last executing test programs: 7m10.519552301s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 7m9.941948249s ago: executing program 2 (id=3): r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x1002}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x10000000, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 7m8.445171256s ago: executing program 2 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 6m54.964571226s ago: executing program 32 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 6m53.288567663s ago: executing program 33 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3m39.412144192s ago: executing program 1 (id=798): close(0xffffffffffffffff) (async) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x3fe) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000800)=@random={'user.', '{![\')}*\x00'}, &(0x7f0000000840)=""/112, 0x70) (async) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=0x0) sendmsg$nl_netfilter(r0, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x450, 0x13, 0x9, 0x101, 0x70bd2b, 0x25dfdbfe, {0x1, 0x0, 0x8}, [@nested={0x9d, 0x19, 0x0, 0x1, [@generic="f04eae54e6396d7964a4cc61d7a237b8d3c0bdb449a0fc55d6b272aef3672488bb8915bbf0f8eb79f759095c19015bf0d62ac4", @generic="2e7130c221095d81495667c9c7311661c43fc9035c497c88e2c06cec6b2bb5f65ebbb8a61bb32bc3ce88e0b49d049e8f3bdfdefa2d11be19bc4f0f74751ebcbc655b513703f7c3c0e86d3d85c9a9759270c4206d5e5381b5e78537a896c1", @nested={0x4, 0xde}, @nested={0x4, 0xbc}]}, @typed={0x8, 0x43, 0x0, 0x0, @pid=r4}, @generic="49ec414672c630955cc8a9599cb0b69fe55002a2bf4ab9312eef1680335b5f31d36334fba2e9ac5e19dc21cd0b1c66bbbe65d9cad6c5c5a49f1ca2eed4e0509268db07771a29c8e91a21921fc405b1d712701552d05139d9a4313b82bd4bfc8110fe4ed1bb263c9a34b0f4bedc4d41f8481690aa55ff7fe61913a877b1b3d0f3cb9440575a1fdb8d60f58b4952df6e04676ff631b3c556f01e6dd7d638221a708da23d71d5c20ca5a34cec6ef455e4b967cbf77afd4d5852627b33cd2ad6ec5ff942cd57f6971d89bc1d0f98fc07ce9c7251f5c96f08830c70dff4cbaf1a4a39d4e0e4c704bfc6cda9f4fdbccab0e589e4f3602ddf0d", @nested={0xed, 0x11e, 0x0, 0x1, [@generic="f373ac04643b36a263ce7ac2de3d473b9885bc03589eec440e8df34c0112ede92e73df0e701595455747a77b157417a89b69b5e6e64f2e30d4676e51094ea474302e4c91118e2d9793", @typed={0x8, 0xc9, 0x0, 0x0, @pid=r1}, @generic="23eca4343b78f7874fa57df1978643fb469ca7748f91d93aa45f40b741d74f2af9c77c1d0e5aa8ad86e2423334760af657c90a506a65d3605e33c15144399d3919db7ecc14c2928a688ea8f22e948b81c317c56354af1fc82a302d5fd50229e54ed0335f2500d6174eb44239a6f738cd351ad02905ee61531866df23e6d7ca136993db3b545112eb9165cdddcc5ff66510a8f48d87ff7a2f"]}, @typed={0x11, 0x148, 0x0, 0x0, @str='@[-*}//--)/:\x00'}, @generic="5fa0ef32227484b0d5320d2bc8d51e2fbbb24fe6ba8da047e80f76ac54f6429dbf008029cef32b71766ddcdf24ee96e47f16d5c8ab356363c2e364d93c2a8238093da6d7fac3b0b97e949372cbe1a22c1a00db6f327b8599bd3c61844cf4b5e5b72d55e7e41f6d5225ffe42108565b89bfa412c7848f9b4a79555370083e4f102b4c931ee414cc640cbfe374ebe08703d41514350fd65b625fe1211db24f6bdd97e7c4097aff56fd67c7ebb057ab08c100", @typed={0x14, 0x38, 0x0, 0x0, @ipv6=@local}, @generic="6c071769dbb0d3a4b4048211d59e4b31fe5cc287d526e242f89df0a622a8ed5f3debdc97f0895270bc968bc1470148cba7e0e408c0280ae111b874dce17f84992723a26f13e2cad2a144f519a2854084b636e23a5159c930caf679baa714af137dc6c8a88d27df4e2dd7a097e49a7249739c7af88facac103fae9eb17522c7516e4d6839bb01af2872662f77844af626d54adad120ce13daebb9725db8a132a877d9e7616ce8ec6c35ecba46bf345ca1861630b17fe053967734f68c851d41dc81fa52f5b605f9f4cd3ca0623bb55f870c15"]}, 0x450}, 0x1, 0x0, 0x0, 0x520115646f0bc4ca}, 0x4001) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r6 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xebed, 0x400, 0x0, 0x378}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x3e82, 0x60, 0x0, 0xa7ff) 3m36.58436646s ago: executing program 1 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r4, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000002400)="03", 0x1}], 0x1}}], 0x2, 0x2000c044) syz_emit_ethernet(0x36, &(0x7f0000001800)={@random="4d5722d585a8", @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x16}}}}}, 0x0) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) 3m35.57895559s ago: executing program 1 (id=812): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="50d5d344a0c2d57900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000004c0), &(0x7f0000000480)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000187f00001300000000ac94f270000000ffffff7f9500000000000000000000000000b6e351ee6f8225f6577cfd65f5c4a06b09a087aa6549e7aad0155a8a6b7c0d75eb6898a24003c619ead70fda518f8a43b2c08dcc7bfedafbe720d9a53e77aa180cf05dcdfe37120bba8b744942d840625de19d1b08bb1df3533948753c3c6cce9730c7f8ad38dc9fb6db5c73209a38b390dfb3b1c73ae09a00479e1d18f2294e9881ac4ae740b87f414739b55b992b15bc5245"], &(0x7f00000008c0)='syzkaller\x00', 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f00002c3000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000040)=0x6, 0x5, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r4 = userfaultfd(0x80001) unshare(0x20000400) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) unshare(0x22020600) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002540)={'wlan1\x00'}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="05000000360f0f7a1ed76e823f40dcf9ca6db621536a57095967b42f2fc7c97a4d01de35365dfa57acc2a064db0600000000000000c6315359638cc30b57cc74180cf4c47007a090ebf6e29627694911e2d6d6fad35b866c6d17f05e1f9b333bfad4157c282876b76d2fe085a1150b869f806a35", @ANYBLOB="000127bd7000fedbdf254c0000000c00990004000000300000000c00580000000000000000000c0058000b000000000000000c0058000f00000000000000", @ANYRES16=r5], 0x44}, 0x1, 0x0, 0x0, 0x845}, 0x41) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000c0007800500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686073683a6e65742c706f72742c6e6574000000"], 0x5c}}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00006ed000/0x3000)=nil, 0x3000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r4) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1ff, 0xe) socket$netlink(0x10, 0x3, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x9, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) 3m33.024082656s ago: executing program 1 (id=824): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c03, r3) r4 = dup2(r2, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x21, 0x5, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0xf2, '\x00', 0x0, r4, 0x0, 0x2000001, 0x0, 0x200000000000000}, 0x50) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000000d]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 3m31.55234568s ago: executing program 1 (id=829): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer(0xffffff9c, &(0x7f0000001040), 0x20842, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000011c0)={0x1, 0x58, &(0x7f0000001140)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24004004}, 0x24000850) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000010c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getenv(0x4201, r1, 0xe3, &(0x7f0000001100)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000c40)=0x350) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001200)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r1, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$mixer_OSS_GETVERSION(r6, 0x40086602, &(0x7f00000000c0)) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001000)={0x0, @multicast1, @multicast2}, &(0x7f0000001080)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14edff00160000000000009e0000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, r6, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 3m31.300381931s ago: executing program 1 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="33000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000008000500", @ANYRES32=r2, @ANYBLOB="080004002a2500001c00128009000100766c616e000000000c0002800600010002000000"], 0x4c}, 0x1, 0xba01}, 0x24008014) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x400454da, &(0x7f0000000000)) 3m31.041518326s ago: executing program 34 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="33000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000008000500", @ANYRES32=r2, @ANYBLOB="080004002a2500001c00128009000100766c616e000000000c0002800600010002000000"], 0x4c}, 0x1, 0xba01}, 0x24008014) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x400454da, &(0x7f0000000000)) 43.721929044s ago: executing program 6 (id=1493): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000088}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000000000000b0000000003001473797a3000000000"], 0x28}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8=r6], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new ecryptfs use>:}@^/!