991122e4d17f912d84ae"}, @generic={0xa8, 0x23, "5ac248d57651673168c707c2a0588830aa36898876d118580e3d7395babb0d6ca89885650f6d9dbd05890bd7dd755ae51e3c1a07b9dcafa4398cfb7e5bbf4a4036ac9521f961626b6f9090152ea9e102c973402b981eccb4655d57dd4814a358bbee6b094a74e14a1b32e680d2a15879dd7894186fc285641444e32cc4a3d6112dedb77629eb25370e85cc4851467d67b1d26a4dd0ac6618f87988e6b54a9e6971487f12c559"}]}}, {{0x9, 0x5, 0x7, 0xe, 0x20, 0x10, 0x0, 0x9, [@generic={0x91, 0x9, "5b16fe8d40771379e8d27e826454037f167cba677ad3a85a3167035cff557c0881ccc93be8dd452d1fc03f26396e5069d776da8274ce57a78c7109b64b5b2e598890cf8b1bf1bb7e2d6f66d7d3a8029a8627b0c57877f9f3aea33c45df4b4eea2948a58ae3fbaac9668e79303dde458b490d8167b0a518ab276e5bb696c5a28115a03e52765cc3457148269c2bc2c4"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x48, 0xd, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x5}]}}, {{0x9, 0x5, 0xcf, 0x4, 0x3ff, 0x7f, 0x9, 0xe, [@generic={0xe2, 0x23, "877f7d2486614f69b34f29509d03432e084f6e58b5aa9191522dc91b88d6b8cf5bf336af99e4a08b94e9f028e4fc237e838374b1c8cc3bf32e8d1614d656410c4178b3c76bdb0c3a7f53913824745ed45cd9a8aaf117feeaec379b4efcccadf77ef5da7b1be531eddd8a990144fdb7e9ea94bceb4a5ff9c16a62f345a416ee850b0f8505e9b6302de82cd4eadca700f2cfe4f3efa7d1ae12fcdb1d96a7ad494289dc3e9d693067296bd7848ee59c316ad651bf625a9cbefb1907d72ad49a597743976dd34667d58a1578755f4855a50924d1fcbcfe499e79f2f98bcc0f069e81"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x4, 0x6, 0x1}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x10, 0xf3}}, {{0x9, 0x5, 0xf, 0x10, 0x410, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0xe, 0x6, 0x9a}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x1, 0x7a, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x4}, @generic={0x6e, 0xb, "a0028c5b41b464b968c3f2ae4e1263557fa55715976145476d26c13c7d8ae1d9ae10b2785501cd336f802d159fb84ddb8ad99c41a450e4ac3c4aff8feebfdb2efcfe9a2d978e159d9bcc01cc694344e39a74603d7a63c58097d56d52c0b48edd54e27eddacc02cc3a8e7ea97"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0xc, 0x9, 0xd4, [@generic={0xfb, 0x2, "dbf67ccb18e302dd2a8498f3321b6de53fa838ed72e6311960e4c12d248670d48b2eadee97ff81d40c23709c603108ed14b76a60b2bcd30894d1da115955906370294dc34cac7adfbd26562d7725bb05ce80b787d6efc134a174d688c026200378705a0ef162eefe6918a3c97d496664c8f528e810c06233cc35917a07d21bdb81dfed79d8d8183c1fcb56f9037a5469928eb1e55e11f464a5b616f8a5c60a9ced3d115745cbeb596ac2d18a02add44c44fe35eaf5fb9ac2560f15f3a8925f29e6c601816bbd9e8e9be6bf58ea1691ad703b5b110b73c9da5f4a905e1dbf447e4e56623aa5c9f513bd3b57600ba461914f3a243f7ee911708b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3ff}]}}]}}, {{0x9, 0x4, 0xad, 0x7, 0x6, 0xff, 0xff, 0xff, 0x6, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "1d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x4, 0xffff, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x7a69}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x30, 0x2, 0x26, 0x401, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x19, 0x9, 0xc, 0xd, 0x0, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x23}, @acm={0x4}]}], [{{0x9, 0x5, 0x8, 0x10, 0x3bf, 0x0, 0xe, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x7}, @generic={0x15, 0xd, "37ca7d98c949cdddd6a483591f27aca08e3137"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x1, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x83, 0x1}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x4, 0x37, 0xb}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x7, 0x4, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x64, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x5}, @generic={0x91, 0x23, "b3dd1e2415cb71a2533f5311a05c93e3fb9d03d34f7773edfbb14cdd3f412cd57a394269bd3409fb9dfb5a6fb4e5f9e7f65211e2c2fc07de8003857d8a20166d67f6f2265b53394ce95667d769c496fd6e70b1d41ddcea4243ba924c533a67c8e0b597014833c4f10a3a5ac59effdf32b018b4a7a3d0fb4c151753352f8113bde6e5ea111cf59bc1d74a22929fe81e"}]}}, {{0x9, 0x5, 0xd, 0x1a, 0x40, 0xf9, 0x3, 0x5}}]}}]}}]}}, &(0x7f0000006800)={0xa, &(0x7f0000006440)={0xa, 0x6, 0x0, 0x45, 0x7, 0x8, 0x40, 0x8b}, 0x1a, &(0x7f0000006480)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0xe1, 0x7, 0xd, 0x5, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x1, 0xf7, 0x87de}]}, 0x9, [{0xf4, &(0x7f00000064c0)=@string={0xf4, 0x3, "1453bcb9abd72d9a9725798a9bbb541d622f0ed900ad858ef9ec8af46020847dedfbf2846f4697b27a975b0338d04b6536a9407750e35a7648e773338a2118ff69446b776edf8e8ac0f8ec7008a2bdc4e9639257b809248e21512b6f2e79a0ae76970e5da9bac8161f0ee43e624dbe08e26d44d77533d8b423c7d60cf8f83d4ebe8227e81cb4bdbea3d5e05b10d59d9996b40705052d44fdab9555434e537b43c68511749114d9b4cfa0afe5372ffb30ff9bc4833542d357aeb07f93a3b1f691a847d7f791891b6e3270c234497d471756b2b9f15ee4f058d33cd405f68cb604acbdc5bc02e5b808d5d073ba5a2f28c87325"}}, {0x4, &(0x7f00000065c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x11, &(0x7f0000006600)=@string={0x11, 0x3, "57ecdc694f1680ff8fd59fa91d2621"}}, {0x4, &(0x7f0000006640)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000006680)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f00000066c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000006700)=@lang_id={0x4, 0x3, 0x180c}}, {0x43, &(0x7f0000006740)=@string={0x43, 0x3, "02e828f0ba8f3862e7e2e9d6802959af8276dc07bd4dd6864c17a76d4209b6c982335c89f2f881c40041d9e81fb4ac66aa3b2f2a9aee10fe512b720c4f0b6dc2e6"}}, {0x4, &(0x7f00000067c0)=@lang_id={0x4, 0x3, 0x102a}}]}) (rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_proto_private(r6, 0x89e4, &(0x7f00000068c0)="141023e4e99768f71a8d2fb7ede0c3aa5f1d033a4240adafdcb5e9125dda02e0c037ffbd860f8e6818ef73e24d04057162ef6c4965658ee8baaba47086faf9e32d0882211b0ac74965aba339d55dee5078298fc4d593f3c9301a8e5582c2fafd9dbc6b582620ead23dc5bd4c42513d8700ca99357acae8fe0554356da2f9aa032479ffab1b040d400d3d2ceb5ad7ca6548ef3346aa7a527c145220f81786d34283068b9d95876fbe2f7f546fcd6a33e4295f79919b6b69526e8858f720b53a9722ba1a60eb0dd481b9edb115ba") (async, rerun: 32) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f00000069c0)=0x4) (async, rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f0000008000)=[{{&(0x7f0000006a00)=@ethernet={0x306, @multicast}, 0x80, &(0x7f0000006b40)=[{&(0x7f0000006a80)="caa11bb997ca6d7b0d16d68ddc1cf213ce6f1af521a25440be5790a77d5f3d1cb2e1a9d3fafa4ed39654460e32ef198e96a4e9b9d8bc0d856fb2287de9e71f2384bdc6697cd23f8e234c9670cbdb7e5ae8aa9723e7b5d0d660612f2ad0d93e3dde20bab2bece4f6ad9e83680f34494c77d0a079c19053ec22f680a5262aae2d4ec668925bbae55730790a4f102bd1ba37c8fc7", 0x93}], 0x1, &(0x7f0000006b80)=[{0x1010, 0x109, 0x4, "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"}], 0x1010}}, {{&(0x7f0000007bc0)=@caif=@rfm={0x25, 0x7, "e07e60572c8e408ba55775856712f826"}, 0x80, &(0x7f0000007ec0)=[{&(0x7f0000007c40)="2e72872135a8d8ae472dd2b514aac0ac1b472420412b6dcdf38ca523d7b19bfdf350f1d126e8a7b5d64acf32e9f2e9a529d4c89af19dfbf81666a6553cd611ac342bee5978abcbfb4007d398c4722c9ac12f27e57acbbf008dce70", 0x5b}, {&(0x7f0000007cc0)="7f59ccf86cce819fd564d3d2fdaa5073b9ccdc2fc13a53", 0x17}, {&(0x7f0000007d00)="58fb100ddb040081ca4af3e744859e701f1650d39a99043d0bf88ff2af8681220cd781d57da26e7ef6a9f7064866a1748337b8fbc1de68b8c6ee25d59d81110326a751cf38d32fe24887e92bc3307537fb50e204b435771755cb71c2ebdc18a0", 0x60}, {&(0x7f0000007d80)="1387aa39e5b00f6a4721fe7d57a736147cd3d14658e9c2e76d8d87b6efa3178ad9bbb63ba88144fdd0837a6761896bdba8967c35ca9c97cae16cdfd0a6208be45252a9e783e16f3169145a14dc88e3b37b41ee2511e12de6249bfbe13fbf0e59bd115cbfbfb264537f1974c5ca07de60acba670f130afe5b74fbae2e25c26beccc7c3c63b9c552c0bec3a24de430361e14", 0x91}, {&(0x7f0000007e40)="301256ad1f8c37d6a20112e9ead05fa4576dd1cb8e5e86324bd8b98c3d38f1772f096aedc40a5dd7656c292fe9f2dd2fc714dd40beeb744959b000bbdcea82b07ce32a9e8ef415b1fe3a8586a793f19ccadb627c09ccbfc4ed2321e78d7cd53caf41db24f44e4c33fd324fbe817834995f8543951474c7040f6f5784", 0x7c}], 0x5, &(0x7f0000007f40)=[{0xc0, 0x102, 0x7, "cf9aed9b6c6f91efb6b5016df6e0330950ce9b3b2ef3787def048a044041c8b42e7a45597ba4cb6bb2c5ee63960e613f6e1d493eac37024dca5d046aa2f0bd5417f421b40bf62d98440c24ec57c25beb59e5efd81d68894eff3e0aabf49edbd7c32e7a7996d2c23d859220901cd45d7552942000763de87f00e97302e9316f4070d65af5c6d63170800328d30834edadecd044d3ddb905ce2b366bbd2c5a7e48b27e0ec8134a9dac5bf8c4666fd55818"}], 0xc0}}], 0x2, 0x100) recvmmsg(r4, &(0x7f000000e740)=[{{&(0x7f0000008080)=@nfc_llcp, 0x80, &(0x7f0000008600)=[{&(0x7f0000008100)=""/122, 0x7a}, {&(0x7f0000008180)=""/56, 0x38}, {&(0x7f00000081c0)=""/27, 0x1b}, {&(0x7f0000008200)=""/121, 0x79}, {&(0x7f0000008280)=""/157, 0x9d}, {&(0x7f0000008340)=""/141, 0x8d}, {&(0x7f0000008400)=""/233, 0xe9}, {&(0x7f0000008500)=""/195, 0xc3}], 0x8}, 0x5}, {{&(0x7f0000008680)=@un=@abs, 0x80, &(0x7f0000008800)=[{&(0x7f0000008700)=""/130, 0x82}, {&(0x7f00000087c0)=""/26, 0x1a}], 0x2, &(0x7f0000008840)=""/87, 0x57}, 0x3e92}, {{&(0x7f00000088c0)=@tipc, 0x80, &(0x7f0000009a40)=[{&(0x7f0000008940)=""/134, 0x86}, {&(0x7f0000008a00)=""/4096, 0x1000}, {&(0x7f0000009a00)=""/17, 0x11}], 0x3}, 0x3}, {{&(0x7f0000009a80)=@xdp, 0x80, &(0x7f0000009dc0)=[{&(0x7f0000009b00)=""/238, 0xee}, {&(0x7f0000009c00)=""/89, 0x59}, {&(0x7f0000009c80)=""/158, 0x9e}, {&(0x7f0000009d40)=""/93, 0x5d}], 0x4}, 0x6}, {{0x0, 0x0, &(0x7f000000b140)=[{&(0x7f0000009e00)=""/4096, 0x1000}, {&(0x7f000000ae00)=""/249, 0xf9}, {&(0x7f000000af00)=""/188, 0xbc}, {&(0x7f000000afc0)=""/35, 0x23}, {&(0x7f000000b000)=""/64, 0x40}, {&(0x7f000000b040)=""/147, 0x93}, {&(0x7f000000b100)=""/48, 0x30}], 0x7, &(0x7f000000b1c0)=""/29, 0x1d}, 0x3}, {{&(0x7f000000b200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f000000c440)=[{&(0x7f000000b280)=""/245, 0xf5}, {&(0x7f000000b380)=""/79, 0x4f}, {&(0x7f000000b400)=""/44, 0x2c}, {&(0x7f000000b440)=""/4096, 0x1000}], 0x4, &(0x7f000000c480)=""/3, 0x3}, 0x3}, {{&(0x7f000000c4c0)=@caif=@rfm, 0x80, &(0x7f000000e600)=[{&(0x7f000000c540)=""/4096, 0x1000}, {&(0x7f000000d540)=""/17, 0x11}, {&(0x7f000000d580)=""/4096, 0x1000}, {&(0x7f000000e580)=""/80, 0x50}], 0x4, &(0x7f000000e640)=""/237, 0xed}, 0x1}], 0x7, 0x8020, 0x0) (async) r8 = syz_clone(0x0, &(0x7f000000e900)="43b8fa865dd78fa50e453560a37099eed321708557046c7b97ba230136bfa42b4ac52bfb565dd9f8d7757067b409ac6071e7f8cdc65151297c426c15", 0x3c, &(0x7f000000e940), &(0x7f000000e980), &(0x7f000000e9c0)="44868298d322b9e44e9b12a2cc168497375eca5014e5ac57513c976d2f29a0169e02ba5be5585fb3f6067b992f1aa94b0d179c29cd7e9a68b3ab13c391f72d28524165cc38fba145be") ptrace$cont(0x23, r8, 0x9, 0x7fffffff) (async) syz_usb_connect$uac1(0x1, 0x82, &(0x7f000000ea40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0xf9, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe86, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x19, 0x1, 0xe, 0x5, "93ab1fabbeb9eb78f5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf, 0x0, 0x8, {0x7, 0x25, 0x1, 0x80, 0xb, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x7, 0x9, 0x8, {0x7, 0x25, 0x1, 0x81, 0x3, 0x1}}}}}}}]}}, &(0x7f000000ec80)={0xa, &(0x7f000000eb00)={0xa, 0x6, 0x200, 0x10, 0x6, 0x9, 0xff, 0x8}, 0xc, &(0x7f000000eb40)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x20, 0xe, 0x6, 0x1000}]}, 0x4, [{0x4, &(0x7f000000eb80)=@lang_id={0x4, 0x3, 0x827}}, {0x2d, &(0x7f000000ebc0)=@string={0x2d, 0x3, "11d3f18b57a50f173e2c3846329f318e411aa9b408b79f952740b08b6e20e058fc88787500c9a46b722e4b"}}, {0x4, &(0x7f000000ec00)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f000000ec40)=@lang_id={0x4, 0x3, 0x407}}]}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f000000ef80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) fstat(r4, &(0x7f000000efc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(r4, &(0x7f000000f040)='./file0\x00', 0x1000, 0x200, &(0x7f000000f080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f000000f300)=[{{&(0x7f000000ed00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f000000ef40)=[{&(0x7f000000ed80)="b0e128df599874c78d3729d8b15355ae04d0c37f7604cb4f0523720a878ab2838e37533633ae57b7760eef1485961704e23be22e0c783e19e2c5c53b22cd041fe71fe77e811ac0c4632df26ea0da32be9e34f3c14e163bb4487b5bcd9e", 0x5d}, {&(0x7f000000ee00)="a70ef960bdc4f662059e3bed18777b66890eea7ef3bcccb2355cd2cabbf299b631194fe8ce1f48c8461ca173dd97c97b0b1b89da5cc953826ebe77a855ab1110ca445fc4ee442d5998bc81370a9b4c53f5b82550432bbecbb73f266948db2ec3c46fa5fdf04574ed71faf0a025cf", 0x6e}, {&(0x7f000000ee80)="4f8d287bc5b15b3b6e7c7c62d4861b7a598c6505a7bd059ebaf4c6d8d056aeaf96b3483aaaa93e39776a50242d48e7f26773fdb43322ccfce5d78056173a9e74f2e7f53cf208066ea43af777d040f3b5dad1d39c7854", 0x56}, {&(0x7f000000ef00)="5252927fdb6845c58678f9e7b9f289a3f78a5ffc2a", 0x15}], 0x4, &(0x7f000000f180)=[@rights={{0x1c, 0x1, 0x1, [r0, r6, r6]}}, @rights={{0x18, 0x1, 0x1, [r1, r9]}}, @rights={{0x24, 0x1, 0x1, [r6, r0, r3, r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r13}}}], 0x80, 0x801}}, {{&(0x7f000000f200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000f2c0)=[{&(0x7f000000f280)="c84e387a817c6f6ede62e9ff8c677eb6ac1207", 0x13}], 0x1, 0x0, 0x0, 0x20000081}}], 0x2, 0x40040) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f000000f380)) (async) r14 = syz_genetlink_get_family_id$batadv(&(0x7f000000f400), r7) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f000000f4c0)={&(0x7f000000f3c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f000000f480)={&(0x7f000000f440)={0x34, r14, 0x208, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc048040}, 0x20008000) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f000000f540), r2) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r15, &(0x7f000000f600)={&(0x7f000000f500), 0xc, &(0x7f000000f5c0)={&(0x7f000000f580)={0x14, r16, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000805}, 0x40084) (async) userfaultfd(0x1001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f000000f6c0)={{0x1, 0x1, 0x18, r7, {r10, r11}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f000000f640)='./file0\x00', &(0x7f000000f680), 0x100400, &(0x7f000000f700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r15}, 0x2c, {[{@posixacl}, {@uname={'uname', 0x3d, '{-/[\\#:]'}}, {@cache_mmap}, {@uname={'uname', 0x3d, '/selinux/status\x00'}}, {@cache_fscache}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, r17}}], [{@smackfsroot={'smackfsroot', 0x3d, '/selinux/status\x00'}}, {@flag='nolazytime'}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@uid_eq={'uid', 0x3d, r12}}]}}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f000000f840)={0x4, 0x6, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f000000f980)={&(0x7f000000f880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000f940)={&(0x7f000000f900)={0x3c, 0x0, 0x80, 0x70bd25, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004051}, 0x0) 4m25.366690482s ago: executing program 40 (id=2671): r0 = fanotify_init(0x2, 0x80000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) (async, rerun: 64) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) recvmmsg(r1, &(0x7f00000053c0)=[{{&(0x7f00000000c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000140)=""/214, 0xd6}, {&(0x7f0000000240)=""/192, 0xc0}, {&(0x7f0000000300)=""/199, 0xc7}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x4, &(0x7f0000001440)=""/26, 0x1a}, 0x8}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001480)=""/34, 0x22}, {&(0x7f00000014c0)=""/199, 0xc7}, {&(0x7f00000015c0)=""/58, 0x3a}, {&(0x7f0000001600)=""/163, 0xa3}], 0x4, &(0x7f0000001700)=""/142, 0x8e}, 0x3}, {{&(0x7f00000017c0)=@xdp, 0x80, &(0x7f0000002900)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/111, 0x6f}, {&(0x7f00000028c0)=""/16, 0x10}], 0x3, &(0x7f0000002940)=""/101, 0x65}, 0xd6}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000029c0)=""/89, 0x59}, {&(0x7f0000002a40)=""/7, 0x7}], 0x2, &(0x7f0000002ac0)=""/47, 0x2f}, 0x4}, {{&(0x7f0000002b00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b80)=""/53, 0x35}, {&(0x7f0000002bc0)=""/65, 0x41}, {&(0x7f0000002c40)=""/54, 0x36}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x5, &(0x7f0000004d00)=""/227, 0xe3}, 0xff}, {{&(0x7f0000004e00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004e80)=""/236, 0xec}, {&(0x7f0000004f80)=""/15, 0xf}, {&(0x7f0000004fc0)=""/241, 0xf1}], 0x3, &(0x7f0000005100)=""/77, 0x4d}, 0xfffffffd}, {{&(0x7f0000005180)=@phonet, 0x80, &(0x7f00000052c0)=[{&(0x7f0000005200)=""/180, 0xb4}], 0x1, &(0x7f0000005300)=""/168, 0xa8}, 0x5}], 0x7, 0x0, &(0x7f0000005580)={0x77359400}) (async) r3 = syz_io_uring_setup(0x1a92, &(0x7f00000055c0)={0x0, 0x5527, 0x800, 0x2, 0x17, 0x0, r1}, &(0x7f0000005640), &(0x7f0000005680)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000056c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) syz_usb_connect(0x3, 0xd20, &(0x7f0000005700)={{0x12, 0x1, 0x110, 0x88, 0x19, 0x86, 0x20, 0xbb4, 0xa33, 0xcc7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0e, 0x4, 0x8, 0xe, 0x10, 0x10, [{{0x9, 0x4, 0x68, 0x4, 0x5, 0x57, 0x13, 0x5d, 0x7, [@generic={0x46, 0x22, "63ce5c963ce3ca6a7ad717a37c6becbb2867a222b8605fbde962569d440dfb4090ca0c9b7d39852bf37e590205cf8a86e89f1663cb55f3148f84fdd61eadc7076b3d0129"}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x5, 0xaf, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x59, 0x7, 0x2, [@generic={0x74, 0x7, "6d0ae8cc0bea7dea08701db94fe8e6a722fab4693e0bb07fd577e3eda6c85109034246a920c554abd1b9c4120a05b1757d8bea01be6de04f6373fa7e9c1bf23d2723880ef4a3d96c5710a0ad5524d4c1dfbc293ee3c1b3f0aaafa006bb50f95074b0e66881575b1527fb783dc14bc9084dc7"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x8, 0xf9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfe, 0x101}]}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0xf9, 0x4, 0x3, [@generic={0xaa, 0x30, "0c1559cf575718ede8b4f221447e322f3d9c8b9257c24eec1d10cbc0fa70ea00e3cb8c98281dccfa9e742f12be5d1d7e2186325719758e762ef3d692696f36eff3bb61b60f467c9deb981ec8844906573aba1011b9c09d690bb33053d7fc2936eb598094746c0296eb58b2c635b1effac2e174f06ab9a10c057e67e86bf71a4285b6c3db5bcea32e64900affa1810246da428844f8a96de7a7ff53bad487d3f88136faa6301e46cc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x5}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x5, 0x3, 0x0, [@generic={0x3b, 0x8, "b6407dec4f2b8e28550f8180f578ef5dcd2c0d29d31feb09ac90a3d7a31afae0003d52497c203579d0dba02e2e11ebe6ba894374ab4122e247"}]}}]}}, {{0x9, 0x4, 0x30, 0x8, 0x6, 0xff, 0x0, 0x40, 0xc, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x1, 0x1, 0x8, "05fa1f59da56034d7a"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x12, 0x6, "df5b"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x101, 0x9, 0x6, "4903c883"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x36, 0x7, "5287"}, @as_header={0x7, 0x24, 0x1, 0xa, 0x40, 0x2}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x3, 0x5b, 0x6b, "4fc7319a"}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "4142801a"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x4, 0xf}, {0x6, 0x24, 0x1a, 0xa, 0xb}, [@acm={0x4, 0x24, 0x2, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x6, 0x81}, @acm={0x4, 0x24, 0x2, 0x14}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xc}]}], [{{0x9, 0x5, 0xe, 0x10, 0x10, 0x5, 0x5, 0x0, [@generic={0xdb, 0x10, "b26ba370c1ec38cdb2d6cdeb1f4e56d31b587b09e825791586e19fd3c98248018903fd62562d53fccda041050aecfc1149077a53f0cc421a0c6d1528e62a61d4c954ccdf9e298919919eccf11a4e73ca15a6b4778975f69fdc76808b70c1db6f3f2d5e6c7e4ab372babf4bdd4c7600909c1124488ccf31cc4549e5b345b9ba2c9d3557655f65c19dbc93394a2f65e25e9757170166594658a32d592bb37323c97dfae391b207d39f0613cccd1b096b19f4ceddfc6922e754c8221e2b961ada2673d8badf84ff34a02084ceb153c4f40bdca0de210bfe94a0a5"}, @generic={0x7, 0x6, "41acaf06b1"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x2, 0x4, 0x7, [@generic={0x94, 0x31, "1d80491dadaa5e499a266b30cffe184bc00244c2e1ba55ffc82a7435dfbcf6d616fcf9b3a47e5c630b0acaa49adacde81337e2c5306ca5b9e2cf9fe4bba5e283c5850b2a4df8a84cabe1effb7bdb4fbc5542ae7923f065c18c3d7a21311f7ca01a3168de2b5598e9e8afe47ed1d67c78a7b0c18f5215576cde5755db15f4550408c84e5a12c9cdbe251e644077c22e3d6505"}]}}, {{0x9, 0x5, 0x8d, 0xc, 0x20, 0xf, 0x40, 0xe, [@generic={0x54, 0x10, "067232fd990b2b2edc11117e499b621d1dac0bd3e97d9551bcc32d77c57acf081d325ec2e8fff15c46b795b77e93aff671dec36d1ceaf876af5f4521fb05858f9717e932b1d377a131c6ca4b24bc328d2429"}, @generic={0x4a, 0xb, "ed8c9b568befef16a2788d40e4cc8763bff9a27c8921073b81226e24eada1f9203ba8411f6187ae1981b4c69373877cdbdb995847893c6c967fb9e12285d06f52cd88a3ba2c35bc0"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x8, 0x20, 0x3, 0x67, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6a, 0x1}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x1, 0x7f, 0x5}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x4, 0xa, 0x6}}]}}, {{0x9, 0x4, 0x6f, 0xac, 0x10, 0xd8, 0xa5, 0xb3, 0x5, [], [{{0x9, 0x5, 0xa, 0x10, 0x0, 0x81, 0x65, 0x4, [@generic={0xf4, 0x1, "202fa5a61466c93cf6a5df544110e7d54ab85dd71db0423c3cb362a4aefa07f43de2eba2fce8179baef48553cb4225c65ba31e4baef1138a4b5828c9df7c10a89c7b29883b11f46f38cdb255e6212b0754bbf0a863c5e2b3bba157eb3ec14b2ba0b5afd7a317b6dbfffae3cf5fea37f0b7d0078917608cbef4a0587f2a35af5fe9f34fde1f69d2c0a0057107de9bcf3e13d8363a2bde5c2532c05fa93eb22ab20be7b60010a1e760652bd57fb21a7d34d9aa752de23199f6cfb4ccef39d416c46242aadd21ed73eddc1565056f64351515a573441a976efbc768987a3b7b2858b7d99bdc3a25af6af08fa5cdf1c04f321dd4"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xf4, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x4}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x6, 0x5, 0x7, [@generic={0xb0, 0x11, "29715e2f7543ced729249d0bad220bc1a02543a642b06ee41bb06d50c3874814d2f3de72419b0ea6432c4de6822ca49fed4690431be3c76a331fe3da6c40f10fc49882fbe3df7b77122eef3370e00bc9c0b7841e2ad83ee8d59c5564c38c6bfd0393d9fa385a1d669f6a8bb4edaeab12c01589e54982e6415a40c54371be27faedb812016c89ae94f9dfda3a735ca76dcd5fc8f252b9a6082d61cc2b5c535676518375ecacf7835b3f2cfad29596"}, @generic={0x24, 0x22, "166ab23bb24ac2cce58f06f41f7916aafebf714da52a2c37ac0e3d967a717f84a5f8"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x8, 0x48, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0x7, 0x4, 0xd94e1ce6787a47df, 0x73, 0x10, 0xc, [@generic={0x52, 0x23, "c4142f1a26a43fbca14a208bc96dcfa18705e23f37a13793ad59e53f7d8b8b9f00d723cd530ca85bf322d68caf996847dbb527bcebdd2d240900a3a920b334cec2e646949c90465c28ea962b6a9d854e"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x4, 0xc, 0x2b, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x1}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x9, 0x0, 0x5, [@generic={0x9c, 0x23, "ef2ee39a38948811086dd615cdfbb0835786e589155dbfc8e4b80f7ac4dc5ad0702d772b20d5d9d182405c41ed45a0c7d85adecdd7130eeed9c59b725afe67e0208d55677d9d2f95947420622f59439aa52e83a80bfccdf51fc6abffe0678acda95b1fde69028333f763de9be38f4840e8ed2cc3a79813188e99b376a4fd32057de0886c41f5a7fe3f4a161bb4115f07991122e4d17f912d84ae"}, @generic={0xa8, 0x23, "5ac248d57651673168c707c2a0588830aa36898876d118580e3d7395babb0d6ca89885650f6d9dbd05890bd7dd755ae51e3c1a07b9dcafa4398cfb7e5bbf4a4036ac9521f961626b6f9090152ea9e102c973402b981eccb4655d57dd4814a358bbee6b094a74e14a1b32e680d2a15879dd7894186fc285641444e32cc4a3d6112dedb77629eb25370e85cc4851467d67b1d26a4dd0ac6618f87988e6b54a9e6971487f12c559"}]}}, {{0x9, 0x5, 0x7, 0xe, 0x20, 0x10, 0x0, 0x9, [@generic={0x91, 0x9, "5b16fe8d40771379e8d27e826454037f167cba677ad3a85a3167035cff557c0881ccc93be8dd452d1fc03f26396e5069d776da8274ce57a78c7109b64b5b2e598890cf8b1bf1bb7e2d6f66d7d3a8029a8627b0c57877f9f3aea33c45df4b4eea2948a58ae3fbaac9668e79303dde458b490d8167b0a518ab276e5bb696c5a28115a03e52765cc3457148269c2bc2c4"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x48, 0xd, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x5}]}}, {{0x9, 0x5, 0xcf, 0x4, 0x3ff, 0x7f, 0x9, 0xe, [@generic={0xe2, 0x23, "877f7d2486614f69b34f29509d03432e084f6e58b5aa9191522dc91b88d6b8cf5bf336af99e4a08b94e9f028e4fc237e838374b1c8cc3bf32e8d1614d656410c4178b3c76bdb0c3a7f53913824745ed45cd9a8aaf117feeaec379b4efcccadf77ef5da7b1be531eddd8a990144fdb7e9ea94bceb4a5ff9c16a62f345a416ee850b0f8505e9b6302de82cd4eadca700f2cfe4f3efa7d1ae12fcdb1d96a7ad494289dc3e9d693067296bd7848ee59c316ad651bf625a9cbefb1907d72ad49a597743976dd34667d58a1578755f4855a50924d1fcbcfe499e79f2f98bcc0f069e81"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x4, 0x6, 0x1}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x10, 0xf3}}, {{0x9, 0x5, 0xf, 0x10, 0x410, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0xe, 0x6, 0x9a}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x1, 0x7a, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x4}, @generic={0x6e, 0xb, "a0028c5b41b464b968c3f2ae4e1263557fa55715976145476d26c13c7d8ae1d9ae10b2785501cd336f802d159fb84ddb8ad99c41a450e4ac3c4aff8feebfdb2efcfe9a2d978e159d9bcc01cc694344e39a74603d7a63c58097d56d52c0b48edd54e27eddacc02cc3a8e7ea97"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0xc, 0x9, 0xd4, [@generic={0xfb, 0x2, "dbf67ccb18e302dd2a8498f3321b6de53fa838ed72e6311960e4c12d248670d48b2eadee97ff81d40c23709c603108ed14b76a60b2bcd30894d1da115955906370294dc34cac7adfbd26562d7725bb05ce80b787d6efc134a174d688c026200378705a0ef162eefe6918a3c97d496664c8f528e810c06233cc35917a07d21bdb81dfed79d8d8183c1fcb56f9037a5469928eb1e55e11f464a5b616f8a5c60a9ced3d115745cbeb596ac2d18a02add44c44fe35eaf5fb9ac2560f15f3a8925f29e6c601816bbd9e8e9be6bf58ea1691ad703b5b110b73c9da5f4a905e1dbf447e4e56623aa5c9f513bd3b57600ba461914f3a243f7ee911708b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3ff}]}}]}}, {{0x9, 0x4, 0xad, 0x7, 0x6, 0xff, 0xff, 0xff, 0x6, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "1d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x4, 0xffff, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x7a69}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x30, 0x2, 0x26, 0x401, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x19, 0x9, 0xc, 0xd, 0x0, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x23}, @acm={0x4}]}], [{{0x9, 0x5, 0x8, 0x10, 0x3bf, 0x0, 0xe, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x7}, @generic={0x15, 0xd, "37ca7d98c949cdddd6a483591f27aca08e3137"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x1, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x83, 0x1}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x4, 0x37, 0xb}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x7, 0x4, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x64, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x5}, @generic={0x91, 