last executing test programs: 2m47.023629538s ago: executing program 1 (id=1096): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00030d"], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r5, 0x40084d02, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) 2m44.811590007s ago: executing program 2 (id=1103): pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x8000, 0x6, 0x0, 0x817}, &(0x7f00000000c0)={0x1b, 0x0, 0xfffffffffffffffc, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000, 0x4}, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x24, 0x10, 0x20, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x820, 0x1200}, [@IFLA_IFALIASn={0x4}]}, 0x24}}, 0x4000) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) r4 = socket(0x2b, 0x80801, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x79, 0x0, 0x0, 0xe7}, @initr0, @exit]}, &(0x7f0000000640)='syzkaller\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x1000000003, 0x10000003, 0x401, 0x100000002]}, &(0x7f0000000080)=0x78) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x31]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048010) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0", 0x3a}], 0x1}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x27, 0x4c, 0x3, 0x40, 0x5ab, 0x60, 0x1106, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x0, 0xf4, 0x7, 0x50}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 2m44.73403344s ago: executing program 1 (id=1104): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9d, 0x8b, 0xf5, 0x40, 0x46d, 0x8b8, 0xfbbc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0xdb, 0xc0, 0x2d, 0x40}}]}}]}}, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xf0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x5) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8082, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x40, 0xca, 0x0, 0x1000, {[@mss={0x2, 0x4}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x1, 0x8a}, @exp_fastopen={0xfe, 0x11, 0xf989, "444e38caa511b9096239c28c18"}, @timestamp={0x8, 0xa, 0x639, 0x9}, @md5sig={0x13, 0x12, "0c39e122bd2f7556512830127a3fa7b7"}]}}}}}}}, 0x0) socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2m44.464517701s ago: executing program 4 (id=1105): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000200)={0x38, 0x0, 0x25, 0x2542, 0xa, 0x8, 0x7, 0x8000000000000001, 0x2, 0x4}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) add_key(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x4, 0x100008b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000180)='\x00\xec$\x97\xb5\x00\x00\x00\x00', 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x14) 2m43.850945819s ago: executing program 0 (id=1106): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000200)=0x7fffffff) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$inet6(0xa, 0x1, 0x3ff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) syz_emit_ethernet(0x53, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5c, 0x0, {0xa, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @local, @broadcast, {[@lsrr={0x83, 0xf, 0x4e, [@loopback, @private=0x7f, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x3, 0x8}]}}, '2'}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) ftruncate(r3, 0x200004) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) epoll_create(0xa985) 2m42.676589583s ago: executing program 0 (id=1108): sendmsg$key(0xffffffffffffffff, 0x0, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000001063110c0000000000851000810000000005000000950000000000f76428"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0001000200"], 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000a3) syz_usb_connect(0x3, 0x46, &(0x7f0000001200)=ANY=[@ANYBLOB="12010002528bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a245e94b123b898a94b050101000203ff0609050a03"], 0x0) 2m42.32633548s ago: executing program 4 (id=1109): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000100)={0xe, {0xa, 0x3, 0x3, 0x53, "d0536948ef517f95f9d046fec420176bf784a4162271f4b2d275b9bd6b8095e117cf5e8554c06198335380b0775971b159874bb69795661526f4444d18a10a47d3184e296314111094c6ba3f245fd775f61bf7"}}, 0x5f) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000c13a8908b40402100d62010203010902164bf11c0000000904"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) move_pages(r1, 0xa, &(0x7f0000000000)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8) 2m41.819749063s ago: executing program 2 (id=1110): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x4, &(0x7f0000000040)='GPL\x00'}, 0x30) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r6, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 2m40.885304019s ago: executing program 2 (id=1111): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x149100) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2461, &(0x7f0000002140)={0x0, 0x234c, 0x10100, 0x3, 0x196, 0x0, r1}, &(0x7f0000000100), &(0x7f0000002100)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0xfffffedf) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x7, 0x80, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240)="b19c3cca0000000000000027c11430c1cb4e09404b03a5a6502d7e50ea1b8a29f700a7e34da6f98900c6a0e60867a13b34642c2469", 0x35) openat$cuse(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = getpid() madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x66) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000444000/0x1000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x1000, 0x2, 0x2}) prlimit64(r6, 0x4, &(0x7f0000000280)={0x20000003, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x7, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xb) r8 = syz_open_dev$MSR(&(0x7f0000000340), 0x9, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) 2m40.642367083s ago: executing program 1 (id=1112): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1c, 0xe) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000240)) (async) splice(r2, 0x0, r1, 0x0, 0x1c, 0xe) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) 2m40.508672487s ago: executing program 3 (id=1113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x200) msgrcv(r1, 0x0, 0x0, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r0) 2m40.341084641s ago: executing program 3 (id=1114): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x80004e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sigaltstack(0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) sigaltstack(0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x3b}}, './file0\x00'}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000100)=0x2) sendto$inet(r0, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r0, &(0x7f0000000780)="7057da", 0x3, 0x24000011, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba1e9bb7ec30de54e3d82d4e023f9a336ec7e55fefd0d3c8f30eea40e40a6e32d6873837bb90f2fafc91", 0xffffffffffffff29, 0x80, 0x0, 0x0) 2m39.751456778s ago: executing program 2 (id=1115): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r0, 0xbc7ae000) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20, 0x2040}}], 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1000006, @empty, 0x1ff}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000000)={0xa, @pix_mp={0x9, 0x3, 0x32315659, 0x4, 0x1, [{0x400, 0x10}, {0x5, 0xc}, {0x2}, {0x2, 0x3532}, {0x7fff, 0x7}, {0x9, 0xa}, {0x2, 0x1000}, {0x7, 0x401}], 0x0, 0x63, 0x1, 0x0, 0x7}}) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0x26}, 0x1, 0x7}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x22, 0x3788ddd56ac63d1f}, 0x14}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582e6ff"], 0x0) 2m39.556802019s ago: executing program 4 (id=1116): socket$packet(0x11, 0x3, 0x300) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400000000000000000032bfa5", @ANYRES32=r3, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000a00)='1', 0x1, 0x6040004, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @random="b59a81d0b9ec"}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) 2m39.544326726s ago: executing program 4 (id=1117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x2) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x30, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$dupfd(r1, 0x406, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x800, &(0x7f0000000040)=""/8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000000)="a5ce", 0xfed0) r9 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r7, 0x0, r9, 0x0, 0x1fff, 0x1) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000200000008000600ac14140e08000b00", @ANYRES32=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x15, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200000}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000840)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x20, '\x00', r4, 0x25, r8, 0x8, &(0x7f0000000880)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x10, 0xffffff06, 0x675}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000900)=[{0x5, 0x1, 0x4, 0x3}, {0x1, 0x3, 0x6, 0x9}, {0x3, 0x3, 0xb, 0x4}, {0x2, 0x1, 0x1}, {0x3, 0x1, 0x3, 0x8}, {0x0, 0x2, 0x8, 0xc}, {0x4, 0x1, 0xd, 0x8}, {0x5, 0x2, 0xe}, {0x4, 0x4, 0x4, 0x8}, {0x3, 0x2, 0x1, 0x9}], 0x10, 0x4e9}, 0x94) 2m39.379592307s ago: executing program 3 (id=1118): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setreuid(0x0, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_socket_connect_nvme_tcp() syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m39.356703215s ago: executing program 0 (id=1119): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r4, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x400000, 0x0, 0x1, 0x17e5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r6}, 0x8) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x4, 0x10000, @value=r7}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e3c2e1f00e13e150b84a9d5e81729ade2fac05e2f4556bae7c989aa9d90abf293d11a082e196eff7a84269ca5a2a46474d300a3ababbbb82004927f02925"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) 2m39.220973999s ago: executing program 1 (id=1120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, r1, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000031c0)={0x0, 0x0, 0x1ff, 0x2000000}) clock_adjtime(0x700, &(0x7f0000000000)={0x66b7, 0x4100000000000000, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000200)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x3, 0x86dd, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "fe54f776b2200d3e629ea3182a3c4d80c25136639cb9ad88", "d33c8d746355e3e49deefecffb55cd016e975b1d9f774ef7562956e190a9ad91"}}}}}}}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r7, 0x0, 0x0, 0x4}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x0, 0x4, 0x100000000000003, 0x3}) fcntl$lock(r4, 0x6, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="b4ba4300b80f00efba200066b80000000066ef66dea400000f20c06635000001000f228a66b9b10a00000f32660f3814b285d80f300f4ecb67660f2816", 0x3d}], 0x1, 0x73, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 2m38.63414557s ago: executing program 4 (id=1121): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020a86f3401011249034dbfd010301090212000100e9500909046204000600497c"], 0x0) syz_usb_disconnect(r0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/26], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00'}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b72, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x120}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x400, 0x80000000, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x801) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc081, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x910, 0x8, 0x1, {0x22, 0x3df}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0x89, 0xfe}}}}}]}}]}}, 0x0) 2m37.553799673s ago: executing program 3 (id=1122): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x4, &(0x7f0000000040)='GPL\x00'}, 0x30) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r6, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 2m37.394569995s ago: executing program 0 (id=1123): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001e00431b0000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=0x0], 0x28}}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x448240, 0x1ff) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40094}, 0x20000804) write$binfmt_elf64(r5, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x5, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x100000000, 0x40000000200d, 0xffffffff00000000, 0xe2, 0x4, 0x2}]}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_delrule={0x1c, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r7 = syz_io_uring_setup(0x111, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x8}, &(0x7f0000000140), &(0x7f0000000300)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r8}, 0x18) io_uring_enter(r7, 0x66a8, 0x4000, 0xf, 0x0, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 2m34.715112933s ago: executing program 3 (id=1124): connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x7, 0x0, @tick, {0x2}, {}, @raw32}], 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x9bea}}, './file0/file0\x00'}) r4 = socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x101) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x81) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000340)="d88b9593204eeb7d", 0x8}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x8, &(0x7f0000000140)={0x0, 0xffffffffffffff08}, 0x1, 0x0, 0x0, 0x80}, 0x24000890) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000180)={r0}) 2m34.623465216s ago: executing program 2 (id=1125): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc9, 0x1ff}}}, 0x8) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6(0xa, 0x5, 0x0) r2 = socket(0x10, 0x2, 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000500), 0xb53d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000540)={0xffffeffe, 0x1, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x1f, 0x1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x3a}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@tfcpad={0x8, 0x16, 0x6}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd24}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x160}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) lstat(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000540)) 2m34.620330371s ago: executing program 4 (id=1126): r0 = dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000001c0)={'c6xdigio\x00', [0x8001, 0x2, 0x0, 0x80000000, 0x9, 0xb, 0x5, 0x2, 0x8, 0x944, 0x4, 0x3508, 0x1, 0xfffffeb2, 0xff, 0x1, 0xffffff70, 0x401, 0x10000, 0xf, 0x7, 0x401, 0xad4, 0x6, 0x394, 0x4, 0xfffffffe, 0x401, 0x5, 0x6, 0x1, 0x1]}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x4f565559, 0x2, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r3, 0x0, 0x18, 0x0, &(0x7f00000000c0)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 2m34.537406698s ago: executing program 0 (id=1127): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000220000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a010200000000000000000200000008000340000000000900010073797a30000000000c0006400000000000000002"], 0x5c}}, 0x0) r2 = accept(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000011c40)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f0000005f40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xde3ebb5) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x4001) 2m34.47007314s ago: executing program 1 (id=1128): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000d40)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000040)="559b50a19cacfd3172592b7f3ea90ac08ce2c97278d91835aa523015", 0x1c}, {&(0x7f0000000380)="62abf37a15c80c9eb8384e3125688b8e2e00c1d5ae64d989b8552090853d47a61e9adc7e40ac93973764e04f0a12ab1886cff59aacffaabf12e57c4e2e307947477ce8b57acf42b2e12f61b0db297aae11de0f89d759a56e5b235481b9c399793a9bca77f22d2ee6513b33f2a4e63714cb66fe651fb59d9eb1edf64d8dba2af02cc0cb20ee8f1e1306e575f05894e74190", 0x91}, {&(0x7f0000000440)="fce0f00a365747ee92a513bfbdc5f9b9f0875272e48046eaf0a8d2406690280e03aeeee0c73620b986d808e8785196dfc8b1806eaa8721c79e69ea8d12eceb2b3564b7fe945720a7db4c1d43cbff02177697a88ea646744211bd4c0600b36dc32766a67e1d60", 0x66}, {&(0x7f0000000540)="c7e81bc97079f3ceb2aac9432928c29f3fec51f61256f3e8ef62574f2d23dd8d4090fdd84ffaf9cdafdb6dc5614f048ab8e11675e107ef46b78a5ec41eb6da0d8ebcbf3a9410e86de9d2ccee27d5e2da50bae48962929434301c3aa7b349d2b1fcd84d3625c5d4029007a7c76d4f80ef5627f496b338eb0d949c3b9a0b801f27a14ed3fb23773568d09c9a2376f0fa5534b7affd224b09a8cb18ba0f7add9f1e8de3ae291100b7a5c11f0266d637e64b46833220", 0xb4}, {&(0x7f00000001c0)}, {&(0x7f0000000600)="7c412863c811ee0c8828db97d6dd3c2f399a0daf51368f02b8e7db22f5ac850a863bc0de38a79eb071b2e79a8d7e86b8d6a8122014a1022b05edb159c9ebeeb10f786905ee3fe67718efbdfe", 0x4c}, {&(0x7f0000000680)="ededad7b855f9777d1dd65baa88c75ebe6b439b970284ef85c2a207ea9206cd2087cc19567da99f48387d254498e2025208bf2d12084a3fb08fd6b1131a98cf2b5bcd01d493619b7997d4c1c5e8361470208774058ea5176e11c907cdda75d41cfd572f6e56f3a3c8a064df7fb7339db19bffde8fed5bd37fc468e72327998a12cd4a07a5a8a31d3bad5a2f1bd2335128fae80a0c51e2bcf7bfe2be5d7c6d8eb7df9ea712bb8c9993cf5", 0xaa}], 0x7, 0x0, 0x0, 0x44}}, {{&(0x7f00000007c0)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000840)="40b78c7bdbe126915b3c0c617f2f78b3fc1185ca99106bb0b036cc8fdf418a3a4e976e6e90ee", 0x26}, {&(0x7f0000000880)="b2", 0x1}], 0x2, 0x0, 0x0, 0x4004801}}, {{&(0x7f0000000900)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000980)="5f492efb9a713df559903b5b800f9238856f170ba9df8523d09cd3e23d4327b6384e87d56bbf26c8b3c6d267143242f00109b0d9d5590f3271d31cefa1fefd02d262edc6102c360c1046319f03f82a3ec8d82fe670c597bf981e0296d472b0cb39635648f0c8221449df214dec898e9f4d72279662783123fff0f256556819ee93f46ab3da2b0d08de7dd655829f6ee6b40461bd7a0cf6f52525ad3443dcb5", 0x9f}, {&(0x7f0000000a40)="1a520d9c6917f2f7e9753b4747d1d9557207d66afe5579b4a9399342a9fd1bfefb665ca9872816fe58168cb171c4117d51c4bca5dc9d85a98b4950cfc4b03d09528bf1f3588d71f6c566d74cf83de6e2ce42717a7d9ebba2bef48765e3a39a4fb940eea93e974b25c3d31f6b9c3a58472550", 0x72}, {&(0x7f0000000ac0)="477c94501a9328ae43aa3857b19927653dfa79aff3f6de4552bb2500e09e57add7d72c30d7565318ba09f0c7af93f903fd201e4ea24e3875cfdf381d965285171cc04affa2c851f08768e856d807dc979f3c5ab46a706d6733520cb79fd710ee42a03cb041d29084969db983593fee6be6dfd00d3b8d6f20b26bdf11c8363b72101056be2e40d316500244803e65d74dc6ca981b92a37e1840a9346a15c6467883d7f0dfe74af97e431867c7a4806f0b2a29192e03c3c51563d2bef0b98a91bb16d7969f1d35b780ecc23c63298a959059976f1ab602196800a5cb42ec64013e880996b21d578131b8fbb4cd2bac2ab8973c7316d8fc", 0xf6}, {&(0x7f0000000bc0)="7c8a76faf77a25197972b71e102ccc1c69d0fa226175119058e844015160b78e843472a5490796f62c2969b0a6b092083c860b6a2af0950f6d68eb84cded654098b20893b1fb0b8eb244ec82af86d8d5180e33b8078f7b71acfba67fb25a8a76f77ff300b88c00683c0f3cf1ad97239f81d9e1235ffdd9a20972a3c473148185a04e9258b24e20dcb9fbc0ae3a8a72f21559a521f56c47835642f5c1266b11de29312bf004fc97e5e4cd2eef05544a52a3ff7d5bdee95bc162f83dcc70d898ccb540fd291cb1920b1b1b70836cddb3a8583c71cae498999a94adec21bca39d34f023fadd3581", 0xe6}], 0x4, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4008000}}], 0x3, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=ANY=[@ANYRESDEC=r6, @ANYRES32=0x0, @ANYBLOB="0315000000200300140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB="08810000", @ANYRES32=r8, @ANYBLOB="0a000100000016002400f1d3a37ea23bb7000000000000000000000000008e51b12b5c72e9b091009051f3f63def9256b475170cee4bc0301d3e5e23fffed7f805fd163aa7609e34af4e318d281ea9aaf052dc2cf5cafae1eb0333cff3eadfc581ba807a0dd4b0ce393cf9188ccf8a7567fd2551b64b40fb089e0ee7b059512a33f0f7a70c8807cd56e5bd1317f27ac67f0a32cd9c9cd3400000000000000000", @ANYRES64=r1], 0x68}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x12, 0x1b, 0xb, 0x63, 0x3, 0x155, 0x1}) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000001d000/0x4000)=nil, 0x4000, 0xb635773f04ebbee8, 0x8031, 0xffffffffffffffff, 0x13b1c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2m34.342143963s ago: executing program 0 (id=1129): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102381, 0xffffff96) sendmsg$sock(0xffffffffffffffff, 0x0, 0x14010) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='team_slave_0\x00', 0x10) syz_emit_ethernet(0xf8, &(0x7f0000000580)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0xe2, 0x865, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0x10, 0xa4, 0x0, 0x5, [0x9, 0x1, 0x5]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}, {"a9ecfb355c81ad68238270051186c7f4eb8cc6b1fb943c3cfd8f6459a5c4f82f3b37226fe6d7353175c6fe4474642c0d9e28d4a19055b65b134e4579435bf28caca12a23e45e0f2031b2f94d55c6eea944bd24974070031eeecae08dd0dd680deff38e9cdcdd14db22ab5324b4add32cf398f055010606c878a4704f73bfb90d02327ed5533509cb8dfb031cf1c5d3b50e8cb8991d7c49e881b9eccfdc038edda3dcf3a2f1f540c9cc65"}}}}}}, 0x0) syz_emit_ethernet(0x41, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc={0x4, {@snap={0xaa, 0xa9, "5cb5", "175d35", 0x8914, "e3a6402d8713f5c3d87e0c366fd383e88da0c81c3c6174d4c239de2695d4c1a54b04b2d8cf4edc914e7b"}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001580)=@multiplanar_mmap={0x4, 0x3, 0x4, 0x4000, 0x8, {}, {0x5, 0x8, 0xf7, 0x7, 0x2, 0x49, "311c35f0"}, 0x80000001, 0x1, {0x0}, 0xff, 0x0, r2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000004c0)=0x401) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x4) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) 2m34.336995206s ago: executing program 3 (id=1130): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote, 0x6}, 0x1c, 0x0}}], 0x1, 0x4045500) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=ANY=[@ANYBLOB="24000000120021020000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00T\x00'], 0x24}}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000002c0)=""/227) r4 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, '.