-{ 00000000000000001024\x00'], 0x2f, 0xfffffffffffffffc) (async, rerun: 64) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async, rerun: 64) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x70}, {0x0, 0x0, 0x800}, {0x4, 0x800, 0x800}, {0x1, 0x16e, 0x1800}, {0x0, 0x7, 0x800}, {0x2, 0x800, 0x800}], 0x6, 0x0) (async) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) (async) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000500)=[0x1f33]) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) signalfd4(r0, &(0x7f0000000040)={[0xf]}, 0x8, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000440)="4ae652ffe640e9849686d04eeeac29d7c3ff142507d8f059d204a2b0324567f42419d078f2ece1703a08510efecb35a1f7174a4cbc2967c31bcf170788d109442f56f8222ff61ee6157a12b2fdc82c0f3561838322b16b657038fa683915b7e62d9f4bdc633024e9350e9729d8614b33b036e2e9b407a75758dddbc3b7406fad9294df", 0x83}, {&(0x7f00000001c0)="1a00c661fcb3c424b2b01cfac61118d4a10f0131e604e4fe2ca588", 0x1b}, {&(0x7f0000000200)="f7beffa08e28a70c0a5e02124601b6ffb36b7ec083e5f8c4765af7a60d0487ef1363667b8577bf04d34ad0c8600c290b9604593a7562ae74db3168017e463581ae5753bc3c11841bb64e664508037144fcf099f12114163f6ec5fdb7a9f972bb4335c5aa5fa4e1848e04dec7704eec538059fd3d0b050acb2130f0f2de2e9c6f994daeec14b171231816ac27747531d4097716dd8399cf934ac84d1dacde6806d6b6fda8fece6b600dbe47b5c7e86ad3c76754b565efa688293306cdb601c46bf8790c84d9e7f4e0c08bb6d2f5d96e9d9f69bc5a2c0c8020f2ed028fafe75a307853a01953", 0xe5}, {&(0x7f0000000300)="13d15d3e413aa3eede1b7190028d", 0xe}], 0x4) (async) tkill(0x0, 0x8) 42.827991649s ago: executing program 6 (id=1495): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x1, @capture={0x0, 0x1, {0x62f9, 0x6}, 0xfffffff8, 0x40}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000006231c0ff00000000b400000074909d5f9f10dda800000000"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x4, 0x132, 0x401}) r4 = accept$alg(r2, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x4c015) r5 = accept(r4, 0x0, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) bind$packet(r1, &(0x7f0000000400)={0x11, 0x1a, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x14) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)) r6 = syz_open_dev$audion(&(0x7f0000000380), 0x3ff, 0x121280) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f00000000c0)="02c60371873b12ee57f3c3f28efb78f89c9b9c4d98973afe67e6d9c73b1a07cd542f7690338b24394e07a80ccf1c2448a9051868f4e261019d4c4ad3a375e45587308f2a80813c7f8674a450abea70ee00e3d5b5f72ca76c30ccd00b5c308470e26007874787c5020391bca60b1be1bc4d383b3a9afef189d99252c715a05b12e31cc2e1", &(0x7f0000000240)=""/173, &(0x7f0000000300)="a2d535f4ec18245e9e1cc3a21689581625225fceb501b22d80e3364814f6bbc1b1a9fe0a07487dbd9111b176a831969b722610034815e540a0f205404e36649a59d57c1cb3cc7f490b7a08fcdce1546d8c4c0fff05ec99ef467d0861b92fd4302518f9b36181261f7780a254ac8aae8dd6c7914867aee508", &(0x7f0000000000)="699d251043ff94597c71875fba8ffaff07", 0x5, r6}, 0x38) 42.642103285s ago: executing program 6 (id=1497): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0xe, 0xa, &(0x7f0000000100)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x400008, &(0x7f0000000040)=ANY=[@ANYRESHEX]) prlimit64(0x0, 0xc, &(0x7f0000000140)={0xbc, 0x8b}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r7, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r8}, 0x38) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x1, 0x8, "2c0556434726e94d"}, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x22, 0x62, {0x62, 0xd, "ae18af83043afe1e1387c16564fa1fa2d1bc04ac2ba67a5d12672c7402ce3b62f52639f69a49460c7d7005b55580ee4f17bf1ce99defd2881966fd1cc7ab3ec7a5989b171193062da402e15c17bbe4b40e79355ba1524fcd1c5205aca5a7bf46"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}}, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x20, 0x17, 0x72, "085d9aa47129c909fd8ad4fae5462e88eea7509141bc42f3479a99a7529534a35318add4912e38844482e3c4d0d5cae9bbf620c533a9fad907518202b5b40f6d689f1671b68a536352ffc98db8192b56ae6028c6fc09685ac283b3c6e620bffeaa29eada3492e799714421c3569269d078a9"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000280)={0x20, 0x0, 0xe3, {0xe1, "4a9748090da2886dbfe3a330ed936931440e8c4bcdb9ec8cb4f2ecad2da6ab3fcbcd1302215dc5ac2fb0c1c15d5e72e77d6c334f67e7a3758cfbde076e1f037a3f1c5847bdb8643a8aba57657014f27eb4c5e6c3b5118f482c5e9880edf1bfcc09e092e2373eb57d655c217281095eafd81d53876f5fd682b0fa063b61853b2fe38bc69b594739ccf5432a373f354400c8ea97c2c6da958f871513852526eb71d8dd6f968349889d6ed2ad37154cadb38bce77b6808115862238a344e340a585b4fae00e5aebe298f290cec6e015eb1a46b2823ecaf9b69719eff65efb3ac23ed0"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x80}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x4}}) 