0x23, "b3dd1e2415cb71a2533f5311a05c93e3fb9d03d34f7773edfbb14cdd3f412cd57a394269bd3409fb9dfb5a6fb4e5f9e7f65211e2c2fc07de8003857d8a20166d67f6f2265b53394ce95667d769c496fd6e70b1d41ddcea4243ba924c533a67c8e0b597014833c4f10a3a5ac59effdf32b018b4a7a3d0fb4c151753352f8113bde6e5ea111cf59bc1d74a22929fe81e"}]}}, {{0x9, 0x5, 0xd, 0x1a, 0x40, 0xf9, 0x3, 0x5}}]}}]}}]}}, &(0x7f0000006800)={0xa, &(0x7f0000006440)={0xa, 0x6, 0x0, 0x45, 0x7, 0x8, 0x40, 0x8b}, 0x1a, &(0x7f0000006480)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0xe1, 0x7, 0xd, 0x5, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x1, 0xf7, 0x87de}]}, 0x9, [{0xf4, &(0x7f00000064c0)=@string={0xf4, 0x3, "1453bcb9abd72d9a9725798a9bbb541d622f0ed900ad858ef9ec8af46020847dedfbf2846f4697b27a975b0338d04b6536a9407750e35a7648e773338a2118ff69446b776edf8e8ac0f8ec7008a2bdc4e9639257b809248e21512b6f2e79a0ae76970e5da9bac8161f0ee43e624dbe08e26d44d77533d8b423c7d60cf8f83d4ebe8227e81cb4bdbea3d5e05b10d59d9996b40705052d44fdab9555434e537b43c68511749114d9b4cfa0afe5372ffb30ff9bc4833542d357aeb07f93a3b1f691a847d7f791891b6e3270c234497d471756b2b9f15ee4f058d33cd405f68cb604acbdc5bc02e5b808d5d073ba5a2f28c87325"}}, {0x4, &(0x7f00000065c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x11, &(0x7f0000006600)=@string={0x11, 0x3, "57ecdc694f1680ff8fd59fa91d2621"}}, {0x4, &(0x7f0000006640)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000006680)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f00000066c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000006700)=@lang_id={0x4, 0x3, 0x180c}}, {0x43, &(0x7f0000006740)=@string={0x43, 0x3, "02e828f0ba8f3862e7e2e9d6802959af8276dc07bd4dd6864c17a76d4209b6c982335c89f2f881c40041d9e81fb4ac66aa3b2f2a9aee10fe512b720c4f0b6dc2e6"}}, {0x4, &(0x7f00000067c0)=@lang_id={0x4, 0x3, 0x102a}}]}) (rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_proto_private(r6, 0x89e4, &(0x7f00000068c0)="141023e4e99768f71a8d2fb7ede0c3aa5f1d033a4240adafdcb5e9125dda02e0c037ffbd860f8e6818ef73e24d04057162ef6c4965658ee8baaba47086faf9e32d0882211b0ac74965aba339d55dee5078298fc4d593f3c9301a8e5582c2fafd9dbc6b582620ead23dc5bd4c42513d8700ca99357acae8fe0554356da2f9aa032479ffab1b040d400d3d2ceb5ad7ca6548ef3346aa7a527c145220f81786d34283068b9d95876fbe2f7f546fcd6a33e4295f79919b6b69526e8858f720b53a9722ba1a60eb0dd481b9edb115ba") (async, rerun: 32) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f00000069c0)=0x4) (async, rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f0000008000)=[{{&(0x7f0000006a00)=@ethernet={0x306, @multicast}, 0x80, &(0x7f0000006b40)=[{&(0x7f0000006a80)="caa11bb997ca6d7b0d16d68ddc1cf213ce6f1af521a25440be5790a77d5f3d1cb2e1a9d3fafa4ed39654460e32ef198e96a4e9b9d8bc0d856fb2287de9e71f2384bdc6697cd23f8e234c9670cbdb7e5ae8aa9723e7b5d0d660612f2ad0d93e3dde20bab2bece4f6ad9e83680f34494c77d0a079c19053ec22f680a5262aae2d4ec668925bbae55730790a4f102bd1ba37c8fc7", 0x93}], 0x1, &(0x7f0000006b80)=[{0x1010, 0x109, 0x4, "c371b6c7316c221c432e149f6a3e7be94b563717391738d800ec5646fcdd36b36608acf10f0f3897164c330f6130b7666d04ba7fd36e172d97cad261b90195e8d841b40b3a109c5d91cb56e55571bf841315e145963e6e36d4a1074275cb5de5666a131c8ab0ba2f66bf5f791e26511777a106ae71dabe17cc9f1010797c06c7f0def5637b3c607204f651b88e68b7a1f1a824266d5b22a2c208f47525c318d5e3970fa27b83e2d21e0e9844e175d908aa505ea8fdfbed684140305488d5747488cdffb99499dc47e5a2f7e5e96222c7b722a9d95c7f21c6c8f92b52629801c04bb54cf6bb28d48c430c3223e1e1927275178ed49ec8565495a96364ad87ede1f4550bcc6b9a07654bd4b79875bb8e11508bbb1c72d5a5f77a327f8cc9fa02517d3f206832c86cba9bfbe9f40267355cd450daeab7cc5c7be854d434dafb6531305503c0d408dbb92742cef6dab8adb0ede682c24966fcf6345c319ed488b869ff6692f597b63686bca7e38a490168f26dd629439cde1f88999aa388d998b7ec82e0f47536c9d2decc073732cb93ddf2d4c55faf502d511abed6d6868f79e76ff231b64f518ded01a71c56cf197bf11f011d37e9dc8190f2ae2250b6d7ab16f5c2421bcb240b12c3f61e5d226857458f69aa6f54fa52f16cee630135029b43cc9bb11cf7acf3d367d4fbe844e1f93cea792371597b2adbfc092cf35246669e59dcf2eacd62c114edc56085e2be95328404dc0bdba3cbfb378f1cadf5d554db48c40f5a0b874bbedb786d77135446040aed97445f2a6130770cfda5ccc8efcdbf828fff305dbe5d016dea11f0d7568a2c554314f857b359b78e91af0764d0fe7122a4adb42e6b833f2448fc9bdd507204c0377dcc0ccf8f377213ede0677fb5cffb19c83852d57636d5cda905b891fe25f03c60c7e34df76aa99f68f033607cb53389d199bfec8ae3e615bb2bf84ffdfb85d3774c8dc0c3c1a2ae5fcb9a76615889153ac29996b0f6b20e9c6fdd28c38e96c8f08da6e222df63062ed69f6f1e366d5e0deb905ac4f6633f1c8f9dba3c3475bfd88a53cf959670c9700e08f9ce1f8189c5eddc5efdf90aa171d5c7206e49aa3a9ae7c94f29562df5b50db73309ba5204969f757f13e1d986029657f81c926b6de8b68aa91187d4a3c0d9ab55064fbf398dff87feed74833f2087ad5b6142d610649df9b313f2abd04fbf78c4387f82601080935f18a58c462924c2f2e24ffcdec02089d362fd72a4d5c596dfa1f043e09faf94798a2b335c07f0479ddc8920d6047f04af515e8aa90183001ec32f7bf4fd35d0bf071fac779542a8e011699bb64c1a00bce2bf4017b48fb4b1b8fd6118c90e03c34680688638a9cd0369ce2eb258d6a1b91f4a90559675079515456e8b3d275779c1efe69a38fa697c61f3fbcd0d5d19e27583cc3ac6ac0984292f662b0f2a1740d03cb3c6988a89fa18d03cb972a26f6c51ab1c5b584880de15308bc506bef2dc131f748a181d64fdc27364c25891f267ec0144dabc04329bc5b744886595aa5e11e682bde8a1d2e73f80723192092a63fbf7a0779267ee4cb43e34c1dec75f0ea0d85330b20d54aa493d5c8e3cb34b8e96a7c23a3cff789d3ba65f56e9486c48aeda6ae9b7290b9ae98e888840ca11c5f09728d928d0df155c5f192007613d62b0be499c9ad9da8a4b187290ed54e82a7796b05b7efa12a751340e496a7a8683fb07083cb391e027b57934dfe4d6de93fbb9945667a02983d365e8f6ebabac17eff4173a5b4f0706ba0682cf5321744ee36a8f4e8b6c5be531957ccd67cd49a4c55b988766bffb0780ae03dd779cebda0173eb12923300eb52a2e5777b0b38206303bab8ca3671436cacf97c52ada115bb7626a360b78c83332fd171ade9ecb75d5041616a59bf6ecf3a771c12b8643ff481b0f3cbf09aa107c009381e6e68275d0599114c59875d965e78cfa8a8178864cece093d6a405e649b41f22eb2335f706f2ec4d094f79430a613470d74f17ecf837e2ac2627f12eaa9c71688c8c8ff3974d74960d62b415833707ebd001551555b8f995b129e120ace78831080b300d003dcda8041ecf5f74e12cf69f44ee8806eabde0249718118f95ad38f785069be2e159b47af3d060cf33cec75f05afd76799d19be5b6dca3535fa7f0524e07c6e90e22591344d6c4fcd4bc8e767892c6305724c171a71b404e1c6ccec7b60315b6afa23bc60366ab980553e4d1dc4576af359502ed2cb8689db3737a3aa266205a1115e9dca33ee762efddfcec7cb613a298a080d73dee89d3665864629f8357ca748497d55eab37144797bda8edbb9d37961f15acd389c8e22247f8e9b842aa8d858e626a26703d1c85d9a83201a2060b44aeac9032fbc4c742f79ddb7d30264514166cb954abe925dda5a1fb32bc3f6d9ec69b04e23e07f8df44e451c0eb52aa98b41a6b0bce74f665cb5365c0e4aa8933d19d9f9de289b56a5fc17d53cfdc3eb5763080ee45b0fa0819a9da03d4100e6073e6c26c49a652613434eb3520bbbc01637f299e6b9e2a8c5e7d4ed4e57121eeb601fa4db9fa15d16b5436deb85346c4225ddf742262d38c1aba3cb0e5bebefc061c4e5e309d0a17640e9f934b44b822eb49f35d8858d0caa8a5818f909cd94f09ccbf9af6484f3fb65ad186b91bcd2b1f0c7087a5e97a014dd223104faa967bada7c7e403d5557bbf58713ae3ebd8d312b28cc11a449879e772c2fb03fa1ce7cb99db3259a32a3390b836fd77770a116b4438871fef7c391413141f7c78415450d576636527f9b96f9c887db88c98feb39c338abb93ff85c9df75ca57384f8b2c9ace70f208391588a676abb7ebad6570eadd18d0ecfaf9eb27108530b8141151ac68720cf04d7b60962669f76b5d830681598681dced5a5d1436304a8664a59714a90abf0875b2bd56788ee1f5beff96ca10c99d3edb42c7faa92566bf3e04a446f4e785a1f870c5023f334cc8a018a071001ecf0fd0c8eec3044f7ab2ee99ced0f0dff0ebb878bb0af3995679aafb982d01966ff32cfbbe3cc3745cf972f1ec80b39bc7f405e6d015883635f65a38b773ab3e8fabdaa9509124c6b183216de60fdf3539b7f80bf42215292b5e1b22d1a84d1a29cc9308308d24fd111a1fba9232722710f355c49d86a2a77746fcc5ec2634219a897f9177187a441ae012b814606fbd53adc6377eb387b874d4bdcded96b14eae1e8e12bdcaa818a1b3304c12111dc8eda83fe287b6a440ab85dc2a8e1af1145b22cde31d6bd8d2a9650a241e0b73878e8aac324eaee52192e51f18c00220678fb56e310623176d296b29809d2658034342993b14455e68f1a564b43525253a988fba121aaf0613435b3913ff72ed59c5116114fdc9f834fb26b44218e86f5c6e2b6816e609dfd91a8858510d826acb8075c4885ff51b8bd7a3bd955fcc04d5feab8010910cc66de4f4e26054f5d1ebcb99b34ea7f034700b69b60ca7d95d579e0a72a0b175a1a5c604ad24ef8133335268fc59531213ee08de453eb712ba28108b049396c0a6e2520db2aa7da40a47f6eff53ee9e8435e2fe3c3356a912189f1ec17adaa31ae8bb281bc7967c8d91af1d8522ecaf4c82f9fbbc49b805aa83db859d143f5abd610c8ecda2d00048e663c44ec3d7fa5d9816f4253cdb051963f2b7e107601b4793c59d2703bb39e83126fb8caf6e78cdedf58c6d0aa7b6a4f38f04e3c745224ca9f2115b6c650ada7322ae5fb1ab841090d8ea0de3fa548f97f26b27bbe2933fa42bb6fdc5b56b1f31e64e3ee257d6e88c1dec977ef1b2e5bf7fa6bb89c82f91a823b15a861ec44b39a77f71c4512c0401336950d92e1651490ebac52a201bc3faf22ea0374dd98b95e3346733daba51ef81f60f03541f12793367f64ba96269660d77bd031cf6aae822c1661d4a91ef6dce8ac467a1e28d299e3d19945c01eaef4e14141b93549c65b31f9f80bcfbf6ad9e9cda49e21a4d2f2e794e082bbffe1d939bf6666de0271b9311e2e7ecaa8434d57b5b2c653342618efbbe65345e9e9f47181fa782e200ee9dce1a58f29996cee1117a06dc274dd2120fdcb88c19fa570829912e2bb89333cd12020c42b06657614fd3044e151b1f264f8c908768123b26288c4fc4b18c07809c2e4ba6d1e659d37da88ac5d871972d3c324f45894cbb22cf85a051573219f4a8396ccd1e1621c27afc9ed87118f5c1a321936e428e3937e7fa8fd05debee9a24cb1406c09f13ad5e72c2c6d3cf52789ab6d69378b8e297077c20dc7accca818fb07b4afb1a26e1485112ffdc440ad3dac36f2e17f8cebc1cb0c9b6fe004ae23a7204135f49eba6e975df99292916465b4aab981715520de86f2942f54e8356bd3ee33a4cfedfab78eee1d89983a823435a1b53f619aa55b1a60206a6d7c2d08d4ead04b894809d834b765195faa00d5e48f5fc0d8252f7fdd910826ab9fcf09732c968d89bf452c5734933d53c6eb86a264266ff1172e62ff2a40497fb7fe47412648ae500282f4c646754de147fbf61a48f67ee64abf6fa8163c3ae099892baeca0c7127641478fda2c57f64ac21dd7707f8f1ac708321ee762a8b2e53ba32154cc187fd2662445caf5e45ff4dd59c1e0aea84665cac9ab23282de505b6a0b67d0dac7b04d5cf2f866ed2c1394b713c1979abdba43ed83bce70d64b15ec8a449e159c33192b370df5dedf08470e04a864931fd75a3b1a4721c3b924be0d4bae8e2466e90696481cecc348546f81eb4c08e846a4b30b56687b0ad88381a56a8a61a5ad4264e734191847e494d07500ea21aaaeefa8e294b29edfcaeefaaec0acdf05f0f2ba21efd146bb2bd099e7753ea05d8966f62f8f482ce02a5bf1cf809b5113eceb34e7ee415b57d747f9897aa2da47c3298547414ff3e74a55ccb14ddab99628febd46bd70005d8a10811ca86f7378b9c16a7e6ad9be05e5ea2917d420e4b22ff571295806233677c4d20b8a30b2dc342abaf98fb1948fa67167747a870d877f8e9f38487135e9009f7c33f3d205c396f93626a555d0d8c505db2ef4aba9e797c1fd66b9d4daa7e2ef40d78fabd80d572a6c5113329dc53bcbf6e233d0bc6a53beeb079a8c09e796887636a80184219d1ecc9e9dc53dc93e141ff0119cc852e461cb9454a87a7be71c8e54802df98fbda6112104e5e3cf46e4dfb2b072ee350af7da4fcc0a913708f40441090a57781c0545c70a5efb88b17954efa4b422dbaa8745a2a77e2a0479ad031412dab7a40906958999944362feaf0ac917c950df0057a922cb8cc5447c44f6d91095cfb6a3aa50b443968183c8430d71b3da38db5054b5bd44dd23f2db2159e281fa624ab2416857594aaa27ce7243b77f9d953dc23453ea45f418e96ebaf026d61e167475e4399532c9d5f99709380feddf73ccd50d3a7eb67f8227ce0fc7f906642b38015ec92f85a136835ac72ae4f8e477f18c2a919096de27812430a84fa4147e65b1b889b4b3beb537cd9c3f17ed260e309da1f49ccd2333108b7860902c2a15732e88a0a3d0231851c6fc0918991f4296c3d6d2482ef9c4c2d78ef3e45b14050e0d6533f596edcd4a5cc6024fef972fbe62239c8ee4f62243dc20fb3f3cad9d697f5e929c0a22890288fb536d9f748064e76eeecaa3b1dc28f7ce250ab33974fecea83a3ed56a6b8f3277f2b786ef9bc0a95dcb3f868952ac53612a83b05438c1414783450670be4d4dcdf1d97ed30d4f36e7295799b5a2826fc7fcbe5a5ae55866477c943938db623f3a6c3d0190b43f"}], 0x1010}}, {{&(0x7f0000007bc0)=@caif=@rfm={0x25, 0x7, "e07e60572c8e408ba55775856712f826"}, 0x80, &(0x7f0000007ec0)=[{&(0x7f0000007c40)="2e72872135a8d8ae472dd2b514aac0ac1b472420412b6dcdf38ca523d7b19bfdf350f1d126e8a7b5d64acf32e9f2e9a529d4c89af19dfbf81666a6553cd611ac342bee5978abcbfb4007d398c4722c9ac12f27e57acbbf008dce70", 0x5b}, {&(0x7f0000007cc0)="7f59ccf86cce819fd564d3d2fdaa5073b9ccdc2fc13a53", 0x17}, {&(0x7f0000007d00)="58fb100ddb040081ca4af3e744859e701f1650d39a99043d0bf88ff2af8681220cd781d57da26e7ef6a9f7064866a1748337b8fbc1de68b8c6ee25d59d81110326a751cf38d32fe24887e92bc3307537fb50e204b435771755cb71c2ebdc18a0", 0x60}, {&(0x7f0000007d80)="1387aa39e5b00f6a4721fe7d57a736147cd3d14658e9c2e76d8d87b6efa3178ad9bbb63ba88144fdd0837a6761896bdba8967c35ca9c97cae16cdfd0a6208be45252a9e783e16f3169145a14dc88e3b37b41ee2511e12de6249bfbe13fbf0e59bd115cbfbfb264537f1974c5ca07de60acba670f130afe5b74fbae2e25c26beccc7c3c63b9c552c0bec3a24de430361e14", 0x91}, {&(0x7f0000007e40)="301256ad1f8c37d6a20112e9ead05fa4576dd1cb8e5e86324bd8b98c3d38f1772f096aedc40a5dd7656c292fe9f2dd2fc714dd40beeb744959b000bbdcea82b07ce32a9e8ef415b1fe3a8586a793f19ccadb627c09ccbfc4ed2321e78d7cd53caf41db24f44e4c33fd324fbe817834995f8543951474c7040f6f5784", 0x7c}], 0x5, &(0x7f0000007f40)=[{0xc0, 0x102, 0x7, "cf9aed9b6c6f91efb6b5016df6e0330950ce9b3b2ef3787def048a044041c8b42e7a45597ba4cb6bb2c5ee63960e613f6e1d493eac37024dca5d046aa2f0bd5417f421b40bf62d98440c24ec57c25beb59e5efd81d68894eff3e0aabf49edbd7c32e7a7996d2c23d859220901cd45d7552942000763de87f00e97302e9316f4070d65af5c6d63170800328d30834edadecd044d3ddb905ce2b366bbd2c5a7e48b27e0ec8134a9dac5bf8c4666fd55818"}], 0xc0}}], 0x2, 0x100) recvmmsg(r4, &(0x7f000000e740)=[{{&(0x7f0000008080)=@nfc_llcp, 0x80, &(0x7f0000008600)=[{&(0x7f0000008100)=""/122, 0x7a}, {&(0x7f0000008180)=""/56, 0x38}, {&(0x7f00000081c0)=""/27, 0x1b}, {&(0x7f0000008200)=""/121, 0x79}, {&(0x7f0000008280)=""/157, 0x9d}, {&(0x7f0000008340)=""/141, 0x8d}, {&(0x7f0000008400)=""/233, 0xe9}, {&(0x7f0000008500)=""/195, 0xc3}], 0x8}, 0x5}, {{&(0x7f0000008680)=@un=@abs, 0x80, &(0x7f0000008800)=[{&(0x7f0000008700)=""/130, 0x82}, {&(0x7f00000087c0)=""/26, 0x1a}], 0x2, &(0x7f0000008840)=""/87, 0x57}, 0x3e92}, {{&(0x7f00000088c0)=@tipc, 0x80, &(0x7f0000009a40)=[{&(0x7f0000008940)=""/134, 0x86}, {&(0x7f0000008a00)=""/4096, 0x1000}, {&(0x7f0000009a00)=""/17, 0x11}], 0x3}, 0x3}, {{&(0x7f0000009a80)=@xdp, 0x80, &(0x7f0000009dc0)=[{&(0x7f0000009b00)=""/238, 0xee}, {&(0x7f0000009c00)=""/89, 0x59}, {&(0x7f0000009c80)=""/158, 0x9e}, {&(0x7f0000009d40)=""/93, 0x5d}], 0x4}, 0x6}, {{0x0, 0x0, &(0x7f000000b140)=[{&(0x7f0000009e00)=""/4096, 0x1000}, {&(0x7f000000ae00)=""/249, 0xf9}, {&(0x7f000000af00)=""/188, 0xbc}, {&(0x7f000000afc0)=""/35, 0x23}, {&(0x7f000000b000)=""/64, 0x40}, {&(0x7f000000b040)=""/147, 0x93}, {&(0x7f000000b100)=""/48, 0x30}], 0x7, &(0x7f000000b1c0)=""/29, 0x1d}, 0x3}, {{&(0x7f000000b200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f000000c440)=[{&(0x7f000000b280)=""/245, 0xf5}, {&(0x7f000000b380)=""/79, 0x4f}, {&(0x7f000000b400)=""/44, 0x2c}, {&(0x7f000000b440)=""/4096, 0x1000}], 0x4, &(0x7f000000c480)=""/3, 0x3}, 0x3}, {{&(0x7f000000c4c0)=@caif=@rfm, 0x80, &(0x7f000000e600)=[{&(0x7f000000c540)=""/4096, 0x1000}, {&(0x7f000000d540)=""/17, 0x11}, {&(0x7f000000d580)=""/4096, 0x1000}, {&(0x7f000000e580)=""/80, 0x50}], 0x4, &(0x7f000000e640)=""/237, 0xed}, 0x1}], 0x7, 0x8020, 0x0) (async) r8 = syz_clone(0x0, &(0x7f000000e900)="43b8fa865dd78fa50e453560a37099eed321708557046c7b97ba230136bfa42b4ac52bfb565dd9f8d7757067b409ac6071e7f8cdc65151297c426c15", 0x3c, &(0x7f000000e940), &(0x7f000000e980), &(0x7f000000e9c0)="44868298d322b9e44e9b12a2cc168497375eca5014e5ac57513c976d2f29a0169e02ba5be5585fb3f6067b992f1aa94b0d179c29cd7e9a68b3ab13c391f72d28524165cc38fba145be") ptrace$cont(0x23, r8, 0x9, 0x7fffffff) (async) syz_usb_connect$uac1(0x1, 0x82, &(0x7f000000ea40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0xf9, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe86, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x19, 0x1, 0xe, 0x5, "93ab1fabbeb9eb78f5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf, 0x0, 0x8, {0x7, 0x25, 0x1, 0x80, 0xb, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x7, 0x9, 0x8, {0x7, 0x25, 0x1, 0x81, 0x3, 0x1}}}}}}}]}}, &(0x7f000000ec80)={0xa, &(0x7f000000eb00)={0xa, 0x6, 0x200, 0x10, 0x6, 0x9, 0xff, 0x8}, 0xc, &(0x7f000000eb40)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x20, 0xe, 0x6, 0x1000}]}, 0x4, [{0x4, &(0x7f000000eb80)=@lang_id={0x4, 0x3, 0x827}}, {0x2d, &(0x7f000000ebc0)=@string={0x2d, 0x3, "11d3f18b57a50f173e2c3846329f318e411aa9b408b79f952740b08b6e20e058fc88787500c9a46b722e4b"}}, {0x4, &(0x7f000000ec00)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f000000ec40)=@lang_id={0x4, 0x3, 0x407}}]}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f000000ef80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) fstat(r4, &(0x7f000000efc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(r4, &(0x7f000000f040)='./file0\x00', 0x1000, 0x200, &(0x7f000000f080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f000000f300)=[{{&(0x7f000000ed00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f000000ef40)=[{&(0x7f000000ed80)="b0e128df599874c78d3729d8b15355ae04d0c37f7604cb4f0523720a878ab2838e37533633ae57b7760eef1485961704e23be22e0c783e19e2c5c53b22cd041fe71fe77e811ac0c4632df26ea0da32be9e34f3c14e163bb4487b5bcd9e", 0x5d}, {&(0x7f000000ee00)="a70ef960bdc4f662059e3bed18777b66890eea7ef3bcccb2355cd2cabbf299b631194fe8ce1f48c8461ca173dd97c97b0b1b89da5cc953826ebe77a855ab1110ca445fc4ee442d5998bc81370a9b4c53f5b82550432bbecbb73f266948db2ec3c46fa5fdf04574ed71faf0a025cf", 0x6e}, {&(0x7f000000ee80)="4f8d287bc5b15b3b6e7c7c62d4861b7a598c6505a7bd059ebaf4c6d8d056aeaf96b3483aaaa93e39776a50242d48e7f26773fdb43322ccfce5d78056173a9e74f2e7f53cf208066ea43af777d040f3b5dad1d39c7854", 0x56}, {&(0x7f000000ef00)="5252927fdb6845c58678f9e7b9f289a3f78a5ffc2a", 0x15}], 0x4, &(0x7f000000f180)=[@rights={{0x1c, 0x1, 0x1, [r0, r6, r6]}}, @rights={{0x18, 0x1, 0x1, [r1, r9]}}, @rights={{0x24, 0x1, 0x1, [r6, r0, r3, r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r13}}}], 0x80, 0x801}}, {{&(0x7f000000f200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000f2c0)=[{&(0x7f000000f280)="c84e387a817c6f6ede62e9ff8c677eb6ac1207", 0x13}], 0x1, 0x0, 0x0, 0x20000081}}], 0x2, 0x40040) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f000000f380)) (async) r14 = syz_genetlink_get_family_id$batadv(&(0x7f000000f400), r7) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f000000f4c0)={&(0x7f000000f3c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f000000f480)={&(0x7f000000f440)={0x34, r14, 0x208, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc048040}, 0x20008000) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f000000f540), r2) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r15, &(0x7f000000f600)={&(0x7f000000f500), 0xc, &(0x7f000000f5c0)={&(0x7f000000f580)={0x14, r16, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000805}, 0x40084) (async) userfaultfd(0x1001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f000000f6c0)={{0x1, 0x1, 0x18, r7, {r10, r11}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f000000f640)='./file0\x00', &(0x7f000000f680), 0x100400, &(0x7f000000f700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r15}, 0x2c, {[{@posixacl}, {@uname={'uname', 0x3d, '{-/[\\#:]'}}, {@cache_mmap}, {@uname={'uname', 0x3d, '/selinux/status\x00'}}, {@cache_fscache}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, r17}}], [{@smackfsroot={'smackfsroot', 0x3d, '/selinux/status\x00'}}, {@flag='nolazytime'}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@uid_eq={'uid', 0x3d, r12}}]}}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f000000f840)={0x4, 0x6, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f000000f980)={&(0x7f000000f880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000f940)={&(0x7f000000f900)={0x3c, 0x0, 0x80, 0x70bd25, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004051}, 0x0) 3m23.422913184s ago: executing program 3 (id=2870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x0, r4}, 0x18) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func={0xa, 0x0, 0x0, 0xc, 0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}]}, {0x0, [0x2e, 0x2e, 0x30, 0x0, 0x2e]}}, &(0x7f0000000780)=""/41, 0x4f, 0x29, 0x7fff, 0x8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1d, 0x4, 0x80000, 0xf, 0x4008, r6, 0x2, '\x00', r3, r7, 0x0, 0x2, 0x3}, 0x50) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) ioctl$COMEDI_BUFCONFIG(r4, 0x8020640d, &(0x7f0000000600)={0x7, 0x3, 0xd8, 0x3536}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r9, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ptrace$getregs(0xc, 0x0, 0x2, &(0x7f0000000540)=""/191) 3m20.470408032s ago: executing program 3 (id=2882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0) 3m19.869741384s ago: executing program 3 (id=2884): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r2, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="6f2fdd9ec45cc6411a5f559113bf33aa5c2590598d509bfd796347498f76c038d9285228b5419230ef6ba87d1698a2d288a7953d3f3259de44eceaa15ff35d56b88a2802905fde8ac5e4db5979ed6e0dbf2b4768b2952e03ae70cfd23194fa118c27d8cc19e43d5793e7aa20a443937c7ff074efbf00b33b01c59226ddd2096dd82374cc64dcdfe893496cb3f25c2f2d393667e23a02af1deff75f743d56a1a5e052bffdf30999d9792ae939958e930b8c852f99761c681236c9a5f809", 0xbd}, {&(0x7f0000000540)="0703a7c3f2bebb055d1e52892e9bf7c74ef6e9a87b37501b33be0951013a91dac8593aac1cdfbda89aec802800eeaa4b250f285c02a6ef938ae8a2d438e883f147c6a486ec24658e2a3469ecfa29350e390b1be974a819d6c45ec858dfd693e4442766af8664f7afa025a915e812679a7af7aeee6d1cc62d3554271d08389fc4afc64be0c7e3f0cfaa7f02390347", 0x8e}, {&(0x7f0000000600)="5c1aec6b067165864ac89d079f7ae228b12bd322e9076ef6626ecb969b18011809e68c7759a3b625d81edab4f55c3168b8c347f42d1e0df30c059b04ea938925f351d6404961009ab100b4720a6643d0b5240aeb09448730be5c3da8e4cc76efa4ab636643f702c74aafb6b52bbc4ebcadd617ca84e7311734f3ed6b69be4071f4142e29d08ad6ac9ae6bf879a3c45b4daa9c91fe652988f7e", 0x99}, {&(0x7f00000006c0)="b616ee6f330ddb57e9ce7a0c58a66d5ef2b5c32e120200000086f42ec382731055e77ee8d728c3978a7aa65a700541aee6a81f6da206ea9b4a67f8a037a0d08119ba", 0x42}, {&(0x7f0000000740)="58b21162359c52272b5535876b05d4709fd42e4c01e3635bb7a91021d65f18fa36f3e3bd0205037b9e049f3f77fbdf4831478bc5dbdbdb5c3a49d607b90ab824bde681d13dabfe4157d3f22a6b319ccd09899322ce56347356c7e5d8fdf5027a4d0b63fadeae648f61404b134ef5e1", 0x6f}, {&(0x7f00000007c0)="27e5750b79a2e118266e181dd79f190df3f8ff918ed2a3f5599ec770c447a39b8bea726a54f949a73b3e309c95187ebfe8f7a95ad0bf75d69664e5c0790b09b81d1f194ed81cb7c8757b1bbce4ccce04418feef357c5e65cf7402e3000e5f0c247a4f5923cfbf1fd41485eac17631b2dd40d07e343f9bceaef81117f44a6932d20b6dd04d4f668738fa4c9509ba4f3221e5954b8f9dbc87b99db546780b22c004dfee35e9c41d1777b45b0c8087a5f325f17eed51c4bdea9f1d7c55d4b3c5fc41e1827eeff2cb0ac3eaa5a60708861080bea8d34", 0xd4}], 0x6}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000001100)="035667ca0000000000000000e81deb5ac064084d1f49557a10f3017890bc6ec2368bb3f5fc8158854542c6c0d1fda9455fbb52fe0500b5bb01c26d0a53ce1f06c0e383fa992aa025a7ed115635ffec2c9c3b915d4b9beb919744ddf38a9254ab4767b73fbaef1f75769b4a4d440801f44fadb7fd5be39640a915306adabb9c9d8b6f32ad286a4e9370", 0x89}, {&(0x7f0000000b40)="e830bf6980a60ca5a450bc8ff794a58de6f67b2218a3944a52c0b477335d14ae29ad3573fff74f99bf815fab6e5e8be6cac7037673fc5373e32e6b5b827138486240d8e9cf2dcfbc44ce7abf65dd79b9efadc93d8dc383c0ccad461617223c4d0b3cd8f2da4edbb8e7ff9350b05eb151a40d82932f334a364d896f4c61f3cbfae25211fda729594102650b7ffddecf79942022f1a77e7d8eba3dc076113b530de904f3dece9a8691a361d4c1fc9e124a7f97f1209694efc8d99970a1fba968b14877c5c1fb054e34917aff3f31", 0xcd}, {&(0x7f00000003c0)="0cb0d93bdf68ddfcfda8a4900ff37eea8cb48e", 0x13}, {&(0x7f0000000c40)="45ed63d2b4c4834e6240a30f4cb3ce4d89f30975b94238a8294326325f3f86381ba190ca87e40ce9f719fee915b02cc74b0238", 0x33}, {&(0x7f0000000c80)="8c38dd033afd5a974fecb19c2d96b9716122de262d6d54c8a120ad2d9d9477c71ffd035537666cf6999156a72bdd0933d71c4c8cafe3f204ea1c2cb31ae10f4c36e1232981f7272970ecdb7196e8f925c008fa02aa577938b7f96602a7e72b44fcef090bb21495e49b3a1dd76a093b5f6beff23863736f2d6b2ed0d5959575b4714bc8a8d233d9b7296666c87a19abd29188e777eba6ea5dfc837c82a9550d9233d6474084e07f99a5f1069ddb", 0xad}, {&(0x7f0000001040)="3c81029d88386c4965a1d89703c154e63f4d7f", 0x13}], 0x6}}], 0x3, 0x4) (async) sendmmsg$sock(r2, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="6f2fdd9ec45cc6411a5f559113bf33aa5c2590598d509bfd796347498f76c038d9285228b5419230ef6ba87d1698a2d288a7953d3f3259de44eceaa15ff35d56b88a2802905fde8ac5e4db5979ed6e0dbf2b4768b2952e03ae70cfd23194fa118c27d8cc19e43d5793e7aa20a443937c7ff074efbf00b33b01c59226ddd2096dd82374cc64dcdfe893496cb3f25c2f2d393667e23a02af1deff75f743d56a1a5e052bffdf30999d9792ae939958e930b8c852f99761c681236c9a5f809", 0xbd}, {&(0x7f0000000540)="0703a7c3f2bebb055d1e52892e9bf7c74ef6e9a87b37501b33be0951013a91dac8593aac1cdfbda89aec802800eeaa4b250f285c02a6ef938ae8a2d438e883f147c6a486ec24658e2a3469ecfa29350e390b1be974a819d6c45ec858dfd693e4442766af8664f7afa025a915e812679a7af7aeee6d1cc62d3554271d08389fc4afc64be0c7e3f0cfaa7f02390347", 0x8e}, {&(0x7f0000000600)="5c1aec6b067165864ac89d079f7ae228b12bd322e9076ef6626ecb969b18011809e68c7759a3b625d81edab4f55c3168b8c347f42d1e0df30c059b04ea938925f351d6404961009ab100b4720a6643d0b5240aeb09448730be5c3da8e4cc76efa4ab636643f702c74aafb6b52bbc4ebcadd617ca84e7311734f3ed6b69be4071f4142e29d08ad6ac9ae6bf879a3c45b4daa9c91fe652988f7e", 0x99}, {&(0x7f00000006c0)="b616ee6f330ddb57e9ce7a0c58a66d5ef2b5c32e120200000086f42ec382731055e77ee8d728c3978a7aa65a700541aee6a81f6da206ea9b4a67f8a037a0d08119ba", 0x42}, {&(0x7f0000000740)="58b21162359c52272b5535876b05d4709fd42e4c01e3635bb7a91021d65f18fa36f3e3bd0205037b9e049f3f77fbdf4831478bc5dbdbdb5c3a49d607b90ab824bde681d13dabfe4157d3f22a6b319ccd09899322ce56347356c7e5d8fdf5027a4d0b63fadeae648f61404b134ef5e1", 0x6f}, {&(0x7f00000007c0)="27e5750b79a2e118266e181dd79f190df3f8ff918ed2a3f5599ec770c447a39b8bea726a54f949a73b3e309c95187ebfe8f7a95ad0bf75d69664e5c0790b09b81d1f194ed81cb7c8757b1bbce4ccce04418feef357c5e65cf7402e3000e5f0c247a4f5923cfbf1fd41485eac17631b2dd40d07e343f9bceaef81117f44a6932d20b6dd04d4f668738fa4c9509ba4f3221e5954b8f9dbc87b99db546780b22c004dfee35e9c41d1777b45b0c8087a5f325f17eed51c4bdea9f1d7c55d4b3c5fc41e1827eeff2cb0ac3eaa5a60708861080bea8d34", 0xd4}], 0x6}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000001100)="035667ca0000000000000000e81deb5ac064084d1f49557a10f3017890bc6ec2368bb3f5fc8158854542c6c0d1fda9455fbb52fe0500b5bb01c26d0a53ce1f06c0e383fa992aa025a7ed115635ffec2c9c3b915d4b9beb919744ddf38a9254ab4767b73fbaef1f75769b4a4d440801f44fadb7fd5be39640a915306adabb9c9d8b6f32ad286a4e9370", 0x89}, {&(0x7f0000000b40)="e830bf6980a60ca5a450bc8ff794a58de6f67b2218a3944a52c0b477335d14ae29ad3573fff74f99bf815fab6e5e8be6cac7037673fc5373e32e6b5b827138486240d8e9cf2dcfbc44ce7abf65dd79b9efadc93d8dc383c0ccad461617223c4d0b3cd8f2da4edbb8e7ff9350b05eb151a40d82932f334a364d896f4c61f3cbfae25211fda729594102650b7ffddecf79942022f1a77e7d8eba3dc076113b530de904f3dece9a8691a361d4c1fc9e124a7f97f1209694efc8d99970a1fba968b14877c5c1fb054e34917aff3f31", 0xcd}, {&(0x7f00000003c0)="0cb0d93bdf68ddfcfda8a4900ff37eea8cb48e", 0x13}, {&(0x7f0000000c40)="45ed63d2b4c4834e6240a30f4cb3ce4d89f30975b94238a8294326325f3f86381ba190ca87e40ce9f719fee915b02cc74b0238", 