\x00'}) ioctl$FIONREAD(r3, 0x8924, 0x0) 2m33.384805609s ago: executing program 2 (id=1131): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1ff, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000001740)={&(0x7f0000000140)={0xa, 0x9, 0x0, @loopback, 0x9}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000002c0)="5665702f5e5648f3dab42167388ebf5ed679d647b515d24e4890314545f81e011fdeed7d3695847f", 0x28}], 0x1}, 0x80090) r1 = msgget$private(0x0, 0x1f3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0xa, 0x800800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000180)={'ip_vti0\x00', r4, 0x1, 0x20, 0xfffffffa, 0x0, {{0x1b, 0x4, 0x3, 0x2a, 0x6c, 0x66, 0x0, 0x2, 0x6141fbc39e4d20db, 0x0, @loopback, @loopback, {[@rr={0x7, 0x13, 0x7f, [@remote, @multicast1, @private=0xa010100, @multicast2]}, @generic={0x82, 0xd, "83722afb7a5bd0be3f89f5"}, @lsrr={0x83, 0xb, 0x39, [@multicast1, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0x4d, 0x1, 0xa, [{@private=0xa010100, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x8}, {@private=0xa010101, 0xfffffffb}, {@broadcast, 0x1}, {@multicast1, 0xffffffff}]}]}}}}}) msgrcv(r1, 0x0, 0x0, 0x3, 0x2000) msgsnd(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b1e4f0a9f2c09f0c9c9105b7af470693"], 0x8, 0x800) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x4, 0x108a}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000300)=""/233, &(0x7f00000000c0)=0xe9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0xf) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(morus1280)\x00'}, 0x58) bind$alg(r10, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000140)={0x22, 0x91, 0x3, 0x6, 0x81}, 0x6) 2m33.379780669s ago: executing program 1 (id=1132): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) (async) syz_open_dev$hidraw(0x0, 0x5, 0x6ca080) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) (async) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000001000010425bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000002c0012800c0001006d6163766c616e001c00028008000700050000000600020000000000080001001000000008000500", @ANYRES32=r5, @ANYBLOB="08f811499d052ee2", @ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x40001) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) (async, rerun: 32) r7 = fcntl$dupfd(r6, 0x0, r6) (rerun: 32) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1000000}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xcf, 0x0, 0x0, @loopback, @multicast1}}}}) 1m55.075654056s ago: executing program 32 (id=1129): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102381, 0xffffff96) sendmsg$sock(0xffffffffffffffff, 0x0, 0x14010) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='team_slave_0\x00', 0x10) syz_emit_ethernet(0xf8, &(0x7f0000000580)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0xe2, 0x865, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0x10, 0xa4, 0x0, 0x5, [0x9, 0x1, 0x5]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}, {"a9ecfb355c81ad68238270051186c7f4eb8cc6b1fb943c3cfd8f6459a5c4f82f3b37226fe6d7353175c6fe4474642c0d9e28d4a19055b65b134e4579435bf28caca12a23e45e0f2031b2f94d55c6eea944bd24974070031eeecae08dd0dd680deff38e9cdcdd14db22ab5324b4add32cf398f055010606c878a4704f73bfb90d02327ed5533509cb8dfb031cf1c5d3b50e8cb8991d7c49e881b9eccfdc038edda3dcf3a2f1f540c9cc65"}}}}}}, 0x0) syz_emit_ethernet(0x41, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc={0x4, {@snap={0xaa, 0xa9, "5cb5", "175d35", 0x8914, "e3a6402d8713f5c3d87e0c366fd383e88da0c81c3c6174d4c239de2695d4c1a54b04b2d8cf4edc914e7b"}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001580)=@multiplanar_mmap={0x4, 0x3, 0x4, 0x4000, 0x8, {}, {0x5, 0x8, 0xf7, 0x7, 0x2, 0x49, "311c35f0"}, 0x80000001, 0x1, {0x0}, 0xff, 0x0, r2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000004c0)=0x401) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x4) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) 1m54.913993918s ago: executing program 33 (id=1132): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) (async) syz_open_dev$hidraw(0x0, 0x5, 0x6ca080) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) (async) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000001000010425bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000002c0012800c0001006d6163766c616e001c00028008000700050000000600020000000000080001001000000008000500", @ANYRES32=r5, @ANYBLOB="08f811499d052ee2", @ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x40001) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) (async, rerun: 32) r7 = fcntl$dupfd(r6, 0x0, r6) (rerun: 32) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1000000}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xcf, 0x0, 0x0, @loopback, @multicast1}}}}) 1m54.777922016s ago: executing program 34 (id=1131): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1ff, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000001740)={&(0x7f0000000140)={0xa, 0x9, 0x0, @loopback, 0x9}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000002c0)="5665702f5e5648f3dab42167388ebf5ed679d647b515d24e4890314545f81e011fdeed7d3695847f", 0x28}], 0x1}, 0x80090) r1 = msgget$private(0x0, 0x1f3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0xa, 0x800800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000180)={'ip_vti0\x00', r4, 0x1, 0x20, 0xfffffffa, 0x0, {{0x1b, 0x4, 0x3, 0x2a, 0x6c, 0x66, 0x0, 0x2, 0x6141fbc39e4d20db, 0x0, @loopback, @loopback, {[@rr={0x7, 0x13, 0x7f, [@remote, @multicast1, @private=0xa010100, @multicast2]}, @generic={0x82, 0xd, "83722afb7a5bd0be3f89f5"}, @lsrr={0x83, 0xb, 0x39, [@multicast1, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0x4d, 0x1, 0xa, [{@private=0xa010100, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x8}, {@private=0xa010101, 0xfffffffb}, {@broadcast, 0x1}, {@multicast1, 0xffffffff}]}]}}}}}) msgrcv(r1, 0x0, 0x0, 0x3, 0x2000) msgsnd(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b1e4f0a9f2c09f0c9c9105b7af470693"], 0x8, 0x800) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x4, 0x108a}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000300)=""/233, &(0x7f00000000c0)=0xe9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0xf) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(morus1280)\x00'}, 0x58) bind$alg(r10, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000140)={0x22, 0x91, 0x3, 0x6, 0x81}, 0x6) 1m54.717564617s ago: executing program 35 (id=1130): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote, 0x6}, 0x1c, 0x0}}], 0x1, 0x4045500) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=ANY=[@ANYBLOB="24000000120021020000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00T\x00'], 0x24}}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000002c0)=""/227) r4 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, '.\x00'}) ioctl$FIONREAD(r3, 0x8924, 0x0) 1m54.607127227s ago: executing program 36 (id=1126): r0 = dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000001c0)={'c6xdigio\x00', [0x8001, 0x2, 0x0, 0x80000000, 0x9, 0xb, 0x5, 0x2, 0x8, 0x944, 0x4, 0x3508, 0x1, 0xfffffeb2, 0xff, 0x1, 0xffffff70, 0x401, 0x10000, 0xf, 0x7, 0x401, 0xad4, 0x6, 0x394, 0x4, 0xfffffffe, 0x401, 0x5, 0x6, 0x1, 0x1]}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x4f565559, 0x2, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r3, 0x0, 0x18, 0x0, &(0x7f00000000c0)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 12.176503692s ago: executing program 8 (id=1550): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) fsopen(0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000b0d000/0x2000)=nil, 0x2000, 0x1, 0x8010, r3, 0x18e97000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) syz_open_dev$sndctrl(0x0, 0x1, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000002c0)=""/18, 0x211000, 0x1800, 0x0, 0x2}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) 11.253674979s ago: executing program 8 (id=1555): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) socket$netlink(0x10, 0x3, 0x0) 9.86995148s ago: executing program 8 (id=1562): socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, &(0x7f0000002c00)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_adjtime(0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) fanotify_init(0xf00, 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000400)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={[&(0x7f0000000080)='-\x00']}, &(0x7f00000001c0)={[&(0x7f0000000140)='\x00', &(0x7f0000000180)='#)/S^-%\x00']}) 7.203624832s ago: executing program 6 (id=1570): pipe(0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async, rerun: 64) r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x2, 0x5003) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xfff7, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) (async, rerun: 32) r5 = socket$kcm(0x2, 0x1, 0x0) (rerun: 32) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0, 0xfffffffffffffeac}, 0x20000811) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet6(0x2d, 0x2, 0x0) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x400c044) r6 = io_uring_setup(0x10009, &(0x7f0000000580)={0x0, 0xc8a1, 0x0, 0x0, 0x312, 0x0, r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) (async, rerun: 64) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 64) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r5, r4}) (async) close(r7) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000002c0)=@req={0x28, &(0x7f0000000380)={'macsec0\x00', @ifru_data=&(0x7f0000000100)="78b9b881e9ea8b9f6a91de3ec9f9399ffdc2528cbf5d1c834000a73a976d7497"}}) 7.145782303s ago: executing program 6 (id=1571): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="120100024e9e094099041a1026440102030109021b00010380800009043d05010402f900"/45], &(0x7f0000000b00)={0x1, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x5, 0xd9, 0x4e, 0x8, 0x4}, 0x0, 0x0, 0x31}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x4c27e, 0x2) fallocate(r0, 0x0, 0x550d, 0x1000f4) 5.936400563s ago: executing program 6 (id=1573): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x78) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="041b13", 0x3}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.770621651s ago: executing program 8 (id=1574): setrlimit(0xb, 0x0) socket(0x1, 0x803, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x800003a, [0x8000, 0x7ff, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x5, 0x6, 0x5f, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x243, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x2, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0xffffffff, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c9368e, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0x71d, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x5, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x2, 0x8, 0x800003, 0x600, 0x80, 0xaf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x5, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x127, 0x4, 0x1, 0x542, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x8, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080100000141b80000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80007f}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x37}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 4.912538374s ago: executing program 7 (id=1576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYRES8=r2, @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.351986093s ago: executing program 7 (id=1578): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) fsync(r2) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x65, &(0x7f0000000ac0)={0x0, 0x0, 0xa5, 0x85, ""/133}, &(0x7f00000004c0)=0xa5, 0x0) 4.165466306s ago: executing program 6 (id=1580): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_clone3(&(0x7f0000000840)={0x400, &(0x7f0000000600)=0xffffffffffffffff, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0, {0x10}, &(0x7f00000006c0)=""/30, 0x1e, &(0x7f0000000700)=""/222, &(0x7f0000000800)=[0x0, 0x0], 0x2}, 0x58) fstat(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r8, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f000000d500)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000280)="6ace6bded4dab4d8d2aa89774a7327e2445024a2cfece079c38a2f947c562be65157afdc615875a27582f674df5177fb60494cba7524c751baf958ec6c2b8a4f4041d488d80c486ba6801c74fc144fb79ae0d7cbded24a6e73c840124683036392cb400b44dad19e0c0e392849a15f476617daf34c56f0dfb9bd16700a38088db2ecd2e05b4235db66b5", 0x8a}, {&(0x7f0000000400)="f1e08454630ec27b571f9f191d13fbd2b45a9412e136cc1872eedbc06640ed4c36e8cfa782ddb51b7e3a990de98b2ec1d711088519a16b9e4b0e5b2fb576e3bd4f8337006073f99d968d4fb672ece3455ea5f57120965629a4e48a5774ba2be9c4f4bd0bc7b9b2b7171ade72b7a20549f61755b6d28f944c185b61a155ee9d413ba3fbf6c6bf6179ce4ed18f3b2b0f4cd17b3746e2afaa10176c5696446ab0f7efbd9c1af6c83ecccd05dc", 0xab}], 0x2, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8, 0x2400c8c0}}, {{&(0x7f0000001880)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000008500)=[{&(0x7f0000001900)="ba923a21926a3f753b2547a27605bbc6627d0bcd46b29962b7e4df59aecc842a7cb3c52bd20b47bedb8c6b354f20faa5d72ba2f11b11fa667f9b925024998ec943ceab3142645b21b306c7432d15ea2fc242a191b9d0c146129523b5367d4030fee375750e5effda870b4e856d8dc0116146a0ebe9243e8dfeefb5b8a6ef349fda248408a403724acd9102a5045d1e23750795bb68240d15cdfdbc6ead0bf9162866962a4cf8666962c07c8902dfc69ef65649954d526c2bba37bdfeedf2ee79feec726e59cfe985e4ce056b670e254408f5e475bde6f51943544c20cad870299aaca64007da", 0xe6}, {&(0x7f0000001a00)="554116df3be8fdf84db7d23eaebaba3c0a40aa5e8b34d322f0fbac08960e62cb987b6f0d56be5f19da2be3ee32d1dc69961c035e8e3b47990f819b2aee6e94405fc7c8eea4e78d4b8b52c47b5a2c352019dafa6c9a697d4aaf69d92bdc8df2e7843fc4290cfcc18037d53da18e71ffd7667215bdffec1ad44d7d3d58aef086fa636a4f02e7326c8c2aed11fcbace4e8e5640dfe1d5528a5373239794824e8a3ce77ecebbfe", 0xa5}, {&(0x7f00000083c0)="ba89b0e0c1ad9ca2121049c83db9ce1c5c14f5aabf9bc72e9baeb5c7ef831734f3d819a6f28d53a931cc5c44fc60a98af4092dd0f3afa40646ec1ec8ddef772591b5233e225fe15d7ed8a1775a3a6c7ba67ea9582c854e572b803b5909f78774a36d9c21db693a20260ee4a69ae009f74a4bc0bb5b67a88801798f70ad7de2d1d9990f38128c575255e05857583e3a5e65ff0834e6a63cc605389a2e29cbd86de649fa71cb15ca014cd1663d66d1f2d3ca6aac4786ea2ee3d575f5fbf8c561ec15cb0f85972883ef3435308fbef3b654", 0xd0}, {&(0x7f0000001ac0)="a8e004ac241e08e81b79c54e97e01ac4eff110a86ad9bc191b8611af1f5255bf1c4479a9dbf98c8fffdb7b2ab5f6653fa98fe9ce26ce37a2674ac7e76b7cebcc153ce361a369553e5fb26c7c10bdedcdc56c06ae5c5151e532072082fba968e677a5cc145ef8b739", 0x68}, {&(0x7f00000084c0)="06000000f3520e80ad94bbff920e", 0xe}], 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014040000000000000000000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0], 0xe0, 0x4011}}, {{&(0x7f0000008680)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000008740)=[{&(0x7f0000008700)="febf63c07a3f0810302760a0a2abdfd4a3132c71f1366c76", 0x18}], 0x1, &(0x7f0000008780)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}], 0x60, 0x810}}, {{&(0x7f0000008800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000af80)=[{&(0x7f0000008880)="7077d0a9b1011431ddabcc632e5089", 0xf}, {&(0x7f00000088c0)="f8a34103b0df01821248458e93578408aa539fdaaf6c92086538628f17b47478d43dbd65923ea827e81b1a5cb9cd8bfc6bd8d79ea7692715ff78b5d9632837b87b876227bf4d098d28ce620c675295a01192267fe6b336bae73bfef17ffdbf6e91aff9a6042f68d5614eedd600b850bbbbb0f963d4a6eb77bdfdc0c8b866d93cdccb6d628a8fab8e22a82b40bed6c393fa4c65ce8ac79f255e1121cd13ebcb6d5117c5a2", 0xa4}, {&(0x7f0000008980)="619120396969b95eacaef7283caaf15eb90b75984133eb6172fbac7b0dfa0ccb9bf7631512a973a2169cfddebdbf24f09a15248789cd9785ce41c0b42d77cf440428fca7141e499dd174269512e3820d793d2187578b088447ae7607d5", 0x5d}, {&(0x7f0000008a00)="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", 0xfc}, {&(0x7f0000008b00)="bbcb42a7e44af816b8a9f25c81fe887c122e38b7927b3e9b09880de3d7aaf0896de422d2a3e23a04ce119c86c1284d3e1abd9f8d9e890752204f70e85d51e925b916b01a1017b297cb210e7cb673d1a642c71090a374123bd91dcabf23d0e152abc903b3b5fabca62e4bace500570e0ccb35dcc54b863ea36a208d5168bc4ac1b42eee438b5b75c4c54e289c7950d38108551043dd27ad05e664e912b7842bda949cdf34e28dda80e8721692e6c388f40226764a80c2584307a72cf4e0c4b150a5e39fdc1a153348e4652b", 0xcb}, {&(0x7f0000008c00)="78dafc6b4885188d55130ed45af96ce0bba0814cbd6e5c939d9b5d6ece4d6e1d851eaac26ab07bd801c695294995b42616f3d20e4cfcc0094f1abd6f6b3c295b9fd884c641dae817365988b4566d6a7b0b531709914dca3ceee0b1a586eca196cfe1238209aa5c717ac0d20fd251b339f7924342ba46a1bcd3a524957506fa40d4f69ff63838719c1f37de79981652e712cd", 0x92}, {&(0x7f0000008cc0)="d66972c5daa6e89ebb58f9f2c77b98438c1237f5621640297d4f2e1600ab", 0x1e}, {&(0x7f0000008d00)="91a4dbc7c0f922fb17dee41c0eba2698e7b1aec7298f02873c42e8cd2e69a8fbdcd35cd22d6484091407ade39602c3469804b47ad82e98be346185589865e2e5d3afb4a5949baa5600fa51f723ce12418352de1698a941d42c6285ce718a6f0c0ae6ba3e74be641fd83ee72eb15322e4f647dafe20c9d5ab222c65c359f551ad0cff711743906308169cf69844c1526077b832fa9485132a0e18e14c224a1616ca22ea2ee815beac995f6f35685a256714a2066256994519aa201c3339b22fcec0569953f1a2219b484aaa75be079a5add5ccc941a378226b4730c90c2e19e1c8269b2d8e1d0d51915da6324fc22e8b151a70ece63b4", 0xf6}, {&(0x7f0000008e00)="488260ac9e6ae66f4d3bc374b3c6eaa69c6d30be4bb8598099f7fb1731e17f4d00039e33bed437b09a4879e8380cb8fb0de92b953efa4b6fee0e35f0f724a7daf65958ac9ab5784054aae2c684149816436e518e752b2d6c12531fc622ed12134bbb05251212", 0x66}, {&(0x7f000000ae80)="16a464c145ba2500e48e2482cd4c33b8eca0a25ed11ba303197bca90870571d0c7c370365cbc6eab2068e9d040d170654378bf6f8444ccc7ec9c7be39d6c76ab01165fbf471bbd87f2ddb76bd02fa32035f803420f2a8d54fff18126c981fab23d63d024e7b337303ec6f5a363aba6c21d2e7c3a37d6c15e3e7d830a035b642c7689038673ab81534c905603bc8733b9c33b8c373e4095202e7b2e8d6fb2ed3f87c074e9a16d0c3529a5e2b549c658ea0d0ed346047a249e2fb17379915915533f1b918c38dcbf22f7a3946bf745d3cfd127f3814e5ea00ddbd35bb41463be34c9b51e8fb37da0cdbed5f0f026c8b036b7c123ef0263c72c44", 0xf9}], 0xa, &(0x7f000000b040), 0x0, 0x4000}}, {{&(0x7f000000b100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f000000d340)=[{&(0x7f000000d200)="af86a8b3f8c99b63380431d7f54465660bcd032c6aea0419c6232d6a735bd79615ebfa2b75eadaa8ff345c026435a2ec56c943f045fa676b05f4969b8994835b9498c4a8774020458fe5386351f217ed982fc57b1129ce42dc7ca9934933061775b408112506a10bd58b46932ef9f92226d444d1fa017cd9d1fa", 0x7a}, {&(0x7f000000b180)="7d2bc11ad6f9265c055bb97463d17ae53673aa9302fe0109888205eb81f04d41cca97c", 0x23}, {&(0x7f0000000a40)="21948a613eb60005dd69fc18c1d5ed9099d0432510155f547267dc43e22615ad86ca57326e0ab64057daab9cbca6df16ebed6075712b9ef5d6bda0d4ef3792577203426d3a7cccef5b07bbbd2acc3b1fba39e8cba3ab034c97f8bc68379b2c6ceadfc6bf343f9c5c08bd40babb3373c235ea3609308366805f6565f652a6938d77150b57114ff0c80f1fbd222f8122facd717964fe462fe6", 0x98}], 0x3, &(0x7f000000d440)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x90, 0x20008004}}], 0x5, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) fanotify_init(0x1, 0x6629e2338eb741be) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') lseek(r11, 0x36, 0x1) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x2) ioctl$KVM_SET_NESTED_STATE(r11, 0x4048aecb, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) r15 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r15, 0x80045530, &(0x7f00000000c0)=""/158) sendmsg$nl_xfrm(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b40000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000007000062110000000000fdffffffffffffff0000040000000000e80a0200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r11], 0x56}}, 0x4010) 4.165099955s ago: executing program 7 (id=1581): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0xffff}, {0x8, 0x1d, 0x0, 0x0, 0x401}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async, rerun: 32) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, 0x0) (async) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x5}, 0x4) gettid() (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) (async, rerun: 32) r4 = socket(0x2a, 0x2, 0x0) (rerun: 32) getsockname$packet(r4, 0x0, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000086770000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000e3c8850000008600000018110000", @ANYRES32=r5, @ANYRES16=r2], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x5, 0x4, 0x7, 0x8000, 0x2e5, 0x1, 0x0, 0xfffffffffffffff9], 0x0, 0x1, 0x8, 0x1, r0}}, 0x40) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) (async) openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0x43, 0xa0, 0x148, 0x98, 0x238, 0x178, 0x178, 0x238, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x0, 0x40}, 0x12a, 0xe0, 0x148, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@state={{0x28}, {0xfffffffe}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfff, 0x0, 0x7, '\x00', 'syz1\x00', {0xd063}}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x101, 0x4, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4, 0x2}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x330) (async, rerun: 64) add_key(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 64) socketpair$unix(0x1, 0x3, 0x0, 0x0) 3.544462774s ago: executing program 7 (id=1582): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, 0xffffffffffffffff, 0x3000000) write$UHID_INPUT(r2, &(0x7f0000000240)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 3.342543364s ago: executing program 5 (id=1583): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000019c0), 0x0, 0x2103, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000000c0)={'pimreg0\x00', 0xfffffff8}) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x1, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x0) accept4$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@bcast, @remote, @default, @null, @bcast, @netrom, @remote, @bcast]}, 0x0, 0x800) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) copy_file_range(r5, 0x0, r5, &(0x7f0000000080)=0xfffffffffffffff9, 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x24000000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50) 3.249415294s ago: executing program 7 (id=1584): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000001500)=@multiplanar_overlay={0xf8, 0x1, 0x4, 0x40, 0x3f7402, {}, {0x5, 0x1, 0x7, 0x1, 0x6, 0x8, "7bd4cf5c"}, 0x1000, 0x3, {0x0}, 0xfffffffc}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$kcm(0x29, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) syz_io_uring_setup(0x4cbf, &(0x7f0000000380)={0x0, 0x64bb, 0x1000, 0x1, 0x4}, &(0x7f0000000400), &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) 2.78049884s ago: executing program 6 (id=1586): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x2a0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084524, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x880) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f, 0x43]}, 0x76) getpid() r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000c80)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x54, r7}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000004d0400000000000006000000000000005504030001ed0a0025000000170000001c0080ff000000007b0a00fe000000006e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379d00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a607c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a59234ed56bc83987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d06c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292cfbe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d700ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec52d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d105800f000000000000ef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f6845b6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd51015dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d0800bf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3aee1ff8c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6b8306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9000080ac970cc4fd0847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000000000000000000000000000be9ab5e329e962d96a283b6182c1cf6c8e350a7784ca39ecb9178f4118559f1eccb0b738a255146ebbc4357c16f94cd4"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r8 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x0, 0x0, 0x0, 0x0, 0x2], [0x7f7f], [0x1]], '\x00', [{0x0, 0x20, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}], '\x00', 0xff}) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2.266648374s ago: executing program 5 (id=1587): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1f}}}, @IFLA_LINK={0x8}, @IFLA_IFALIASn={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.763131641s ago: executing program 5 (id=1588): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast1, {0x8, 0x4, 0x3, 0x35, 0xfd5f, 0x67, 0x3, 0x4, 0x4, 0xfe00, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@rr={0x7, 0xb, 0x6, [@remote, @multicast1]}]}}}}}}}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder1\x00', 0x802, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000280)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x18\xad\xaaY\x85\x15\x95\xfe\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7fx\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaAfC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0J\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4$\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f\xe5\x1f_J\xd0=U\x88t\xe7\xab\xbb\x93J\xff\x923\xd5\xc7\xc8\xef\x00c3\xea\xab\xb4\'\bY}\x1f\x80v\r\xa8\xe4>\x185|\nF\xabB\x94\x0e_\x00\x8b\x95\x85\xbbE\\\x1a\xf8\xefI h\xd4\xf7\x8fo\xd3f\x7f\xc6M>\xd3\xa3S\xf3\xe1\xb4\xe4>P\x88\xfat\x86_wYv0i\x04JZ\xde\x1c\xb1qA\xceEj\x9b\vA\xf7.d\x80ni\xe5?