39.419655168s ago: executing program 6 (id=1508): rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x10000000, 0x0) r0 = io_uring_setup(0x28d5, &(0x7f0000000100)={0x0, 0x5, 0x8, 0x20000, 0x38f}) close(r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x2c93a000) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f00000003c0)) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) close(0xffffffffffffffff) r4 = open(&(0x7f0000000200)='./file0\x00', 0x101020, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2a, 0x80000, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtaction={0x1270, 0x30, 0x400, 0x0, 0x3, {0x9}, [{0x125c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_connmark={0xb8, 0xd, 0x0, 0x0, {{0xd}, {0x4}, {0x88, 0x6, "6e48b7c3ef10613c7377600e3af887e01f92ccafe859f05096cc9f5fed92cf4f199e71cde9498bc9560341d8295ffdbbb7454622a749c07688a53fc9f428d30494a276ef1c84fe133efa2dc36f182321d752342d55f382306b6281ac42b6447ec6b22d5cc690310711d188f893ea70d9038f80f9c3862f8fb0b52f8b0d7b8e9cc8b97232"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x1148, 0x6, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x25, 0x3, 0x5, 0x6, 0x9}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xe, 0x5, 0x3, 0x2f1}, 0x23}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xfffffff8, 0xffffffffffffffff, 0x7, 0x4}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x100, 0x5, 0x9, 0x1}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0x0, 0x7, 0x3, 0x6}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x10000000, 0x4, 0x3a}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7e, 0x7f, 0x2, 0x5, 0x8}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x623, 0x20000000, 0x3, 0x200}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8001, 0x2, 0xfffffffa, 0x7}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfc4, 0x9, 0x6, 0xfffffffc, 0x3}, 0x46}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1270}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000340)={r4, r4}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0xa, 0x3, 0x3a) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x402040, 0x0) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000140)=0xa, 0x4) clock_getres(0x7, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) write(r5, &(0x7f0000000480)="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", 0x780) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x4004086) creat(&(0x7f0000000000)='./file0\x00', 0xc0) 38.2509863s ago: executing program 6 (id=1514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20, 0x1, 0x40000000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) listen(r7, 0x3) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r8, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87, 0x4}}]}, 0x4c}}, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r3, 0x9, 0x2003) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000640)={@caif=@util={0x25, "64ce0bbd6594b7756384ba1f904ac22e"}, {0x0}, 0x0, 0x28}, 0xa0) mount$overlay(0x0, 0x0, 0x0, 0x200000, 0x0) 32.574734282s ago: executing program 6 (id=1536): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x6, 0x20, 0x10, 0x1000, 0x7f, 0xffffffffffffff7f, 0x2, 0x1, 0xffffff16}, 0x0) r1 = getpgid(r0) sched_getattr(r1, &(0x7f0000000080)={0x38}, 0x38, 0x0) sched_getattr(r1, &(0x7f00000000c0)={0x38}, 0x38, 0x0) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x183180, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="ba3d8221ccf7478e0f2c7219a60bfc04d060d414ccb28d2f8f0b487b849074b1f98086370909e96801ee6f7f13731ebeb190f11e777fdc7c9c5fdd878ae6ffc2d09878f32007cd212a6f28fbad9787781c9a1fdf75c3c9206e88582fc0c7863ec50c14e153f83724065e2ef30f7046a9f4aa9ffe6a4ed11dd158f66a9e8b9466b57a5a2e980df2afaa8fad8e1ca49f795046b2be8a0f89cbc62c6ffa9397bde6b96f2c53068c9826c3c8156ca3cfce9093c28d93eeca20827ab6aa4231f0c3c9ead7e6ad5480bf46fa9257d18fa88982bba60b", 0xd3) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000240)) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) (rerun: 32) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000815}, 0x801) (async, rerun: 64) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x420200) (async, rerun: 64) ptrace$peek(0x2, r1, &(0x7f0000000400)) (async) open_by_handle_at(r2, &(0x7f0000000440)=@ocfs2_parent={0x18, 