0x33}, {&(0x7f0000000c80)="8c38dd033afd5a974fecb19c2d96b9716122de262d6d54c8a120ad2d9d9477c71ffd035537666cf6999156a72bdd0933d71c4c8cafe3f204ea1c2cb31ae10f4c36e1232981f7272970ecdb7196e8f925c008fa02aa577938b7f96602a7e72b44fcef090bb21495e49b3a1dd76a093b5f6beff23863736f2d6b2ed0d5959575b4714bc8a8d233d9b7296666c87a19abd29188e777eba6ea5dfc837c82a9550d9233d6474084e07f99a5f1069ddb", 0xad}, {&(0x7f0000001040)="3c81029d88386c4965a1d89703c154e63f4d7f", 0x13}], 0x6}}], 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x6, 0x2, 0x8000000000000001, 0xfffffffffffffffd, 0x48700000, 0x1, {0x40, 0x8, 0xb, 0x7fffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x124, 0x2000, 0x0, r6, r7, 0x20000aa6, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES64=r4, @ANYRES32, @ANYRES64=r3, @ANYRESOCT=r6], 0x54}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES64=r4, @ANYRES32, @ANYRES64=r3, @ANYRESOCT=r6], 0x54}}, 0x0) 3m19.303787449s ago: executing program 3 (id=2886): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) times(0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x40, 0x5, 'syz0\x00', 0x10000003}, 0x0, [0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffff52, 0x5, 0x1, 0x8000000000000000, 0x8, 0x0, 0x4000000000000, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x3, 0x0, 0x9, 0x9, 0x2, 0x0, 0x7fffffff, 0x85, 0x3, 0x0, 0xb9e4, 0x0, 0x100000000000000, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x6, 0x6, 0x0, 0x3, 0x61, 0x9, 0xfffffffffffffc, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x200000000000, 0x1, 0xfffffffffffffff8, 0x0, 0x0, 0x4, 0xc000000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0xcb, 0xfffffffffffffffc, 0x0, 0x200, 0x9, 0x5, 0xffff, 0xfffffffffffffff8, 0x5, 0x0, 0x0, 0x10001, 0xebc, 0x0, 0x4000000000000, 0x74c, 0x6, 0x6, 0x400000000067, 0x7, 0x10000000, 0x7fffffff, 0x401, 0x0, 0x1, 0x76e, 0x0, 0x4, 0x5, 0x4, 0x0, 0x1, 0x1, 0xf32, 0x9, 0x2001, 0x0, 0x0, 0x0, 0xa562, 0x0, 0x80000005, 0xffffffffffffffff, 0x0, 0x5, 0x8, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x6, 0xfffffffffffffffb, 0x0, 0x0, 0x8, 0x0, 0x7, 0x4, 0x1553, 0x40, 0x0, 0x1, 0x0, 0xf65]}) unlink(0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 3m18.354647762s ago: executing program 3 (id=2888): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xc0}, 0x48) 3m16.17931123s ago: executing program 3 (id=2900): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31e20000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES16=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES8], 0xb4}, 0x1, 0x0, 0x0, 0x40008c0}, 0x24000840) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x7fffffffffffffff, 0x100}, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYBLOB="b0cbc6cfb5156e64fa1c3e2d61eb7d3e3eedd1f4084442b2c33e0db39c8e6dc321ed58df614ff59d61f06fd02e1820eeb35732d82bb6d1bbf51555b47b185d27f9795e8d82b82ff6c17b877e913da25cf066731ff38a8850d26a56c9226e2c5af740b118694e15b368500e36d9fecc37a46409054d0f36a657aada6f76a9fea9c7173b400c5bafcbe051f92afea5ba9039cd469699a003f5516e2a0ba66a7b75fb44bce63601f335f5d322237471b535855f137ed8", @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x6008851}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000340)={'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) socket$netlink(0x10, 0x3, 0x2) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x201, 0x4000003e, r8, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) timerfd_create(0x4, 0xc1000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) 3m0.99476988s ago: executing program 41 (id=2900): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31e20000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES16=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES8], 0xb4}, 0x1, 0x0, 0x0, 0x40008c0}, 0x24000840) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x7fffffffffffffff, 0x100}, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYBLOB="b0cbc6cfb5156e64fa1c3e2d61eb7d3e3eedd1f4084442b2c33e0db39c8e6dc321ed58df614ff59d61f06fd02e1820eeb35732d82bb6d1bbf51555b47b185d27f9795e8d82b82ff6c17b877e913da25cf066731ff38a8850d26a56c9226e2c5af740b118694e15b368500e36d9fecc37a46409054d0f36a657aada6f76a9fea9c7173b400c5bafcbe051f92afea5ba9039cd469699a003f5516e2a0ba66a7b75fb44bce63601f335f5d322237471b535855f137ed8", @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x6008851}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000340)={'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) socket$netlink(0x10, 0x3, 0x2) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x201, 0x4000003e, r8, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) timerfd_create(0x4, 0xc1000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) 48.599294563s ago: executing program 4 (id=3315): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="62ca2d2688eec2909f1c8f13cd1f034bcfdeea19377d7e50e51934ffb53b672882f9f3a2f66a3f34d50bb94b1b249d0fe5c3f030d1e46bf68ce1119a400e1c08c8887c8f72a5d1249e31a33964b83c50326dd418f97a34a7b3b9e008f66f9d30c1c4ddbe41ad9a42598b46254a8c6f5df8f4812e8a1073013f86d332eccc5b9dea9a9d62e1bbcf69c2e9555dad0a20787d963aaf26b78efb84a98791b1e26ada27f75214bea598c2cb34dfe5027baaca9f2005e9454b1cdb6c9e16491c87884572236cd0d0458c6eae39553d3fb37282005f59b62a783a407483e88362e378aa79b31f88a526b5c3", @ANYRES64=r4, @ANYBLOB="ff55cb1c", @ANYRES8=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x2000c045}, 0x4040000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x41010, r7, 0x35f96000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109"], 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="62ca2d2688eec2909f1c8f13cd1f034bcfdeea19377d7e50e51934ffb53b672882f9f3a2f66a3f34d50bb94b1b249d0fe5c3f030d1e46bf68ce1119a400e1c08c8887c8f72a5d1249e31a33964b83c50326dd418f97a34a7b3b9e008f66f9d30c1c4ddbe41ad9a42598b46254a8c6f5df8f4812e8a1073013f86d332eccc5b9dea9a9d62e1bbcf69c2e9555dad0a20787d963aaf26b78efb84a98791b1e26ada27f75214bea598c2cb34dfe5027baaca9f2005e9454b1cdb6c9e16491c87884572236cd0d0458c6eae39553d3fb37282005f59b62a783a407483e88362e378aa79b31f88a526b5c3", @ANYRES64=r4, @ANYBLOB="ff55cb1c", @ANYRES8=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x2000c045}, 0x4040000) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x41010, r7, 0x35f96000) (async) 44.554957188s ago: executing program 4 (id=3327): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x80000000008}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000000c0)={0x1}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000001c0)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) 42.754927019s ago: executing program 4 (id=3331): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000001000006241a00000a0905812400020007000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0xa941, 0x8, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x1000, 0x5, 0x81, 0x4, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = dup(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = semget$private(0x0, 0x7, 0x191) semtimedop(r3, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r3, &(0x7f0000000180)=[{0x2, 0x2, 0x800}, {0x3, 0x5, 0x3000}], 0x2) semop(r3, &(0x7f0000000140)=[{0x1, 0xce97, 0x800}, {0x3, 0x5, 0x1000}], 0x2) semctl$GETZCNT(r3, 0x0, 0xf, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x4000000) 39.078844502s ago: executing program 4 (id=3340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x107842, 0x1) mkdir(&(0x7f0000000080)='./file0\x00', 0x145) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=0x0, @ANYBLOB="0000076bf4111c9f6daab16b6681285093445c557798371974c26bc0e6037783c4ef671a68672240427cc15704be8573c4f18f763e494e1864bb8427c18aab1b"], 0x28}}, 0x0) 38.04638004s ago: executing program 4 (id=3341): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x80000000008}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000000c0)={0x1}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000001c0)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) 35.724281309s ago: executing program 4 (id=3349): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000100)=""/21, 0x15, 0x0, &(0x7f0000000200)=""/199, 0xc7}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x148640, 0x78e22799f4a46f1e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = dup(r4) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$kcm(0x23, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000080)=0x1) write$tun(r6, &(0x7f0000000380)=ANY=[], 0x78) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000500)) socket$nl_xfrm(0x10, 0x3, 0x6) openat(r5, 0x0, 0xc000, 0xa0) 20.434243025s ago: executing program 42 (id=3349): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000100)=""/21, 0x15, 0x0, &(0x7f0000000200)=""/199, 0xc7}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x148640, 0x78e22799f4a46f1e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = dup(r4) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$kcm(0x23, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000080)=0x1) write$tun(r6, &(0x7f0000000380)=ANY=[], 0x78) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000500)) socket$nl_xfrm(0x10, 0x3, 0x6) openat(r5, 0x0, 0xc000, 0xa0) 11.255786327s ago: executing program 1 (id=3430): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="202001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) 9.51825261s ago: executing program 7 (id=3436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x0, r4}, 0x18) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func={0xa, 0x0, 0x0, 0xc, 0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}]}, {0x0, [0x2e, 0x2e, 0x30, 0x0, 0x2e]}}, &(0x7f0000000780)=""/41, 0x4f, 0x29, 0x7fff, 0x8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1d, 0x4, 0x80000, 0xf, 0x4008, r6, 0x2, '\x00', r3, r7, 0x0, 0x2, 0x3}, 0x50) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) ioctl$COMEDI_BUFCONFIG(r4, 0x8020640d, &(0x7f0000000600)={0x7, 0x3, 0xd8, 0x3536}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r9, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ptrace$getregs(0xc, 0x0, 0x2, &(0x7f0000000540)=""/191) 9.379065658s ago: executing program 0 (id=3437): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x6) mount(0x0, 0x0, &(0x7f0000000100)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080), 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 8.904876954s ago: executing program 8 (id=3438): r0 = syz_usb_connect(0x3, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x44, 0xab, 0xe0, 0x8, 0x2109, 0x711, 0x25de, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x94, 0x4, 0x0, 0x90, 0xa5, 0x32, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x3, 0x7f}, {0x6, 0x24, 0x1a, 0x8, 0x21}}]}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x20, 0x11, 0x86, {0x86, 0x8, "0b267b9ada040ff3379e238f6f5d615ce1d41da0eb0af9e6dd6794c8e3bfbfd0c50d8698d10fce77323b78c5d4bc1faf0d84301e3b872aabf6c703aea3ce9b26fc50606d93bd1c55fdaf46eb3fa430babc467e91dd5742d04493545f3bb44d10caf02e4496a81d47fccf30519dd85d0cc87b3f47946a18e87be00a1a2d2865495c024004"}}, &(0x7f0000000140)={0x0, 0x3, 0x94, @string={0x94, 0x3, "387d2ed4f8abdec75e0216f67f2b01f563dbfde3fc5cb9570ded00cb5e7ac15b0d5df737f3ba17e4a2effaf872280e8ee32e2fbec979c5d3a93f2fecba07373210fb50bf4bd2ee2aca98d5b12ca46903f49870141291cf62198cfe04242e19cf8d4d6536464c436a9b6c6c71bdc58d9daaa98e6ff42b2c306e11e1fd1455897478562b532978bfa3c79c9f2cff97082c6859"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="40138c0000005d58ea262e771c09b1ac2206a397d5fd8652632f26355c0cff325b9e9ab3f78c0dd25c335d5ea5650d94b0a937b348e5b415c147ab21c34efceb51b0d9cad6992deb1d9f8d654da1aab6700c9f080301f1807c10b6f2a13e321fd3a7a9e7ccadaca7395219a8cbb866665927aba22c21174647fd5179977c963c6b9e34f64fb55177be80780c28d11bf14db6"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x81}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x2480}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "99f5bb0d6ff5e383a91f1948689e2a085d717c3501a4b859d63d3fadc58561a8483043b9040aa4ad2ad3ce31ea8db0"}}) 8.75943708s ago: executing program 7 (id=3439): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0xa0) connect$inet(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r3, 0x4b49, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rtc_irq_set_state\x00'}, 0x18) socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read(r5, &(0x7f0000000180)=""/65, 0x41) 8.675703817s ago: executing program 1 (id=3440): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000020000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8001) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, @ib={0x1b, 0x6, 0xaa, {"05dc7d320c91d6f205bb6b5e38604cf7"}, 0x5, 0x5a34, 0x2}}}, 0x118) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x10c000) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000f80)={[0x1, 0x8, 0x7, 0xa, 0x5, 0x8, 0x68e9a9ea, 0x0, 0xffffffff, 0x1, 0x2, 0x10001, 0x2e, 0xb214, 0x31, 0x68, 0x3, 0xc7, 0x6, 0x80, 0x10000, 0x0, 0x9, 0x0, 0x7, 0x7fffffff, 0xc2, 0x0, 0x9, 0x2, 0x3ff, 0x0, 0x2, 0xd94, 0x4, 0x5, 0xffffffff, 0x6, 0x3, 0xdc1, 0x3, 0x7, 0xcb, 0x400, 0x7, 0x7, 0x8, 0x8, 0x0, 0x86, 0x10001, 0x0, 0x6, 0x8, 0xcc6, 0xd09, 0x5, 0x7e5, 0xb5, 0x0, 0xfffffffb, 0x8, 0xffffffff, 0x4, 0x4, 0x1, 0x9, 0x8, 0x5, 0x10001, 0x6, 0x4, 0x1, 0x1000, 0x9, 0x400, 0x4, 0x1, 0x24000000, 0xffff, 0x25e, 0x6, 0x6, 0xfffffffb, 0xc7, 0x1e2a, 0xff800000, 0xd, 0xc, 0x2, 0x7, 0x7, 0x2, 0x7, 0x3, 0xff, 0x0, 0x10000, 0x3, 0x4, 0x10001, 0x4, 0x6, 0x549, 0x2, 0x0, 0x0, 0x10, 0x7, 0x8290, 0xfffffff9, 0xc1, 0xae, 0x5871, 0x9, 0x5, 0x4, 0x8, 0x40, 0x8001, 0x3, 0x8, 0xffffffff, 0x6, 0x7fffffff, 0x7, 0x5133e3a6, 0x401, 0x8001, 0xffff7fff, 0xa, 0x3, 0x5, 0x5, 0x1ff, 0x9, 0x400, 0xffffffff, 0x2, 0x1, 0x4945, 0x4cae, 0xfff, 0xe, 0x796, 0x2, 0x6fdf, 0x7, 0x7, 0xbe4a, 0x4, 0x0, 0xe, 0x4, 0x8, 0x40, 0x4, 0x9, 0x7e6, 0x5, 0xffff, 0x7fff, 0x2, 0x4, 0x80, 0x49, 0x200, 0x8, 0x9, 0x400, 0x101, 0x8, 0x60e, 0x2, 0x6, 0x9, 0x9d, 0x7ff, 0x0, 0x7, 0x40, 0x81, 0x4, 0xfff, 0x1, 0x7, 0x0, 0x7, 0x101, 0xf0000000, 0x0, 0x80000001, 0xffff8001, 0x200, 0xffffffff, 0x9, 0xf590, 0xce69, 0x0, 0x40000000, 0xa, 0xfffffffc, 0x68, 0xff, 0x89800000, 0x5, 0xcf8, 0x5, 0x7, 0xdf958257, 0xffffffff, 0x78781583, 0x89d7, 0x3668, 0xa4, 0x22, 0x7fff, 0x1, 0x0, 0x9, 0x78c, 0x40, 0x200, 0x8000, 0xfffffff9, 0x400, 0xb1d3, 0x40, 0x0, 0xe37, 0x1, 0x1, 0xd, 0x81, 0x58, 0x2, 0x5, 0x8, 0x6, 0x6, 0x1, 0x1, 0x6, 0xfff, 0xffffffff, 0xf, 0xf, 0x6, 0x25fb, 0x4, 0x3, 0x8001, 0x5, 0x40, 0x8, 0xb17a, 0x2, 0xc5, 0xe7e, 0x9, 0x6, 0x10001, 0x3, 0x2, 0x9, 0x5, 0x3, 0x80000000, 0xb342, 0x1, 0xd5ce, 0x2, 0x2, 0x40, 0x401, 0xffffffff, 0xb, 0x3, 0x7, 0x6, 0x4, 0x0, 0x4, 0x5, 0x8000, 0x6c5, 0x9, 0x2, 0x0, 0x6, 0x1, 0x1, 0x8001, 0xffffffff, 0x6ec6e475, 0x4, 0x8080000, 0x4, 0x4, 0x7ff, 0x7, 0x8, 0x4, 0x5, 0x4, 0x5, 0x5, 0xfffffffb, 0x6, 0x6, 0x6, 0x3ff, 0x0, 0x7, 0x1, 0xfffff6f1, 0x0, 0x9, 0x80000000, 0x3bf3481b, 0x800, 0x3, 0x0, 0x7, 0x401, 0x9, 0xd, 0xffffffff, 0x80, 0x40, 0x1cf, 0x6, 0x7, 0x10000, 0x897, 0x3, 0xf, 0x1e, 0x7, 0x2, 0x2, 0x9, 0xfffffff9, 0xe, 0x352d, 0x7, 0x8, 0x8, 0x3f, 0x8, 0x8, 0x6, 0x1ff, 0x0, 0x7ff, 0x8, 0x100, 0x5, 0xa3, 0x3, 0x4, 0x5, 0x80000000, 0xbdd, 0x3, 0x1, 0x39ef10a1, 0x6, 0x7, 0x9, 0x9, 0x10000, 0x9, 0x6, 0x400, 0x6, 0x8, 0x8, 0x82a, 0x0, 0x2, 0x800, 0x7fff, 0x5, 0x9, 0x6, 0x9f2, 0x7, 0x7, 0x7ff, 0x9, 0x60979a54, 0x4, 0x5, 0x401, 0x1d, 0x4, 0x9, 0x7, 0x9, 0x4, 0x4, 0x2, 0xfffffff0, 0x9, 0x3, 0x8, 0x8, 0x0, 0xe, 0x2, 0x9, 0x9, 0x2de, 0x6, 0xae3, 0x6, 0x5, 0x4, 0x9, 0x0, 0xffffffff, 0x3, 0x3, 0xc000, 0x9, 0x8000, 0x7fff, 0xc, 0x8, 0x9, 0x3, 0x2, 0xffff, 0x8, 0xffffffff, 0x74, 0x18a600, 0x4, 0x3d, 0x0, 0x8, 0x5, 0x7fff, 0xffffff4a, 0x8, 0x3ff, 0x8, 0xb53, 0x596, 0x3c5d, 0x10, 0x1, 0x9, 0x9c, 0xfffffffe, 0x7, 0x4, 0xa82f, 0x3, 0x3, 0x3ff, 0x8, 0x420a, 0x56, 0x4, 0x0, 0x7ff, 0x6, 0x24, 0x1, 0xff, 0xffffffff, 0x3, 0x6, 0x82e, 0x8, 0xf652, 0x200, 0x62, 0x3ff, 0x0, 0x1000, 0x5, 0x1, 0x7, 0x3ff, 0x0, 0xfffffff8, 0xff, 0xfffffa23, 0x401, 0x2, 0xb, 0x4, 0x7, 0x2, 0x7, 0x74f2e57c, 0x100, 0x7, 0x9, 0x8, 0x13, 0x3, 0x226, 0x6, 0x5, 0x3, 0x4, 0x6, 0x0, 0x1, 0x6, 0x7f, 0x5, 0x7f, 0x8, 0x5, 0xd, 0x3, 0x4, 0x5, 0xffff, 0x3ff, 0x0, 0xffff, 0x84, 0x101, 0x401, 0x7, 0x1, 0x8, 0xc, 0x80, 0x7, 0x7, 0x4, 0x7, 0xffffffff, 0x1, 0x40, 0x7, 0x7, 0x3, 0x1, 0x4d84, 0x10001, 0xd, 0x9, 0x8000, 0xf, 0xff, 0xfffffffe, 0x5, 0x5, 0x7, 0x7, 0xf35, 0x3, 0x8, 0x3, 0x4, 0x2, 0x2, 0x1, 0x994e, 0x0, 0x7, 0x3, 0x6, 0x0, 0x8, 0x1000, 0xff, 0x7, 0x1, 0x101, 0x450d, 0x401, 0x80, 0x5, 0x8000, 0x3, 0x132, 0x2, 0x3cb, 0x9, 0x6, 0x2603, 0xfffffffe, 0x8, 0x0, 0x4, 0x974, 0x5, 0x3, 0x8, 0x40, 0x8, 0x0, 0x0, 0x6, 0x7000, 0x2, 0x1, 0x9c8, 0x75d, 0x4, 0x2f, 0x0, 0xc01d, 0x2, 0xb, 0x6, 0x1, 0x4607, 0x1ff, 0x1600000, 0xcaf, 0x4, 0x1, 0x5, 0x2, 0x4, 0x9fa, 0x5, 0x10, 0x4, 0x0, 0x10000, 0x1, 0x6, 0x0, 0x3, 0x0, 0x7, 0x5, 0x2, 0xe, 0xec1, 0x0, 0x8, 0x200, 0x3, 0xc8, 0xc23, 0x8, 0x10, 0x3, 0x6, 0x3, 0x7, 0xb, 0x3b17e6ad, 0x4, 0x3ff, 0x6, 0x10000, 0xffff, 0x4d, 0x8, 0x0, 0x0, 0x6, 0xb3, 0x5, 0xfffffffd, 0x2, 0xc1, 0xd, 0x947, 0xe57, 0x115, 0x3, 0x200, 0x1, 0xfffffffc, 0x27c0a69d, 0x6, 0x2, 0xfffffeff, 0x1dbd41d7, 0x4, 0x3, 0x0, 0x9, 0x101, 0x7, 0x81, 0xffffff62, 0x7, 0xfffffffc, 0x8, 0x3, 0xffffeb11, 0x2, 0x8, 0x982, 0xf7, 0x9, 0x2, 0x9, 0xfffffff9, 0x100, 0x7, 0x8eaa, 0x5, 0x5, 0xa487, 0x0, 0x8, 0x9, 0x4, 0x8, 0xe, 0xfd, 0x6, 0x3, 0x27b, 0x7026, 0x80000001, 0x7, 0x8, 0x6, 0xffffffff, 0x0, 0x1, 0x7, 0x83, 0xa, 0x2, 0x9, 0x8, 0xc34, 0x200, 0x7, 0x8, 0x2, 0x54, 0x80000000, 0x8, 0x7ff, 0x8, 0xccde, 0x5, 0x8500, 0x52d, 0x992, 0x1, 0x4, 0x0, 0x180, 0x6e6, 0x0, 0x3, 0x5, 0x6, 0xfffffffb, 0x1, 0x38217549, 0x8, 0xfffffffa, 0x5, 0x7b8, 0x7, 0x4, 0x1, 0x200, 0x3, 0x80, 0xffffffff, 0xe90, 0x9, 0x4, 0x0, 0x31, 0x0, 0x4, 0x5, 0x4ee6, 0x3, 0x1ff, 0x4, 0xffffffff, 0x7097, 0x1, 0x5, 0x1b, 0x0, 0x7fffffff, 0x5c, 0x1be78, 0x100, 0x9, 0x4, 0x100, 0x1, 0x7984, 0x8, 0x8, 0x9, 0xfffffff8, 0x2, 0x1, 0x1, 0x0, 0x3ff, 0x1, 0x3, 0x1, 0xf, 0x6, 0x5, 0x3, 0x3ff, 0xff800000, 0xde, 0x8, 0x8, 0x3, 0x0, 0x80000001, 0xe, 0x7, 0xc3d, 0x3, 0x2, 0x10001, 0x2f6, 0x1000, 0x7, 0x7, 0x2b71, 0x10000, 0x3417, 0x6, 0x4, 0x6, 0x4, 0x75e, 0x4, 0x0, 0xffff, 0x2, 0x3, 0x6, 0x81, 0x9, 0x5, 0x8, 0x40, 0x8, 0x8, 0x1000, 0x3, 0x1, 0x3ff, 0xd69, 0x9, 0x3, 0x7, 0x4, 0xb, 0x3, 0x4c57, 0x5628, 0x2, 0xb69e, 0x7f, 0x0, 0x2, 0x4315, 0x5, 0x8d5, 0x1, 0x101, 0x1, 0x6, 0x8, 0x0, 0x2, 0x0, 0xa7b892b2, 0xc69, 0x6da3, 0x100, 0x9, 0x8001, 0xd066, 0x7, 0x8, 0x7fff, 0x80000000, 0x8000, 0x1, 0x7, 0x4, 0x5, 0xfe00000, 0x81, 0x1a2b7912, 0x69, 0x6, 0x25c92a31, 0x7fffffff, 0x52a, 0x5, 0x1, 0x4, 0x9, 0x7, 0xff, 0x5, 0x2, 0x7, 0x5, 0xdd, 0x3, 0xb, 0xe, 0x0, 0x33, 0x0, 0xfffffffd, 0x5, 0xa, 0x4, 0x7ff, 0x7, 0x1, 0xffff7fff, 0x7, 0x7, 0x7, 0x3ff, 0x1, 0x1, 0x729ab6b9, 0x7, 0x3, 0x1, 0x9, 0x2, 0x4, 0x2, 0x2, 0x10000, 0x5, 0x5d7, 0x9, 0x4, 0x800, 0x7f, 0x6e, 0xffffde96, 0x8, 0xb0, 0x0, 0x9, 0x6, 0xfff, 0x7, 0x8001, 0x8, 0x5, 0x8, 0x5e, 0x3, 0x0, 0x0, 0x401, 0x4, 0x2, 0x80000000, 0x5, 0x35, 0xffffffff, 0x8, 0xfff, 0x0, 0x1, 0x7, 0xdc, 0x10, 0x2, 0xffffffff, 0x2, 0x0, 0x7, 0x8, 0xe, 0x800, 0x2fb147c1, 0x3ff, 0x4, 0x4, 0xfffff001, 0x3, 0x7, 0x5, 0x6, 0x0, 0xa8, 0xffff8001, 0x42, 0xa9ce0aa, 0x800, 0x4, 0x9, 0x8, 0xff, 0x3, 0x1, 0x3, 0x9, 0x6, 0x400, 0x4, 0x10, 0x1, 0x40, 0x4, 0x400]}) 8.283800624s ago: executing program 0 (id=3441): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000040), 0x95) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe88000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) mmap(&(0x7f0000bcd000/0x4000)=nil, 0x4000, 0x1000002, 0x4031, 0xffffffffffffffff, 0xbcd02000) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 8.039148861s ago: executing program 7 (id=3442): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x80000000008}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000000c0)={0x1}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000001c0)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) 7.230029359s ago: executing program 0 (id=3443): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) brk(0x9d1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=r4], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000150001030000000000000000"], 0x14}}, 0x0) read(r6, &(0x7f0000000080)=""/186, 0xba) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000104010200000000000000000a00000105000100e80000"], 0x24}, 0x1, 0x0, 0x0, 0x24000844}, 0x4000) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x200, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r8, r9, 0x26, 0x0, @val=@perf_event={0x7}}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r10, r8, 0x4, r8}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'pim6reg1\x00'}) 6.469476901s ago: executing program 7 (id=3444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000009000000000000000000000085000000c200000085000000d000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.294356866s ago: executing program 7 (id=3445): openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b717d0"], 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x33e, 0x30, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x1}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f"], 0x40}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 \x00'/28], 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_void(r9, 0x1, 0x0, 0x0, 0x0) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x2}, 0x2}, 0x18) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 6.291793612s ago: executing program 0 (id=3446): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xb, 'S'}, @main=@item_4={0x3, 0x0, 0x9, "e2d83f12"}]}}, 0x0}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) mq_open(&(0x7f00000000c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb80\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96~\x17|\xc9xR\\z\x9a\x8cRJ\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00', 0x40, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000ff000000050000007f00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000005e4c0bdd4a0000000000000000000000000000000000000000372be1d28c4067cae433b94b7cbcb62e24575f43334a4d44710bf2a0ab97c76581ee78d8a7a452a48cd6b3051e0a86167872d48eb96ed6f4657993d2937d3e525a1d7df9e905db2e1d2f710d177ab550f50f1fef55da78c90ec73a1ef54794300daf188fb03db29df77bbd4f594d5221653ec3fd50223ab63569ea998a2e778f0f177c7973dd4419ed299484a0ba84aa0115dd77a67160aa24e46e4cac85fa0d34af"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000540)) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, 0x0, 0x0) 6.171937434s ago: executing program 8 (id=3448): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x9, 0x8) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x121) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x7000000) 6.017384451s ago: executing program 8 (id=3449): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000012e, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000197c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000019580)={0x20c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdc, 0x3, "20c4dc24cd0ccb35cef86420d812b431ebeab5f06588c9fa8531c7b5328e37d61e3b40bb0c0c9eacd64cbbc59454a638092ee1a353f274ece9948a26204a0428dd95a308c263c7f16f301686417e9d62930bfc60749c33351cdb8ce588611a895cb28d81750babc2eae39cab404c6a81b6fd0a129d902e155ccdbba89cf109f2472e00a1bf9b292bfca1bb29f349b52e7c9f50eb3c14b152d555eda116e450a5be61357fdf31e6f0622cddef5f92f6fa3972f2324de462ca3398afb5081795258ae545c816c1b0b887c0f084bbabbbdf2f04d47a2424e5f2"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe0000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9ac}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9f3}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x16e2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4008000}, 0x200080c5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000004c0)={r6, @in={{0x2, 0x1, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90) r7 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r7, &(0x7f0000000580)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff07, &(0x7f0000000300)=0x7fffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 5.555084264s ago: executing program 1 (id=3450): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x4000, 0x10) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = getpid() syz_pidfd_open(r3, 0x0) setns(r0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_open_dev$dri(0x0, 0x4, 0x21c001) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500e4717b0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140)=0x10000008, 0x4) unshare(0x6a040000) 4.935673282s ago: executing program 1 (id=3452): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe06fe05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300000100000844fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001a80100005800c000880080001"], 0x34}}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x10) set_tid_address(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x50, 0x1, 0x0, "d02067046edd9a2ad5b4f84e565c6f0f30807278f8983c3c0a31965ebd9ca8ac"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000000009000300735f7af5ff00000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB="2c726f6f746d6f44653d30303030303030303030303030303030303034303030302c757365725f69643ddc901699b38ccd4e4b4ba81b09f28e7a7ee6d5beb1ce7f382ad95e2aedcbe2aae9b55561700161221629f10efc347b4328cf89a31d4ffb59d69057e1a9d2763396e7e917ae5959", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) 4.293975535s ago: executing program 8 (id=3453): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) open_tree(0xffffffffffffffff, 0x0, 0x89901) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x20008001}, 0x88c0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x2002) syz_usb_connect$cdc_ecm(0x0, 0x63, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0xfe, {{0x5}, {0x5, 0x24, 0x0, 0x175a}, {0xd, 0x24, 0xf, 0x1, 0xffffff19}, [@dmm={0x7, 0x24, 0x14, 0xc, 0x5}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x3, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xf8}}}}}]}}]}}, 0x0) 2.484153377s ago: executing program 5 (id=3454): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80b42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000000300000095000000000000009edc128568d2ae8c7ed0736fb606a89dd30b8eb80e1f0b1c8b0847407252967f0875039613720bbf9f9ac0fa4bc44c072235395ae37b2e1964a55aa861005f8940191fd085d27b2defc8b4df255771f4fd48733b83eb"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) setreuid(0xee01, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, 0x1}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0xffffffff, 0x100000, 0x2, 0x0, 0x4}) 2.263807561s ago: executing program 5 (id=3455): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x100, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x22, 0x4, 0x3, 0x28, 0xf2, 0x65, 0x0, 0x1, 0x11, 0x0, @private=0xa010100, @private=0xa010102, {[@timestamp_addr={0x44, 0x24, 0x42, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@remote, 0x8}, {@rand_addr=0x64010100, 0xf1}, {@private=0xa010102, 0xaac}]}, @lsrr={0x83, 0x2b, 0xd9, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_addr={0x44, 0x24, 0xa, 0x1, 0x1, [{@multicast1, 0x1000}, {@multicast1, 0x80000000}, {@empty, 0x5}, {@remote, 0xfff}]}, @noop]}}, "e4b76036e650811ae0b9df3898b8e1ce767ac26c9117530dbf4631ff41073c82d50d5c6c6931c69267de4ee2369ed3446d12d659b7e7354174b90fe2205c6aa2f76a51ce6fff7ceac17fa2b17edfddcfdc5ed2e7ce9c300970ea9796dcba54b1df8dc699bf0ef9bdad54"}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}, @NL80211_ATTR_CQM={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.170536356s ago: executing program 5 (id=3456): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = userfaultfd(0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1, 0x40000000}) 2.022887142s ago: executing program 5 (id=3457): symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4004) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCSBRK(r3, 0x5427) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e00000001300"], 0xe0}}, 0x0) r6 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x89) fchdir(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r8, 0x3) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x86, &(0x7f0000000a40)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}, {"fbb6ef44b1e8015f1bffffffffffffffeb9d413d2be6f6422d94b6474703a26d60c14c4f10ba756102f474b3bb47116177dddf3da5b64246eb2fdab7c983ed5169d605f89bb2fcb99cab9eb3"}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000200)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001580)=@multiplanar_userptr={0x8, 0x1, 0x4, 0x20, 0x2, {}, {0x3, 0x8, 0x81, 0x8, 0x4, 0x2, "3a9728b7"}, 0x81, 0x2, {&(0x7f0000001500)=[{0x310000, 0xc, {&(0x7f0000001480)}, 0x5}, {0x473, 0x0, {&(0x7f00000014c0)}, 0x6}]}, 0xfffffffe, 0x0, r9}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000004c0)=0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000001600)={'#! ', '', [{0x20, 'ethtool\x00'}, {0x20, '\x00'}, {0x20, 'syz_tun\x00'}, {0x20, 'syz_tun\x00'}, {0x20, '.'