\xe9\x89+\x1e;|M`/1\xba\x8cHd\x88\x990e[[\xb2X`\xda\xad;>N\x9f\xfb-\xf6\x96\xd6o,^\x8a\xea\f\x03\xfcU\x01%<{g\xdc\x14\x00O\x88\\\x19\xa9D\xde\xf1\xceE\xbc\xad\x00\x00\x00\x00', 0x3) close(0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x8000}) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000140)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000001c0), &(0x7f0000000080)) r4 = socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r5, 0x3309) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg(r4, 0x0, 0x0, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}]}, 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) 1.652486626s ago: executing program 5 (id=1589): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) (async, rerun: 64) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000002100), 0x440, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) (async) read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, r3, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d000003005aa8ebb0f7085fa602055f87dec21e6188aaae97c9397c57b3a7aa046d10e26a"], 0x50) (async) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400002, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000040)={@mcast2, 0x2, 0x1, 0x3, 0x2, 0x0, 0x8}, 0x20) (async, rerun: 64) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0x4883c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r8 = userfaultfd(0x80001) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 1.628649608s ago: executing program 6 (id=1590): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) 1.467273268s ago: executing program 9 (id=1591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) fsync(r2) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x65, &(0x7f0000000ac0)={0x0, 0x0, 0xa5, 0x85, ""/133}, &(0x7f00000004c0)=0xa5, 0x0) 1.466502073s ago: executing program 5 (id=1592): r0 = socket$nl_generic(0x10, 0x3, 0x10) lgetxattr(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00', 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@host=0x10, 0x1}, 0x400, "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"}, 0x418, 0x2001}) poll(&(0x7f0000000100)=[{r1, 0x1}], 0x1, 0x7740) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001a1401002dbd7000000000000900020073797a30000000000800410000697700140033"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r2, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) 1.376824795s ago: executing program 5 (id=1593): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a00000042000000"], 0x50) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, 0x0, &(0x7f0000000000)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a01"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) bind$ax25(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) close(r4) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r5 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(0x3) splice(r8, 0x0, r7, 0x0, 0x1, 0x0) 1.340514357s ago: executing program 9 (id=1594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x2000, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYBLOB="010000000100"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000400)={'erspan0\x00', r6, 0x8, 0x40, 0xffffffff, 0xffffffff, {{0x19, 0x4, 0x0, 0x9, 0x64, 0x66, 0x0, 0xff, 0x2f, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0x13, 0xbb, [@multicast1, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x42}]}, @timestamp_addr={0x44, 0x34, 0x1f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0xd}, {@rand_addr=0x64010100, 0x7}, {@local, 0x7f}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xd0}]}, @rr={0x7, 0x7, 0xac, [@private=0xa010101]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=@ipv4_getaddr={0x3c, 0x16, 0x0, 0x70bd29, 0x25dfdbfe, {0x2, 0x18, 0x50, 0xff, r7}, [@IFA_LABEL={0x14, 0x3, 'bond_slave_1\x00'}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002400090027bd700000000000040000000c0018000aac0f0004ac0f00d9bde7b2444fb38cca8ce7b2cbe295132dec08bd714c3a84fa581fb9b6951b9345"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x40000, 0x111) read$watch_queue(r10, &(0x7f0000000340)=""/155, 0x9b) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r8, &(0x7f0000000240)}, 0x20) 1.227276418s ago: executing program 9 (id=1595): socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) sendfile(r1, r1, 0x0, 0x4) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) ioctl$FIONREAD(r4, 0x541b, 0xfffffffffffffffe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x4000800) open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x1, 0x90, 0x8, 0x7, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x68, 0x0, 0x10, 0x29, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) 1.112887758s ago: executing program 9 (id=1596): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000001600), 0x50000, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000001640)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) r2 = syz_usb_connect(0x6, 0xd28, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x79, 0xae, 0x2e, 0x20, 0x19d2, 0x1333, 0x2b99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd16, 0x4, 0x0, 0x2, 0x30, 0x7, [{{0x9, 0x4, 0xe, 0x3, 0xd, 0xff, 0xff, 0xff, 0x7, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xbd, 0x9, 0x1002}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x4, 0x2, '\"P'}, @as_header={0x7, 0x24, 0x1, 0x1, 0x3, 0x1002}]}], [{{0x9, 0x5, 0x83, 0x0, 0x200, 0x4f, 0xc, 0x7, [@generic={0x101, 0x23, "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"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x0, 0x7f, 0x1, 0x29, [@generic={0xf9, 0x23, "831e460dc96c85e924b297e78e173b8c1451354be5e220d98b9bb1429568f71756d0acb27333a8f7eb645b786bc4a328c6431df1d12193f9ad0e779eba5090cadbfa379cd59b9dbef5a44ffb012d8b1156700d5c559bfa5745e76926d9789c13d0f0821327ffa1c64f25ad28aa61929504527161fe34ea8108cb73189ceac48b19e553159d922f22af472a7317e486e1e6dd4cc4577c5a5e41c58ca975d98625179825e1c9b53f01ea9c5516acc15bb40451c0a0e45daf40c62c58c4a9a8ca869c9705001cb7dfed4de5515fccffa34c8e2ebe3042bf54cb974ccfa58324ce99130241e642f7b8c925d25db3446fe8bc6eb26ef97f7088"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x6, 0xed, 0x5, [@generic={0xb7, 0xc, "52b0e589c6292a3ed9583b017afe2d9330c4866fcfa9898c5d13346841fd328397a99d240bb6b97fd5597c581426ad5b6e5186ba712ea896096a21172ee9516a6dccbb8a71d114a3a20c3a87e87780bb440d53839063cebe5909246725cdd67db9a332c8998b79a15bbd49ab5fd351fe243ed6cb05395f657f7e6e1441cabfe3bbc8a12cf4ac057666f0848e84d1f51e1842961256a527b9e0de78e656aa6fc40f0b460f99204c315a0e8d0e7ff4c28896fbed0022"}, @generic={0x8, 0x23, "298118b8f4d5"}]}}, {{0x9, 0x5, 0xc, 0x17, 0x40, 0x2, 0x49, 0x7, [@generic={0x2b, 0x21, "5798f71f542455e1778fbbf37f8f6a070f2f3344030994830fcb9054a0eaa8c68677fe734fe41d4bf7"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x5, 0x5, 0xcc, [@generic={0xc2, 0x7, "feda754a9ae7347a70cd3dcd5f113231f62568d5f060ce97922ddedda50ce2c89cdf8f6696e134970154190bd2366f0fdfbdf52d3e4b1c12d2bb8c7fe6cab95f45f1bb33252796aacd08de1aada6cf1decb96dd9a59e72bd935943788f88c036a133e5b18b3c717a768d943fab5a71ab8bcfd85ca34bec2ea6c426859f099db4ac1f6ede659136d62d1db102e8251cbe4b9d12c5294b55d2e984dc99220dbfdd4a08143211f6f1ba6373254fa033036471d13fc01f207551350a1f63d02f8351"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x1, 0x7f, 0x2, [@generic={0x4, 0x5, "48d6"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3e7, 0x2, 0x3, 0x4d, [@generic={0x68, 0x5, "a5357ecb9294c9db9349738caadfa4f00f85f20352685019239900953e773e02236b48f424a1dddb9b4766fe52eebf1f0d4275f76685fd6d98744c97f3e5f0b3f16f04e8832389c11f8206641e3fcd7adc04a24ce086e57477feebebeba1f1f8e5a2d6096b3d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x98, 0x100}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0xfd, 0x9, 0xf8, [@generic={0x35, 0x2, "fccf78224bbb584693a4cf0103e2fb604ce73bf8322de52a5223c5e3577691cd7e13b0c116b62ead23befcfeeb97f1ecf53b2b"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x7, 0x31, 0x84, [@generic={0xe5, 0x24, "714b05b47d8af72d08159e70c6d26b7c3d8f610a48e6db8efdf0e7424daa876917b9c18210f5e22d1b11d9c96c9a900ef3d9bf925eeb219cdd470e68a3e90a9884d7e3e30f33cb6e56bdf1bfce151ab51aae29f5736633b5d2fa58b9aaaf2ea923c404de95cd1f82a34512f0740c797a1cea695a3a1825bb940eabab397510f56da7b27657ec1b37171e94c0b0ae7c76d7e5376a524a5832100924ef22e44e1a3788bee9947331b3ce6f52b2a72aeacdd78b31a336efbb30aaa721e5ecf0d8adde4d5309b8b5fbba849442cf6639cc7f615341734c0a52d0d41ccd851849eae7db55c9"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x3, 0xa, 0x4, [@generic={0x80, 0xd, "ec0a70b0b64b122722b56020c2fda01f816a301b0936f4d0c1b44800e8351690bc37e32611463cdf239645d3a6d27f23a56d0d645e72ad5a107fa82a5e69b2a0af1e3f07d079c230f04e8e082029d733a75dfcfcf26f8a60aae490adf89c811d46d8a6e1804abcfc187fc2465e0574d3445e84c6b15ae599ad5656b731d0"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x6, 0xf, 0xe0, [@generic={0xce, 0x24, "ec0ec63b036a338faf87aad57f1422abb31128bc136717410587feabdfb00e4fd6fbcd3c81188da4217f188e46ff12702b984a7bbe24f849f201ed59c28703b14baf2913fcdf3fc0145d002598000039839dbe8d9f863bcb5be33287afa3afddadcef28e1546809b186841dee6df639b3d2fcafbd43dd8e40e4481fa9e0b195b1c114461fd610e697b4d9b63d83ce900a80318c34983a2e53d61262a103c1c59fcb14241127513f39afbdb332706c8fd5ac116d69a4e629994bd9eb3cf61b0739a6cb941f6dde774f2b84083"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x7, 0x2, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3d, 0x8820}]}}, {{0x9, 0x5, 0xe, 0x1, 0x10, 0x0, 0x9, 0x4, [@generic={0x34, 0x24, "01ab60c216d09a451dfa8134424d7785345697d604a97e173105eb49f8f734fbde805d5337b1f4970dd53ad20e611717c87e"}, @generic={0x72, 0x2, "3545e8776d5dc7fcfe1a2243df4e57ff93bae266c224cdef2221f7d9a164f7de0d9504c7549f2c2581918b4d6fdf3529a1298e4ce53d6433e1ad4482544c8aefbc805243bc98f274f50fc6f7f2899e634fcf5794c8622911b3fe6320317679b3a5d43df950af835c925dbd353991cc7c"}]}}]}}, {{0x9, 0x4, 0xe3, 0x7, 0x1, 0x6f, 0x26, 0x5a, 0x7, [@uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x4c, 0x74, "316b9a69ecfc"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xf9, 0x1, 0x7e, 0x9, "ce3da1"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x85, 0x5}]}], [{{0x9, 0x5, 0xd, 0x1c, 0x50, 0x6, 0xb, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x8, 0x6}]}}]}}, {{0x9, 0x4, 0x65, 0x1, 0x4, 0xa7, 0x73, 0x14, 0x2, [@uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf9, 0x1, 0xfd, 0x7, "6aa7"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x6, 0x1}, @as_header={0x7, 0x24, 0x1, 0x0, 0x9, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xe3, 0x1, 0x0, 0xe, "c1e864", "ce"}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "10114fed"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x3f6, 0x401, 0xf8}, [@mdlm_detail={0x91, 0x24, 0x13, 0x74, "a32ea45c616f45a71bbd23f39dc49459f11dc3e30d380dfec684baf985c437357801e05ff26324d30ebd4021747c877ddaff7c46e91c4b5968b7b0ccdd20632fec1df9a72ad412e182078d3b556ca1c87240e1b42507e926e6d4915ac310117b94186f28a6870f1db38029bddc230c59e60e1e177bd8218089239e1eef814a8c48ab5ef666b761163d8553244f"}]}], [{{0x9, 0x5, 0xb, 0x4, 0x200, 0x1, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x81, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0xbc26f5cc3db79de8, 0xfa, 0x10, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x93, 0x8320}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x7, 0x2, 0x0, [@generic={0xdb, 0xa, "13f31650487882f5a3cfe2eddcc2bf891ed0d645479135db61b3902338933cdaa301e3515dca4a184e0bbb5a9af78d8aa1cbf1dbe3d5575c5d1cf8bdfcccae26ccb2ca10c4d67c602e300900de43cb5d4d788e0b7a128044e30d502edeb51056ec7df515e3dd1c460c64e9307a93dd8cdaace54ca34d232431d5879574cff6c5e5503c99947f9ce99c12ccdc519c9a6233390f072f5c4d1b405798380bd34a92aa289aac2b6e1aac7d2c8cd46912052dbd0be97a377d892781918a2adb323d0d1e5bedbc84dc5b32361f1c8ec6d7382b05b97dcbd44c2eaa10"}, @generic={0x67, 0x8, "04eee1a7d17d9f2ca75e0133e85651e8a20a625d7122c8cceaf5690570cb6a4d1b44ae2509cb4025f03b0a59a2c49a9d2cdb0017b12aa62cd767a69beefb26fd7b66338becb4c59ceb5de1b4ac208675e31d51a3494b15bc7daf17bb093d35a55fefe479a8"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x10, 0xe, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xd}]}}]}}, {{0x9, 0x4, 0x9c, 0x2, 0x2, 0x24, 0x9, 0x9a, 0x4, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "abbae1975ca5"}, {0x5, 0x24, 0x0, 0xde}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x7, 0x4}, {0x6}, [@obex={0x5, 0x24, 0x15, 0xd}, @dmm={0x7, 0x24, 0x14, 0x4, 0x36}, @acm={0x4, 0x24, 0x2, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x8, 0x5, 0xfa}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @mdlm_detail={0x7d, 0x24, 0x13, 0xb, "c9798c99d5448c7d4bbc659f0a69b3ee6ed59ddc7efdfbdb85b20f1e3e2edf205b5a222e4f0e8eef418404a7aab17b360b96e8c4080c75ee152d497c269cb96b20f32f5fff9dce4d5d718f16e5eda104a0b63c187eb182ba1eec2bb1cc866e42500040b5d2fab1b006c22a54d5a46ba2f58a8c3d1d8f57ee84"}]}], [{{0x9, 0x5, 0x0, 0xc, 0x3ff, 0xbf, 0x0, 0x5, [@generic={0xf4, 0x22, "f830a4bfdddf64964db4527d5464c43be24711e3aa96b7f3c60bdf59051517ad4fc8508f025bec1057bb3f2bf975260dad4fd7ee36f14b5d422e9ccb6f87f44f43b7e2cecb2eb6a2d7f1c8f0dda16e28f69ac2912eb93badb88498a995305668f5e17f8b4fcf6e6830c34f527aac9b01d303bdd24d55e8cc0c63a90c12939eca102230b94221cc868e531d3edc7c19490932ce01022ba0cd7bb6edf0756c5bf99254859969080b8dd4f66b581b9d14e673b7fd1a45fcfba0258e0958b61353b0831a7d04b86767beab89e961badb27d8c901d575dbecf57a6fe50f92bb6f4bdb4b8888f399d4d753da0d06064002c51e7fa6"}]}}, {{0x9, 0x5, 0x8e, 0x3, 0x20, 0x81, 0x3, 0x8, [@generic={0x2b, 0xd, "ef6870b455bbd6bc31017130124ad8a7c9737be7752e44b868316f4bdc8363dbf7b0914e4733ac65f8"}, @generic={0xbe, 0x0, "a4256778a4c1963944c4617b2cdb73e2a2e10f1ae4b6a572d338408c543bf55420c548f582c2749a9c28a42f81c1fa049cfb829565ffa31b9ed7be0222cab766b74725eb6371c88c70ee3418220366f8d950e20b42afa4318fa46cd87ea9b63c52fc95e5b60f53bcb6898176a7dfd23f2da3d9c6bd561ebc63718952a294e664ba860f9c70d81a55b8ea5c2f98093c03095f2793966319fd5682931fdc5ddce3c9c823334fbd2862d7ebc66d1496c6fc78082559fa11cdd1b99477f3"}]}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x2, 0x9, 0x7, 0x40, 0xf8}, 0x12, &(0x7f00000001c0)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x2, 0x7, 0x1}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4001}}, {0x30, &(0x7f0000000280)=@string={0x30, 0x3, "f43a23c843e8414b4d0f60f1416ba8cf22ea7417db21cc1f3d3338c6f11d5a4fe7d380a58931d96c8e587f38028c"}}, {0x69, &(0x7f0000000340)=@string={0x69, 0x3, "338062d15db01e7d71fa783b98179a120e2fbca7ed11e7ffa24e1092511026bf745ccfcc90acdea3d6afeb5a5b212edf942acc746f1b74b7d7c5eb188a21248886ec5f5a38d7b7b9f6509c00f15cac51dc1bfc27e7eab1da35213ed064a49c1ad4050c6a0f36eb"}}]}) syz_usb_control_io$printer(r2, &(0x7f00000002c0)={0x14, &(0x7f0000000440)={0x20, 0x2a, 0x6f, {0x6f, 0x2, "282f592fd78a70175923f7f1715fc57091229015d43767a674611cb563bebbada9daa125e5c6d23a5fc9a2f50f6769a88b5167940859b0c134035455b469881e2fc65ef7cc0679691652e0380a4298f6fff52a7ebae8e8f62955f2ee6aecd220253c95f855321af21683dcd8b6"}}, &(0x7f00000004c0)={0x0, 0x3, 0x3e, @string={0x3e, 0x3, "e362b7a42ffb34e4ca15395006b4dfed2f58a7c93711b4bff8dcc4230bde8388aead3d443f53008c8cde2fe10bebd3539b84f89d4131ad4898d1d206"}}}, &(0x7f0000001580)={0x34, &(0x7f00000012c0)={0x20, 0x14, 0x99, "15ebfe77bf059e964d962bd6d2bcddc3285ce0169213bd9e0e62c131b0079c02924ca523ec50beb49aa5de233dae701ad74e24215b269b4badec3c4f648e64481f328b0a25c174893cc44140f2e0c6936ba23c9ae923845ff139138e7a7780b78e548a5c1cf225426c73b11b316f97946c728c2093987047b6bcabc34a4385239c06dd38233d0245dc0eb787be5a434971ae2390e30283b0f3"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001400)=ANY=[@ANYBLOB="20c73ec55300e900000000e7f58a928650430c9db6ea8c99f033dd145bfc21d4cafb2910aa6029cf4e01b6bdf4c1869ae8db5ee1f593b1b67ce2bf97e5bd6e5baf4a07577bd545c19c8b342b93bf910c7d2cd53aa2bcda93d5460e9b9684c643ea51929e8a037aa228d521663fc4aab004c882a016896f3ae64b40ab28c82703ba2e52f4e04ffaf69f3ec5931f706c13dfae2101143e2b633f35fa807b5c875cb8125bb287b7c523dffc80ad285e4ae0cf836a183e991bf23a3e50a27b53baeab9ec40fdabe0b5f8caa5b2abf5c360226f0fe3ba2a10ca4871c71db780b136aef90e226a535d63f56690d665d11628"], &(0x7f0000001500)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000001540)={0x20, 0x0, 0x1, 0xa4}}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000015c0), 0x8) ioctl$I2C_FUNCS(r3, 0x705, 0x0) 639.085981ms ago: executing program 8 (id=1597): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000001030101000000000a000000000000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x3) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x1) execveat(r3, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r6, @ANYBLOB="ed0595c82b132e3e45a15e135518bb2bc54c541006c7d8d0f342696aa6ba2ae0cafda982814e53ecd4ddc93db10f1fe800b67df99abd9ec5887b4063ed409d261bcbb19bffab6951068ff3ee"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) bind$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x336, 0x10, 0x4, 0x16, 0xc, @local}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r7, 0x3b84, &(0x7f0000000180)={0x20, 0x0, 0x0, 0x0, 0x0}) 479.341591ms ago: executing program 9 (id=1598): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1c, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x200, 0x0, 0x4, {[@mss={0x2, 0x4, 0xfff7}]}}}}}}}}, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)={0x2, 0x101, 0xfffffc00, 0x400, 0x2, "54d208457f000000f70000000000000200"}) 216.631025ms ago: executing program 8 (id=1599): prlimit64(0x0, 0x19, &(0x7f0000000100)={0x3, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) setresuid(0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f80500060020"], 0x80}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000007800)={0x0, 0xf0, &(0x7f00000077c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000036007bc32ddf7000fddbdf250300f000387cb17a74ef60a9901a080571dc5ad66be21ea24aee4099ba2c61670c5e"], 0x14}}, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 95.536971ms ago: executing program 9 (id=1600): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f00000000c0)={0x40, 0xb, 0x4, "11980ec0"}, 0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) 0s ago: executing program 7 (id=1601): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000700000008", @ANYRES32], 0x50) modify_ldt$write(0x1, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x8, 0x5, 0x9, 0x64, 0xe, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x56, &(0x7f0000000140)=[{0x6, 0x0, 0xff, 0x3}, {0x6, 0xc, 0x1, 0x8}, {0x7, 0x5, 0x5, 0x5}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, 0x0) getrlimit(0x1, &(0x7f0000000040)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x0) fcntl$dupfd(r8, 0x0, r7) kernel console output (not intermixed with test programs): .107720][ T5921] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 326.338091][ T5921] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 326.393137][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.530661][ T5921] usb 2-1: config 0 descriptor?? [ 326.802552][ T49] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 326.966755][T10575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.978577][T10575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.990708][ T5923] usb 1-1: USB disconnect, device number 53 [ 327.017411][ T5921] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 327.027428][ T5921] [drm:udl_init] *ERROR* Selecting channel failed [ 327.070369][ T5921] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 327.080690][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.093395][ T5921] [drm] Initialized udl on minor 2 [ 327.098594][ T49] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 327.115814][ T5921] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 327.125123][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.138925][ T5921] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 327.156003][ T49] usb 3-1: config 0 descriptor?? [ 327.165419][ T849] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 327.176390][ T49] pwc: Askey VC010 type 2 USB webcam detected. [ 327.183719][ T5921] usb 2-1: USB disconnect, device number 54 [ 327.192148][ T849] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 327.207629][ T30] audit: type=1326 audit(2000000049.440:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1418f749 code=0x7ffc0000 [ 327.564530][ T30] audit: type=1326 audit(2000000049.460:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1418f749 code=0x7ffc0000 [ 327.698207][ T30] audit: type=1326 audit(2000000049.470:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdb1418f749 code=0x7ffc0000 [ 327.723146][ T30] audit: type=1326 audit(2000000049.470:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1418f749 code=0x7ffc0000 [ 327.752727][ T30] audit: type=1326 audit(2000000049.470:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1418f749 code=0x7ffc0000 [ 327.777556][ T30] audit: type=1326 audit(2000000049.470:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb1418f749 code=0x7ffc0000 [ 327.909596][ T49] pwc: recv_control_msg error -32 req 02 val 2b00 [ 327.929962][ T30] audit: type=1326 audit(2000000049.470:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1418f749 code=0x7ffc0000 [ 327.956306][T10608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.962330][ T5921] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 327.964891][T10608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.028215][ T849] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 328.061353][ T30] audit: type=1326 audit(2000000049.470:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdb1418f749 code=0x7ffc0000 [ 328.137193][ T30] audit: type=1326 audit(2000000049.470:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.0.