0x2, {{0x4, 0xc, 0x4}, {0x221, 0x7f, 0x7fffffff}}}, 0x220400) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) (rerun: 64) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20004091) (async) r6 = open(&(0x7f00000005c0)='./file0\x00', 0x20000, 0x80) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000600)) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0) ioctl$SNAPSHOT_S2RAM(r7, 0x330b) (async) r8 = msgget$private(0x0, 0x20) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) (async, rerun: 32) getgroups(0x4, &(0x7f0000000780)=[0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff]) (async, rerun: 32) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000007c0)=0x0) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000800)={{0x3, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x128, 0x7}, 0x0, 0x0, 0x3, 0x2, 0x1, 0x89f, 0x6, 0x3, 0x1, 0xf5, r0, r11}) sendto$inet(r6, &(0x7f0000000880)="51b206de27a7255153975e55043c0a4deffa65ba402b2dbf22a563d4fd61c213a4dcd5d9feffd7f697d0b88891933ac14769bc7698bbe366d6a393e74473fccad0d99450371e5ddffef71caf58465d6385bfa028a321de8ee78a7122fb754495e60fe9cba6ab9b9d4ae2539957153ec85aa99571fea997d12d0768938aeeddeb67707d630d101dfbb2375f82a9566ad4663360241126da258662680a4e26befa9df2bce993966d44a8aa4537f514280bbfb9c8b703f75997903f125b6b262c3a31150e70bd0540c04b991dfbf3443c438a539a5b61", 0xd5, 0xc0000, &(0x7f0000000980)={0x2, 0x4e20, @loopback}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x7, 0x20, 0x6, 0x8, {{0xe, 0x4, 0x3, 0x26, 0x38, 0x68, 0x7, 0x0, 0x29, 0x0, @remote, @empty, {[@noop, @noop, @timestamp_prespec={0x44, 0xc, 0x3b, 0x3, 0x7, [{@remote, 0x10}]}, @noop, @noop, @generic={0x83, 0x12, "6f0e7f24d1bb4f3838b01190ef616522"}, @end]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000ac0)={'batadv_slave_0\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r6, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000b40)=[0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0], 0x0, 0x45, &(0x7f0000000bc0)=[{}], 0x8, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000e80)={'ip6tnl0\x00', &(0x7f0000000e00)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x3, 0x6, 0x60, @loopback, @mcast2, 0x20, 0x20, 0xffff, 0x8}}) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000001480)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1d4, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40}, 0x41) 17.549140563s ago: executing program 35 (id=1536): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x6, 0x20, 0x10, 0x1000, 0x7f, 0xffffffffffffff7f, 0x2, 0x1, 0xffffff16}, 0x0) r1 = getpgid(r0) sched_getattr(r1, &(0x7f0000000080)={0x38}, 0x38, 0x0) sched_getattr(r1, &(0x7f00000000c0)={0x38}, 0x38, 0x0) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x183180, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="ba3d8221ccf7478e0f2c7219a60bfc04d060d414ccb28d2f8f0b487b849074b1f98086370909e96801ee6f7f13731ebeb190f11e777fdc7c9c5fdd878ae6ffc2d09878f32007cd212a6f28fbad9787781c9a1fdf75c3c9206e88582fc0c7863ec50c14e153f83724065e2ef30f7046a9f4aa9ffe6a4ed11dd158f66a9e8b9466b57a5a2e980df2afaa8fad8e1ca49f795046b2be8a0f89cbc62c6ffa9397bde6b96f2c53068c9826c3c8156ca3cfce9093c28d93eeca20827ab6aa4231f0c3c9ead7e6ad5480bf46fa9257d18fa88982bba60b", 0xd3) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000240)) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) (rerun: 32) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000815}, 0x801) (async, rerun: 64) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x420200) (async, rerun: 64) ptrace$peek(0x2, r1, &(0x7f0000000400)) (async) open_by_handle_at(r2, &(0x7f0000000440)=@ocfs2_parent={0x18, 0x2, {{0x4, 0xc, 0x4}, {0x221, 0x7f, 0x7fffffff}}}, 0x220400) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) (rerun: 64) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20004091) (async) r6 = open(&(0x7f00000005c0)='./file0\x00', 0x20000, 0x80) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000600)) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0) ioctl$SNAPSHOT_S2RAM(r7, 0x330b) (async) r8 = msgget$private(0x0, 0x20) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) (async, rerun: 32) getgroups(0x4, &(0x7f0000000780)=[0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff]) (async, rerun: 32) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000007c0)=0x0) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000800)={{0x3, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x128, 