}], 0xa, "d023cecb2cdd4efdfe2627f88dd3e7b5d2b2da6aab41ef8e3cee0bc8ea2210ead56cc90794326bc0aaf288044e8ae2d1a2c89588cd2347fe49bfca0598d24013fbc0abe4cb03a23337ff725b3fc9b8683833a03d407a4fdc7a946c8298515c000000004e93f27cb5000a19bd100ee497db9d40a4159e626af80e997fb1fbadc01c9621959bb9faf7dd7be4f4f10a2fa1afa5841f97a75c0134aa953381548cbde0e3705d25249a1d2e"}, 0xcc) 1.718567905s ago: executing program 5 (id=3458): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.575182148s ago: executing program 7 (id=3459): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x80000000008}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000fe07124081173809499b010203010902240001000000000904ff00028b8647000905e8ff00090000000905", @ANYRES64], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) close_range(r0, 0xffffffffffffffff, 0x0) 1.5523316s ago: executing program 0 (id=3460): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2400000000000000290000003200000086dd0000000000000000ffffac1414aa", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00('], 0x50}}], 0x1, 0x0) 1.130403869s ago: executing program 8 (id=3461): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x42}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) get_robust_list(0x0, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x880) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, &(0x7f0000000300)="3dea10b188b3e977e5ce33d5ca4110eca5d660ae4120f96cae99b4fac2f7ddccbe24d4010905c45919b3504d3f51c0442c640dc8d80dd4a6621583437efd68508db6d5a6804295668b2be496562c70661924d2f04e1842c39a4215c0e21d356d8234b0928f6e5d2d3b231c9120"}, 0x20) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000000)=0x4, 0x4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x482001, 0x0) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="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"}) 1.128734457s ago: executing program 0 (id=3462): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/102, 0x66}, {&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f00000018c0)=""/90, 0x5a}, {&(0x7f0000000480)=""/120, 0x78}], 0x4, &(0x7f0000000500)=""/166, 0xa6}, 0x81}, {{&(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)=""/18, 0x12}, {&(0x7f0000000700)=""/139, 0x8b}, {&(0x7f00000007c0)=""/96, 0x60}], 0x3, &(0x7f0000000840)=""/53, 0x35}, 0x8001}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000000980)=[{&(0x7f0000000900)=""/90, 0x5a}], 0x1}, 0x4}, {{&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000001080)=[{&(0x7f0000000ac0)=""/255, 0xff}, {&(0x7f0000000a40)=""/24, 0x18}, {&(0x7f0000000bc0)=""/201, 0xc9}, {&(0x7f0000000cc0)=""/203, 0xcb}, {&(0x7f0000000dc0)=""/20, 0x14}, {&(0x7f0000000e00)=""/217, 0xd9}, {&(0x7f0000000f00)=""/183, 0xb7}, {&(0x7f0000000fc0)=""/114, 0x72}], 0x8, &(0x7f0000001100)=""/209, 0xd1}, 0x40}, {{&(0x7f0000001200)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001280)=""/90, 0x5a}, {&(0x7f0000001300)=""/201, 0xc9}, {&(0x7f0000001400)=""/99, 0x63}], 0x3, &(0x7f00000014c0)=""/80, 0x50}, 0x2596}, {{&(0x7f0000001540)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/144, 0x90}], 0x1, &(0x7f00000016c0)=""/110, 0x6e}, 0x9}], 0x6, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000006c0)={0x8, 0x0, 0x4, 0x5, 0x6}, 0x14) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r3, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000380)=[{r5, 0x20}, {0xffffffffffffffff, 0x100}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3", 0xb6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240240c5, &(0x7f0000000040)={0x2, 0x4e24, @private=0xa010101}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x2f) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) 1.110620306s ago: executing program 1 (id=3463): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="23f39ae02bb698c572486a6fb99a4b726cb4f9adf093d85f033e4186350c2d48a0ee60504567dc51c86148f1fcc456b403c2db1f57d37e5eff0dd69667e2602dae4a73149fceeccb6ab5041adfbe5b36fe881fc03938a40233d6cc05773040208d5c1ed3ad6a49851a717747898b19a25c4ddf27e73e4c", &(0x7f0000000080)=""/60, &(0x7f00000003c0)="008b91c7f250f9bc716eb772258cf33c7e1002e6321e63e591fd17b5cdb0381a76770e5652d0cc0341e3fa46e981d03c75d08840b9aa05e311e8fdde48f8922bb98886e0d73eca465ccf99682b9baa2ef0b59dfd320bbb22cd1ab7e59a4430c3218938f6e7839fd097", &(0x7f0000000440)="0785ec4418780e0b2dbcbf8378c4f9db13b0c6ac11d0647742b5e3e0cb61b08afa2e2122fd0d35ce806ab3b794c93092c0fff5efa37eef91734c7cf1efd07e6b57317aece06d0c0fc06fcf3a4203e69e1a56a167f913fdbaba4936492da3e8bf9f2d73a3a19ab1b6cb353db59a20db6082a1abb444f981f67a8be8364027fec737f5823d368a152fa4b50e2745f7979d476d66484e5798b4b5e83a5b7d994b19374171563110d980cea6c9617e37b33c3fec5014a1975b88535884a3334b313d752e6b4a60de9122747ee1030cd8b2e845902c47d25c745e74c46d251617dc87ef63685b1d0bc31f2176ab2c32a1eb8ff003788e3e36e8", 0x5, r2, 0x4}, 0x38) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, &(0x7f0000000300)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r7}, 0x38) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r9], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0xb, 0x3, 0x6, 0x7ffffffe, 0x7, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11c7, 0x101, 0x9, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) 422.47443ms ago: executing program 5 (id=3464): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x10, 0x89, 0x2, {{0x38, 0x4, 0x3, 0x11, 0xe0, 0x65, 0x0, 0x7, 0x4, 0x0, @local, @multicast2, {[@generic={0x86, 0xa, "520c64de012c62c4"}, @timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x2, [{@empty, 0x7fffffff}]}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x1, 0x9, "c35d69cc41aa1d"}]}, @rr={0x7, 0xb, 0x3b, [@broadcast, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0xfc, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x8}, {@private=0xa010102, 0xd38}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@broadcast, 0x8}, {@private=0xa010100, 0x2}]}, @generic={0x0, 0x6, "ab681766"}, @cipso={0x86, 0x39, 0xffffffffffffffff, [{0x6, 0x8, "a95455208574"}, {0x2, 0xd, "6d977d0808ace7cf6d3438"}, {0x2, 0xf, "77b65ab40b2523e6b295f617a4"}, {0x5, 0x2}, {0x2, 0xd, "8fbe72c12392fd38acf431"}]}, @ssrr={0x89, 0x1f, 0x39, [@local, @remote, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, @empty]}, @ssrr={0x89, 0xf, 0x74, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xb}, @remote]}]}}}}}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x11, r0, 0x1, 0x80, 0x6, @multicast}, 0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6e}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20028890) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xc}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x95}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)='ns/ipc\x00') ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000700)=0x8) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r3, 0xa10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r8, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x66b3, 0x50}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "aae9ae74f3"}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0xa93bfe0fdda7b57f) recvmmsg(r1, &(0x7f00000010c0)=[{{&(0x7f0000000a00)=@alg, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000a80)=""/129, 0x81}, {&(0x7f0000000b40)=""/105, 0x69}, {&(0x7f0000000bc0)=""/209, 0xd1}, {&(0x7f0000000cc0)=""/97, 0x61}, {&(0x7f0000000d40)=""/220, 0xdc}, {&(0x7f0000000e40)=""/129, 0x81}, {&(0x7f0000000f00)=""/108, 0x6c}], 0x7, &(0x7f0000001000)=""/170, 0xaa}, 0x3}], 0x1, 0x2062, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000001100), 0xf61e, 0x0) ioctl$USBDEVFS_REAPURB(r10, 0x4008550c, &(0x7f0000001140)) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r11, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000000) sendmsg$NL80211_CMD_SET_STATION(r11, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, r8, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4bd}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xe0) sendmsg$NL80211_CMD_START_NAN(r11, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x17}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0xc050) r12 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r12, 0x65, 0x1, &(0x7f00000014c0)=[{}, {}, {}, {}, {}], &(0x7f0000001500)=0x28) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r13, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x40, r14, 0x32a, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!n^\x00'}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8050) socket$inet6(0xa, 0x800, 0x7f) 127.215776ms ago: executing program 8 (id=3465): socket$kcm(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r7, &(0x7f0000000180)=""/215, 0xd7) ioctl$EVIOCREVOKE(r7, 0x40044591, 0x0) setitimer(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) connect$ax25(r8, 0x0, 0x0) 0s ago: executing program 1 (id=3466): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14}}, 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="200505000000052382197cc1b40ef1d007f9e66809a903561812d587a1f4a80b67c48c8232777af66d68170762cceda9f27aecd70402b3d01060c2b359b56a39d631513d946ebd77ff55b6b791c3f5c87fcbe03e3b5da53c45c4038573de8390221acf16"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 3: command tx timeout [ 1139.056535][ T30] audit: type=1400 audit(2000003991.076:1776): avc: denied { ioctl } for pid=19819 comm="syz.0.2960" path="socket:[62719]" dev="sockfs" ino=62719 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1139.321608][T19729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.354268][T19729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.378956][T19729] bridge_slave_0: entered allmulticast mode [ 1139.389081][T19729] bridge_slave_0: entered promiscuous mode [ 1139.407852][T19729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.420659][T19729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.427982][T19729] bridge_slave_1: entered allmulticast mode [ 1139.436403][T19729] bridge_slave_1: entered promiscuous mode [ 1139.494074][T19837] overlayfs: conflicting lowerdir path [ 1139.549760][T19841] overlayfs: failed to clone upperpath [ 1139.601087][T19844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2963'. [ 1140.167725][T19729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.249356][T11493] Bluetooth: hci3: command tx timeout [ 1140.252096][T19729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.514524][T19729] team0: Port device team_slave_0 added [ 1140.531557][ T5893] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1140.731175][T19729] team0: Port device team_slave_1 added [ 1140.786171][ T5893] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1140.862225][ T30] audit: type=1800 audit(2000003992.886:1777): pid=19866 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2961" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1140.870435][ T5893] usb 9-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.945042][ T5893] usb 9-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1140.961123][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.975398][ T5893] usb 9-1: Product: syz [ 1140.999020][ T5893] usb 9-1: Manufacturer: syz [ 1141.003854][ T5893] usb 9-1: SerialNumber: syz [ 1141.073355][T19729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.102581][T19729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.188757][T19729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.557129][T19729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.973384][T19729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.068746][T19729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.118577][T19880] overlayfs: failed to clone upperpath [ 1142.360237][T19885] input: syz0 as /devices/virtual/input/input141 [ 1142.371613][ T5893] usb 9-1: reset high-speed USB device number 71 using dummy_hcd [ 1143.933432][ T5893] usb 9-1: device not accepting address 71, error -71 [ 1144.060010][ T24] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1144.106440][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.488788][ T9864] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1144.518552][T19729] hsr_slave_0: entered promiscuous mode [ 1144.533395][T19729] hsr_slave_1: entered promiscuous mode [ 1144.548093][T19729] debugfs: 'hsr0' already exists in 'hsr' [ 1144.567266][T19729] Cannot create hsr debugfs directory [ 1144.603382][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.654588][ T24] usb 1-1: device descriptor read/64, error -71 [ 1144.670796][ T9864] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1144.697026][ T9864] usb 2-1: config 0 has no interface number 0 [ 1144.707155][ T9864] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1144.738888][ T9864] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1144.805707][ T9864] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1144.858748][ T9864] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1144.894550][ T9864] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1144.938800][ T24] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1145.009982][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.103172][T19910] input: syz0 as /devices/virtual/input/input142 [ 1145.530298][ T9864] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1145.543425][ T5893] usb 9-1: USB disconnect, device number 71 [ 1145.550605][ T9864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.561447][ T9864] usb 2-1: Product: syz [ 1145.567158][ T9864] usb 2-1: Manufacturer: syz [ 1145.572442][ T9864] usb 2-1: SerialNumber: syz [ 1145.585275][ T9864] usb 2-1: config 0 descriptor?? [ 1145.593936][T19895] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1145.620608][ T9864] iguanair 2-1:0.255: probe with driver iguanair failed with error -12 [ 1145.652346][ T12] netdevsim netdevsim3 ªªªªª» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.646895][ T5922] usb 2-1: USB disconnect, device number 41 [ 1147.747801][T19915] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2981'. [ 1147.968986][ T12] gretap0: left allmulticast mode [ 1147.975257][ T12] gretap0: left promiscuous mode [ 1147.987380][ T12] bridge0: port 3(gretap0) entered disabled state [ 1148.004830][ T12] bridge_slave_1: left allmulticast mode [ 1148.016993][ T12] bridge_slave_1: left promiscuous mode [ 1148.039660][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.050031][ T12] bridge_slave_0: left allmulticast mode [ 1148.055654][ T12] bridge_slave_0: left promiscuous mode [ 1148.086077][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.158849][ T5922] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1148.389850][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 1148.403306][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.424911][ T5922] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 1148.445422][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.456028][ T9149] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1148.487056][ T5922] usb 1-1: config 0 descriptor?? [ 1148.600704][ T9149] usb 9-1: device descriptor read/64, error -71 [ 1148.797121][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1148.807578][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1148.817981][ T12] bond0 (unregistering): Released all slaves [ 1148.838940][ T9149] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1148.916450][T19931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2984'. [ 1149.088826][ T9149] usb 9-1: device descriptor read/64, error -71 [ 1149.589218][ T9149] usb usb9-port1: attempt power cycle [ 1149.602082][ T5922] input: HID 28bd:0933 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.002F/input/input144 [ 1149.632408][ T5922] uclogic 0003:28BD:0933.002F: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0 [ 1149.959011][ T9149] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1150.107084][ T9149] usb 9-1: device descriptor read/8, error -71 [ 1150.441733][T19972] input: syz0 as /devices/virtual/input/input145 [ 1150.945247][T19974] overlayfs: failed to clone upperpath [ 1151.008892][ T5922] usb 1-1: USB disconnect, device number 76 [ 1151.688052][ T12] hsr_slave_0: left promiscuous mode [ 1151.756715][ T12] hsr_slave_1: left promiscuous mode [ 1151.925426][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1151.948739][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.982713][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1151.990513][ T30] audit: type=1800 audit(2000004004.006:1778): pid=19987 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.2998" name="nullb0" dev="tmpfs" ino=189 res=0 errno=0 [ 1152.020378][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1152.058968][T19984] overlayfs: conflicting lowerdir path [ 1152.060843][ T12] veth1_macvtap: left promiscuous mode [ 1152.071347][ T12] veth0_macvtap: left promiscuous mode [ 1152.076962][ T12] veth1_vlan: left promiscuous mode [ 1152.094829][ T12] veth0_vlan: left promiscuous mode [ 1152.269022][ T5922] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1152.428997][ T5922] usb 9-1: Using ep0 maxpacket: 32 [ 1152.505218][ T5922] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.602021][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 183, changing to 11 [ 1152.808460][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1152.856184][ T5922] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1152.921629][ T5922] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1152.938545][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.966072][ T5922] usb 9-1: Product: syz [ 1152.980520][ T5922] usb 9-1: Manufacturer: syz [ 1152.996185][ T5922] usb 9-1: SerialNumber: syz [ 1153.037887][ T5922] usb 9-1: config 0 descriptor?? [ 1153.492374][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2996'. [ 1153.975996][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1154.017448][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1154.062933][ T9864] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1154.202005][ T9864] usb 1-1: device descriptor read/64, error -71 [ 1154.345193][ T5922] usb 9-1: USB disconnect, device number 76 [ 1154.438849][ T9864] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1154.578787][ T9864] usb 1-1: device descriptor read/64, error -71 [ 1154.701022][ T5922] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1154.701118][ T9864] usb usb1-port1: attempt power cycle [ 1154.811165][T19729] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1154.822075][T19729] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1154.833909][T19729] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1154.846961][T19729] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1154.880686][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.900674][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1154.931855][ T5922] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1154.951684][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.969793][T19729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.978126][ T5922] usb 2-1: config 0 descriptor?? [ 1155.032862][T19729] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.061183][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.068327][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.078808][ T9864] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1155.119232][ T9864] usb 1-1: device descriptor read/8, error -71 [ 1155.136966][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.144141][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.391685][ T9864] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1155.615145][ T5922] kovaplus 0003:1E7D:2D50.0030: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1155.736179][ T9864] usb 1-1: device descriptor read/8, error -71 [ 1156.174288][ T9864] usb usb1-port1: unable to enumerate USB device [ 1157.953174][ T5922] kovaplus 0003:1E7D:2D50.0030: couldn't init struct kovaplus_device [ 1157.970668][T19729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.990265][ T5922] kovaplus 0003:1E7D:2D50.0030: couldn't install mouse [ 1158.014352][T20068] overlay: Unknown parameter 'uid>00000000000000000000' [ 1158.025013][ T5922] kovaplus 0003:1E7D:2D50.0030: probe with driver kovaplus failed with error -71 [ 1158.095028][ T5922] usb 2-1: USB disconnect, device number 42 [ 1158.385786][T20086] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3011'. [ 1158.390225][ T9149] libceph: connect (1)[c::]:6789 error -101 [ 1158.402713][T20068] ceph: No mds server is up or the cluster is laggy [ 1158.428901][ T9149] libceph: mon0 (1)[c::]:6789 connect error [ 1159.764127][T20111] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1159.907720][T20120] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3018'. [ 1159.942826][T20120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3018'. [ 1159.960546][T19729] veth0_vlan: entered promiscuous mode [ 1159.966090][T20111] overlayfs: statfs failed on './file0' [ 1159.981935][T20124] netlink: 'syz.7.3018': attribute type 3 has an invalid length. [ 1160.006456][T19729] veth1_vlan: entered promiscuous mode [ 1160.028206][T20126] FAULT_INJECTION: forcing a failure. [ 1160.028206][T20126] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.045799][T20126] CPU: 1 UID: 0 PID: 20126 Comm: syz.8.3019 Tainted: G L syzkaller #0 PREEMPT(full) [ 1160.045830][T20126] Tainted: [L]=SOFTLOCKUP [ 1160.045837][T20126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1160.045848][T20126] Call Trace: [ 1160.045855][T20126] [ 1160.045863][T20126] dump_stack_lvl+0x16c/0x1f0 [ 1160.045892][T20126] should_fail_ex+0x512/0x640 [ 1160.045919][T20126] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 1160.045946][T20126] should_failslab+0xc2/0x120 [ 1160.045972][T20126] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 1160.045994][T20126] ? kasan_quarantine_put+0x10a/0x240 [ 1160.046015][T20126] ? ovl_do_parse_layer+0x33/0x1290 [ 1160.046041][T20126] ? kstrdup+0x53/0x100 [ 1160.046059][T20126] kstrdup+0x53/0x100 [ 1160.046078][T20126] ovl_do_parse_layer+0x33/0x1290 [ 1160.046099][T20126] ? ovl_mount_dir+0x15a/0x1f0 [ 1160.046123][T20126] ovl_parse_param+0xdd9/0x15a0 [ 1160.046148][T20126] ? __pfx_ovl_parse_param+0x10/0x10 [ 1160.046169][T20126] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 1160.046195][T20126] ? static_key_count+0x5a/0x70 [ 1160.046217][T20126] ? __pfx_ovl_parse_param+0x10/0x10 [ 1160.046239][T20126] vfs_parse_fs_param+0x20b/0x3c0 [ 1160.046261][T20126] vfs_parse_fs_qstr+0x138/0x1c0 [ 1160.046280][T20126] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 1160.046312][T20126] ? ovl_next_opt+0x143/0x1c0 [ 1160.046332][T20126] ? __pfx_ovl_next_opt+0x10/0x10 [ 1160.046351][T20126] vfs_parse_monolithic_sep+0x18d/0x210 [ 1160.046372][T20126] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 1160.046393][T20126] ? alloc_fs_context+0x677/0xf50 [ 1160.046417][T20126] path_mount+0x76e/0x23a0 [ 1160.046436][T20126] ? rcu_is_watching+0x12/0xc0 [ 1160.046457][T20126] ? __pfx_path_mount+0x10/0x10 [ 1160.046475][T20126] ? kmem_cache_free+0x2d8/0x770 [ 1160.046493][T20126] ? putname+0xf5/0x1a0 [ 1160.046524][T20126] ? putname+0xf5/0x1a0 [ 1160.046549][T20126] ? putname+0xf5/0x1a0 [ 1160.046577][T20126] ? __x64_sys_mount+0x293/0x310 [ 1160.046593][T20126] __x64_sys_mount+0x293/0x310 [ 1160.046611][T20126] ? __pfx___x64_sys_mount+0x10/0x10 [ 1160.046636][T20126] do_syscall_64+0xcd/0xf80 [ 1160.046661][T20126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.046680][T20126] RIP: 0033:0x7f220638f749 [ 1160.046694][T20126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1160.046712][T20126] RSP: 002b:00007f220720c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1160.046729][T20126] RAX: ffffffffffffffda RBX: 00007f22065e5fa0 RCX: 00007f220638f749 [ 1160.046741][T20126] RDX: 0000200000000180 RSI: 0000200000000240 RDI: 0000000000000000 [ 1160.046752][T20126] RBP: 00007f220720c090 R08: 00002000000004c0 R09: 0000000000000000 [ 