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1418f749 code=0x7ffc0000 [ 328.502280][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 328.510493][ T5921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.520787][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 328.556506][ T849] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 328.564703][ T849] usb 5-1: config 0 has no interface number 0 [ 328.584543][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 328.599079][ T849] usb 5-1: config 0 interface 98 has no altsetting 0 [ 328.615785][ T849] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.34 [ 328.630190][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 328.641671][ T849] usb 5-1: New USB device strings: Mfr=253, Product=1, SerialNumber=3 [ 328.659937][ T849] usb 5-1: Product: syz [ 328.666229][ T5921] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 328.678699][ T849] usb 5-1: Manufacturer: syz [ 328.687409][ T849] usb 5-1: SerialNumber: syz [ 328.696137][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.709681][ T849] usb 5-1: config 0 descriptor?? [ 328.729844][ T5921] hub 2-1:1.0: bad descriptor, ignoring hub [ 328.745264][ T5921] hub 2-1:1.0: probe with driver hub failed with error -5 [ 328.762173][ T5921] cdc_wdm 2-1:1.0: skipping garbage [ 328.767540][ T5921] cdc_wdm 2-1:1.0: skipping garbage [ 328.913666][ T5921] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 328.919612][ T5921] cdc_wdm 2-1:1.0: Unknown control protocol [ 329.572808][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'. [ 331.591010][ T5921] usb 2-1: USB disconnect, device number 55 [ 331.598594][ T849] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB34): Eagle II [ 331.645892][ T49] pwc: recv_control_msg error -71 req 02 val 2700 [ 331.678953][ T49] pwc: recv_control_msg error -71 req 02 val 2c00 [ 331.703673][ T49] pwc: recv_control_msg error -71 req 04 val 1000 [ 331.712833][ T49] pwc: recv_control_msg error -71 req 04 val 1300 [ 331.720729][ T49] pwc: recv_control_msg error -71 req 04 val 1400 [ 331.735067][ T49] pwc: recv_control_msg error -71 req 02 val 2000 [ 331.761964][T10624] erspan0: entered promiscuous mode [ 331.767881][T10624] vlan3: entered promiscuous mode [ 331.787553][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 331.787566][ T30] audit: type=1400 audit(2000000054.020:963): avc: denied { ioctl } for pid=10628 comm="syz.0.1127" path="socket:[32031]" dev="sockfs" ino=32031 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 331.789328][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'. [ 331.840305][ T49] pwc: recv_control_msg error -71 req 02 val 2100 [ 331.850563][ T49] pwc: recv_control_msg error -71 req 04 val 1500 [ 331.861709][ T49] pwc: recv_control_msg error -71 req 02 val 2500 [ 331.869717][ T49] pwc: recv_control_msg error -71 req 02 val 2400 [ 331.878022][ T49] pwc: recv_control_msg error -71 req 02 val 2600 [ 331.886928][ T49] pwc: recv_control_msg error -71 req 02 val 2900 [ 331.893745][ T49] pwc: recv_control_msg error -71 req 02 val 2800 [ 331.903199][ T49] pwc: recv_control_msg error -71 req 04 val 1100 [ 331.917144][ T49] pwc: recv_control_msg error -71 req 04 val 1200 [ 331.927079][ T49] pwc: Registered as video103. [ 331.939652][ T49] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 331.967702][ T49] usb 3-1: USB disconnect, device number 57 [ 332.663828][ T849] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 332.673538][ T849] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 332.681650][ T8784] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 332.693507][ T849] usb 5-1: USB disconnect, device number 55 [ 332.700503][ T8784] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 332.705773][ T30] audit: type=1400 audit(2000000054.930:964): avc: denied { firmware_load } for pid=8784 comm="kworker/1:11" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 332.708763][ T5921] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 333.173718][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 333.585840][ T5921] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 333.603632][ T5921] usb 4-1: config 0 has no interface number 0 [ 334.778454][ T5921] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 337.467097][ T6000] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 342.644737][ T5921] usb 4-1: string descriptor 0 read error: -32 [ 342.651316][ T5921] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 348.314478][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 348.343137][ T5921] usb 4-1: config 0 descriptor?? [ 348.350474][ T5921] usb 4-1: can't set config #0, error -32 [ 363.053781][ T849] usb 4-1: USB disconnect, device number 42 [ 371.458106][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.475742][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.492627][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.525976][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.533432][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.704721][ T5816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 371.723151][ T5816] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 371.813049][ T5816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 371.824657][ T5816] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 371.832838][ T5816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 372.060633][ T5818] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 372.069924][ T5818] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 372.192095][ T5818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 372.200151][ T5818] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 372.207644][ T5818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 372.256977][ T5825] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 372.267383][ T5825] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 372.275372][ T5825] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 372.283092][ T5825] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 372.290501][ T5825] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 372.367078][ T5818] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 372.379209][ T5818] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 372.394927][ T5818] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 372.404675][ T5816] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 372.418791][ T5816] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 372.729259][ T5808] bond0: (slave syz_tun): Releasing backup interface [ 372.918969][T10664] chnl_net:caif_netlink_parms(): no params data found [ 372.986944][T10660] chnl_net:caif_netlink_parms(): no params data found [ 373.027580][ T80] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.040084][ T80] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.109545][T10667] chnl_net:caif_netlink_parms(): no params data found [ 373.200941][ T80] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.211364][ T80] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.260974][T10664] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.268400][T10664] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.279224][T10664] bridge_slave_0: entered allmulticast mode [ 373.286502][T10664] bridge_slave_0: entered promiscuous mode [ 373.297939][T10664] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.305347][T10664] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.312510][T10664] bridge_slave_1: entered allmulticast mode [ 373.319343][T10664] bridge_slave_1: entered promiscuous mode [ 373.344046][T10671] chnl_net:caif_netlink_parms(): no params data found [ 373.360527][T10660] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.367676][T10660] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.374792][T10660] bridge_slave_0: entered allmulticast mode [ 373.381373][T10660] bridge_slave_0: entered promiscuous mode [ 373.395714][ T80] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.406186][ T80] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.445524][T10664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.454842][T10660] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.462757][T10660] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.469933][T10660] bridge_slave_1: entered allmulticast mode [ 373.476745][T10660] bridge_slave_1: entered promiscuous mode [ 373.507103][T10664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.567728][ T80] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.579124][ T80] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.592968][ T5816] Bluetooth: hci5: command tx timeout [ 373.605125][T10667] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.612630][T10667] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.619817][T10667] bridge_slave_0: entered allmulticast mode [ 373.626850][T10667] bridge_slave_0: entered promiscuous mode [ 373.653387][T10660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.662850][T10667] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.670153][T10667] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.677472][T10667] bridge_slave_1: entered allmulticast mode [ 373.684401][T10667] bridge_slave_1: entered promiscuous mode [ 373.702919][T10664] team0: Port device team_slave_0 added [ 373.710431][T10660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.726128][T10669] chnl_net:caif_netlink_parms(): no params data found [ 373.749839][T10664] team0: Port device team_slave_1 added [ 373.809305][T10667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.834465][T10671] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.841753][T10671] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.850332][T10671] bridge_slave_0: entered allmulticast mode [ 373.857355][T10671] bridge_slave_0: entered promiscuous mode [ 373.872376][T10660] team0: Port device team_slave_0 added [ 373.879534][T10667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.897198][T10671] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.904820][T10671] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.911884][T10671] bridge_slave_1: entered allmulticast mode [ 373.912396][ T5816] Bluetooth: hci6: command tx timeout [ 373.919529][T10671] bridge_slave_1: entered promiscuous mode [ 373.930610][T10664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.937881][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.963885][T10664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.975889][T10660] team0: Port device team_slave_1 added [ 374.012060][T10664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.019326][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.046209][T10664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.105194][T10667] team0: Port device team_slave_0 added [ 374.110865][T10669] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.119290][T10669] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.127306][T10669] bridge_slave_0: entered allmulticast mode [ 374.134022][T10669] bridge_slave_0: entered promiscuous mode [ 374.142575][T10671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.153005][T10660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.159929][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.186410][T10660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.198767][T10667] team0: Port device team_slave_1 added [ 374.205201][T10669] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.212537][T10669] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.219647][T10669] bridge_slave_1: entered allmulticast mode [ 374.226912][T10669] bridge_slave_1: entered promiscuous mode [ 374.234936][T10671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.249756][T10660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.256748][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.282938][T10660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.342434][T10664] hsr_slave_0: entered promiscuous mode [ 374.348995][T10664] hsr_slave_1: entered promiscuous mode [ 374.355936][T10664] debugfs: 'hsr0' already exists in 'hsr' [ 374.361648][T10664] Cannot create hsr debugfs directory [ 374.390515][T10671] team0: Port device team_slave_0 added [ 374.392570][ T5816] Bluetooth: hci7: command tx timeout [ 374.400076][T10667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.408584][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.435525][T10667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.448742][T10669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.459806][T10669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.472576][ T5818] Bluetooth: hci8: command tx timeout [ 374.479704][ T5816] Bluetooth: hci9: command tx timeout [ 374.481405][T10671] team0: Port device team_slave_1 added [ 374.507783][ T80] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.518619][ T80] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 374.535237][T10667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.542167][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.568897][T10667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.627207][T10669] team0: Port device team_slave_0 added [ 374.649335][ T80] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.660309][ T80] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 374.676387][T10660] hsr_slave_0: entered promiscuous mode [ 374.682992][T10660] hsr_slave_1: entered promiscuous mode [ 374.688862][T10660] debugfs: 'hsr0' already exists in 'hsr' [ 374.694613][T10660] Cannot create hsr debugfs directory [ 374.710289][T10669] team0: Port device team_slave_1 added [ 374.716804][T10671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.723862][T10671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.750054][T10671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.788756][T10671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.796632][T10671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.822983][T10671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.844087][ T80] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.855169][ T80] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 374.894084][T10667] hsr_slave_0: entered promiscuous mode [ 374.900166][T10667] hsr_slave_1: entered promiscuous mode [ 374.909002][T10667] debugfs: 'hsr0' already exists in 'hsr' [ 374.914836][T10667] Cannot create hsr debugfs directory [ 374.930451][T10669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.937851][T10669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.964823][T10669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.976866][T10669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.984030][T10669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.010018][T10669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.047003][ T80] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.057289][ T80] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 375.145790][T10671] hsr_slave_0: entered promiscuous mode [ 375.151801][T10671] hsr_slave_1: entered promiscuous mode [ 375.157978][T10671] debugfs: 'hsr0' already exists in 'hsr' [ 375.164437][T10671] Cannot create hsr debugfs directory [ 375.217056][T10669] hsr_slave_0: entered promiscuous mode [ 375.223865][T10669] hsr_slave_1: entered promiscuous mode [ 375.229699][T10669] debugfs: 'hsr0' already exists in 'hsr' [ 375.235566][T10669] Cannot create hsr debugfs directory [ 375.463091][ T80] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.498139][T10664] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 375.507040][T10664] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 375.528553][T10664] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 375.557392][T10664] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 375.579329][ T80] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.630842][T10660] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 375.655889][T10660] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 375.667229][T10660] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 375.678101][T10660] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 375.684816][ T5818] Bluetooth: hci5: command tx timeout [ 375.708278][ T80] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.759044][ T80] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.786705][T10669] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 375.797481][T10669] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 375.808508][T10669] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 375.819460][T10669] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 375.922015][T10664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.930697][ T80] bridge_slave_1: left allmulticast mode [ 375.936781][ T80] bridge_slave_1: left promiscuous mode [ 375.942664][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.950745][ T80] bridge_slave_0: left allmulticast mode [ 375.956731][ T80] bridge_slave_0: left promiscuous mode [ 375.962741][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.985308][ T80] bridge_slave_1: left allmulticast mode [ 375.990928][ T80] bridge_slave_1: left promiscuous mode [ 375.992430][ T5818] Bluetooth: hci6: command tx timeout [ 375.997291][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.010888][ T80] bridge_slave_0: left promiscuous mode [ 376.016612][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.178450][ T80] dvmrp8 (unregistering): left allmulticast mode [ 376.204474][ T80] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 376.327159][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.337772][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.347453][ T80] bond0 (unregistering): Released all slaves [ 376.433929][ T80] bond1 (unregistering): (slave geneve2): Releasing active interface [ 376.472370][ T5818] Bluetooth: hci7: command tx timeout [ 376.555729][ T5816] Bluetooth: hci9: command tx timeout [ 376.561754][ T5818] Bluetooth: hci8: command tx timeout [ 376.640087][ T80] bond0 (unregistering): Released all slaves [ 376.650105][ T80] bond1 (unregistering): Released all slaves [ 376.724547][ T80] bond2 (unregistering): (slave veth3): Releasing active interface [ 376.733482][ T80] bond2 (unregistering): Released all slaves [ 377.017926][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.027707][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.037261][ T80] bond0 (unregistering): Released all slaves [ 377.108504][ T80] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 377.117257][ T80] dummy0: left promiscuous mode [ 377.122163][ T80] dummy0: left allmulticast mode [ 377.130184][ T80] bond1 (unregistering): Released all slaves [ 377.178858][T10667] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 377.188540][T10667] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 377.235878][T10667] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 377.269680][T10667] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 377.279158][ T80] : left promiscuous mode [ 377.299025][T10664] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.366772][T10671] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 377.380142][T10671] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 377.389531][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.396593][ T4246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.410779][ T80] tipc: Left network mode [ 377.415602][T10671] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 377.429585][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.436692][ T4246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.451603][T10671] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 377.459014][ T80] tipc: Left network mode [ 377.531724][T10660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.597454][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.604055][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.652408][T10660] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.695516][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.702640][ T6843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.739493][ T6843] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.746561][ T6843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.755371][ T5818] Bluetooth: hci5: command tx timeout [ 377.764698][T10669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.817133][T10669] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.861673][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.868753][ T7257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.885365][T10671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.903664][T10667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.938812][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.945946][ T7257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.989844][T10667] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.038012][T10664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.058915][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.066041][ T5947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.077335][ T5818] Bluetooth: hci6: command tx timeout [ 378.089498][T10671] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.116892][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.124028][ T5947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.148688][ T80] hsr_slave_0: left promiscuous mode [ 378.156638][ T80] hsr_slave_1: left promiscuous mode [ 378.165427][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.173116][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.180615][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.189111][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.200414][ T80] hsr_slave_0: left promiscuous mode [ 378.208136][ T80] hsr_slave_0: left promiscuous mode [ 378.213972][ T80] hsr_slave_1: left promiscuous mode [ 378.219543][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.227940][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.236850][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.244305][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.267463][ T80] veth1_macvtap: left promiscuous mode [ 378.273272][ T80] veth0_macvtap: left promiscuous mode [ 378.278748][ T80] veth1_vlan: left promiscuous mode [ 378.284815][ T80] veth1_macvtap: left promiscuous mode [ 378.290275][ T80] veth0_macvtap: left promiscuous mode [ 378.296226][ T80] veth1_vlan: left promiscuous mode [ 378.301446][ T80] veth0_vlan: left promiscuous mode [ 378.309012][ T80] veth1_macvtap: left promiscuous mode [ 378.315242][ T80] veth0_macvtap: left promiscuous mode [ 378.320730][ T80] veth1_vlan: left promiscuous mode [ 378.326093][ T80] veth0_vlan: left promiscuous mode [ 378.552494][ T5818] Bluetooth: hci7: command tx timeout [ 378.632448][ T5816] Bluetooth: hci9: command tx timeout [ 378.638319][ T5818] Bluetooth: hci8: command tx timeout [ 379.497141][ T80] team0 (unregistering): Port device team_slave_1 removed [ 379.526378][ T80] team0 (unregistering): Port device team_slave_0 removed [ 379.775129][ T7241] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.782262][ T7241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.829277][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.836404][ T7257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.844551][ T5818] Bluetooth: hci5: command tx timeout [ 379.906380][T10660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.152647][ T5818] Bluetooth: hci6: command tx timeout [ 380.221885][T10664] veth0_vlan: entered promiscuous mode [ 380.265966][T10669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.305590][T10667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.343103][T10664] veth1_vlan: entered promiscuous mode [ 380.425960][T10664] veth0_macvtap: entered promiscuous mode [ 380.458286][T10664] veth1_macvtap: entered promiscuous mode [ 380.495703][T10671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.555465][T10664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.605668][T10664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.633344][ T5818] Bluetooth: hci7: command tx timeout [ 380.653138][ T7241] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.711371][ T7241] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.734067][ T5816] Bluetooth: hci9: command tx timeout [ 380.739478][ T5818] Bluetooth: hci8: command tx timeout [ 380.766650][ T7241] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.777055][ T7241] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.807804][T10660] veth0_vlan: entered promiscuous mode [ 380.862346][T10660] veth1_vlan: entered promiscuous mode [ 380.880725][ T6843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.898567][ T6843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.940471][ T4151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.964882][ T4151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.981835][ T80] IPVS: stop unused estimator thread 0... [ 381.001361][T10669] veth0_vlan: entered promiscuous mode [ 381.015330][T10667] veth0_vlan: entered promiscuous mode [ 381.045412][T10667] veth1_vlan: entered promiscuous mode [ 381.059166][T10660] veth0_macvtap: entered promiscuous mode [ 381.074183][T10669] veth1_vlan: entered promiscuous mode [ 381.107711][T10660] veth1_macvtap: entered promiscuous mode [ 381.228107][T10671] veth0_vlan: entered promiscuous mode [ 381.239018][T10667] veth0_macvtap: entered promiscuous mode [ 381.710434][T10660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.726779][T10660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.737408][T10667] veth1_macvtap: entered promiscuous mode [ 381.746363][T10671] veth1_vlan: entered promiscuous mode [ 381.754209][T10669] veth0_macvtap: entered promiscuous mode [ 381.769590][T10669] veth1_macvtap: entered promiscuous mode [ 381.777379][ T80] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.788256][ T80] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.808546][ T80] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.817876][ T80] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.841052][T10667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.861277][T10667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.869982][T10669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.910754][T10669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.982286][ T7254] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.991001][ T7254] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.004607][T10671] veth0_macvtap: entered promiscuous mode [ 382.021854][ T7254] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.034984][ T30] audit: type=1400 audit(2000000104.270:965): avc: denied { map } for pid=10788 comm="syz.6.1138" path="socket:[35393]" dev="sockfs" ino=35393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 382.060149][ T30] audit: type=1400 audit(2000000104.290:966): avc: denied { read accept } for pid=10788 comm="syz.6.1138" path="socket:[35393]" dev="sockfs" ino=35393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 382.091209][ T7254] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.101033][ T7254] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.112637][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.121718][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.154717][T10671] veth1_macvtap: entered promiscuous mode [ 382.167083][ T7240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.188493][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.197935][ T7240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.293470][T10671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.312588][ T6000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.320415][ T6000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.322553][T10793] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1138'. [ 382.340820][T10793] netlink: 'syz.6.1138': attribute type 4 has an invalid length. [ 382.351130][T10671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.422698][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.430565][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.455652][ T5947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.458914][ T7240] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.474002][ T5947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.481682][ T7257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.493153][ T7257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.519452][ T7240] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.535470][ T7240] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.558909][ T7240] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.771435][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.808137][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.824490][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.882285][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.955907][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.975373][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.021712][T10803] netlink: 'syz.9.1137': attribute type 4 has an invalid length. [ 383.107200][T10803] netlink: 'syz.9.1137': attribute type 4 has an invalid length. [ 383.450955][T10815] Invalid source name [ 383.454964][T10815] UBIFS error (pid: 10815): cannot open "./file0", error -22 [ 383.707243][ T49] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 384.318091][T10827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10827 comm=syz.8.1145 [ 384.361277][T10827] netlink: 'syz.8.1145': attribute type 1 has an invalid length. [ 384.408664][ T49] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 384.420420][ T49] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.490178][ T49] usb 8-1: Product: syz [ 384.495617][ T49] usb 8-1: Manufacturer: syz [ 384.500325][ T49] usb 8-1: SerialNumber: syz [ 384.507623][ T49] usb 8-1: config 0 descriptor?? [ 384.514953][T10835] No control pipe specified [ 384.516102][ T49] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 384.737111][ T49] gspca_stk1135: reg_w 0x0 err -71 [ 384.743646][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 384.757274][ T5930] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 385.134200][ T49] gspca_stk1135: Sensor write failed [ 385.139536][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 385.146204][ T49] gspca_stk1135: Sensor write failed [ 385.151503][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 385.158033][ T49] gspca_stk1135: Sensor read failed [ 385.163755][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 385.170072][ T49] gspca_stk1135: Sensor read failed [ 385.180656][ T49] gspca_stk1135: Detected sensor type unknown (0x0) [ 385.187407][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 385.195077][ T49] gspca_stk1135: Sensor read failed [ 385.212380][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 385.226832][ T49] gspca_stk1135: Sensor read failed [ 385.243734][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 385.251651][ T49] gspca_stk1135: Sensor write failed [ 385.292360][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 385.299666][ T49] gspca_stk1135: Sensor write failed [ 385.304552][ T5930] usb 9-1: Using ep0 maxpacket: 8 [ 385.307265][ T49] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 385.321475][ T49] usb 8-1: USB disconnect, device number 2 [ 385.326531][ T5930] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 385.351834][ T5930] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 385.366936][ T5930] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 385.383548][ T5930] usb 9-1: Product: syz [ 385.399128][ T5930] usb 9-1: Manufacturer: syz [ 385.406896][ T5930] usb 9-1: SerialNumber: syz [ 385.668855][ T5930] usb 9-1: Handspring Visor / Palm OS: No valid connect info available [ 385.691412][ T5930] usb 9-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 385.710623][ T5930] usb 9-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 385.728316][ T5930] usb 9-1: Handspring Visor / Palm OS: Number of ports: 2 [ 385.881845][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1145'. [ 385.890792][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 385.918532][ T5930] usb 9-1: palm_os_3_probe - error -71 getting bytes available request [ 385.926932][ T5930] visor 9-1:1.0: Handspring Visor / Palm OS converter detected [ 385.973826][ T5930] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 386.002132][ T5930] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 386.031285][ T5930] usb 9-1: USB disconnect, device number 2 [ 386.089164][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.107235][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.130157][ T24] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 386.148819][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 386.163927][ T24] usb 8-1: SerialNumber: syz [ 386.177611][ T5930] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 386.231088][ T5930] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 386.251028][ T5930] visor 9-1:1.0: device disconnected [ 386.391067][ T24] usb 8-1: 0:2 : does not exist [ 386.427030][ T24] usb 8-1: USB disconnect, device number 3 [ 386.447877][ T30] audit: type=1326 audit(2000000108.680:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.6.1155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8d1f8f749 code=0x0 [ 387.549034][T10883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.549436][ T30] audit: type=1400 audit(2000000109.780:968): avc: denied { lock } for pid=10882 comm="syz.5.1160" path="socket:[36240]" dev="sockfs" ino=36240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 387.601464][T10883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.776948][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 387.783268][ T5930] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 387.801235][ T30] audit: type=1400 audit(2000000110.030:969): avc: denied { accept } for pid=10890 comm="syz.5.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 387.946029][ T24] usb 10-1: device descriptor read/64, error -71 [ 387.970043][ T5930] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 387.982360][ T5930] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.990585][ T5930] usb 8-1: Product: syz [ 388.000565][ T5930] usb 8-1: Manufacturer: syz [ 388.007757][ T5930] usb 8-1: SerialNumber: syz [ 388.015287][ T5930] usb 8-1: config 0 descriptor?? [ 388.112261][ T5923] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 388.172341][ T5922] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 388.202249][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 388.228488][ T5930] dvb_usb_rtl28xxu 8-1:0.0: chip type detection failed -71 [ 388.238994][ T5930] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 388.260817][ T5930] usb 8-1: USB disconnect, device number 4 [ 388.262240][ T5923] usb 9-1: Using ep0 maxpacket: 32 [ 388.286417][ T5923] usb 9-1: config 0 has an invalid interface number: 217 but max is 0 [ 388.302301][ T5923] usb 9-1: config 0 has no interface number 0 [ 388.310378][ T5923] usb 9-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 388.323950][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.331996][ T5923] usb 9-1: Product: syz [ 388.337231][ T5923] usb 9-1: Manufacturer: syz [ 388.341872][ T5923] usb 9-1: SerialNumber: syz [ 388.350003][ T5922] usb 7-1: config 0 has an invalid interface number: 249 but max is 0 [ 388.358899][ T24] usb 10-1: device descriptor read/64, error -71 [ 388.370162][ T5922] usb 7-1: config 0 has no interface number 0 [ 388.380761][ T5923] usb 9-1: config 0 descriptor?? [ 388.386725][ T5922] usb 7-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 388.405120][ T5923] ftdi_sio 9-1:0.217: FTDI USB Serial Device converter detected [ 388.415040][ T5922] usb 7-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 388.429060][ T5923] usb 9-1: Detected SIO [ 388.441145][ T5922] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 388.451925][ T5923] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 388.470276][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.482533][ T24] usb usb10-port1: attempt power cycle [ 388.498148][ T5922] usb 7-1: config 0 descriptor?? [ 388.505869][ T5922] port100 7-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 388.778567][ T5893] usb 9-1: USB disconnect, device number 3 [ 388.832869][ T5893] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 388.845658][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 388.845793][ T5893] ftdi_sio 9-1:0.217: device disconnected [ 388.892466][ T24] usb 10-1: device descriptor read/8, error -71 [ 388.925242][ T5922] usb 7-1: USB disconnect, device number 2 [ 389.285042][ T30] audit: type=1400 audit(2000000111.520:970): avc: denied { read } for pid=10903 comm="syz.7.1166" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 389.309884][ T30] audit: type=1400 audit(2000000111.520:971): avc: denied { open } for pid=10903 comm="syz.7.1166" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 389.650784][ T30] audit: type=1326 audit(2000000111.880:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.5.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f5b8f749 code=0x7ffc0000 [ 389.856573][ T30] audit: type=1326 audit(2000000111.910:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.5.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff3f5b8f749 code=0x7ffc0000 [ 389.935244][ T30] audit: type=1326 audit(2000000111.910:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.5.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f5b8f749 code=0x7ffc0000 [ 390.019360][ T30] audit: type=1326 audit(2000000111.910:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.5.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7ff3f5b8f749 code=0x7ffc0000 [ 390.109195][ T30] audit: type=1326 audit(2000000111.920:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.5.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f5b8f749 code=0x7ffc0000 [ 390.137047][ T30] audit: type=1326 audit(2000000111.920:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.5.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff3f5b8f749 code=0x7ffc0000 [ 390.662287][ T5930] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 390.807891][T10942] (syz.9.1176,10942,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 390.826090][T10942] (syz.9.1176,10942,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 390.828960][ T5930] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 390.837762][T10944] syzkaller1: entered promiscuous mode [ 390.848571][T10944] syzkaller1: entered allmulticast mode [ 390.864816][ T5930] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.882894][ T5930] usb 8-1: config 0 descriptor?? [ 390.889906][ T5930] cp210x 8-1:0.0: cp210x converter detected [ 391.293574][T10950] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 391.423661][T10933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.454275][T10933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.473599][ T5930] usb 8-1: cp210x converter now attached to ttyUSB0 [ 391.482507][ T5930] usb 8-1: USB disconnect, device number 5 [ 391.492159][ T5930] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 391.502018][ T5930] cp210x 8-1:0.0: device disconnected [ 391.562282][ T5872] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 391.572333][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 391.611423][T10960] syzkaller1: entered promiscuous mode [ 391.616948][T10960] syzkaller1: entered allmulticast mode [ 391.722236][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 391.728842][ T5872] usb 10-1: config 0 has an invalid interface number: 249 but max is 0 [ 391.729834][ T24] usb 7-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 391.742234][ T5872] usb 10-1: config 0 has no interface number 0 [ 391.750419][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.762261][ T5872] usb 10-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 391.768919][ T24] usb 7-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 391.779042][ T5872] usb 10-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 391.785961][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.801877][ T5872] usb 10-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 391.803909][ T24] usb 7-1: Product: syz [ 391.815620][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.817253][ T24] usb 7-1: Manufacturer: syz [ 391.830736][ T24] usb 7-1: SerialNumber: syz [ 391.838310][ T24] usb 7-1: config 0 descriptor?? [ 391.848853][ T5872] usb 10-1: config 0 descriptor?? [ 391.855281][ T5872] port100 10-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 392.115620][T10955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.124277][T10955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.135864][T10955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.146919][T10946] tmpfs: Bad value for 'mpol' [ 392.153908][ T5872] usb 10-1: USB disconnect, device number 6 [ 392.954843][ T8784] usb 5-1: [UEAGLE-ATM] firmware is not available [ 392.983785][T10955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.016888][ T24] qmi_wwan 7-1:0.0: probe with driver qmi_wwan failed with error -22 [ 393.042650][ T24] usb 7-1: USB disconnect, device number 3 [ 393.157030][T10977] netlink: 272 bytes leftover after parsing attributes in process `syz.8.1187'. [ 393.492295][ T8784] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 393.662256][ T8784] usb 9-1: Using ep0 maxpacket: 8 [ 393.669517][ T8784] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 393.679420][ T8784] usb 9-1: config 0 has no interface number 0 [ 393.687047][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1194'. [ 393.697112][ T8784] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 393.714347][ T8784] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 393.726376][ T8784] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 393.784731][ T8784] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.812438][ T8784] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 393.918665][ T8784] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.939981][ T8784] usb 9-1: Product: syz [ 393.948817][ T8784] usb 9-1: Manufacturer: syz [ 393.954523][ T8784] usb 9-1: SerialNumber: syz [ 393.965414][ T8784] usb 9-1: config 0 descriptor?? [ 394.196474][T10984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.208691][ T5872] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 394.221018][T10984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.675120][ T8784] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 394.694402][ T5872] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 394.718116][ T8784] usb 9-1: USB disconnect, device number 4 [ 394.724130][ T5872] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 394.724157][ T5872] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.724192][ T5872] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 394.724210][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.884057][ T5872] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 394.967389][ T5872] usb 8-1: invalid MIDI out EP 0 [ 395.327851][ T5920] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 395.943239][ T5872] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 395.994913][ T5920] usb 6-1: device descriptor read/64, error -71 [ 396.235466][T11033] raw_sendmsg: syz.9.1202 forgot to set AF_INET. Fix it! [ 396.372835][ T5920] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 396.435744][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 396.435758][ T30] audit: type=1400 audit(2000000118.660:986): avc: denied { mount } for pid=11036 comm="syz.6.1203" name="/" dev="configfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 396.513800][ T30] audit: type=1400 audit(2000000118.670:987): avc: denied { search } for pid=11036 comm="syz.6.1203" name="/" dev="configfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.542287][ T5920] usb 6-1: device descriptor read/64, error -71 [ 396.591727][ T30] audit: type=1400 audit(2000000118.670:988): avc: denied { search } for pid=11036 comm="syz.6.1203" name="/" dev="configfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.693508][ T8784] usb 8-1: USB disconnect, device number 6 [ 396.701867][ T5920] usb usb6-port1: attempt power cycle [ 396.714300][ T30] audit: type=1400 audit(2000000118.670:989): avc: denied { read open } for pid=11036 comm="syz.6.1203" path="/" dev="configfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 397.761931][ T5920] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 399.392283][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1207'. [ 399.401137][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1207'. [ 400.535866][ T5920] usb 6-1: device descriptor read/8, error -71 [ 401.922444][T11066] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 402.247880][T11066] usb 7-1: device descriptor read/64, error -71 [ 402.523814][T11066] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 402.722253][T11066] usb 7-1: device descriptor read/64, error -71 [ 402.832656][T11066] usb usb7-port1: attempt power cycle [ 402.860086][T11106] xt_hashlimit: max too large, truncated to 1048576 [ 403.222360][T11066] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 403.274066][T11066] usb 7-1: device descriptor read/8, error -71 [ 403.512470][T11066] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 403.573307][T11066] usb 7-1: device descriptor read/8, error -71 [ 403.750099][T11128] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 403.861979][T11066] usb usb7-port1: unable to enumerate USB device [ 404.292348][T10792] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 404.442390][T10792] usb 9-1: Using ep0 maxpacket: 16 [ 404.471384][T10792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.582304][T10792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.592141][T10792] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.609282][T10792] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 404.619527][T10792] usb 9-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 404.627710][T10792] usb 9-1: Manufacturer: syz [ 405.232439][T10792] usb 9-1: config 0 descriptor?? [ 405.377432][T11139] evm: overlay not supported [ 406.043158][ T5923] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 406.111088][T11133] netlink: 'syz.8.1227': attribute type 1 has an invalid length. [ 406.192037][T11133] bond1: entered promiscuous mode [ 406.226566][T11133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.229078][ T5923] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 406.244483][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.252930][ T5923] usb 7-1: Product: syz [ 406.275438][ T5923] usb 7-1: Manufacturer: syz [ 406.280315][ T5923] usb 7-1: SerialNumber: syz [ 406.333165][ T5923] usb 7-1: config 0 descriptor?? [ 406.570899][ T849] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 406.598422][ T5923] mos7840 7-1:0.0: required endpoints missing [ 406.621722][ T5923] usb 7-1: USB disconnect, device number 8 [ 406.752418][ T849] usb 10-1: Using ep0 maxpacket: 16 [ 406.773072][ T849] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.783597][ T849] usb 10-1: config 0 has no interface number 0 [ 406.941434][T10792] usbhid 9-1:0.0: can't add hid device: -71 [ 406.949472][T10792] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 406.957286][ T849] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.974390][T10792] usb 9-1: USB disconnect, device number 5 [ 406.980265][ T849] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.994149][ T849] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 407.004904][ T849] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.018034][ T849] usb 10-1: config 0 descriptor?? [ 407.281748][T11157] netlink: 'syz.9.1233': attribute type 10 has an invalid length. [ 407.314131][T11157] team0: Port device dummy0 added [ 407.334095][T11157] netlink: 'syz.9.1233': attribute type 10 has an invalid length. [ 407.366945][T11157] team0: Port device dummy0 removed [ 407.389437][T11157] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 407.920447][T11164] syz.6.1234 (11164): drop_caches: 2 [ 408.177381][T11157] openvswitch: netlink: Key type 4127 is out of range max 32 [ 408.567085][ T849] usbhid 10-1:0.1: can't add hid device: -71 [ 408.601178][ T849] usbhid 10-1:0.1: probe with driver usbhid failed with error -71 [ 408.643463][ T849] usb 10-1: USB disconnect, device number 7 [ 408.715453][T11190] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1240'. [ 409.391661][ T30] audit: type=1400 audit(2000000131.620:990): avc: denied { checkpoint_restore } for pid=11189 comm="syz.7.1240" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 409.637460][ T30] audit: type=1326 audit(2000000131.730:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.8.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8f749 code=0x7ffc0000 [ 409.752226][ T30] audit: type=1326 audit(2000000131.730:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.8.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8f749 code=0x7ffc0000 [ 409.762228][ T5988] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 409.992426][ T5988] usb 8-1: Using ep0 maxpacket: 16 [ 410.002088][ T5988] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 97, changing to 7 [ 410.432682][ T5988] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 410.464020][ T5988] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 410.480805][ T5988] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.501213][ T5988] usb 8-1: Product: syz [ 410.507802][ T5988] usb 8-1: Manufacturer: syz [ 410.545296][ T5988] usb 8-1: SerialNumber: syz [ 410.557558][ T5988] usb 8-1: config 0 descriptor?? [ 410.575332][ T5988] hub 8-1:0.0: bad descriptor, ignoring hub [ 410.582318][ T5988] hub 8-1:0.0: probe with driver hub failed with error -5 [ 410.602349][ T5988] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input36 [ 410.702261][ T5923] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 410.932738][ T5923] usb 7-1: device descriptor read/64, error -71 [ 410.972276][T11066] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 411.123825][T11066] usb 10-1: config 0 has an invalid interface number: 133 but max is 0 [ 411.133287][ T849] usb 8-1: USB disconnect, device number 7 [ 411.142878][T11066] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.157916][T11066] usb 10-1: config 0 has no interface number 0 [ 411.168842][T11066] usb 10-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 411.181497][T11066] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.195328][T11066] usb 10-1: Product: syz [ 411.201140][T11066] usb 10-1: Manufacturer: syz [ 411.207991][T11066] usb 10-1: SerialNumber: syz [ 411.214948][ T5923] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 411.227689][T11066] usb 10-1: config 0 descriptor?? [ 411.352438][ T5923] usb 7-1: device descriptor read/64, error -71 [ 411.454617][ T30] audit: type=1400 audit(2000000133.690:993): avc: denied { mounton } for pid=11209 comm="syz.5.1244" path="/22/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 411.489658][ T5923] usb usb7-port1: attempt power cycle [ 411.493764][T11066] keyspan 10-1:0.133: Keyspan 1 port adapter converter detected [ 411.509474][T11066] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 82 [ 411.522808][T11066] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 81 [ 411.530988][T11066] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 1 [ 411.555233][T11066] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 2 [ 411.564779][T11066] usb 10-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 411.598482][T10792] usb 10-1: USB disconnect, device number 8 [ 411.610585][T10792] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 411.621832][T10792] keyspan 10-1:0.133: device disconnected [ 411.731213][T11230] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1249'. [ 411.862406][ T5923] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 411.892736][ T5923] usb 7-1: device descriptor read/8, error -71 [ 412.132298][ T5923] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 412.157742][ T5923] usb 7-1: device descriptor read/8, error -71 [ 412.360301][ T5923] usb usb7-port1: unable to enumerate USB device [ 412.426050][T11248] tipc: Started in network mode [ 412.440097][T11248] tipc: Node identity ac14140f, cluster identity 4711 [ 412.458278][T11248] tipc: New replicast peer: 255.255.255.255 [ 412.468847][T11248] tipc: Enabled bearer , priority 10 [ 412.484604][T11251] netlink: 'syz.9.1255': attribute type 4 has an invalid length. [ 412.509437][T11248] netlink: 'syz.9.1255': attribute type 10 has an invalid length. [ 412.524313][ T30] audit: type=1400 audit(2000000134.760:994): avc: denied { map } for pid=11247 comm="syz.9.1255" path="socket:[39019]" dev="sockfs" ino=39019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 412.551493][ T30] audit: type=1400 audit(2000000134.780:995): avc: denied { accept } for pid=11247 comm="syz.9.1255" path="socket:[39019]" dev="sockfs" ino=39019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 412.732250][T10792] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 412.909053][T10792] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 412.922456][T10792] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.933716][T10792] usb 8-1: Product: syz [ 412.937878][T10792] usb 8-1: Manufacturer: syz [ 412.942790][T10792] usb 8-1: SerialNumber: syz [ 412.951069][T10792] usb 8-1: config 0 descriptor?? [ 412.960062][T11262] bridge0: entered promiscuous mode [ 412.965560][T11262] macvlan2: entered promiscuous mode [ 412.972250][T10792] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 412.984354][ T30] audit: type=1400 audit(2000000135.220:996): avc: denied { bind } for pid=11261 comm="syz.8.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 413.006599][ T30] audit: type=1400 audit(2000000135.240:997): avc: denied { relabelfrom } for pid=11261 comm="syz.8.1260" name="" dev="pipefs" ino=38796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 413.156737][T11266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.178053][T11266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.229878][T11066] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 413.666824][ T5988] tipc: Node number set to 2886997007 [ 413.743505][T11066] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 413.831972][T10792] gspca_sunplus: reg_r err -110 [ 413.899313][T11066] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.976859][T11066] usb 6-1: config 0 has no interface number 0 [ 413.999733][T11066] usb 6-1: too many endpoints for config 0 interface 32 altsetting 0: 110, using maximum allowed: 30 [ 414.020958][T11066] usb 6-1: config 0 interface 32 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 414.057076][T11066] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 414.068847][T11066] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.089090][T11066] usb 6-1: config 0 descriptor?? [ 414.208734][T11280] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1264'. [ 414.600889][T11066] usb 6-1: string descriptor 0 read error: -71 [ 414.611777][T11066] hdpvr 6-1:0.32: Could not find bulk-in endpoint [ 414.620826][T11066] hdpvr 6-1:0.32: probe with driver hdpvr failed with error -12 [ 414.672638][T11066] usb 6-1: USB disconnect, device number 6 [ 415.864249][T11066] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 415.877334][ T8784] usb 8-1: USB disconnect, device number 8 [ 415.933195][ T30] audit: type=1400 audit(2000000138.170:998): avc: denied { remount } for pid=11304 comm="syz.7.1273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 416.004302][T11066] usb 9-1: device descriptor read/64, error -71 [ 416.117683][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1276'. [ 416.844527][T11066] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 416.992537][T11066] usb 9-1: device descriptor read/64, error -71 [ 417.156979][T11066] usb usb9-port1: attempt power cycle [ 417.353337][T11337] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1282'. [ 417.363161][T11341] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1281'. [ 417.416312][T11342] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1281'. [ 417.773485][T11066] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 417.794872][T11066] usb 9-1: device descriptor read/8, error -71 [ 418.042526][T11066] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 418.138649][ T8784] libceph: connect (1)[c::]:6789 error -101 [ 418.159650][ T8784] libceph: mon0 (1)[c::]:6789 connect error [ 418.262788][T11066] usb 9-1: device not accepting address 9, error -71 [ 418.288445][ T30] audit: type=1400 audit(2000000140.520:999): avc: denied { map } for pid=11356 comm="syz.5.1286" path="socket:[39175]" dev="sockfs" ino=39175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 418.292507][T11066] usb usb9-port1: unable to enumerate USB device [ 418.484927][ T8784] libceph: connect (1)[c::]:6789 error -101 [ 418.491802][ T8784] libceph: mon0 (1)[c::]:6789 connect error [ 418.497823][ T30] audit: type=1400 audit(2000000140.520:1000): avc: denied { read } for pid=11356 comm="syz.5.1286" path="socket:[39175]" dev="sockfs" ino=39175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 418.614744][T11377] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size. [ 419.026819][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 419.046710][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 419.056423][ T30] audit: type=1400 audit(2000000140.860:1001): avc: denied { map } for pid=11360 comm="syz.8.1287" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 419.082248][ T30] audit: type=1400 audit(2000000140.860:1002): avc: denied { execute } for pid=11360 comm="syz.8.1287" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 419.213950][T11357] ceph: No mds server is up or the cluster is laggy [ 419.572307][T11066] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 419.602973][ T8784] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 419.698100][T11391] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20002 [ 419.724436][T11066] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 419.736137][T11066] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 95, setting to 64 [ 419.753018][T11066] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 419.774025][ T8784] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 419.835320][T11066] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.837462][ T8784] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 419.861700][T11066] usb 8-1: config 0 descriptor?? [ 419.905286][T11384] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 419.950203][ T8784] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 419.959525][ T8784] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.970943][ T8784] usb 7-1: Product: syz [ 419.983177][ T8784] usb 7-1: Manufacturer: syz [ 420.000868][ T8784] usb 7-1: SerialNumber: syz [ 420.025854][ T8784] usb 7-1: config 0 descriptor?? [ 420.132297][ T5922] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 420.191108][T11384] netlink: 'syz.7.1291': attribute type 10 has an invalid length. [ 420.262543][T11384] team0: Device veth1_macvtap failed to register rx_handler [ 420.299054][ T5922] usb 6-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 420.310502][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.327917][ T5922] usb 6-1: Product: syz [ 420.336968][ T5922] usb 6-1: Manufacturer: syz [ 420.348369][ T5922] usb 6-1: SerialNumber: syz [ 420.366011][ T5922] usb 6-1: config 0 descriptor?? [ 420.423203][T11066] ath6kl: Failed to submit usb control message: -71 [ 420.438268][T11066] ath6kl: unable to send the bmi data to the device: -71 [ 420.469296][T11066] ath6kl: Unable to send get target info: -71 [ 420.493886][T11066] ath6kl: Failed to init ath6kl core: -71 [ 420.500478][T11066] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 420.559604][T11066] usb 8-1: USB disconnect, device number 9 [ 420.583876][ T5922] int51x1 6-1:0.0: probe with driver int51x1 failed with error -71 [ 420.599932][ T5922] usb 6-1: USB disconnect, device number 7 [ 421.240105][T11066] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 421.276331][T11066] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 421.361138][ T8784] usb 7-1: USB disconnect, device number 13 [ 421.377496][T11413] input: syz0 as /devices/virtual/input/input37 [ 421.403835][T11413] input: failed to attach handler leds to device input37, error: -6 [ 422.202008][ T30] audit: type=1400 audit(2000000144.430:1003): avc: denied { ioctl } for pid=11424 comm="syz.6.1301" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 422.314484][ T30] audit: type=1400 audit(2000000144.430:1004): avc: denied { lock } for pid=11400 comm="syz.8.1295" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 423.312229][T11066] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 423.613788][T11066] usb 6-1: config 1 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 423.717097][T11066] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.792294][T11066] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 423.823329][T11066] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 423.852221][T11066] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.873400][T11066] usb-storage 6-1:1.0: USB Mass Storage device detected [ 423.902861][ T5923] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 423.914406][T11066] usb-storage 6-1:1.0: Quirks match for vid 1908 pid 1315: 20000 [ 424.062235][ T5923] usb 7-1: Using ep0 maxpacket: 8 [ 424.070431][ T5923] usb 7-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=3a.b2 [ 424.099743][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.108533][ T5923] usb 7-1: Product: syz [ 424.114207][ T5923] usb 7-1: Manufacturer: syz [ 424.122371][ T5923] usb 7-1: SerialNumber: syz [ 424.306555][ T30] audit: type=1400 audit(2000000146.540:1005): avc: denied { mount } for pid=11471 comm="syz.9.1314" name="/" dev="pstore" ino=2983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 424.620816][ T30] audit: type=1400 audit(2000000146.790:1006): avc: denied { mount } for pid=11456 comm="syz.6.1309" name="/" dev="autofs" ino=39378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 426.114104][ T5942] usb 6-1: USB disconnect, device number 8 [ 426.520580][T11506] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1315'. [ 426.712294][ T5942] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 426.718009][ T5923] gspca_main: benq-2.14.0 probing 04a5:3035 [ 426.728285][ T30] audit: type=1400 audit(2000000148.950:1007): avc: denied { unmount } for pid=10664 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 426.753339][ T5923] usb 7-1: USB disconnect, device number 14 [ 426.782274][ T5922] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 426.799491][T11516] binder: 11515:11516 ioctl c0306201 0 returned -14 [ 426.887362][ T5942] usb 6-1: device descriptor read/64, error -71 [ 426.946953][ T5922] usb 9-1: config 0 has an invalid interface number: 82 but max is 0 [ 426.972277][ T5922] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.994231][ T5922] usb 9-1: config 0 has no interface number 0 [ 427.002293][ T5922] usb 9-1: config 0 interface 82 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 427.013327][ T5922] usb 9-1: config 0 interface 82 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 427.282267][ T5942] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 427.299371][ T5922] usb 9-1: config 0 interface 82 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 427.346451][ T5922] usb 9-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=11.9e [ 427.362706][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.384492][ T5922] usb 9-1: Product: syz [ 427.392730][ T5922] usb 9-1: Manufacturer: syz [ 427.413807][ T5922] usb 9-1: SerialNumber: syz [ 427.420499][ T5922] usb 9-1: config 0 descriptor?? [ 427.432333][ T5942] usb 6-1: device descriptor read/64, error -71 [ 427.445547][T11510] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 427.454830][ T5922] cdc_ether 9-1:0.82: skipping garbage [ 427.460277][ T5922] usb 9-1: bad CDC descriptors [ 427.467287][ T5922] usb 9-1: unsupported MDLM descriptors [ 427.475531][ T5922] cdc_acm 9-1:0.82: skipping garbage [ 427.543031][ T5942] usb usb6-port1: attempt power cycle [ 427.659600][ T5922] usb 9-1: USB disconnect, device number 10 [ 427.902242][ T5942] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 427.932132][ T5942] usb 6-1: device descriptor read/8, error -71 [ 428.252240][ T5942] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 428.347428][ T5942] usb 6-1: device descriptor read/8, error -71 [ 428.483979][ T5942] usb usb6-port1: unable to enumerate USB device [ 428.864600][ T30] audit: type=1400 audit(2000000151.100:1008): avc: denied { write } for pid=11570 comm="syz.8.1340" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 428.951740][T11572] netlink: 'syz.8.1340': attribute type 21 has an invalid length. [ 428.972286][T11572] IPv6: NLM_F_CREATE should be specified when creating new route [ 429.072506][ T5922] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 429.262364][ T5922] usb 7-1: Using ep0 maxpacket: 