0x7}, 0x0, 0x0, 0x3, 0x2, 0x1, 0x89f, 0x6, 0x3, 0x1, 0xf5, r0, r11}) sendto$inet(r6, &(0x7f0000000880)="51b206de27a7255153975e55043c0a4deffa65ba402b2dbf22a563d4fd61c213a4dcd5d9feffd7f697d0b88891933ac14769bc7698bbe366d6a393e74473fccad0d99450371e5ddffef71caf58465d6385bfa028a321de8ee78a7122fb754495e60fe9cba6ab9b9d4ae2539957153ec85aa99571fea997d12d0768938aeeddeb67707d630d101dfbb2375f82a9566ad4663360241126da258662680a4e26befa9df2bce993966d44a8aa4537f514280bbfb9c8b703f75997903f125b6b262c3a31150e70bd0540c04b991dfbf3443c438a539a5b61", 0xd5, 0xc0000, &(0x7f0000000980)={0x2, 0x4e20, @loopback}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x7, 0x20, 0x6, 0x8, {{0xe, 0x4, 0x3, 0x26, 0x38, 0x68, 0x7, 0x0, 0x29, 0x0, @remote, @empty, {[@noop, @noop, @timestamp_prespec={0x44, 0xc, 0x3b, 0x3, 0x7, [{@remote, 0x10}]}, @noop, @noop, @generic={0x83, 0x12, "6f0e7f24d1bb4f3838b01190ef616522"}, @end]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000ac0)={'batadv_slave_0\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r6, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000b40)=[0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0], 0x0, 0x45, &(0x7f0000000bc0)=[{}], 0x8, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000e80)={'ip6tnl0\x00', &(0x7f0000000e00)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x3, 0x6, 0x60, @loopback, @mcast2, 0x20, 0x20, 0xffff, 0x8}}) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000001480)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1d4, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40}, 0x41) 16.873437135s ago: executing program 4 (id=1604): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970003ff70790008240201210126ff090559"], 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000100)={0x40, 0x3, 0x5, 'N\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x141, 0x51, 0xc8, 0xa1, 0x20, 0x2040, 0x651b, 0xa21e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfc, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x79, 0x9d, 0x1, 0x7e, 0xd, 0x1a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) 14.140069816s ago: executing program 0 (id=1612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x4, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x8}, @dev}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x48, r1, 0x508, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100000001}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x401}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffffe}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008041) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000730000000400fdffffffe80a000000000000000000000a000200700000060000000014000e00fe8000000000000000000000000000bb24000900b4000000000000000100000000000080b4000000000000000500000000000000080018000e000000"], 0x130}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x8031, 0xffffffffffffffff, 0xeb43000) sigaltstack(&(0x7f0000003140)={&(0x7f0000002140)=""/4096, 0x80000001, 0x1000}, 0x0) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@remote, 0xffdf, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x400000000}, {0x8000000000, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x3, 0xae8}, 0x0, 0x2, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0) socketpair(0x28, 0x20000000000001, 0x0, &(0x7f0000000100)) 13.795199494s ago: executing program 4 (id=1614): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) chdir(&(0x7f00000002c0)='./file0\x00') openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x80108906, 0x0) sendto$inet(r5, &(0x7f00000001c0)="9422b97f2b84813845c64e", 0xb, 0x4000041, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x1a0, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "a79798", 0x16a, 0x6, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x1f, 0x65}, @fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x8, 0x66}, @hopopts={0x5c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}]}, @hopopts={0x33, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x1, 0x9b, "3941b6b496fe5ecd7dd535b8f9f4d9fbab2cb49a3ff5b42eacb0584da26658e6658c1508bd4fce390a8bf72a44c678584c44ea539aeeeba84f7b3bec0ac596322fbcd884701b40380e21a0ca2c49d2a440bd59a63d558c756278e1c1e2ac714e9f6641d1c3518d27fe9cecec95cd36e645ec8035248efb18eeaf2e57e0f37d72d3d4cdbfc7e7241e64a5e7164c7b814a12497de29c804fde057d24"}]}, @srh={0xff, 