1160.046763][T20126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.046774][T20126] R13: 00007f22065e6038 R14: 00007f22065e5fa0 R15: 00007fffa6eaaf78 [ 1160.046799][T20126] [ 1160.424579][T19729] veth0_macvtap: entered promiscuous mode [ 1160.434185][T19729] veth1_macvtap: entered promiscuous mode [ 1160.452126][T19729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1160.484678][T19729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1160.496896][ T2975] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.507812][ T2975] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.518296][ T2975] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.528250][ T2975] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.567365][T13960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.601335][T13960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.715385][T13960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.736145][T13960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.871030][ T30] audit: type=1400 audit(2000004013.856:1779): avc: denied { setopt } for pid=20155 comm="syz.8.3026" lport=54838 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1162.579881][ T9864] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1162.789590][ T9864] usb 9-1: Using ep0 maxpacket: 16 [ 1163.141021][ T9864] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1163.160696][ T9864] usb 9-1: config 0 has no interface number 0 [ 1163.176297][ T9864] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1163.189491][ T9864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.197562][ T9864] usb 9-1: Product: syz [ 1163.206164][ T9864] usb 9-1: Manufacturer: syz [ 1163.211322][ T9864] usb 9-1: SerialNumber: syz [ 1163.219780][ T9864] usb 9-1: config 0 descriptor?? [ 1163.235855][ T9864] uvcvideo 9-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1163.251517][ T9864] uvcvideo 9-1:0.105: No valid video chain found. [ 1163.437779][ T9864] usb 9-1: USB disconnect, device number 77 [ 1163.583388][T20186] FAULT_INJECTION: forcing a failure. [ 1163.583388][T20186] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.598790][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1163.612177][T20186] CPU: 0 UID: 0 PID: 20186 Comm: syz.0.3030 Tainted: G L syzkaller #0 PREEMPT(full) [ 1163.612200][T20186] Tainted: [L]=SOFTLOCKUP [ 1163.612205][T20186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1163.612211][T20186] Call Trace: [ 1163.612216][T20186] [ 1163.612221][T20186] dump_stack_lvl+0x16c/0x1f0 [ 1163.612239][T20186] should_fail_ex+0x512/0x640 [ 1163.612256][T20186] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1163.612276][T20186] should_failslab+0xc2/0x120 [ 1163.612300][T20186] __kmalloc_cache_noprof+0x80/0x800 [ 1163.612318][T20186] ? alloc_super+0x52/0xd00 [ 1163.612334][T20186] ? alloc_super+0x52/0xd00 [ 1163.612347][T20186] alloc_super+0x52/0xd00 [ 1163.612360][T20186] ? sget_fc+0xd3/0xc20 [ 1163.612376][T20186] sget_fc+0x116/0xc20 [ 1163.612389][T20186] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1163.612402][T20186] ? __pfx_ovl_fill_super+0x10/0x10 [ 1163.612415][T20186] get_tree_nodev+0x28/0x190 [ 1163.612430][T20186] vfs_get_tree+0x8e/0x330 [ 1163.612441][T20186] path_mount+0x7bf/0x23a0 [ 1163.612452][T20186] ? rcu_is_watching+0x12/0xc0 [ 1163.612465][T20186] ? __pfx_path_mount+0x10/0x10 [ 1163.612475][T20186] ? kmem_cache_free+0x2d8/0x770 [ 1163.612487][T20186] ? putname+0xf5/0x1a0 [ 1163.612506][T20186] ? putname+0xf5/0x1a0 [ 1163.612521][T20186] ? putname+0xf5/0x1a0 [ 1163.612538][T20186] ? __x64_sys_mount+0x293/0x310 [ 1163.612550][T20186] __x64_sys_mount+0x293/0x310 [ 1163.612561][T20186] ? __pfx___x64_sys_mount+0x10/0x10 [ 1163.612576][T20186] do_syscall_64+0xcd/0xf80 [ 1163.612591][T20186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.612603][T20186] RIP: 0033:0x7fa8dab8f749 [ 1163.612612][T20186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1163.612623][T20186] RSP: 002b:00007fa8dbae7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1163.612635][T20186] RAX: ffffffffffffffda RBX: 00007fa8dade5fa0 RCX: 00007fa8dab8f749 [ 1163.612642][T20186] RDX: 0000200000000180 RSI: 0000200000000240 RDI: 0000000000000000 [ 1163.612648][T20186] RBP: 00007fa8dbae7090 R08: 00002000000004c0 R09: 0000000000000000 [ 1163.612655][T20186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1163.612661][T20186] R13: 00007fa8dade6038 R14: 00007fa8dade5fa0 R15: 00007ffdb362ad38 [ 1163.612675][T20186] [ 1163.908810][ T24] usb 2-1: device descriptor read/64, error -71 [ 1164.814134][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1165.779473][ T24] usb 2-1: device descriptor read/64, error -71 [ 1165.898944][ T24] usb usb2-port1: attempt power cycle [ 1166.758762][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1166.908322][ T24] usb 2-1: device descriptor read/8, error -71 [ 1167.416449][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3040'. [ 1168.038440][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1168.179001][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 1168.248726][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1168.255685][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1168.272835][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1168.283657][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1168.297828][ T9] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1168.309684][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.317697][ T9] usb 5-1: Product: syz [ 1168.322230][ T9] usb 5-1: Manufacturer: syz [ 1168.326834][ T9] usb 5-1: SerialNumber: syz [ 1168.335135][ T9] usb 5-1: config 0 descriptor?? [ 1168.562883][ T5893] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1168.618746][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1168.848817][ T9] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1169.060609][ T24] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1169.075196][ T5922] usb 5-1: USB disconnect, device number 17 [ 1169.075397][ T24] usb 2-1: config 0 has no interface number 0 [ 1169.087686][ T24] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1169.118025][ T24] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1169.130450][ T24] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1169.142683][ T5893] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 1169.151430][ T5893] usb 1-1: config 0 has no interface number 0 [ 1169.157537][ T5893] usb 1-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1169.172493][ T24] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1169.194078][ T24] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1169.205597][ T5893] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1169.218823][ T9] usb 9-1: device descriptor read/64, error -71 [ 1169.229213][ T5893] usb 1-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1169.248473][ T5893] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1169.260506][ T5893] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1169.273610][ T24] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1169.286145][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.295883][ T5893] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1169.307158][ T24] usb 2-1: Product: syz [ 1169.312044][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.320693][ T24] usb 2-1: Manufacturer: syz [ 1169.325333][ T24] usb 2-1: SerialNumber: syz [ 1169.330359][ T5893] usb 1-1: Product: syz [ 1169.334521][ T5893] usb 1-1: Manufacturer: syz [ 1169.340807][ T24] usb 2-1: config 0 descriptor?? [ 1169.346985][ T5893] usb 1-1: SerialNumber: syz [ 1169.352341][T20252] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1169.363666][ T24] iguanair 2-1:0.255: probe with driver iguanair failed with error -12 [ 1169.373267][ T5893] usb 1-1: config 0 descriptor?? [ 1169.379215][T20254] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1169.394705][ T5893] iguanair 1-1:0.255: probe with driver iguanair failed with error -12 [ 1169.469290][ T9] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1169.613443][ T9] usb 9-1: device descriptor read/64, error -71 [ 1169.804834][ T9] usb usb9-port1: attempt power cycle [ 1170.119782][ T5922] usb 1-1: USB disconnect, device number 81 [ 1170.556378][ T9876] usb 2-1: USB disconnect, device number 46 [ 1170.610577][ T9] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1171.484144][ T9] usb 9-1: device descriptor read/8, error -71 [ 1171.657540][T20316] overlayfs: conflicting lowerdir path [ 1172.038568][T20329] x_tables: duplicate underflow at hook 3 [ 1172.078864][ T9] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1172.135524][ T9] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 1172.204373][T20337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3052'. [ 1172.267179][ T9] usb 9-1: config 0 has no interface number 0 [ 1172.558754][ T9876] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1172.572634][ T9] usb 9-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1172.615459][ T9] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1172.668763][ T9] usb 9-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1172.691182][ T9] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1172.769376][ T9876] usb 2-1: Using ep0 maxpacket: 16 [ 1173.508213][ T9] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1173.525600][ T9876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1173.535458][ T9876] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 1173.546787][ T9] usb 9-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1173.556171][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.564659][ T9] usb 9-1: Product: syz [ 1173.569026][ T9876] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 1173.588712][ T9876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.596733][ T9] usb 9-1: Manufacturer: syz [ 1173.601381][ T9876] usb 2-1: Product: syz [ 1173.605543][ T9876] usb 2-1: Manufacturer: syz [ 1173.610407][ T9] usb 9-1: SerialNumber: syz [ 1173.616209][ T9] usb 9-1: config 0 descriptor?? [ 1173.638492][ T9876] usb 2-1: SerialNumber: syz [ 1173.646248][T20320] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1173.647911][ T9876] usb 2-1: config 0 descriptor?? [ 1173.678542][ T9876] opticon 2-1:0.0: opticon converter detected [ 1173.687008][ T9] iguanair 9-1:0.255: probe with driver iguanair failed with error -12 [ 1173.699104][ T9876] usb 2-1: opticon converter now attached to ttyUSB0 [ 1174.097106][ T9] usb 2-1: USB disconnect, device number 47 [ 1174.309155][ T5893] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1174.586486][ T9] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1174.599389][ T9] opticon 2-1:0.0: device disconnected [ 1174.638775][ T9876] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1174.744774][ T5893] usb 5-1: device descriptor read/64, error -71 [ 1174.810990][ T9876] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 1174.825842][ T9876] usb 1-1: config 0 has no interface number 0 [ 1174.838832][ T9876] usb 1-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1174.855899][ T9876] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1174.867486][ T9876] usb 1-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1174.879967][ T9876] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1174.911043][ T9876] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1174.943702][ T9876] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1174.968813][ T9876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.988797][ T5893] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1174.997234][ T9876] usb 1-1: Product: syz [ 1175.003828][ T9876] usb 1-1: Manufacturer: syz [ 1175.011712][ T9876] usb 1-1: SerialNumber: syz [ 1175.024850][ T9876] usb 1-1: config 0 descriptor?? [ 1175.035981][T20362] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1175.080466][ T9876] iguanair 1-1:0.255: probe with driver iguanair failed with error -12 [ 1175.219896][ T5893] usb 5-1: device descriptor read/64, error -71 [ 1175.775880][ T9876] usb 9-1: USB disconnect, device number 81 [ 1175.792300][ T5893] usb usb5-port1: attempt power cycle [ 1176.315157][ T9] usb 1-1: USB disconnect, device number 82 [ 1176.334678][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.341145][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.888927][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3065'. [ 1177.178022][ T9876] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1177.410358][ T9876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.134545][ T9876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.144470][ T9876] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1178.153676][ T9876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.164622][ T9876] usb 2-1: config 0 descriptor?? [ 1179.026308][ T9876] cp2112 0003:10C4:EA90.0031: unknown main item tag 0x0 [ 1179.350199][ T9876] cp2112 0003:10C4:EA90.0031: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1180.076467][ T9876] cp2112 0003:10C4:EA90.0031: error requesting version [ 1180.107427][ T9876] cp2112 0003:10C4:EA90.0031: probe with driver cp2112 failed with error -32 [ 1180.413847][ T9876] usb 2-1: USB disconnect, device number 48 [ 1180.483495][T20450] fido_id[20450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1181.274836][ T5922] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1181.750838][ T5922] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1181.821151][T20487] FAULT_INJECTION: forcing a failure. [ 1181.821151][T20487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.834374][T20487] CPU: 1 UID: 0 PID: 20487 Comm: syz.8.3079 Tainted: G L syzkaller #0 PREEMPT(full) [ 1181.834405][T20487] Tainted: [L]=SOFTLOCKUP [ 1181.834412][T20487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1181.834423][T20487] Call Trace: [ 1181.834430][T20487] [ 1181.834438][T20487] dump_stack_lvl+0x16c/0x1f0 [ 1181.834467][T20487] should_fail_ex+0x512/0x640 [ 1181.834498][T20487] strncpy_from_user+0x3b/0x2e0 [ 1181.834528][T20487] getname_flags.part.0+0x8f/0x550 [ 1181.834548][T20487] ? rcu_is_watching+0x12/0xc0 [ 1181.834569][T20487] getname_flags+0x93/0xf0 [ 1181.834593][T20487] __x64_sys_symlink+0x58/0x90 [ 1181.834622][T20487] do_syscall_64+0xcd/0xf80 [ 1181.834648][T20487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.834667][T20487] RIP: 0033:0x7f220638f749 [ 1181.834683][T20487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1181.834701][T20487] RSP: 002b:00007f22071ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1181.834720][T20487] RAX: ffffffffffffffda RBX: 00007f22065e6180 RCX: 00007f220638f749 [ 1181.834732][T20487] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 1181.834744][T20487] RBP: 00007f22071ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.834755][T20487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.834766][T20487] R13: 00007f22065e6218 R14: 00007f22065e6180 R15: 00007fffa6eaaf78 [ 1181.834791][T20487] [ 1182.020350][ T5922] usb 5-1: config 0 has no interface number 0 [ 1182.035923][ T5922] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1182.107392][ T5922] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1182.137258][T20492] syzkaller1: entered promiscuous mode [ 1182.142850][T20492] syzkaller1: entered allmulticast mode [ 1182.176952][ T5922] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1182.219366][ T5922] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1182.244391][ T5922] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1182.272833][ T5922] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1182.292345][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.330687][ T5922] usb 5-1: Product: syz [ 1182.345050][ T5922] usb 5-1: Manufacturer: syz [ 1182.356126][ T5922] usb 5-1: SerialNumber: syz [ 1182.376010][ T5922] usb 5-1: config 0 descriptor?? [ 1182.424650][T20475] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1183.296619][ T9149] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1183.310827][ T5922] iguanair 5-1:0.255: probe with driver iguanair failed with error -12 [ 1184.055197][ T9149] usb 1-1: Using ep0 maxpacket: 32 [ 1184.268207][ T9149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1184.279726][ T9149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1184.307867][ T9149] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1184.364199][ T9149] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1184.387517][ T9149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.446276][ T9149] usb 1-1: Product: syz [ 1184.962763][ T5922] usb 5-1: USB disconnect, device number 21 [ 1184.988846][ T9149] usb 1-1: Manufacturer: syz [ 1185.011775][ T9149] usb 1-1: SerialNumber: syz [ 1185.051392][ T9149] usb 1-1: config 0 descriptor?? [ 1185.657341][ T5922] usb 1-1: USB disconnect, device number 83 [ 1185.798821][ T5893] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1186.043910][ T5893] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1186.130868][T20552] syzkaller1: entered promiscuous mode [ 1186.147174][ T5893] usb 2-1: config 0 has no interface number 0 [ 1186.162232][T20552] syzkaller1: entered allmulticast mode [ 1186.173268][ T5893] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1186.192276][ T5893] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1186.218049][ T5893] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1186.231116][ T5893] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1186.245064][ T5893] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1186.293768][ T5893] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1186.308493][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.444332][ T5893] usb 2-1: Product: syz [ 1186.448936][ T5893] usb 2-1: Manufacturer: syz [ 1186.453631][ T5893] usb 2-1: SerialNumber: syz [ 1186.494189][ T5893] usb 2-1: config 0 descriptor?? [ 1186.566192][T20546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1186.685193][ T5893] iguanair 2-1:0.255: probe with driver iguanair failed with error -12 [ 1187.048804][ T5893] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1187.056432][ T24] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1187.513706][ T9149] usb 2-1: USB disconnect, device number 49 [ 1187.600171][ T24] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 1187.615808][ T24] usb 9-1: config 0 has no interface number 0 [ 1187.638755][ T24] usb 9-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1187.650746][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 1187.669104][ T24] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1187.669390][ T5893] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1187.690021][ T24] usb 9-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1187.735823][ T24] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1187.753006][ T5893] usb 1-1: config 1 has no interface number 1 [ 1187.759448][ T5893] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1187.773333][ T24] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1187.787791][ T5893] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1187.799021][ T90] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1188.241109][ T24] usb 9-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1188.260500][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.273796][ T5893] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1188.286737][ T24] usb 9-1: Product: syz [ 1188.291833][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.300277][ T24] usb 9-1: Manufacturer: syz [ 1188.304989][ T24] usb 9-1: SerialNumber: syz [ 1188.309758][ T5893] usb 1-1: Product: syz [ 1188.316093][ T5893] usb 1-1: Manufacturer: syz [ 1188.321717][ T24] usb 9-1: config 0 descriptor?? [ 1188.331966][ T5893] usb 1-1: SerialNumber: syz [ 1188.337949][T20565] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1188.355751][ T24] iguanair 9-1:0.255: probe with driver iguanair failed with error -12 [ 1188.364557][ T90] usb 5-1: device descriptor read/64, error -71 [ 1188.714378][ T90] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1189.635634][ T24] usb 9-1: USB disconnect, device number 82 [ 1189.651983][ T90] usb 5-1: device descriptor read/64, error -71 [ 1189.658821][ T5893] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1189.809722][ T90] usb usb5-port1: attempt power cycle [ 1191.068736][ T90] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1191.274826][ T90] usb 5-1: device descriptor read/8, error -71 [ 1192.609257][ T30] audit: type=1400 audit(2000004044.636:1780): avc: denied { read } for pid=20636 comm="syz.8.3108" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1192.951940][ T5893] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1193.066806][ T5893] usb 1-1: USB disconnect, device number 84 [ 1193.246320][T20645] udevd[20645]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1193.559126][ T5893] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1193.738792][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 1193.811953][ T9149] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1193.846825][ T5893] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1193.875362][ T5893] usb 1-1: config 0 has no interface number 0 [ 1194.106028][ T9149] usb 9-1: Using ep0 maxpacket: 32 [ 1194.276023][ T9149] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.304921][ T5893] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1194.328502][ T9149] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1194.353834][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.354657][ T9149] usb 9-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 1194.375209][ T5893] usb 1-1: Product: syz [ 1194.388102][ T5893] usb 1-1: Manufacturer: syz [ 1194.408524][ T5893] usb 1-1: SerialNumber: syz [ 1194.425470][ T9149] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.438308][ T5893] usb 1-1: config 0 descriptor?? [ 1194.461548][ T5893] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1194.481194][ T9149] usb 9-1: Product: syz [ 1194.588754][ T9149] usb 9-1: Manufacturer: syz [ 1194.593409][ T9149] usb 9-1: SerialNumber: syz [ 1194.613383][ T9149] usb 9-1: config 0 descriptor?? [ 1194.628781][ T9876] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1194.764391][T20672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3110'. [ 1194.773718][T20672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3110'. [ 1194.784427][T20672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3110'. [ 1194.793677][T20672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3110'. [ 1195.078009][ T5893] gspca_spca1528: reg_w err -110 [ 1195.182084][ T9876] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1195.211047][ T30] audit: type=1400 audit(2000004047.216:1781): avc: denied { connect } for pid=20654 comm="syz.8.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1195.238822][ T5893] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 1195.238881][ T9149] usb 9-1: USB disconnect, device number 83 [ 1195.253064][ T9876] usb 2-1: config 0 has no interface number 0 [ 1195.273277][ T9876] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1195.311216][ T30] audit: type=1400 audit(2000004047.216:1782): avc: denied { bind } for pid=20654 comm="syz.8.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1195.332929][ T9876] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1195.346437][ T9876] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1195.366321][ T9876] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1195.396823][ T9876] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1195.429714][ T5922] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1195.490619][ T9876] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1195.504158][ T9876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.533787][ T9876] usb 2-1: Product: syz [ 1195.549560][ T9876] usb 2-1: Manufacturer: syz [ 1195.569771][ T9876] usb 2-1: SerialNumber: syz [ 1195.590935][ T5922] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1195.608170][ T5922] usb 5-1: config 0 has no interface number 0 [ 1195.623473][ T9876] usb 2-1: config 0 descriptor?? [ 1195.636372][ T5922] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1195.649485][T20669] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1195.662397][ T9876] iguanair 2-1:0.255: probe with driver iguanair failed with error -12 [ 1195.686980][ T5922] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1195.703182][ T5922] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1195.716503][ T5922] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1195.729835][ T5922] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1195.813391][ T5922] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1195.842084][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.201224][ T90] usb 2-1: USB disconnect, device number 50 [ 1197.209003][ T5893] usb 1-1: USB disconnect, device number 85 [ 1197.212794][ T5922] usb 5-1: Product: syz [ 1197.219268][ T5922] usb 5-1: Manufacturer: syz [ 1197.262247][ T5922] usb 5-1: SerialNumber: syz [ 1197.283822][ T5922] usb 5-1: config 0 descriptor?? [ 1197.320266][T20675] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1197.352153][ T5922] iguanair 5-1:0.255: probe with driver iguanair failed with error -12 [ 1198.419393][ T24] usb 5-1: USB disconnect, device number 26 [ 1198.502838][T20706] input: syz1 as /devices/virtual/input/input155 [ 1198.681054][T20717] futex_wake_op: syz.7.3123 tries to shift op by 32; fix this program [ 1201.291724][T20735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1201.434253][T20735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1202.051821][T20735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1202.371551][T20750] input: syz0 as /devices/virtual/input/input156 [ 1203.448772][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1204.208688][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1204.216773][ T24] usb 2-1: config 1 has an invalid interface number: 118 but max is 0 [ 1204.294243][ T24] usb 2-1: config 1 has no interface number 0 [ 1204.321681][ T24] usb 2-1: config 1 interface 118 has no altsetting 0 [ 1205.196716][T20780] overlayfs: failed to clone upperpath [ 1205.559621][ T9876] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1205.649371][ T24] usb 2-1: string descriptor 0 read error: -71 [ 1205.677651][ T24] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=e2.32 [ 1205.718845][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.728287][ T9876] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 1205.742993][T20801] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3142'. [ 1205.758828][ T9876] usb 9-1: config 0 has no interface number 0 [ 1206.563721][T20805] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1206.698750][ T9876] usb 9-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1206.731070][ T24] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1206.968507][ T9876] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1206.988664][ T9876] usb 9-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1207.018704][ T9876] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1207.039030][ T9876] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1207.071863][ T9876] usb 9-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1207.099679][ T9876] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.118473][ T9876] usb 9-1: Product: syz [ 1207.123066][ T9876] usb 9-1: Manufacturer: syz [ 1207.127662][ T9876] usb 9-1: SerialNumber: syz [ 1207.140987][ T24] usb 2-1: no configuration chosen from 1 choice [ 1207.149680][ T24] usb 2-1: USB disconnect, device number 51 [ 1207.173726][ T9876] usb 9-1: config 0 descriptor?? [ 1207.188989][ T90] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1207.196277][T20782] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1207.283537][ T9876] iguanair 9-1:0.255: probe with driver iguanair failed with error -12 [ 1207.790077][ T90] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1208.076949][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.092441][T19900] usb 9-1: USB disconnect, device number 84 [ 1208.109192][ T90] usb 1-1: config 0 descriptor?? [ 1208.131732][ T90] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1209.500194][ T90] gspca_cpia1: usb_control_msg 03, error -110 [ 1209.698217][ T90] gspca_cpia1: usb_control_msg 01, error -32 [ 1210.199284][ T90] gspca_cpia1: usb_control_msg 01, error -32 [ 1210.229007][ T90] gspca_cpia1: usb_control_msg 01, error -32 [ 1210.242752][ T90] gspca_cpia1: usb_control_msg 01, error -32 [ 1210.252932][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3151'. [ 1210.262515][ T9876] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1210.269027][ T90] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 1210.334843][ T90] usb 1-1: USB disconnect, device number 86 [ 1210.469077][ T9876] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1210.498675][ T9876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.516882][ T9876] usb 2-1: Product: syz [ 1210.521605][ T9876] usb 2-1: Manufacturer: syz [ 1210.537074][ T9876] usb 2-1: SerialNumber: syz [ 1210.578367][ T9876] hub 2-1:24.0: bad descriptor, ignoring hub [ 1210.603667][ T9876] hub 2-1:24.0: probe with driver hub failed with error -5 [ 1210.817123][T20872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3156'. [ 1210.826487][T20873] afs: Unknown parameter '¢‚3¨Ë™£e#¿AÖ~Ø [ 1210.826487][T20873] p?