8 [ 429.276514][ T5922] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 429.292717][ T5922] usb 7-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 429.302099][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.516011][ T5922] usb 7-1: config 0 descriptor?? [ 429.859802][T11594] nfs: Bad value for 'source' [ 429.990937][T11569] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1339'. [ 429.993068][ T5922] apple 0003:05AC:027D.000D: unknown main item tag 0x0 [ 430.060136][ T5922] apple 0003:05AC:027D.000D: unknown main item tag 0x0 [ 430.155499][ T5922] apple 0003:05AC:027D.000D: unknown main item tag 0x0 [ 430.324209][ T5922] apple 0003:05AC:027D.000D: unknown main item tag 0x0 [ 430.348204][ T5922] apple 0003:05AC:027D.000D: unknown main item tag 0x0 [ 430.360904][ T5922] apple 0003:05AC:027D.000D: hidraw0: USB HID v4.00 Device [HID 05ac:027d] on usb-dummy_hcd.6-1/input0 [ 430.383874][ T5922] usb 7-1: USB disconnect, device number 15 [ 430.417997][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1344'. [ 430.432255][ T5923] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 430.612277][ T5923] usb 9-1: Using ep0 maxpacket: 16 [ 430.620162][ T5923] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.630469][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 430.641718][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 430.653549][ T5923] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 430.665744][ T5923] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.747326][ T5923] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 430.762247][ T5923] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 430.771648][ T5923] usb 9-1: Manufacturer: syz [ 430.778998][ T5923] usb 9-1: config 0 descriptor?? [ 430.972612][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1351'. [ 431.022541][T11622] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1352'. [ 431.062822][ T5923] rc_core: IR keymap rc-hauppauge not found [ 431.072040][ T5923] Registered IR keymap rc-empty [ 431.092728][ T5923] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 431.132277][ T5923] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 431.164861][ T5923] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 431.209423][ T5923] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input39 [ 431.240012][T11633] loop2: detected capacity change from 0 to 7 [ 431.256396][ T5923] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 431.259477][T11633] Dev loop2: unable to read RDB block 7 [ 431.274842][T11633] loop2: unable to read partition table [ 431.280736][T11633] loop2: partition table beyond EOD, truncated [ 431.287571][T11633] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 431.292785][ T5923] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 431.313740][T11636] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1354'. [ 431.332807][ T5923] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 431.359534][ T5923] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 431.382328][ T5923] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 431.412476][ T5923] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 431.444845][ T5923] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 431.470647][ T5923] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 431.571188][ T5923] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 431.613053][ T5923] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 431.623625][T11650] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1358'. [ 431.752721][ T5923] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 431.763427][ T5923] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 432.024663][ T5923] usb 9-1: USB disconnect, device number 11 [ 432.096772][T11657] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 432.103312][T11657] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 432.113136][T11657] vhci_hcd vhci_hcd.0: Device attached [ 432.153632][T11662] TCP: TCP_TX_DELAY enabled [ 432.442276][T11066] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 432.467225][T11663] syz_tun: entered allmulticast mode [ 432.542366][ T5923] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 432.717230][ T5923] usb 9-1: config 0 has no interfaces? [ 432.742319][ T5923] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 432.751626][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.773167][ T5923] usb 9-1: config 0 descriptor?? [ 432.876204][T11679] fuse: Bad value for 'user_id' [ 432.881148][T11679] fuse: Bad value for 'user_id' [ 433.193953][T11066] usb 49-1: device descriptor read/64, error -71 [ 433.212581][ T8784] usb 9-1: USB disconnect, device number 12 [ 433.220582][T11658] vhci_hcd: connection closed [ 433.227320][ T7240] vhci_hcd vhci_hcd.8: stop threads [ 433.240787][ T7240] vhci_hcd vhci_hcd.8: release socket [ 433.251132][ T7240] vhci_hcd vhci_hcd.8: disconnect device [ 433.384956][T11066] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 434.017266][ T30] audit: type=1400 audit(2000000156.250:1009): avc: denied { map } for pid=11699 comm="syz.8.1371" path="/dev/sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 434.171486][ T30] audit: type=1400 audit(2000000156.250:1010): avc: denied { execute } for pid=11699 comm="syz.8.1371" path="/dev/sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 434.382934][ T90] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 434.505110][T11692] bond2: option all_slaves_active: invalid value (32) [ 434.532257][ T90] usb 6-1: device descriptor read/64, error -71 [ 434.603452][T11692] bond2 (unregistering): Released all slaves [ 435.011665][ T90] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 435.152255][ T90] usb 6-1: device descriptor read/64, error -71 [ 435.333090][ T90] usb usb6-port1: attempt power cycle [ 435.728128][ T90] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 435.778571][ T90] usb 6-1: device descriptor read/8, error -71 [ 436.126142][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1378'. [ 436.200431][ T90] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 436.339953][ T90] usb 6-1: device descriptor read/8, error -71 [ 436.489215][ T90] usb usb6-port1: unable to enumerate USB device [ 438.567169][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1388'. [ 438.612765][ T5940] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 439.037012][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.150193][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.157745][ T5940] usb 9-1: device descriptor read/64, error -71 [ 439.459226][T11794] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1391'. [ 439.604437][ T5940] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 439.635404][T11796] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(13) [ 439.642017][T11796] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 439.649748][T11796] vhci_hcd vhci_hcd.0: Device attached [ 439.973628][ T5940] usb 9-1: device descriptor read/64, error -71 [ 440.921569][T11797] vhci_hcd: connection closed [ 440.923173][ T90] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 440.937075][ T5940] usb usb9-port1: attempt power cycle [ 440.957215][ T7243] vhci_hcd vhci_hcd.7: stop threads [ 440.982675][ T7243] vhci_hcd vhci_hcd.7: release socket [ 440.989675][ T7243] vhci_hcd vhci_hcd.7: disconnect device [ 441.296715][ T8784] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 441.312335][ T5940] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 441.339147][ T30] audit: type=1400 audit(2000000163.570:1011): avc: denied { listen } for pid=11811 comm="syz.6.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 441.424513][ T5940] usb 9-1: device descriptor read/8, error -71 [ 441.544500][T11819] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1398'. [ 441.563702][ T8784] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.591872][ T8784] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.652879][ T8784] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 441.670456][ T8784] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 441.694721][ T8784] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.721852][ T8784] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.752805][ T8784] usb 8-1: config 0 descriptor?? [ 442.180914][ T5940] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 442.951468][ T8784] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 442.976420][ T5940] usb 9-1: Using ep0 maxpacket: 16 [ 443.024802][ T5940] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 443.056994][ T5940] usb 9-1: config 0 has no interface number 0 [ 443.063576][ T5940] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 443.073683][ T5940] usb 9-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 443.096478][ T5940] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 443.125831][ T5940] usb 9-1: New USB device found, idVendor=74e3, idProduct=8a75, bcdDevice=82.73 [ 443.136782][T11841] openvswitch: netlink: IP tunnel dst address not specified [ 443.145158][ T5940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.161760][ T5940] usb 9-1: Product: syz [ 443.167106][ T5940] usb 9-1: Manufacturer: syz [ 443.172833][ T5940] usb 9-1: SerialNumber: syz [ 443.181891][ T5940] usb 9-1: config 0 descriptor?? [ 443.188468][T11826] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 443.198101][T11826] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 443.419675][ T5940] usb 8-1: USB disconnect, device number 10 [ 443.784881][T11827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 444.733642][ T30] audit: type=1400 audit(2000000166.970:1012): avc: denied { map } for pid=11859 comm="syz.6.1409" path="socket:[42072]" dev="sockfs" ino=42072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 444.761058][ T30] audit: type=1400 audit(2000000166.990:1013): avc: denied { read } for pid=11859 comm="syz.6.1409" path="socket:[42072]" dev="sockfs" ino=42072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 445.168015][T11878] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=311 sclass=netlink_xfrm_socket pid=11878 comm=syz.9.1414 [ 445.352958][ T5942] usb 9-1: USB disconnect, device number 16 [ 446.062260][ T90] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 446.110465][ T8784] IPVS: starting estimator thread 0... [ 446.222665][T11929] IPVS: using max 78 ests per chain, 187200 per kthread [ 447.096123][T11941] loop6: detected capacity change from 0 to 2640 [ 447.147544][T11941] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.442687][T11941] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.492343][T11941] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.597951][T11952] loop6: detected capacity change from 2640 to 524287999 [ 447.627734][T11941] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.678144][T11941] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.725707][T11941] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.773991][T11941] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.787079][T11941] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.842800][T11941] ldm_validate_partition_table(): Disk read failed. [ 447.868030][T11941] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.897227][T11941] Buffer I/O error on dev loop6, logical block 0, async page read [ 447.927650][T11941] Dev loop6: unable to read RDB block 0 [ 448.037993][T11941] loop6: unable to read partition table [ 448.068666][T11941] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 448.267800][T11960] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 448.267800][T11960] program syz.8.1425 not setting count and/or reply_len properly [ 448.342381][ T90] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 448.529105][ T90] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.572656][ T8784] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 448.573096][ T90] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.627293][ T90] usb 7-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 448.651021][ T90] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.681086][ T90] usb 7-1: config 0 descriptor?? [ 448.769194][ T8784] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.812299][ T8784] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.832245][ T8784] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 448.841284][ T8784] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.872901][ T8784] usb 8-1: config 0 descriptor?? [ 449.088072][T11964] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1426'. [ 449.104368][ T90] asus 0003:048D:CE50.000F: item fetching failed at offset 2/5 [ 449.123017][ T90] asus 0003:048D:CE50.000F: Asus hid parse failed: -22 [ 449.129937][ T90] asus 0003:048D:CE50.000F: probe with driver asus failed with error -22 [ 449.155740][ T8784] usbhid 8-1:0.0: can't add hid device: -71 [ 449.161726][ T8784] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 449.194208][ T8784] usb 8-1: USB disconnect, device number 11 [ 449.232440][ T5942] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 449.311701][ T30] audit: type=1400 audit(2000000171.540:1014): avc: denied { create } for pid=11957 comm="syz.6.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 449.331610][ T30] audit: type=1400 audit(2000000171.540:1015): avc: denied { getopt } for pid=11957 comm="syz.6.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 449.527684][ T5942] usb 6-1: config 1 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 449.576461][ T5942] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.602393][ T5942] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 449.693362][T12003] Cannot find add_set index 0 as target [ 449.790198][ T5942] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 449.816918][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.881401][ T90] usb 7-1: USB disconnect, device number 16 [ 449.898010][ T5942] usb-storage 6-1:1.0: USB Mass Storage device detected [ 449.935569][ T5942] usb-storage 6-1:1.0: Quirks match for vid 1908 pid 1315: 20000 [ 450.140081][ T90] usb 6-1: USB disconnect, device number 17 [ 450.917092][T12020] IPVS: length: 149 != 6818248 [ 450.927927][T12020] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1437'. [ 451.412242][ T8784] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 451.481411][ T30] audit: type=1400 audit(2000000173.710:1016): avc: denied { read } for pid=12039 comm="syz.5.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 451.802237][ T8784] usb 8-1: Using ep0 maxpacket: 8 [ 451.807599][ T30] audit: type=1326 audit(2000000174.040:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d1f8f749 code=0x7ffc0000 [ 451.843413][ T8784] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 451.863382][ T8784] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 451.875448][ T30] audit: type=1326 audit(2000000174.040:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d1f8f749 code=0x7ffc0000 [ 451.912562][ T8784] usb 8-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 451.924104][ T8784] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.159170][ T30] audit: type=1326 audit(2000000174.080:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8d1f8f749 code=0x7ffc0000 [ 452.224339][ T8784] usb 8-1: Product: syz [ 452.254518][ T8784] usb 8-1: Manufacturer: syz [ 452.286346][ T8784] usb 8-1: SerialNumber: syz [ 452.298995][ T8784] usb 8-1: config 0 descriptor?? [ 452.308627][ T30] audit: type=1326 audit(2000000174.080:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d1f8f749 code=0x7ffc0000 [ 452.428149][ T30] audit: type=1326 audit(2000000174.080:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d1f8f749 code=0x7ffc0000 [ 452.505582][ T30] audit: type=1326 audit(2000000174.090:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8d1f8f749 code=0x7ffc0000 [ 452.566929][ T30] audit: type=1326 audit(2000000174.140:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d1f8f749 code=0x7ffc0000 [ 453.227423][ T8784] usb 8-1: USB disconnect, device number 12 [ 454.432906][ T849] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 454.592391][ T849] usb 8-1: device descriptor read/64, error -71 [ 454.663943][ T8784] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 454.852225][ T849] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 454.860027][ T8784] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 455.029480][ T849] usb 8-1: device descriptor read/64, error -71 [ 455.361643][ T849] usb usb8-port1: attempt power cycle [ 455.712242][ T849] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 455.742883][ T849] usb 8-1: device descriptor read/8, error -71 [ 455.876827][T12142] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1465'. [ 455.994592][ T849] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 456.032757][ T849] usb 8-1: device descriptor read/8, error -71 [ 456.155405][ T849] usb usb8-port1: unable to enumerate USB device [ 456.320984][ T849] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 456.980587][T12147] syz.6.1467 (12147): drop_caches: 2 [ 456.991205][T12147] syz.6.1467 (12147): drop_caches: 2 [ 457.362244][ T5942] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 458.230103][ T5942] usb 7-1: device descriptor read/64, error -71 [ 458.491271][T12182] vivid-000: disconnect [ 458.502985][T12178] vivid-000: reconnect [ 458.512272][ T5942] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 458.587232][T12187] use of bytesused == 0 is deprecated and will be removed in the future, [ 458.644100][T12187] use the actual size instead. [ 458.652283][ T5942] usb 7-1: device descriptor read/64, error -71 [ 458.772570][ T5942] usb usb7-port1: attempt power cycle [ 458.951760][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 458.951775][ T30] audit: type=1400 audit(2000000181.180:1044): avc: denied { ioctl } for pid=12198 comm="syz.9.1481" path="socket:[41759]" dev="sockfs" ino=41759 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 458.987570][ T30] audit: type=1400 audit(2000000181.220:1045): avc: denied { read } for pid=12198 comm="syz.9.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 459.062325][T12202] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 459.142232][ T8784] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 459.161682][ T849] usb 9-1: unable to get BOS descriptor or descriptor too short [ 459.172127][ T849] usb 9-1: too many configurations: 165, using maximum allowed: 8 [ 459.182109][ T849] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 459.196723][ T849] usb 9-1: can't read configurations, error -71 [ 459.252285][ T5942] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 459.285911][ T5942] usb 7-1: device descriptor read/8, error -71 [ 459.322236][ T8784] usb 6-1: Using ep0 maxpacket: 16 [ 459.328670][ T8784] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 459.372430][ T8784] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 459.381505][ T8784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.435726][T12213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.447601][ T8784] usb 6-1: config 0 descriptor?? [ 459.453590][T12213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.483725][ T8784] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input41 [ 459.641215][ T5942] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 459.650575][T12216] bridge0: port 3(gretap0) entered blocking state [ 459.657119][T12216] bridge0: port 3(gretap0) entered disabled state [ 459.663730][T12216] gretap0: entered allmulticast mode [ 459.670474][T12216] gretap0: entered promiscuous mode [ 459.676839][T12216] bridge0: port 3(gretap0) entered blocking state [ 459.683343][T12216] bridge0: port 3(gretap0) entered forwarding state [ 460.392599][ T5942] usb 7-1: device descriptor read/8, error -71 [ 460.511503][T12217] input: syz0 as /devices/virtual/input/input42 [ 460.520153][ T5942] usb usb7-port1: unable to enumerate USB device [ 460.877029][ T30] audit: type=1400 audit(2000000183.110:1046): avc: denied { ioctl } for pid=12224 comm="syz.7.1489" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 460.877310][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1489'. [ 461.806392][T12226] Invalid argument reading file caps for ./file0 [ 462.388476][ T8784] usb 6-1: USB disconnect, device number 18 [ 462.397584][ T5169] bcm5974 6-1:0.0: could not read from device [ 462.568956][T12249] tipc: Started in network mode [ 462.573895][T12249] tipc: Node identity 4, cluster identity 4711 [ 462.580055][T12249] tipc: Node number set to 4 [ 462.879275][T12231] delete_channel: no stack [ 463.292254][T12262] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1491'. [ 463.545680][ T30] audit: type=1400 audit(2000000185.780:1047): avc: denied { lock } for pid=12266 comm="syz.5.1498" path="socket:[41896]" dev="sockfs" ino=41896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 465.092281][ T5923] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 465.119884][T12296] random: crng reseeded on system resumption [ 465.961168][T12304] syzkaller1: entered promiscuous mode [ 465.962410][ T5923] usb 8-1: Using ep0 maxpacket: 8 [ 465.975049][ T5923] usb 8-1: unable to get BOS descriptor or descriptor too short [ 465.983129][T12304] syzkaller1: entered allmulticast mode [ 465.991290][ T5923] usb 8-1: config 11 has an invalid interface number: 242 but max is 0 [ 466.011313][ T5923] usb 8-1: config 11 has no interface number 0 [ 466.031082][ T5923] usb 8-1: config 11 interface 242 altsetting 225 endpoint 0x6 has invalid maxpacket 15735, setting to 1024 [ 466.043072][ T5923] usb 8-1: config 11 interface 242 altsetting 225 bulk endpoint 0x6 has invalid maxpacket 1024 [ 466.055835][ T5923] usb 8-1: config 11 interface 242 altsetting 225 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 466.056300][T12306] netlink: 'syz.8.1512': attribute type 16 has an invalid length. [ 466.067196][ T5923] usb 8-1: config 11 interface 242 has no altsetting 0 [ 466.068825][ T5923] usb 8-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=38.8a [ 466.101988][T12306] netlink: 'syz.8.1512': attribute type 2 has an invalid length. [ 466.111492][ T5923] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.127085][T12306] netlink: 64086 bytes leftover after parsing attributes in process `syz.8.1512'. [ 466.132228][ T5923] usb 8-1: Product: syz [ 466.140686][ T5923] usb 8-1: Manufacturer: syz [ 466.152951][ T5923] usb 8-1: SerialNumber: syz [ 