0x2, 0x4, 0x1, 0x2, 0x30, 0x1, [@dev={0xfe, 0x80, '\x00', 0x13}]}, @routing={0x32, 0x8, 0x0, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}]}], @payload_mcast={{{{{{0x32, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x8, 0x0, 0x2, 0x9, 0x5, 0x1, 0xe, 0x7, 0x1ff, 0x4e24, 0x4e23}, 0x2, 0x2}, 0x1, 0x1}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 12.818919646s ago: executing program 0 (id=1617): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000008e40), 0x40, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000008e80)) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="90", 0x1}], 0x1) 10.399418816s ago: executing program 4 (id=1625): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000001000c0000000000000000da"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x129) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) prlimit64(r0, 0x1, &(0x7f0000000180)={0x9, 0x9}, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100001080000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r3, 0xfffff7fffffffc01, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f00000004c0)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0xc9}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], 0x0, 0x80009, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(0x0, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0xc3, 0x45, &(0x7f00000005c0)=""/69, 0x40f00, 0x50, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000480)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x4, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000680)=[0x1, r4], &(0x7f00000006c0)=[{0x0, 0x3, 0x5}, {0x3, 0x3, 0xd, 0x8}, {0x5, 0x5, 0x3, 0x9}, {0x1, 0x4, 0xb, 0x7}, {0x2, 0x2, 0xd, 0x4}], 0x10, 0x6}, 0x94) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000001780)={&(0x7f00000003c0)=@ll={0x11, 0xc, 0x0, 0x1, 0x1, 0x6, @random="19ae2e92e589"}, 0x80, 0x0}, 0x0) 9.829082519s ago: executing program 0 (id=1628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) fcntl$setpipe(r4, 0x407, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$CEC_ADAP_S_PHYS_ADDR(r3, 0x40026102, &(0x7f0000000000)=0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5.606403708s ago: executing program 0 (id=1634): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000400)) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {r2}, {}, 0xfffffffc, 0x80000001}) getpid() (async) sched_setscheduler(r3, 0x5, &(0x7f0000000200)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) shutdown(r1, 0x1) (async, rerun: 32) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) 4.61016236s ago: executing program 5 (id=1639): r0 = epoll_create1(0x80000) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20002017}) close_range(r0, 0xffffffffffffffff, 0x0) 3.609193469s ago: executing program 5 (id=1643): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = userfaultfd(0x100800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) fcntl$setownex(r0, 0xf, &(0x7f00000003c0)={0x2, r2}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000140)=""/3, 0x3}, {&(0x7f0000000480)=""/134, 0x86}], 0x3, &(0x7f0000000540)=""/139, 0x8b}, 0x8}, {{&(0x7f0000000340)=@hci, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/167, 0xa7}, {&(0x7f00000006c0)=""/208, 0xd0}], 0x2, &(0x7f0000000800)=""/243, 0xf3}, 0xa8e}, {{&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000980)=""/230, 0xe6}, {&(0x7f0000000a80)=""/13, 0xd}, {&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000b80)=""/68, 0x44}, {&(0x7f0000000c00)=""/15, 0xf}, {&(0x7f0000000c40)=""/229, 0xe5}], 0x6, &(0x7f0000000dc0)=""/117, 0x75}, 0x6}, {{&(0x7f0000000e40)=@phonet, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000001380)=""/37, 0x25}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000006380)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/119, 0x77}, 0xd}, {{&(0x7f00000018c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001500)=""/195, 0xc3}], 0x1, &(0x7f0000001640)=""/199, 0xc7}, 0x100000}], 0x6, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00008b2000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000685000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000062d000/0x1000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x6e) (async, rerun: 32) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r7, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0xb, 0xffff, 0x6, 0x1000002, 0x0, 0x0, 0x8, 