¿aß' [ 1210.851214][ T9876] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1210.934895][ T30] audit: type=1400 audit(2000004062.956:1783): avc: denied { firmware_load } for pid=9876 comm="kworker/0:13" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1210.964906][ T9876] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1211.062619][ T9876] dib0700: firmware download failed at 7 with -22 [ 1211.616412][ T90] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1212.100920][T20880] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3157'. [ 1212.290919][ T9876] usb 2-1: USB disconnect, device number 52 [ 1212.348802][ T90] usb 1-1: Using ep0 maxpacket: 16 [ 1212.499317][ T90] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1212.523994][ T90] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1212.541731][ T90] usb 1-1: Product: syz [ 1212.546304][ T90] usb 1-1: Manufacturer: syz [ 1212.564088][ T90] usb 1-1: SerialNumber: syz [ 1212.590997][ T90] usb 1-1: config 0 descriptor?? [ 1212.806907][T20896] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1212.814926][T20896] F2FS-fs (loop17): Can't find valid F2FS filesystem in 1th superblock [ 1212.823575][T20896] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1212.831476][T20896] F2FS-fs (loop17): Can't find valid F2FS filesystem in 2th superblock [ 1212.927682][T20897] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3159'. [ 1213.228739][ T90] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1213.768759][ T90] usb 5-1: Using ep0 maxpacket: 16 [ 1213.792615][ T90] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.824967][ T90] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 1213.836320][ T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.847869][ T90] usb 5-1: config 0 descriptor?? [ 1214.212179][ T30] audit: type=1400 audit(2000004066.236:1784): avc: denied { view } for pid=20915 comm="syz.1.3162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1214.274346][T20894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3160'. [ 1214.851716][T19900] usb 1-1: USB disconnect, device number 87 [ 1214.973743][ T90] input: HID 28bd:0933 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0933.0032/input/input158 [ 1215.599616][ T90] uclogic 0003:28BD:0933.0032: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.4-1/input0 [ 1216.152465][ T90] usb 5-1: USB disconnect, device number 27 [ 1216.537329][T20937] fido_id[20937]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1216.800911][T20954] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3168'. [ 1217.820071][T20955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3169'. [ 1217.876355][ T90] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1217.999673][T20963] input: syz0 as /devices/virtual/input/input159 [ 1218.208779][ T90] usb 5-1: Using ep0 maxpacket: 8 [ 1218.220650][ T90] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1218.267723][ T90] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1218.312939][ T90] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1218.344973][ T90] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1218.391238][ T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.413869][ T90] usb 5-1: config 0 descriptor?? [ 1218.859422][T20974] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1218.867201][T20974] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1218.875793][T20974] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1218.883771][T20974] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1218.983865][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1220.057569][ T90] savu 0003:1E7D:2D5A.0033: hidraw0: USB HID vf4.b6 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 1220.185468][ T90] usb 5-1: USB disconnect, device number 28 [ 1220.338253][T20990] fido_id[20990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1220.479175][ T30] audit: type=1400 audit(2000004072.486:1785): avc: denied { setopt } for pid=20989 comm="syz.0.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1220.986832][T21004] syz_tun: entered allmulticast mode [ 1221.318751][ T30] audit: type=1400 audit(2000004073.256:1786): avc: denied { map } for pid=21005 comm="syz.8.3180" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1221.526727][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1221.537108][ T90] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1221.550427][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1221.559044][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1221.566725][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1221.574380][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1221.738715][ T90] usb 9-1: Using ep0 maxpacket: 16 [ 1221.748569][ T90] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1221.797634][ T90] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1221.810764][ T90] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.881090][T21021] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1221.888910][T21021] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1221.897431][T21021] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1221.905240][T21021] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1222.002060][T21023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'. [ 1222.223633][ T90] usb 9-1: Product: syz [ 1222.227907][ T90] usb 9-1: Manufacturer: syz [ 1222.252960][ T90] usb 9-1: SerialNumber: syz [ 1222.277277][ T90] usb 9-1: config 0 descriptor?? [ 1222.300465][ T90] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1222.376351][ T90] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1222.377334][ T6053] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.623006][ T6053] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.742237][ T6053] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.838470][ T6053] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.886747][T21011] chnl_net:caif_netlink_parms(): no params data found [ 1222.903120][ T90] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1223.110375][T21011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.158751][T21011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.165936][T21011] bridge_slave_0: entered allmulticast mode [ 1223.231780][T21011] bridge_slave_0: entered promiscuous mode [ 1223.261524][T21011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.281448][T21011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.307003][T21011] bridge_slave_1: entered allmulticast mode [ 1223.318523][T21011] bridge_slave_1: entered promiscuous mode [ 1223.342865][ T90] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1223.506621][ T90] em28xx 9-1:0.0: board has no eeprom [ 1223.615987][ T6053] gretap0: left allmulticast mode [ 1223.628426][ T6053] gretap0: left promiscuous mode [ 1223.642576][ T6053] bridge0: port 3(gretap0) entered disabled state [ 1223.665241][ T6053] bridge_slave_1: left allmulticast mode [ 1223.671606][ T6053] bridge_slave_1: left promiscuous mode [ 1223.682473][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.690168][T11493] Bluetooth: hci2: command tx timeout [ 1223.714513][ T6053] bridge_slave_0: left allmulticast mode [ 1223.720444][ T6053] bridge_slave_0: left promiscuous mode [ 1223.726221][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.854359][T21051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.933267][T21053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1224.118572][T21055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1224.323573][ T6053] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1224.437461][ T6053] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1224.468822][ T90] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1224.477720][ T6053] .` (unregistering): Released all slaves [ 1224.483666][ T90] em28xx 9-1:0.0: dvb set to bulk mode. [ 1224.494875][ T5893] em28xx 9-1:0.0: Binding DVB extension [ 1224.675007][ T90] usb 9-1: USB disconnect, device number 85 [ 1224.693976][ T90] em28xx 9-1:0.0: Disconnecting em28xx [ 1224.768715][ T9876] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1224.771482][ T5893] em28xx 9-1:0.0: Registering input extension [ 1224.797284][ T90] em28xx 9-1:0.0: Closing input extension [ 1224.828479][ T90] em28xx 9-1:0.0: Freeing device [ 1224.867287][ T6053] bond1 (unregistering): Released all slaves [ 1224.887874][T21011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.904709][T21011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.914964][ T9876] usb 1-1: device descriptor read/64, error -71 [ 1225.028315][T21011] team0: Port device team_slave_0 added [ 1225.042811][ T6053] tipc: Left network mode [ 1225.061478][T21011] team0: Port device team_slave_1 added [ 1225.178766][ T9876] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1225.228972][ T90] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1225.393318][T21011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.401261][T21011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.428944][T21011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.468726][ T9876] usb 1-1: device descriptor read/64, error -71 [ 1225.469817][T21011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.485731][T21011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.512333][T21011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.536473][ T90] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1225.557707][ T90] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.571764][ T90] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.589017][ T90] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1225.590711][ T9876] usb usb1-port1: attempt power cycle [ 1225.653940][ T90] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1225.669330][ T90] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1225.677506][ T90] usb 9-1: Manufacturer: syz [ 1225.682289][ T5893] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1225.830553][T21011] hsr_slave_0: entered promiscuous mode [ 1225.836622][T21011] hsr_slave_1: entered promiscuous mode [ 1225.849915][T11493] Bluetooth: hci2: command tx timeout [ 1225.896841][ T90] usb 9-1: config 0 descriptor?? [ 1225.989102][ T5893] usb 5-1: device descriptor read/64, error -71 [ 1226.108931][ T9876] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1226.129134][ T9876] usb 1-1: device descriptor read/8, error -71 [ 1226.154678][ T6053] hsr_slave_0: left promiscuous mode [ 1226.174093][ T6053] hsr_slave_1: left promiscuous mode [ 1226.187056][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1226.204334][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.221549][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.237186][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.248872][ T5893] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1226.293588][ T6053] veth1_macvtap: left promiscuous mode [ 1226.304944][ T6053] veth0_macvtap: left promiscuous mode [ 1226.318467][ T6053] veth1_vlan: left promiscuous mode [ 1226.330496][ T6053] veth0_vlan: left promiscuous mode [ 1226.347710][ T90] appleir 0003:05AC:8243.0034: unknown main item tag 0x0 [ 1226.368725][ T9876] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1226.382926][ T90] appleir 0003:05AC:8243.0034: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1226.409296][ T5893] usb 5-1: device descriptor read/64, error -71 [ 1226.441417][ T9876] usb 1-1: device descriptor read/8, error -71 [ 1226.521055][ T6053] pim6reg9 (unregistering): left allmulticast mode [ 1226.553635][ T5893] usb usb5-port1: attempt power cycle [ 1226.568947][ T9876] usb usb1-port1: unable to enumerate USB device [ 1226.702579][T21064] netlink: 'syz.8.3192': attribute type 2 has an invalid length. [ 1227.398776][ T5893] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1227.433782][ T5893] usb 5-1: device descriptor read/8, error -71 [ 1227.720538][ T5893] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1227.755077][ T5893] usb 5-1: device descriptor read/8, error -71 [ 1227.978773][T11493] Bluetooth: hci2: command tx timeout [ 1228.240767][ T5893] usb usb5-port1: unable to enumerate USB device [ 1228.248523][ T6053] team0 (unregistering): Port device team_slave_1 removed [ 1228.285755][ T5920] usb 9-1: reset high-speed USB device number 86 using dummy_hcd [ 1228.328041][ T6053] team0 (unregistering): Port device team_slave_0 removed [ 1228.345737][ T30] audit: type=1400 audit(2000004080.366:1787): avc: denied { ioctl } for pid=21091 comm="syz.4.3200" path="socket:[67046]" dev="sockfs" ino=67046 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1229.794794][T21064] : entered promiscuous mode [ 1229.807371][T21088] geneve4: entered promiscuous mode [ 1229.812822][T21088] geneve4: entered allmulticast mode [ 1229.824007][T13960] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1229.840113][ T9149] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1229.922688][T13960] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1229.980142][ T9] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1230.028849][T11493] Bluetooth: hci2: command tx timeout [ 1230.037360][ T9149] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1230.053380][ T9149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.078316][T13960] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1230.087896][ T9149] usb 5-1: config 0 descriptor?? [ 1230.128379][ T9149] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1230.180118][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1230.605902][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1230.643837][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1230.665660][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1230.667371][T13960] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1230.679153][ T9] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1230.746618][ T9876] usb 9-1: USB disconnect, device number 86 [ 1230.754700][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.770345][ T9] usb 1-1: Product: syz [ 1230.774589][ T9] usb 1-1: Manufacturer: syz [ 1230.780348][ T9] usb 1-1: SerialNumber: syz [ 1230.787491][ T9] usb 1-1: config 0 descriptor?? [ 1231.158340][ T9876] usb 1-1: USB disconnect, device number 92 [ 1231.184865][T21011] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1231.195479][T21011] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1231.206034][T21011] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1231.216570][T21011] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1231.311209][ T9149] gspca_stv06xx: I2C: Read error writing address: -71 [ 1231.320601][ T9149] usb 5-1: USB disconnect, device number 33 [ 1231.355478][T21011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.373555][T21011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.456973][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.464204][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.477096][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.484230][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.146041][T21011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.310345][ T30] audit: type=1400 audit(2000004084.336:1788): avc: denied { getopt } for pid=21143 comm="syz.0.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1232.567643][ T30] audit: type=1326 audit(2000004084.586:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21143 comm="syz.0.3213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8dab8f749 code=0x0 [ 1232.742852][T21158] cgroup: none used incorrectly [ 1234.649834][T21011] veth0_vlan: entered promiscuous mode [ 1234.775754][T21011] veth1_vlan: entered promiscuous mode [ 1234.850786][T21011] veth0_macvtap: entered promiscuous mode [ 1234.965888][T21011] veth1_macvtap: entered promiscuous mode [ 1235.461153][T21011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.536533][T21011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.564910][T13960] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.594915][T13960] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.607590][T21197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3225'. [ 1235.620776][T13960] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.722877][T13960] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.746790][T21197] 8021q: VLANs not supported on vcan0 [ 1235.840716][T13960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.863984][T13960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.474006][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.484962][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.170077][ T30] audit: type=1400 audit(2000004089.186:1790): avc: denied { bind } for pid=21206 comm="syz.1.3229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1237.518409][T21219] binder: 21218:21219 ioctl c0485630 200000000600 returned -22 [ 1237.537955][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3178'. [ 1237.565965][ T30] audit: type=1400 audit(2000004089.186:1791): avc: denied { node_bind } for pid=21206 comm="syz.1.3229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1237.772229][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.848676][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1237.998830][T21231] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1238.006660][T21231] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 1238.015025][T21231] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1238.022859][T21231] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 1238.109072][T21232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3232'. [ 1240.336892][T21250] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3238'. [ 1240.684127][ T30] audit: type=1400 audit(2000004092.706:1792): avc: denied { create } for pid=21254 comm="syz.1.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1240.775628][ T30] audit: type=1400 audit(2000004092.736:1793): avc: denied { setopt } for pid=21254 comm="syz.1.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1241.015890][T21261] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1241.328742][T21270] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3240'. [ 1241.381390][T21263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1241.698682][ T9864] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1241.888890][ T9864] usb 8-1: Using ep0 maxpacket: 32 [ 1241.896429][T21261] overlayfs: statfs failed on './file0' [ 1241.916170][ T9864] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1241.948349][ T9864] usb 8-1: config 0 has no interface number 0 [ 1241.980292][ T9864] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1242.021115][ T9864] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.058955][ T9864] usb 8-1: Product: syz [ 1242.082310][ T9864] usb 8-1: Manufacturer: syz [ 1242.102661][ T9864] usb 8-1: SerialNumber: syz [ 1242.135995][ T9864] usb 8-1: config 0 descriptor?? [ 1242.178158][ T9864] smsc95xx v2.0.0 [ 1242.503738][T21251] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1243.378816][T21251] usb 5-1: device descriptor read/64, error -71 [ 1243.408777][ T9864] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1243.427216][ T9864] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1243.727665][ T30] audit: type=1400 audit(2000004095.506:1794): avc: denied { execute } for pid=21289 comm="syz.8.3250" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1243.828688][T21251] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1243.868891][ T9864] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1243.888087][ T9864] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 1243.926681][ T9864] usb 8-1: USB disconnect, device number 2 [ 1243.978912][T21251] usb 5-1: device descriptor read/64, error -71 [ 1244.414436][T21251] usb usb5-port1: attempt power cycle [ 1245.013383][T21251] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1245.182789][T21251] usb 5-1: device descriptor read/8, error -71 [ 1246.398688][ T30] audit: type=1400 audit(2000004098.406:1795): avc: denied { unmount } for pid=19729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1247.028821][T21331] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3260'. [ 1247.252574][T21337] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1248.559247][T21337] overlayfs: statfs failed on './file0' [ 1248.595381][T21354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1248.658566][T21354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1249.052272][T21354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1249.254018][T21363] input: syz0 as /devices/virtual/input/input161 [ 1250.215283][T21373] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1250.338772][ T9149] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 1250.491234][ T9149] usb 9-1: device descriptor read/64, error -71 [ 1250.754397][ T9149] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 1251.026651][T21373] overlayfs: statfs failed on './file0' [ 1251.089426][T21387] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3273'. [ 1251.139406][ T9149] usb 9-1: device descriptor read/64, error -71 [ 1251.258875][ T9149] usb usb9-port1: attempt power cycle [ 1251.410420][T21251] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 1251.413269][ T30] audit: type=1400 audit(2000004103.315:1796): avc: denied { bind } for pid=21392 comm="syz.4.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1251.664868][T21251] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 1251.672997][T21251] usb 1-1: config 0 has no interface number 0 [ 1251.679369][T21251] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 1251.976421][ T9149] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1252.224702][T21251] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1252.245593][T21251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.291730][T21251] usb 1-1: config 0 descriptor?? [ 1252.312961][T21385] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1252.327185][ T9149] usb 9-1: device descriptor read/8, error -71 [ 1252.337252][T21251] hub 1-1:0.3: bad descriptor, ignoring hub [ 1252.354615][T21251] hub 1-1:0.3: probe with driver hub failed with error -5 [ 1252.543566][T21385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.560398][T21251] sierra 1-1:0.3: Sierra USB modem converter detected [ 1252.598262][T21385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.032830][T21251] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 1253.214559][T21251] usb 1-1: USB disconnect, device number 93 [ 1253.227488][T21251] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1253.256963][T21251] sierra 1-1:0.3: device disconnected [ 1253.381646][T21413] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1253.909910][T21418] netlink: 'syz.7.3282': attribute type 12 has an invalid length. [ 1253.969971][T21418] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3282'. [ 1254.208138][ T30] audit: type=1400 audit(2000004106.225:1797): avc: denied { ioctl } for pid=21427 comm="syz.0.3284" path="socket:[68836]" dev="sockfs" ino=68836 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1254.244314][T21413] overlayfs: statfs failed on './file0' [ 1254.275153][ T30] audit: type=1400 audit(2000004106.225:1798): avc: denied { bind } for pid=21427 comm="syz.0.