466.164070][T12292] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 466.290714][T12311] futex_wake_op: syz.5.1514 tries to shift op by -1; fix this program [ 466.382358][ T5920] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 466.407027][ T5923] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 4 is not bulk. [ 466.419869][ T5923] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 14 is not bulk. [ 466.429894][ T5923] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 466.452649][ T5923] usb 8-1: USB disconnect, device number 18 [ 466.552697][ T5920] usb 9-1: Using ep0 maxpacket: 8 [ 466.563056][ T5920] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.582188][ T5920] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 466.593665][ T5920] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 466.605253][ T5920] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 466.616561][ T5920] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 466.626103][ T5920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.638302][ T5920] hub 9-1:1.0: bad descriptor, ignoring hub [ 466.646304][ T5920] hub 9-1:1.0: probe with driver hub failed with error -5 [ 466.653992][ T5920] cdc_wdm 9-1:1.0: skipping garbage [ 466.659187][ T5920] cdc_wdm 9-1:1.0: skipping garbage [ 466.665893][ T5920] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 466.671790][ T5920] cdc_wdm 9-1:1.0: Unknown control protocol [ 466.981047][T12324] 9p: Bad value for 'rfdno' [ 467.012259][ T5923] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 467.162217][ T5923] usb 7-1: Using ep0 maxpacket: 8 [ 467.769894][ T5923] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 467.782362][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 467.796743][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 467.807159][T12331] input: syz0 as /devices/virtual/input/input43 [ 467.816576][ T5923] usb 7-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 467.826215][ T5923] usb 7-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 467.842220][ T5923] usb 7-1: Product: syz [ 467.847870][ T5923] usb 7-1: Manufacturer: syz [ 467.856758][ T5923] usb 7-1: SerialNumber: syz [ 467.888098][ T5923] usb 7-1: config 0 descriptor?? [ 467.953420][ T5923] smsusb:smsusb_probe: board id=2, interface number 0 [ 467.972851][ T5923] smsusb:smsusb_probe: Device initialized with return code -19 [ 468.084916][ T5942] usb 9-1: USB disconnect, device number 19 [ 468.208571][T12318] netlink: 'syz.6.1515': attribute type 1 has an invalid length. [ 468.442209][ T5942] usb 7-1: USB disconnect, device number 21 [ 468.590427][T12357] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1525'. [ 468.591749][T12363] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1525'. [ 469.132932][ T30] audit: type=1400 audit(2000000191.370:1048): avc: denied { mounton } for pid=12376 comm="syz.7.1530" path="/81/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 469.476213][ T30] audit: type=1400 audit(2000000191.710:1049): avc: denied { setattr } for pid=12381 comm="syz.8.1533" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 469.503579][T12385] netlink: 'syz.8.1533': attribute type 12 has an invalid length. [ 469.575747][ T30] audit: type=1326 audit(2000000191.810:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.6.1532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8d1f8f749 code=0x0 [ 469.843993][ T849] hid-generic 07FF:0004:0009.0011: unknown main item tag 0x0 [ 470.380430][ T849] hid-generic 07FF:0004:0009.0011: unknown main item tag 0x0 [ 470.405002][ T849] hid-generic 07FF:0004:0009.0011: unknown main item tag 0x0 [ 470.443938][ T849] hid-generic 07FF:0004:0009.0011: hidraw0: HID v0.04 Device [syz1] on syz1 [ 470.705839][ T90] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 471.034195][ T90] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.057453][ T90] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.069942][ T90] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 471.083226][ T90] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 471.094524][ T90] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.125148][ T90] usb 8-1: config 0 descriptor?? [ 471.179123][ T30] audit: type=1400 audit(2000000193.410:1051): avc: denied { bind } for pid=12411 comm="syz.5.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 471.809309][ T5923] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 471.847836][ T90] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 471.892229][ T5940] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 471.962246][ T5923] usb 9-1: device descriptor read/64, error -71 [ 472.080703][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 472.096951][ T5940] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 472.193158][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.220296][ T5940] usb 6-1: config 0 descriptor?? [ 472.226711][T12412] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 472.252293][ T5923] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 472.402339][ T5923] usb 9-1: device descriptor read/64, error -71 [ 472.512417][ T5923] usb usb9-port1: attempt power cycle [ 472.652005][ T5940] saitek 0003:0738:1709.0013: unknown main item tag 0x0 [ 472.663025][ T5940] saitek 0003:0738:1709.0013: unknown main item tag 0x0 [ 472.681124][ T5940] saitek 0003:0738:1709.0013: hidraw1: USB HID v1.01 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input0 [ 472.796224][ C0] plantronics 0003:047F:FFFF.0012: hid_field_extract() called with n (132) > 32! (swapper/0) [ 472.870801][ T8784] usb 6-1: USB disconnect, device number 19 [ 472.902240][ T5923] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 472.923420][ T5923] usb 9-1: device descriptor read/8, error -71 [ 473.188296][ T5923] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 473.212634][ T5923] usb 9-1: device descriptor read/8, error -71 [ 473.324963][ T5923] usb usb9-port1: unable to enumerate USB device [ 473.995885][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1548'. [ 474.027250][T12438] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1548'. [ 474.426351][ T8784] usb 8-1: USB disconnect, device number 19 [ 474.441849][ T30] audit: type=1400 audit(2000000196.670:1052): avc: denied { connect } for pid=12437 comm="syz.9.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 475.052481][ T8784] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 475.230336][ T8784] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 475.242232][ T8784] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 475.265826][ T8784] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 475.275775][ T8784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 475.286246][ T8784] usb 6-1: Product: syz [ 475.305019][ T8784] usb 6-1: Manufacturer: syz [ 475.311772][ T8784] usb 6-1: SerialNumber: syz [ 475.345166][ T8784] usb 6-1: config 0 descriptor?? [ 475.442372][ T5923] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 475.574548][T12471] overlayfs: failed to clone upperpath [ 475.581495][T12471] overlayfs: failed to clone upperpath [ 475.602227][ T5923] usb 7-1: Using ep0 maxpacket: 8 [ 475.619648][ T5923] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 475.634961][ T5923] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 475.771380][ T5923] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 475.784910][ T8784] usb 6-1: Firmware version (0.0) predates our first public release. [ 475.793212][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.801344][ T8784] usb 6-1: Please update to version 0.2 or newer [ 475.809262][ T5923] usb 7-1: Product: syz [ 475.813882][ T5923] usb 7-1: Manufacturer: â¡— [ 475.818583][ T5923] usb 7-1: SerialNumber: syz [ 477.404276][ T8784] usb 6-1: USB disconnect, device number 20 [ 478.205397][T12466] netlink: 'syz.6.1556': attribute type 3 has an invalid length. [ 478.223279][ T5923] cdc_ncm 7-1:1.0: bind() failure [ 478.233150][ T5923] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 478.240111][ T5923] cdc_ncm 7-1:1.1: bind() failure [ 478.257481][ T5923] usb 7-1: USB disconnect, device number 22 [ 478.472580][ T5893] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 478.481461][ T5893] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 478.552914][T11066] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 478.656626][ T30] audit: type=1400 audit(2000000200.890:1053): avc: denied { listen } for pid=12505 comm="syz.9.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 478.702223][T11066] usb 9-1: device descriptor read/64, error -71 [ 478.702273][ T5923] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 478.736740][ T8784] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 478.903739][ T5923] usb 8-1: config 0 has no interfaces? [ 478.915111][ T5923] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.929412][ T8784] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 478.938149][ T5923] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 478.947667][ T8784] usb 6-1: config 0 has no interface number 0 [ 478.956796][ T5923] usb 8-1: SerialNumber: syz [ 478.957444][T11066] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 478.969172][ T8784] usb 6-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 478.982425][ T5923] usb 8-1: config 0 descriptor?? [ 478.997462][ T8784] usb 6-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 479.029892][ T8784] usb 6-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 479.064313][ T8784] usb 6-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 479.119247][T11066] usb 9-1: device descriptor read/64, error -71 [ 479.161288][ T8784] usb 6-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 479.181104][ T8784] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 479.202939][ T8784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.215609][ T8784] usb 6-1: Product: syz [ 479.221644][ T8784] usb 6-1: Manufacturer: syz [ 479.228559][ T8784] usb 6-1: SerialNumber: syz [ 479.239149][ T8784] usb 6-1: config 0 descriptor?? [ 479.253071][T12494] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 479.260374][T11066] usb usb9-port1: attempt power cycle [ 479.268314][ T8784] iguanair 6-1:0.255: probe with driver iguanair failed with error -12 [ 479.392275][ T5923] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 479.471802][ T5940] usb 6-1: USB disconnect, device number 21 [ 479.543807][ T5923] usb 7-1: config 3 has an invalid interface number: 61 but max is 0 [ 479.552032][ T5923] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 479.562884][ T5923] usb 7-1: config 3 has no interface number 0 [ 479.570944][ T5923] usb 7-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 479.584107][ T5923] usb 7-1: config 3 interface 61 has no altsetting 0 [ 479.594362][ T5923] usb 7-1: string descriptor 0 read error: -22 [ 479.600667][ T5923] usb 7-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 479.610311][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.621992][ T5923] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 479.637214][T11066] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 479.638737][ T5923] snd-usb-audio 7-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 479.672638][T11066] usb 9-1: device descriptor read/8, error -71 [ 479.832043][ T5940] usb 7-1: USB disconnect, device number 23 [ 479.913261][T11066] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 479.932618][T11066] usb 9-1: device descriptor read/8, error -71 [ 480.043140][T11066] usb usb9-port1: unable to enumerate USB device [ 480.396080][ T30] audit: type=1400 audit(2000000202.630:1054): avc: denied { setopt } for pid=12531 comm="syz.6.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 480.429242][ T30] audit: type=1400 audit(2000000202.660:1055): avc: denied { connect } for pid=12531 comm="syz.6.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 480.453385][ T30] audit: type=1400 audit(2000000202.660:1056): avc: denied { write } for pid=12531 comm="syz.6.1573" path="socket:[44231]" dev="sockfs" ino=44231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 481.276854][ T8784] usb 8-1: USB disconnect, device number 20 [ 482.419946][T12558] tipc: Started in network mode [ 482.424911][T12558] tipc: Node identity da28d4d2f19b, cluster identity 4711 [ 482.442524][T12558] tipc: Enabled bearer , priority 0 [ 482.457291][T12558] syzkaller0: entered promiscuous mode [ 482.467147][T12558] syzkaller0: entered allmulticast mode [ 482.656484][T12559] tipc: Resetting bearer [ 482.714041][T12556] tipc: Resetting bearer [ 482.802670][T12556] tipc: Disabling bearer [ 482.929136][T12563] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1580'. [ 483.090133][ T30] audit: type=1400 audit(2000000205.320:1057): avc: denied { accept } for pid=12572 comm="syz.5.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 483.368728][T12585] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1584'. [ 483.430600][ T30] audit: type=1400 audit(2000000205.610:1058): avc: denied { accept } for pid=12576 comm="syz.7.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 484.092712][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1587'. [ 484.109232][T12592] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1587'. [ 484.560619][T12596] random: crng reseeded on system resumption [ 484.697524][T12598] fuse: Unknown parameter '000000000000000000680x0000000000000044' [ 484.983104][ T8784] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 485.110290][T12615] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 485.121252][ T8784] usb 7-1: device descriptor read/64, error -71 [ 485.192274][ T5893] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 485.342212][ T5893] usb 6-1: Using ep0 maxpacket: 8 [ 485.376633][ T5893] usb 6-1: unable to get BOS descriptor or descriptor too short [ 485.392394][ T8784] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 485.404264][ T5893] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 485.421560][ T5893] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 485.452897][ T5893] usb 6-1: config 4 has no interface number 0 [ 485.469172][ T5893] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 485.486927][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.497396][ T5893] usb 6-1: Product: syz [ 485.501613][ T5893] usb 6-1: Manufacturer: syz [ 485.507472][ T5893] usb 6-1: SerialNumber: syz [ 485.532508][ T8784] usb 7-1: device descriptor read/64, error -71 [ 485.672616][ T8784] usb usb7-port1: attempt power cycle [ 485.726360][ T30] audit: type=1400 audit(2000000207.960:1059): avc: denied { associate } for pid=12620 comm="syz.8.1597" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 485.827350][T12621] 9p: Bad value for 'wfdno' [ 486.096685][ T8784] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 486.124127][T12627] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 486.137319][ T8784] usb 7-1: device descriptor read/8, error -71 [ 486.382373][ T8784] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 486.422735][ T8784] usb 7-1: device descriptor read/8, error -71 [ 486.457348][T12633] random: crng reseeded on system resumption [ 486.552496][ T8784] usb usb7-port1: unable to enumerate USB device [ 486.897107][T12636] ------------[ cut here ]------------ [ 486.902646][T12636] WARNING: mm/shmem.c:1402 at shmem_evict_inode+0x8eb/0xbe0, CPU#0: syz.8.1599/12636 [ 486.912119][T12636] Modules linked in: [ 486.916060][T12636] CPU: 0 UID: 0 PID: 12636 Comm: syz.8.1599 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.927053][T12636] Tainted: [L]=SOFTLOCKUP [ 486.931388][T12636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.941456][T12636] RIP: 0010:shmem_evict_inode+0x8eb/0xbe0 [ 486.947178][T12636] Code: fe e8 e9 34 bb ff 45 85 ff 75 ac e8 3f 3a bb ff 48 8b 74 24 28 48 8b 7c 24 30 e8 10 74 92 ff e9 e5 fd ff ff e8 26 3a bb ff 90 <0f> 0b 90 e9 54 f9 ff ff e8 18 3a bb ff 4c 89 e2 48 b8 00 00 00 00 [ 486.967616][T12636] RSP: 0018:ffffc9000d9d7a50 EFLAGS: 00010246 [ 486.973701][T12636] RAX: 0000000000080000 RBX: ffff88802b180180 RCX: ffffc90014cb6000 [ 486.981675][T12636] RDX: 0000000000080000 RSI: ffffffff8203a9da RDI: 0000000000000007 [ 486.989710][T12636] RBP: ffffc9000d9d7b78 R08: 0000000000000007 R09: 0000000000000000 [ 486.997727][T12636] R10: 0000000000000008 R11: ffff88802eae8b30 R12: 0000000000000008 [ 487.005734][T12636] R13: 0000000000000000 R14: ffffed100563002c R15: 1ffff1100563000e [ 487.013735][T12636] FS: 00007f10b6ab46c0(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 487.022707][T12636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.029300][T12636] CR2: 000000110c37bd4e CR3: 0000000075aca000 CR4: 00000000003526f0 [ 487.037564][T12636] Call Trace: [ 487.040851][T12636] [ 487.043825][T12636] ? __pfx_shmem_evict_inode+0x10/0x10 [ 487.049297][T12636] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 487.055409][T12636] ? find_held_lock+0x2b/0x80 [ 487.060102][T12636] ? evict+0x37e/0xad0 [ 487.064244][T12636] ? __pfx_shmem_evict_inode+0x10/0x10 [ 487.071173][T12636] evict+0x3c2/0xad0 [ 487.075099][T12636] ? find_held_lock+0x2b/0x80 [ 487.079794][T12636] ? __pfx_evict+0x10/0x10 [ 487.084250][T12636] ? iput.part.0+0x619/0x1190 [ 487.088967][T12636] iput.part.0+0x621/0x1190 [ 487.093522][T12636] iput+0x35/0x40 [ 487.097166][T12636] dentry_unlink_inode+0x29c/0x480 [ 487.102331][T12636] __dentry_kill+0x1d0/0x600 [ 487.106932][T12636] finish_dput+0x76/0x480 [ 487.111273][T12636] dput.part.0+0x451/0x570 [ 487.116269][T12636] dput+0x1f/0x30 [ 487.119911][T12636] __fput+0x51c/0xb70 [ 487.123924][T12636] ? _raw_spin_unlock_irq+0x23/0x50 [ 487.129138][T12636] task_work_run+0x150/0x240 [ 487.133765][T12636] ? __pfx_task_work_run+0x10/0x10 [ 487.138896][T12636] exit_to_user_mode_loop+0xfb/0x540 [ 487.144227][T12636] do_syscall_64+0x4ee/0xf80 [ 487.148837][T12636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.154771][T12636] RIP: 0033:0x7f10b5b8f749 [ 487.159211][T12636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.180403][T12636] RSP: 002b:00007f10b6ab4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 487.188858][T12636] RAX: 0000200000000000 RBX: 00007f10b5de6180 RCX: 00007f10b5b8f749 [ 487.197761][T12636] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000 [ 487.205731][T12636] RBP: 00007f10b5c13f91 R08: ffffffffffffffff R09: 00000000fffff000 [ 487.213701][T12636] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 487.221666][T12636] R13: 00007f10b5de6218 R14: 00007f10b5de6180 R15: 00007fffc63e1658 [ 487.229659][T12636] [ 487.232688][T12636] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 487.239942][T12636] CPU: 0 UID: 0 PID: 12636 Comm: syz.8.1599 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.250861][T12636] Tainted: [L]=SOFTLOCKUP [ 487.255159][T12636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.265197][T12636] Call Trace: [ 487.268453][T12636] [ 487.271358][T12636] dump_stack_lvl+0x3d/0x1f0 [ 487.275927][T12636] vpanic+0x640/0x6f0 [ 487.279885][T12636] ? shmem_evict_inode+0x8eb/0xbe0 [ 487.284967][T12636] panic+0xca/0xd0 [ 487.288668][T12636] ? __pfx_panic+0x10/0x10 [ 487.293087][T12636] check_panic_on_warn+0xab/0xb0 [ 487.298022][T12636] __warn+0x108/0x3c0 [ 487.302000][T12636] __report_bug+0x2a0/0x520 [ 487.306508][T12636] ? shmem_evict_inode+0x8eb/0xbe0 [ 487.311602][T12636] ? __pfx___report_bug+0x10/0x10 [ 487.316608][T12636] ? find_held_lock+0x2b/0x80 [ 487.321266][T12636] ? __lock_acquire+0x436/0x2890 [ 487.326177][T12636] ? shmem_evict_inode+0x8eb/0xbe0 [ 487.331271][T12636] report_bug+0xb2/0x220 [ 487.335501][T12636] ? shmem_evict_inode+0x8eb/0xbe0 [ 487.340582][T12636] handle_bug+0x127/0x260 [ 487.344898][T12636] exc_invalid_op+0x17/0x50 [ 487.349387][T12636] asm_exc_invalid_op+0x1a/0x20 [ 487.354211][T12636] RIP: 0010:shmem_evict_inode+0x8eb/0xbe0 [ 487.359901][T12636] Code: fe e8 e9 34 bb ff 45 85 ff 75 ac e8 3f 3a bb ff 48 8b 74 24 28 48 8b 7c 24 30 e8 10 74 92 ff e9 e5 fd ff ff e8 26 3a bb ff 90 <0f> 0b 90 e9 54 f9 ff ff e8 18 3a bb ff 4c 89 e2 48 b8 00 00 00 00 [ 487.379482][T12636] RSP: 0018:ffffc9000d9d7a50 EFLAGS: 00010246 [ 487.385521][T12636] RAX: 0000000000080000 RBX: ffff88802b180180 RCX: ffffc90014cb6000 [ 487.393468][T12636] RDX: 0000000000080000 RSI: ffffffff8203a9da RDI: 0000000000000007 [ 487.401417][T12636] RBP: ffffc9000d9d7b78 R08: 0000000000000007 R09: 0000000000000000 [ 487.409358][T12636] R10: 0000000000000008 R11: ffff88802eae8b30 R12: 0000000000000008 [ 487.417298][T12636] R13: 0000000000000000 R14: ffffed100563002c R15: 1ffff1100563000e [ 487.425245][T12636] ? shmem_evict_inode+0x8ea/0xbe0 [ 487.430333][T12636] ? __pfx_shmem_evict_inode+0x10/0x10 [ 487.435764][T12636] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 487.441803][T12636] ? find_held_lock+0x2b/0x80 [ 487.446457][T12636] ? evict+0x37e/0xad0 [ 487.450500][T12636] ? __pfx_shmem_evict_inode+0x10/0x10 [ 487.455928][T12636] evict+0x3c2/0xad0 [ 487.459794][T12636] ? find_held_lock+0x2b/0x80 [ 487.464447][T12636] ? __pfx_evict+0x10/0x10 [ 487.468839][T12636] ? iput.part.0+0x619/0x1190 [ 487.473497][T12636] iput.part.0+0x621/0x1190 [ 487.477972][T12636] iput+0x35/0x40 [ 487.481577][T12636] dentry_unlink_inode+0x29c/0x480 [ 487.486665][T12636] __dentry_kill+0x1d0/0x600 [ 487.491226][T12636] finish_dput+0x76/0x480 [ 487.495541][T12636] dput.part.0+0x451/0x570 [ 487.499932][T12636] dput+0x1f/0x30 [ 487.503539][T12636] __fput+0x51c/0xb70 [ 487.507491][T12636] ? _raw_spin_unlock_irq+0x23/0x50 [ 487.512662][T12636] task_work_run+0x150/0x240 [ 487.517228][T12636] ? __pfx_task_work_run+0x10/0x10 [ 487.522326][T12636] exit_to_user_mode_loop+0xfb/0x540 [ 487.527587][T12636] do_syscall_64+0x4ee/0xf80 [ 487.532159][T12636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.538034][T12636] RIP: 0033:0x7f10b5b8f749 [ 487.542419][T12636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.561995][T12636] RSP: 002b:00007f10b6ab4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 487.570387][T12636] RAX: 0000200000000000 RBX: 00007f10b5de6180 RCX: 00007f10b5b8f749 [ 487.578328][T12636] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000 [ 487.586269][T12636] RBP: 00007f10b5c13f91 R08: ffffffffffffffff R09: 00000000fffff000 [ 487.594209][T12636] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 487.602157][T12636] R13: 00007f10b5de6218 R14: 00007f10b5de6180 R15: 00007fffc63e1658 [ 487.610126][T12636] [ 487.613399][T12636] Kernel Offset: disabled [ 487.617694][T12636] Rebooting in 86400 seconds..