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1254.704784][T21444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.725853][T21444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.985457][ T5865] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1255.208798][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 1255.303314][T21454] can0: slcan on ttyS3. [ 1255.399509][ T5865] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1255.416587][T11493] Bluetooth: hci3: command 0x0406 tx timeout [ 1255.425331][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.447564][ T5865] usb 2-1: config 0 descriptor?? [ 1255.660427][ T9149] usb 2-1: USB disconnect, device number 53 [ 1255.859180][T21454] can0 (unregistered): slcan off ttyS3. [ 1256.196827][T21464] overlayfs: failed to resolve './file0': -2 [ 1257.399190][ T5920] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1257.638683][ T5920] usb 2-1: device descriptor read/64, error -71 [ 1257.878737][ T5920] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1258.013415][T21485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.024456][T21485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1258.032353][ T5920] usb 2-1: device descriptor read/64, error -71 [ 1258.041994][T21485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1258.059147][T21485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1258.244292][ T5920] usb usb2-port1: attempt power cycle [ 1259.720512][T21497] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3301'. [ 1259.858223][ T5920] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1259.957590][ T5920] usb 2-1: device descriptor read/8, error -71 [ 1260.067838][T21511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3306'. [ 1260.268904][ T9149] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1260.848678][ T9149] usb 5-1: Using ep0 maxpacket: 8 [ 1260.860755][ T9149] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.876475][ T9149] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1260.887654][ T9149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.913024][ T9149] usb 5-1: config 0 descriptor?? [ 1260.948360][ T9149] usb 5-1: bad CDC descriptors [ 1260.956301][ T9149] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 1260.971227][ T9149] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 1260.982565][ T9149] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 1261.144925][ T5865] usb 5-1: USB disconnect, device number 38 [ 1263.352543][T21550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3316'. [ 1263.550065][ T5865] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1263.728941][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 1263.780569][ T30] audit: type=1400 audit(2000004115.805:1799): avc: denied { mount } for pid=21556 comm="syz.8.3319" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1263.818761][ T5865] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1263.837660][ T5865] usb 5-1: config 0 has no interface number 0 [ 1263.933861][ T5865] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1263.945385][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.955613][ T5865] usb 5-1: Product: syz [ 1263.958691][ T9149] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1263.960078][ T5865] usb 5-1: Manufacturer: syz [ 1263.973292][ T5865] usb 5-1: SerialNumber: syz [ 1264.010043][ T5865] usb 5-1: config 0 descriptor?? [ 1264.026043][ T5865] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1264.148710][ T9149] usb 8-1: Using ep0 maxpacket: 32 [ 1264.155729][ T9149] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1264.186597][ T9149] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1264.207019][ T9149] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1264.237503][ T9149] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1264.285987][ T9149] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1264.297924][ T9149] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.306962][ T9149] usb 8-1: Product: syz [ 1264.307788][ T5865] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1264.321028][ T9149] usb 8-1: Manufacturer: syz [ 1264.354675][ T5865] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1264.515079][T21542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.726822][ T9149] usb 8-1: SerialNumber: syz [ 1264.752396][ T9149] usb 8-1: config 0 descriptor?? [ 1264.788001][ T9149] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input162 [ 1264.806745][ T5172] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1264.821719][T21542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.505046][T21554] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3317'. [ 1265.621263][ T5172] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1265.686346][T20307] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1265.738158][ T5172] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1265.775893][ T5172] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1265.834364][ T5172] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1265.958969][ T5865] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1266.096801][ T5172] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1266.332457][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1266.334201][T21251] usb 5-1: USB disconnect, device number 39 [ 1266.348101][T21251] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1266.393969][T21251] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1266.409691][ T5865] usb 1-1: device descriptor read/64, error -71 [ 1266.444247][T21251] quatech2 5-1:0.51: device disconnected [ 1266.467830][ T30] audit: type=1400 audit(2000004118.485:1800): avc: denied { name_bind } for pid=21579 comm="syz.1.3325" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1266.614250][T21589] binder: BINDER_SET_CONTEXT_MGR already set [ 1266.633616][T21589] binder: 21579:21589 ioctl 4018620d 200000000100 returned -16 [ 1266.647885][ T5920] usb 8-1: USB disconnect, device number 3 [ 1267.648213][ T5865] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1267.658199][ T30] audit: type=1400 audit(2000004119.635:1801): avc: denied { ioctl } for pid=21595 comm="syz.8.3329" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1268.318744][ T30] audit: type=1400 audit(2000004119.635:1802): avc: denied { write } for pid=21595 comm="syz.8.3329" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1268.343017][ T30] audit: type=1400 audit(2000004119.645:1803): avc: denied { mounton } for pid=21595 comm="syz.8.3329" path="/syzcgroup/unified/syz8" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 1268.399682][ T5865] usb 1-1: device descriptor read/64, error -71 [ 1268.435385][T21602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1268.621510][ T5865] usb usb1-port1: attempt power cycle [ 1268.653517][T21251] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1268.681581][T21608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1268.814096][T21251] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1268.875098][T21251] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1268.919595][T21251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.967560][T21251] usb 5-1: Product: syz [ 1268.992997][T21251] usb 5-1: Manufacturer: syz [ 1269.018902][T21251] usb 5-1: SerialNumber: syz [ 1269.118184][T21602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1269.148703][ T5865] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1269.169333][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 1269.176002][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.187687][ T5865] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 1269.198103][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.209783][ T5865] usb 1-1: config 0 descriptor?? [ 1269.478755][ T5920] usb 9-1: new low-speed USB device number 91 using dummy_hcd [ 1269.625044][T21604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3333'. [ 1269.641484][ T5920] usb 9-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1269.736204][ T5920] usb 9-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1269.768754][ T5920] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1269.786428][ T5920] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1269.826571][ T5920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.847675][ T5920] usb 9-1: config 0 descriptor?? [ 1270.380972][ T30] audit: type=1400 audit(2000004122.395:1804): avc: denied { ioctl } for pid=21599 comm="syz.4.3331" path="socket:[69986]" dev="sockfs" ino=69986 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1270.774491][T21621] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1270.774491][T21621] The task syz.4.3331 (21621) triggered the difference, watch for misbehavior. [ 1270.795818][ T5865] input: HID 28bd:0933 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.0035/input/input163 [ 1270.846742][ T5865] uclogic 0003:28BD:0933.0035: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0 [ 1271.044795][ T5920] koneplus 0003:1E7D:2E22.0036: unbalanced delimiter at end of report description [ 1271.288469][ T5920] koneplus 0003:1E7D:2E22.0036: parse failed [ 1271.302072][ T5920] koneplus 0003:1E7D:2E22.0036: probe with driver koneplus failed with error -22 [ 1271.315063][ T5920] usb 9-1: USB disconnect, device number 91 [ 1271.492583][ T5865] usb 1-1: USB disconnect, device number 96 [ 1271.955918][T21251] cdc_ncm 5-1:1.0: bind() failure [ 1271.984589][T21251] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1272.012607][T21251] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1272.823326][T21637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3340'. [ 1272.989042][T21251] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1273.001043][T21251] usb 5-1: USB disconnect, device number 40 [ 1273.817430][T21654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.910166][T21654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.991364][T21654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1274.238835][ T5865] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1275.329927][ T5865] usb 9-1: device descriptor read/64, error -71 [ 1275.658708][ T5865] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 1275.798703][ T5893] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1275.806213][ T5865] usb 9-1: device descriptor read/64, error -71 [ 1275.918886][ T5865] usb usb9-port1: attempt power cycle [ 1275.961976][ T5893] usb 8-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 1275.971257][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.979717][ T5893] usb 8-1: Product: syz [ 1275.984179][ T5893] usb 8-1: Manufacturer: syz [ 1275.989069][ T5893] usb 8-1: SerialNumber: syz [ 1275.997514][ T5893] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1276.003901][ T5893] r8152-cfgselector 8-1: config 0 descriptor?? [ 1276.011568][ T5893] r8152 8-1:0.0: Expected endpoints are not found [ 1276.335660][ T5865] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 1276.467201][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3350'. [ 1276.486408][T21673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=21673 comm=syz.7.3350 [ 1276.509192][ T30] audit: type=1400 audit(2000004128.535:1805): avc: denied { ioctl } for pid=21672 comm="syz.7.3350" path="socket:[69520]" dev="sockfs" ino=69520 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1276.530175][ T5920] r8152-cfgselector 8-1: USB disconnect, device number 4 [ 1276.623688][T21682] syzkaller1: entered promiscuous mode [ 1276.630448][ T5865] usb 9-1: device descriptor read/8, error -71 [ 1276.638237][T21682] syzkaller1: entered allmulticast mode [ 1278.449273][ T30] audit: type=1400 audit(2000004130.475:1806): avc: denied { map } for pid=21705 comm="syz.8.3360" path="socket:[70057]" dev="sockfs" ino=70057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1278.474916][ T30] audit: type=1400 audit(2000004130.475:1807): avc: denied { read } for pid=21705 comm="syz.8.3360" path="socket:[70057]" dev="sockfs" ino=70057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1278.668683][T21251] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1279.228698][T21251] usb 1-1: Using ep0 maxpacket: 32 [ 1279.240155][T21251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1279.252260][T21251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1279.263307][T21251] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1279.276192][T21251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1279.305631][T21251] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1279.314800][T21251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.327200][T21251] usb 1-1: Product: syz [ 1279.334832][T21251] usb 1-1: Manufacturer: syz [ 1279.339877][T21251] usb 1-1: SerialNumber: syz [ 1279.445229][T21251] usb 1-1: config 0 descriptor?? [ 1279.478981][T21251] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input164 [ 1279.493194][ T5172] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1279.518791][ T5172] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1279.556671][ T5172] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1279.574059][T20307] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1279.596142][ T5172] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1279.863922][ T5172] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1279.915839][ T5172] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1279.967046][ T5172] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1280.287032][T21725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3358'. [ 1280.298373][T21725] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1281.706141][T21729] syzkaller1: entered promiscuous mode [ 1281.720046][T21729] syzkaller1: entered allmulticast mode [ 1282.162465][T21740] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1282.170686][T21740] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 1282.179319][T21740] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1282.187148][T21740] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 1282.227799][T21740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3367'. [ 1282.519666][ T5865] usb 1-1: USB disconnect, device number 97 [ 1284.543906][ T9864] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 1284.718660][ T9864] usb 9-1: Using ep0 maxpacket: 32 [ 1284.726275][ T9864] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1284.741626][ T9864] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1284.751374][ T9864] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1284.763086][ T9864] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1284.778669][ T9864] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1284.787809][ T9864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.795903][ T9864] usb 9-1: Product: syz [ 1284.803486][ T5865] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1284.821432][ T9864] usb 9-1: Manufacturer: syz [ 1284.826369][ T9864] usb 9-1: SerialNumber: syz [ 1284.861138][ T9864] usb 9-1: config 0 descriptor?? [ 1284.868669][ T7581] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 1284.891154][ T9864] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input165 [ 1284.910662][ T5172] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1284.933165][ T5172] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1284.945265][ T5172] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1284.948847][ T5865] usb 8-1: device descriptor read/64, error -71 [ 1284.977638][ T5172] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1285.028478][T20307] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1285.041824][ T7581] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 1285.053014][ T7581] usb 2-1: config 0 has no interface number 0 [ 1285.060781][ T7581] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 1285.071718][ T7581] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1285.071983][ T5172] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1285.080899][ T7581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.119467][ T5172] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1285.179006][ T7581] usb 2-1: config 0 descriptor?? [ 1285.179570][T21766] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1285.180510][ T7581] hub 2-1:0.3: bad descriptor, ignoring hub [ 1285.180524][ T7581] hub 2-1:0.3: probe with driver hub failed with error -5 [ 1285.180966][ T7581] sierra 2-1:0.3: Sierra USB modem converter detected [ 1285.366724][ T5865] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1285.514555][T21775] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3373'. [ 1285.526619][T21775] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1285.909314][ T5865] usb 8-1: device descriptor read/64, error -71 [ 1285.944124][T21766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.949262][T21766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.997618][ T7581] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1286.022094][ T5865] usb usb8-port1: attempt power cycle [ 1286.076925][ T7581] usb 2-1: USB disconnect, device number 58 [ 1286.082230][ T7581] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1286.151845][ T7581] sierra 2-1:0.3: device disconnected [ 1287.276460][T21251] usb 9-1: USB disconnect, device number 96 [ 1288.232723][T21800] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3383'. [ 1288.259577][T21800] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3383'. [ 1288.284554][ T30] audit: type=1400 audit(2000004140.305:1808): avc: denied { connect } for pid=21799 comm="syz.8.3383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1288.938209][T21814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1289.037974][T21814] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3387'. [ 1289.328061][T21819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1289.418878][T21819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1289.505703][T21819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1289.982558][ T30] audit: type=1326 audit(2000004142.005:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21827 comm="syz.7.3392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1ad38f749 code=0x0 [ 1290.097209][T21834] syzkaller1: entered promiscuous mode [ 1290.103172][T21834] syzkaller1: entered allmulticast mode [ 1290.673121][ T30] audit: type=1400 audit(2000004142.695:1810): avc: denied { setattr } for pid=21842 comm="syz.0.3396" name="RAW" dev="sockfs" ino=70205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1291.097120][ T30] audit: type=1400 audit(2000004143.115:1811): avc: denied { bind } for pid=21842 comm="syz.0.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1291.117242][T21843] Unsupported ieee802154 address type: 0 [ 1291.154402][T11493] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1291.224176][T11493] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1291.245025][T11493] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1291.263595][T11493] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1291.271337][T11493] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1292.689234][ T5865] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1292.909385][ T5865] usb 8-1: device descriptor read/64, error -71 [ 1293.378737][ T5811] Bluetooth: hci4: command tx timeout [ 1293.427682][T21849] chnl_net:caif_netlink_parms(): no params data found [ 1293.478751][ T5865] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1293.502668][T21849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.509946][T21849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.517094][T21849] bridge_slave_0: entered allmulticast mode [ 1293.524108][T21849] bridge_slave_0: entered promiscuous mode [ 1293.532319][T21849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.539883][T21849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.547162][T21849] bridge_slave_1: entered allmulticast mode [ 1293.554389][T21849] bridge_slave_1: entered promiscuous mode [ 1293.588700][ T5920] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1293.655505][ T5865] usb 8-1: device descriptor read/64, error -71 [ 1293.696227][T21849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.770003][ T5865] usb usb8-port1: attempt power cycle [ 1293.778981][ T5920] usb 2-1: device descriptor read/64, error -71 [ 1293.838289][T21849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.939543][ T30] audit: type=1326 audit(2000004145.965:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21873 comm="syz.8.3403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f220638f749 code=0x0 [ 1294.130387][T21877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1294.143087][T21849] team0: Port device team_slave_0 added [ 1294.152688][T21849] team0: Port device team_slave_1 added [ 1294.192239][T21879] syzkaller1: entered promiscuous mode [ 1294.197808][T21879] syzkaller1: entered allmulticast mode [ 1294.225593][T21877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1294.235520][ T5920] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1294.245756][T21849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.253537][T21849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.280215][T21849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.292628][T21849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.300744][T21849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.348753][T21849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.377849][T21877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1294.388735][ T5920] usb 2-1: device descriptor read/64, error -71 [ 1294.481536][T21849] hsr_slave_0: entered promiscuous mode [ 1294.498904][ T5920] usb usb2-port1: attempt power cycle [ 1294.506510][T21849] hsr_slave_1: entered promiscuous mode [ 1294.528008][T21849] debugfs: 'hsr0' already exists in 'hsr' [ 1294.533831][T21849] Cannot create hsr debugfs directory [ 1294.641609][T21886] bridge0: port 3(gretap0) entered blocking state [ 1294.648052][T21886] bridge0: port 3(gretap0) entered disabled state [ 1294.654966][T21886] gretap0: entered allmulticast mode [ 1294.661182][T21886] gretap0: entered promiscuous mode [ 1294.666606][T21886] bridge0: port 3(gretap0) entered blocking state [ 1294.673073][T21886] bridge0: port 3(gretap0) entered forwarding state [ 1295.158802][ T5920] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1295.440947][ T5920] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1295.459595][ T5811] Bluetooth: hci4: command tx timeout [ 1295.465652][ T5920] usb 2-1: config 0 has no interface number 0 [ 1295.489824][ T5920] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1295.522769][ T5920] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1295.534599][ T5920] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1295.549566][ T5920] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1295.569210][ T5920] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1295.586266][ T5920] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1295.621799][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.639328][ T5920] usb 2-1: Product: syz [ 1295.645811][ T5920] usb 2-1: Manufacturer: syz [ 1295.650847][ T5920] usb 2-1: SerialNumber: syz [ 1295.698713][T21251] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1295.709655][ T5920] usb 2-1: config 0 descriptor?? [ 1295.715533][T21888] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1295.735955][ T5920] iguanair 2-1:0.255: probe with driver iguanair failed with error -12 [ 1296.460488][T21251] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.572196][T21251] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1296.600023][T21251] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1296.617570][ T5920] usb 2-1: USB disconnect, device number 61 [ 1296.650543][T21251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1296.658541][T21251] usb 1-1: SerialNumber: syz [ 1296.680923][T21905] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3414'. [ 1296.687468][T21907] syzkaller1: entered promiscuous mode [ 1296.696670][T21907] syzkaller1: entered allmulticast mode [ 1296.812912][T21849] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1296.914893][T21849] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1296.930313][T21849] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1296.962692][T21849] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1297.015737][T21912] input: syz0 as /devices/virtual/input/input167 [ 1297.034639][T21849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.056768][T21849] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.068556][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.075691][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.089927][T20886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.097073][T20886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1297.395324][T21849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.458135][T21933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1297.522065][T21933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1297.538710][ T5811] Bluetooth: hci4: command tx timeout [ 1297.608079][T21849] veth0_vlan: entered promiscuous mode [ 1297.625948][T21849] veth1_vlan: entered promiscuous mode [ 1297.656649][T21849] veth0_macvtap: entered promiscuous mode [ 1297.666920][T21849] veth1_macvtap: entered promiscuous mode [ 1297.681631][T21933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1297.729954][T21849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.742712][T21849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.837780][ T1127] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.860445][ T1127] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.877967][ T6053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.888644][ T1127] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.923350][ T6053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.951729][ T6418] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.979762][T13962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.993028][T13962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.529438][T21251] usb 1-1: 0:2 : does not exist [ 1298.555402][T21251] usb 1-1: USB disconnect, device number 98 [ 1299.214598][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.221201][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.653405][ T5811] Bluetooth: hci4: command tx timeout [ 1300.212532][ T5929] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1300.220400][T21251] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1300.398894][T21251] usb 1-1: Using ep0 maxpacket: 16 [ 1300.413700][ T5929] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 1300.423264][ T5929] usb 9-1: config 0 has no interface number 0 [ 1300.430325][T21251] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1300.441748][ T5929] usb 9-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1300.453781][T21251] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1300.473997][T21251] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1300.484251][ T5929] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1300.500101][T21251] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1300.508479][ T5929] usb 9-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1300.520525][T21251] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1300.529436][ T5929] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1300.541084][T21251] usb 1-1: config 0 has no interface number 0 [ 1300.547155][T21251] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1300.548675][ T5893] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1300.558439][ T5929] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1300.577775][T21251] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1300.588075][T21251] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1300.598478][T21251] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1300.612271][T21251] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1300.620597][ T5929] usb 9-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1300.629887][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.638034][ T5929] usb 9-1: Product: syz [ 1300.642345][ T5929] usb 9-1: Manufacturer: syz [ 1300.647365][T21251] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1300.656489][ T5929] usb 9-1: SerialNumber: syz [ 1300.661130][T21251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.669942][T21251] usb 1-1: Product: syz [ 1300.674749][ T5929] usb 9-1: config 0 descriptor?? [ 1300.679816][T21251] usb 1-1: Manufacturer: syz [ 1300.684402][T21251] usb 1-1: SerialNumber: syz [ 1300.691956][T21251] usb 1-1: config 0 descriptor?? [ 1300.693407][T21963] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1300.699987][T21251] usb 1-1: selecting invalid altsetting 2 [ 1300.737757][ T5893] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1300.747202][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.801514][ T5893] usb 2-1: Product: syz [ 1300.826146][ T5893] usb 2-1: Manufacturer: syz [ 1300.844236][ T5893] usb 2-1: SerialNumber: syz [ 1300.855944][ T5929] iguanair 9-1:0.255: probe with driver iguanair failed with error -12 [ 1300.870051][ T5893] usb 2-1: config 0 descriptor?? [ 1300.942984][ T5929] usb 1-1: USB disconnect, device number 99 [ 1300.975870][T21977] bridge0: port 3(gretap0) entered blocking state [ 1300.983201][T21977] bridge0: port 3(gretap0) entered disabled state [ 1300.989831][T21977] gretap0: entered allmulticast mode [ 1300.995990][T21977] gretap0: entered promiscuous mode [ 1301.001965][T21977] bridge0: port 3(gretap0) entered blocking state [ 1301.008417][T21977] bridge0: port 3(gretap0) entered forwarding state [ 1301.553509][ T5893] usb 2-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1301.574771][ T5893] f81604 2-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO [ 1301.588683][ T5893] f81604 2-1:0.0: probe with driver f81604 failed with error -121 [ 1301.597313][T21251] usb 9-1: USB disconnect, device number 97 [ 1301.626337][T21987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1301.688165][T21987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1301.753421][T21987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1301.793566][ T5893] usb 2-1: USB disconnect, device number 62 [ 1302.108813][ T5893] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1302.268751][ T5893] usb 6-1: device descriptor read/64, error -71 [ 1302.539856][T21251] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 1302.889067][ T5893] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1302.988829][T21251] usb 9-1: Using ep0 maxpacket: 8 [ 1303.004646][T21251] usb 9-1: config 1 has an invalid interface number: 148 but max is 0 [ 1303.110382][T21251] usb 9-1: config 1 has no interface number 0 [ 1303.123991][T21251] usb 9-1: config 1 interface 148 has no altsetting 0 [ 1303.141917][T21251] usb 9-1: New USB device found, idVendor=2109, idProduct=0711, bcdDevice=25.de [ 1303.141960][ T5893] usb 6-1: device descriptor read/64, error -71 [ 1303.169973][T21251] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.299960][ T5893] usb usb6-port1: attempt power cycle [ 1303.828047][T21251] usb-storage 9-1:1.148: USB Mass Storage device detected [ 1303.878758][ T5893] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1303.943595][T21251] usb-storage 9-1:1.148: Quirks match for vid 2109 pid 0711: 2000000 [ 1303.970303][ T5893] usb 6-1: device descriptor read/8, error -71 [ 1304.000134][T21251] usb 9-1: USB disconnect, device number 98 [ 1304.085711][T22016] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1304.093581][T22016] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1304.102172][T22016] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1304.110012][T22016] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1304.369332][T22016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'. [ 1304.728926][ T5893] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1304.776622][ T5893] usb 6-1: device descriptor read/8, error -71 [ 1304.934752][ T30] audit: type=1804 audit(2000004156.955:1813): pid=22028 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.3448" name="/newroot/518/file0" dev="tmpfs" ino=3011 res=1 errno=0 [ 1304.974101][ T5893] usb usb6-port1: unable to enumerate USB device [ 1305.462236][T21251] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1305.519030][ T9149] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1305.958969][T21251] usb 8-1: Using ep0 maxpacket: 32 [ 1306.113255][T21251] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1306.139430][T21251] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1306.743611][T21251] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1306.780824][ T9149] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1306.810915][ T9149] usb 1-1: config 0 has no interface number 0 [ 1306.817028][ T9149] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1306.828203][T21251] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1306.841436][ T9149] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1306.853890][ T9149] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1306.872098][ T9149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.872294][T21251] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1306.890404][T21251] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.914929][T21251] usb 8-1: Product: syz [ 1306.919764][ T9149] usb 1-1: config 0 descriptor?? [ 1306.925575][T21251] usb 8-1: Manufacturer: syz [ 1306.933932][T21251] usb 8-1: SerialNumber: syz [ 1306.965020][T21251] usb 8-1: config 0 descriptor?? [ 1306.981677][T21251] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input169 [ 1306.999967][ T5172] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1307.015172][ T5172] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1307.032146][ T5172] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1307.048813][ T5920] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1307.049271][ T7581] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1307.087261][ T5172] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1307.118538][T20307] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1307.138685][ T5893] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 1307.147927][ T5172] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1307.161673][ T5172] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1307.240415][ T7581] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1307.240448][ T7581] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1307.242475][ T7581] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1307.242501][ T7581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.242525][ T7581] usb 2-1: Product: syz [ 1307.242541][ T7581] usb 2-1: Manufacturer: syz [ 1307.242557][ T7581] usb 2-1: SerialNumber: syz [ 1307.245459][ T7581] usb 2-1: config 0 descriptor?? [ 1307.246124][T22044] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1307.246234][T22044] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1307.302673][ T5893] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1307.302728][ T5893] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1307.304549][ T5893] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1307.304576][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1307.304597][ T5893] usb 9-1: SerialNumber: syz [ 1307.315108][T22047] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 1307.315242][T22047] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 1307.390419][ T9149] prodikeys 0003:041E:2801.0037: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 1307.391833][ T9149] hid_prodikeys: hid-prodikeys: failed to find output report [ 1307.391833][ T9149] [ 1307.396523][ T5920] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1307.396551][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.396571][ T5920] usb 6-1: Product: syz [ 1307.396585][ T5920] usb 6-1: Manufacturer: syz [ 1307.396600][ T5920] usb 6-1: SerialNumber: syz [ 1307.407127][ T5920] usb 6-1: config 0 descriptor?? [ 1307.505726][T22051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3445'. [ 1307.510062][T22051] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1307.671208][T22043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.682152][T22043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.696680][ T5811] Bluetooth: hci4: unknown advertising packet type: 0x17 [ 1307.696770][ T5811] Bluetooth: hci4: Dropping invalid advertising data [ 1307.696837][ T5811] Bluetooth: hci4: unknown advertising packet type: 0x09 [ 1307.696878][ T5811] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1307.711418][T22043] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1307.716645][ T5920] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1307.878694][T22054] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1307.878985][T22054] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1307.993498][ T5920] usb 6-1: USB disconnect, device number 7 [ 1308.505733][T22057] fuse: Unknown parameter 'rootmoDe' [ 1309.082370][ T30] audit: type=1400 audit(2000004161.105:1814): avc: denied { mount } for pid=22066 comm="syz.5.3457" name="/" dev="configfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1309.155183][ T30] audit: type=1400 audit(2000004161.105:1815): avc: denied { search } for pid=22066 comm="syz.5.3457" name="/" dev="configfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1309.261797][ T90] usb 8-1: USB disconnect, device number 11 [ 1309.443329][ T5920] usb 1-1: USB disconnect, device number 100 [ 1309.833304][ T7581] Error reading MAC address [ 1309.850863][ T5893] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 1309.884226][ T7581] usb 2-1: USB disconnect, device number 63 [ 1309.900053][ T90] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1309.910886][ T5893] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 1309.953265][ T5893] usb 9-1: USB disconnect, device number 99 [ 1310.102673][ T90] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 1310.619091][ T90] usb 8-1: config 0 has no interface number 0 [ 1310.650228][ T90] usb 8-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1310.876321][ T90] usb 8-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1310.947649][ T90] usb 8-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1310.990963][ T90] usb 8-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1311.033594][ T90] usb 8-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1311.060311][ T90] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1311.560145][T22101] syz.8.3465 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1416.068572][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1416.075522][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22100/1:b..l P18527/1:b..l [ 1416.085175][ C0] rcu: (detected by 0, t=10503 jiffies, g=101937, q=436 ncpus=2) [ 1416.092948][ C0] task:syz-executor state:R running task stack:23656 pid:18527 tgid:18527 ppid:18524 task_flags:0x400140 flags:0x00080000 [ 1416.107323][ C0] Call Trace: [ 1416.110586][ C0] [ 1416.113495][ C0] ? __schedule+0x10b9/0x6150 [ 1416.118146][ C0] __schedule+0x1139/0x6150 [ 1416.122621][ C0] ? __lock_acquire+0x436/0x2890 [ 1416.127539][ C0] ? __pfx___schedule+0x10/0x10 [ 1416.132363][ C0] ? mark_held_locks+0x49/0x80 [ 1416.137100][ C0] preempt_schedule_irq+0x51/0x90 [ 1416.142098][ C0] irqentry_exit+0x1d8/0x8c0 [ 1416.146663][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1416.152611][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 1416.157782][ C0] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 72 b9 ee 0e 0f 82 74 02 00 00 8b 35 0a ea ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 1416.177361][ C0] RSP: 0018:ffffc9000d876cf8 EFLAGS: 00000206 [ 1416.183399][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 0000000028f51708 [ 1416.191342][ C0] RDX: 0000000000000000 RSI: ffffffff8daa7ea1 RDI: ffffffff8bf2b400 [ 1416.199285][ C0] RBP: 0000000000000002 R08: 000000009ecfde30 R09: 0000000009ecfde3 [ 1416.207226][ C0] R10: 0000000000000002 R11: ffff88802c97aff0 R12: 0000000000000000 [ 1416.215170][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1416.223121][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 1416.228366][ C0] unwind_next_frame+0xd1/0x20b0 [ 1416.233296][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 1416.238394][ C0] ? arch_stack_walk+0x73/0x100 [ 1416.243223][ C0] __unwind_start+0x45f/0x7f0 [ 1416.247873][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1416.253043][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1416.259187][ C0] arch_stack_walk+0x73/0x100 [ 1416.263840][ C0] ? arch_stack_walk+0x73/0x100 [ 1416.268666][ C0] stack_trace_save+0x8e/0xc0 [ 1416.273311][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1416.278656][ C0] ? stack_trace_save+0x8e/0xc0 [ 1416.283485][ C0] save_stack+0x160/0x1f0 [ 1416.287788][ C0] ? __pfx_save_stack+0x10/0x10 [ 1416.292614][ C0] ? __lock_acquire+0x436/0x2890 [ 1416.297524][ C0] __set_page_owner+0x91/0x560 [ 1416.302262][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1416.307624][ C0] ? bad_range+0x261/0x4c0 [ 1416.312021][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1416.317199][ C0] post_alloc_hook+0x1af/0x220 [ 1416.322000][ C0] get_page_from_freelist+0xd0b/0x31a0 [ 1416.327440][ C0] ? __pfx___might_resched+0x10/0x10 [ 1416.332719][ C0] ? __next_zones_zonelist+0x8b/0x150 [ 1416.338068][ C0] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1416.343941][ C0] ? stack_trace_save+0x8e/0xc0 [ 1416.348791][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1416.354145][ C0] ? rcu_is_watching+0x12/0xc0 [ 1416.358890][ C0] ? stack_depot_save_flags+0x29/0x9b0 [ 1416.364326][ C0] ? kasan_save_stack+0x42/0x60 [ 1416.369152][ C0] ? kasan_save_stack+0x33/0x60 [ 1416.373972][ C0] ? kasan_save_track+0x14/0x30 [ 1416.378792][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1416.385086][ C0] ? copy_page_range+0x4620/0x6780 [ 1416.390169][ C0] ? copy_process+0x3b9f/0x7430 [ 1416.394993][ C0] ? __do_sys_clone+0xce/0x120 [ 1416.399734][ C0] ? do_syscall_64+0xcd/0xf80 [ 1416.404409][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.410477][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1416.416349][ C0] ? policy_nodemask+0xea/0x4e0 [ 1416.421177][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1416.426000][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1416.431349][ C0] alloc_pages_noprof+0x131/0x390 [ 1416.436349][ C0] pte_alloc_one+0x1e/0x3d0 [ 1416.440829][ C0] __pte_alloc+0x6d/0x3f0 [ 1416.445139][ C0] ? __pfx___pte_alloc+0x10/0x10 [ 1416.450049][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1416.454881][ C0] ? __pmd_alloc+0x6aa/0x9c0 [ 1416.459458][ C0] copy_page_range+0x3f3e/0x6780 [ 1416.464384][ C0] ? __lock_acquire+0x436/0x2890 [ 1416.469312][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1416.474659][ C0] ? mas_store+0xb4b/0x12f0 [ 1416.479151][ C0] ? __vma_enter_locked+0x1dc/0x770 [ 1416.484325][ C0] ? __pfx_mas_store+0x10/0x10 [ 1416.489072][ C0] dup_mmap+0xbea/0x20e0 [ 1416.493323][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1416.497981][ C0] copy_process+0x3b9f/0x7430 [ 1416.502637][ C0] ? do_wp_page+0x1c04/0x5010 [ 1416.507305][ C0] ? __pfx_copy_process+0x10/0x10 [ 1416.512308][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1416.517328][ C0] kernel_clone+0xfc/0x910 [ 1416.521740][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1416.526764][ C0] __do_sys_clone+0xce/0x120 [ 1416.531335][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 1416.536507][ C0] ? count_memcg_events+0x122/0x290 [ 1416.541694][ C0] ? do_user_addr_fault+0x843/0x1370 [ 1416.546958][ C0] do_syscall_64+0xcd/0xf80 [ 1416.551439][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.557304][ C0] RIP: 0033:0x7f74b1b85e93 [ 1416.561695][ C0] RSP: 002b:00007ffede98f1d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1416.570096][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f74b1b85e93 [ 1416.578060][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1416.586077][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1416.594212][ C0] R10: 00005555846cd7d0 R11: 0000000000000246 R12: 0000000000000000 [ 1416.602170][ C0] R13: 00000000000927c0 R14: 00000000001402f5 R15: 00007ffede98f370 [ 1416.610122][ C0] [ 1416.613120][ C0] task:modprobe state:R running task stack:25800 pid:22100 tgid:22100 ppid:1089 task_flags:0x400000 flags:0x00080000 [ 1416.626649][ C0] Call Trace: [ 1416.630249][ C0] [ 1416.633156][ C0] ? __schedule+0x10b9/0x6150 [ 1416.637808][ C0] __schedule+0x1139/0x6150 [ 1416.642295][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 1416.647037][ C0] ? __pfx___schedule+0x10/0x10 [ 1416.651865][ C0] preempt_schedule_irq+0x51/0x90 [ 1416.656861][ C0] irqentry_exit+0x1d8/0x8c0 [ 1416.661427][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1416.667382][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 1416.672552][ C0] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 72 b9 ee 0e 0f 82 74 02 00 00 8b 35 0a ea ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 1416.692131][ C0] RSP: 0018:ffffc9000d6a7478 EFLAGS: 00000206 [ 1416.698167][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 0000000068c1bacb [ 1416.706107][ C0] RDX: 0000000000000000 RSI: ffffffff8daa7ea1 RDI: ffffffff8bf2b400 [ 1416.714137][ C0] RBP: 0000000000000002 R08: 00000000ffffffff R09: 00000000ffffffff [ 1416.722095][ C0] R10: 0000000000000002 R11: ffff8880326c2ff0 R12: 0000000000000000 [ 1416.730041][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1416.737992][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 1416.743166][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1416.749300][ C0] unwind_next_frame+0xd1/0x20b0 [ 1416.754227][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 1416.759328][ C0] ? do_syscall_64+0xcd/0xf80 [ 1416.763996][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1416.770135][ C0] arch_stack_walk+0x94/0x100 [ 1416.774893][ C0] ? do_syscall_64+0xcd/0xf80 [ 1416.779554][ C0] stack_trace_save+0x8e/0xc0 [ 1416.784214][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1416.789574][ C0] ? __lock_acquire+0x436/0x2890 [ 1416.794501][ C0] kasan_save_stack+0x33/0x60 [ 1416.799264][ C0] ? kasan_save_stack+0x33/0x60 [ 1416.804085][ C0] ? kasan_save_track+0x14/0x30 [ 1416.808906][ C0] ? kasan_save_free_info+0x3b/0x60 [ 1416.814088][ C0] ? __kasan_slab_free+0x5f/0x80 [ 1416.819002][ C0] ? kmem_cache_free+0x2d8/0x770 [ 1416.823922][ C0] ? security_file_free+0xb9/0x180 [ 1416.829035][ C0] ? __fput_deferred+0x29f/0x480 [ 1416.833963][ C0] ? fput_close+0x118/0x250 [ 1416.838443][ C0] ? path_openat+0x112c/0x3140 [ 1416.843192][ C0] ? do_filp_open+0x20b/0x470 [ 1416.847979][ C0] ? do_sys_openat2+0x121/0x290 [ 1416.852820][ C0] ? __x64_sys_openat+0x174/0x210 [ 1416.857837][ C0] ? do_syscall_64+0xcd/0xf80 [ 1416.862522][ C0] kasan_save_track+0x14/0x30 [ 1416.867193][ C0] kasan_save_free_info+0x3b/0x60 [ 1416.872200][ C0] __kasan_slab_free+0x5f/0x80 [ 1416.876949][ C0] kmem_cache_free+0x2d8/0x770 [ 1416.881716][ C0] ? security_file_free+0xb9/0x180 [ 1416.886817][ C0] ? security_file_free+0xb9/0x180 [ 1416.891913][ C0] security_file_free+0xb9/0x180 [ 1416.896828][ C0] __fput_deferred+0x29f/0x480 [ 1416.901564][ C0] ? __pfx___fput_deferred+0x10/0x10 [ 1416.906818][ C0] ? lookup_fast+0x156/0x610 [ 1416.911378][ C0] ? inode_permission+0x37b/0x640 [ 1416.916379][ C0] fput_close+0x118/0x250 [ 1416.920690][ C0] ? __pfx_fput_close+0x10/0x10 [ 1416.925603][ C0] ? terminate_walk+0x246/0x670 [ 1416.930436][ C0] path_openat+0x112c/0x3140 [ 1416.935088][ C0] ? do_syscall_64+0xcd/0xf80 [ 1416.939744][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.945786][ C0] ? __pfx_path_openat+0x10/0x10 [ 1416.950703][ C0] do_filp_open+0x20b/0x470 [ 1416.955267][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 1416.960273][ C0] ? alloc_fd+0x471/0x7d0 [ 1416.964586][ C0] do_sys_openat2+0x121/0x290 [ 1416.969246][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1416.974441][ C0] __x64_sys_openat+0x174/0x210 [ 1416.979268][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 1416.984613][ C0] do_syscall_64+0xcd/0xf80 [ 1416.989140][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.995008][ C0] RIP: 0033:0x7f9d1f4310ba [ 1416.999389][ C0] RSP: 002b:00007ffe357eac78 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1417.007772][ C0] RAX: ffffffffffffffda RBX: 00007ffe357eacf0 RCX: 00007f9d1f4310ba [ 1417.015729][ C0] RDX: 0000000000080000 RSI: 00007ffe357eacf0 RDI: 00000000ffffff9c [ 1417.023774][ C0] RBP: 00007ffe357eace0 R08: 00007ffe357eaee7 R09: 0000000000000000 [ 1417.031726][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000032 [ 1417.039669][ C0] R13: 00007f9d1f405050 R14: 00007ffe357eaf00 R15: 0000000000000000 [ 1417.047617][ C0] [ 1417.050614][ C0] rcu: rcu_preempt kthread starved for 10600 jiffies! g101937 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1417.061869][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1417.071816][ C0] rcu: RCU grace-period kthread stack dump: [ 1417.077672][ C0] task:rcu_preempt state:R running task stack:27712 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1417.091110][ C0] Call Trace: [ 1417.094360][ C0] [ 1417.097264][ C0] ? __schedule+0x10b9/0x6150 [ 1417.102005][ C0] __schedule+0x1139/0x6150 [ 1417.106479][ C0] ? __lock_acquire+0x436/0x2890 [ 1417.111435][ C0] ? __mod_timer+0x8f2/0xd30 [ 1417.116018][ C0] ? __pfx___schedule+0x10/0x10 [ 1417.120847][ C0] ? find_held_lock+0x2b/0x80 [ 1417.125940][ C0] ? schedule+0x2d7/0x3a0 [ 1417.130245][ C0] schedule+0xe7/0x3a0 [ 1417.134287][ C0] schedule_timeout+0x123/0x290 [ 1417.139119][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1417.144470][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1417.149821][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1417.155608][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1417.161038][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1417.165784][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1417.171042][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1417.176212][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1417.181132][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1417.185959][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1417.191736][ C0] rcu_gp_kthread+0x26d/0x380 [ 1417.196386][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1417.201563][ C0] ? rcu_is_watching+0x12/0xc0 [ 1417.206299][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1417.211558][ C0] ? __kthread_parkme+0x19e/0x250 [ 1417.216554][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1417.221728][ C0] kthread+0x3c5/0x780 [ 1417.225772][ C0] ? __pfx_kthread+0x10/0x10 [ 1417.230464][ C0] ? rcu_is_watching+0x12/0xc0 [ 1417.235215][ C0] ? __pfx_kthread+0x10/0x10 [ 1417.239793][ C0] ret_from_fork+0x983/0xb10 [ 1417.244360][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1417.249447][ C0] ? __switch_to+0x7af/0x10d0 [ 1417.254100][ C0] ? __pfx_kthread+0x10/0x10 [ 1417.258673][ C0] ret_from_fork_asm+0x1a/0x30 [ 1417.263529][ C0] [ 1417.266526][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1417.272815][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1417.278073][ C1] NMI backtrace for cpu 1 [ 1417.278092][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1417.278117][ C1] Tainted: [L]=SOFTLOCKUP [ 1417.278122][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1417.278131][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1417.278153][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1417.278166][ C1] RSP: 0000:ffffc90000197de8 EFLAGS: 000002c6 [ 1417.278179][ C1] RAX: 0000000006771d91 RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 1417.278188][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 1417.278198][ C1] RBP: ffffed1003b58498 R08: 0000000000000001 R09: ffffed10170a673d [ 1417.278206][ C1] R10: ffff8880b85339eb R11: ffff88801dac2ff0 R12: 0000000000000001 [ 1417.278215][ C1] R13: ffff88801dac24c0 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 1417.278224][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 1417.278239][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1417.278249][ C1] CR2: 00007f22063733e0 CR3: 00000000237ac000 CR4: 00000000003526f0 [ 1417.278258][ C1] Call Trace: [ 1417.278266][ C1] [ 1417.278272][ C1] default_idle+0x13/0x20 [ 1417.278292][ C1] default_idle_call+0x6c/0xb0 [ 1417.278311][ C1] do_idle+0x38d/0x510 [ 1417.278334][ C1] ? __pfx_do_idle+0x10/0x10 [ 1417.278357][ C1] cpu_startup_entry+0x4f/0x60 [ 1417.278382][ C1] start_secondary+0x21d/0x2d0 [ 1417.278397][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1417.278413][ C1] common_startup_64+0x13e/0x148 [ 1417.278434][ C1]