0x80000001}}, 0x50) (async) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (async, rerun: 64) syz_fuse_handle_req(r6, &(0x7f0000008340)="ae9104f5e131d0eff851b5fdc5390a7c7f56681a20b26f178d0e1744701f203b65bae3a210c85d398dacba5fe7b46b6deb271af1f3f614ed140ce7d82692c24076cc29858ae0ef9e5ec4fe2af8da035b32d283a1bbe66a21b8d1031d6033a3110ff92565a24e7cd7374a27b307d464322e31faeffc62253cc1898b9b858ff9ebb6d325089a9e4c5054618d61f45d31157cb27557d6ff7210ec02d9907fe6c2e6d5544b3e5f623bf95dc7c1720152ab6c7837428d036904df79522b2b98bf4f2f63912a69dc2956cba1f1ace8d4e3aa9430b0a9ab63e297a299953dc40ea78c5c4739be290b13b0a1057a7414e6545612d4b4bff2ecea1808351dc6e6329963374ba106631be1c17c5ff70ea31b2d74de39c06591461dcebb33230f2ea6564266145dd7bd85c6a6885552bec51edd77e562b7ae5d7fe7bd9e5e5110ccf1843331f0a43db3322f5f512114b0f96efbd22421c3d049349887dca35caf1ed701af81c9a6c248b2cf3407e8bf3809b5f8a5f5ca0340cfbd7598d2ab6f3979d399c2adc15562ffedcb87ca94192d68ffea6544fb0b5e9ae67e6755b1a36e3e9e9c6538514ad06312ec6669d2120150f886959558d9a7081386f10e16a565e16720178040289b7b1d8acc19ceda06ccaaa9ba3e8216fa982322fe1e933e4966c393cc43acd49121ef635f34ffd6a6da8b15bd068677e0653bf957d4784327eeafd1065c4de8cec6f7c60ce667a6308cb743cf48d4cda74c26627a9e5f2e749058d071eff282a6d99cf1839d139a29a901356bbf23e40b3ffac59846f3f78cb2b0899ec4639881777bae26c33a0041a795f2882095c9cb0f8e9b041bd6e2d92ef90ab080b625b9b17a0587802e58597557e17e2ed731c1e2fa22e7c216ff03a828d5340ab0ada651981aae267f65cf202e3e07aed5db4755f502b99cd67bf253fbc12bdb112491e97ad51cc519b0cd6718a2f7970bd4eb8c4a7d0d1e3bd52f62849b97a58e7d3f49568f5e28583e596db5cc5346b13a1898dd42c78ea259768b5ba3957012a71e95376f735380209f3dc4f5a948f6212c682161734c37d96726c14efb925ad2b540c776f3b59b39b629405b3e7f949076d12ffca6863992d1c84b067233dafe3783757d2d1b8f0b1649730264a19f9b2e09bc33931d32505f37518d92b3f9e20e1753aa669ec0670c7207069b7379228a6d6194b65ce001e77340f92ad3c19b2ce6f04f176413e485f55c6de8ea401bb7ffcf49c0bba43d8700cc9a47928caeef46a9a1aa3d15d4c421859fbb96c15f0b263956b90d779032c1a56270f752128e79855453dbb08674614ecde64c9fe26ec58202b2c022c8cfa468c724c13ecd1c9e5c7e84f6dd73dfe55a299161a9cf4dfcbfee61099891b82c067779149c14390564640c5ba8d0c27575c0e8907c714104139ec424f6ee5e3eda2a2dfa92c7853f5487cb465f392a5fac57e3536c01dac9c7b8840a5a011b1d4a58db7ea7300b935bfb1574613f5e7c720545f449d4965aa6749cc05ad972d9dd3f45107631bd1d6c1c6893f3d92beb4d0e93192bd9474911ab7fdfe2e855bb440e63e95b47e882346e7b1d03118d9eb70f41fea069e853496bed77928775dec5cd5cda6de7f553f053e6d456cde7883537596b7798eee90b41e89d34a18775ab24641e2e42d686d45f19f40eb837c7b32d8205c11e211d158a6f2abd89b56e6bff4d9c725894e8ca0a82e0187b3d2686e7f6fbf3ffaf17c043419bf5e01c08ba8f34410e5020e5176e14e06e68b2e76b0d254ff0e36a2f071d00e2d79a23bd37a09cf9b40d5abcda3064ded4c45577e0d2c138ce7e53cfbc62a6071c8e9baefb43fc71d1ab4b305825e1dd49b36ed1ea9d9e8cb9c0c8e9d5238ab8ced7caba200875579c6869cdca19c71ce0f91737ce86873c32a399de7fe0699f6c5bffed3948a0eeebe01a0ec004601a1998119616838df779d218187fdaf5b4b0d5dad8a42a421cfcd8ec5dd077877d83a9d1e8e0296ffc759bf0b18784701924b5053916c8eb534d85af419372e0a90540148e7c4698de41b9b0381b8bbbf9f5f52c77c1dd0144a1ee05126c2dee830f437f11db53e98eb8295763328bc6261ea07c09c0cd7983aae24658b96a81566fba02a2a87625f5a01a76593bd07b8b70a029574adb0578617e5def835bf8b1694cfb728a1eec3bdb22d3ddbe8df086a6a369be3e05940005eb1daf4e4158847bfb73f6d88ca4a6411ea70a1eba2e7a6e02e0754963b23aa1f2c52c4ee27f3288904d407a0998f2c8de6d7d6c8e3ebe0a3f38f161fc811a03b8e2ee664b26c8d896bbac441c9c0cf0c5aae1c7450fba1c34b65beef201352785657414944f56f30f514cddea1f8cf0933292d26c37e156f582af27263ae52e33b95dceef1864f350a05248aae1162c94cfc0ed1251c2915bfc599cdf30f3252a3ce5a796a9be0b8294e38702dca2ad89414e7e40a4810b842144df382d5675ae7d48b7185f1cf40629b1411a39f11b99cb519aa108b6f8f730adc60c94543877a14bb954c58944a868dd85cde1c696839c727af385b63b1eba6771d8ba5f936f0b9ee7416d0902e4caefa5350087ffb503ddf38fdc4e6597032e850ccdb3f66104be78339b9de220e94c826fb3a21d0b22cc494fc556ccac4d84e016024d00239b47add06d138360b619c42335509956889e500d5242577345b6f0418e6db73bf60206a822596e8b06a0f98c7ebaf5f06e3b979e4d1d2ebec972555341bbf45a61fcab998918db6e2d5135ae626d88c812383e378f84c0f33dd99be898ccf747a28fc54d2d6b5aa2f213dc2ad6aac63e42bbbf9c4a5a93e55b390dca1fd87a99e612c506d8272adc6c026e4e35a3f1666005cd283284d1f93f3f7a2c6e8676cbdb5fc47a4a0ef70d86acf45eebd60ee9afbcd7754eba7e701f2aba861182b49b96089f697695faba3096ba5b667388ebd33d29ad688ca97eed8bbd1fb8ab6a450dbc4874e64c086739aba5ab016ece6cbb3f8ff4bf0c3e0c77332888e814217afba62842002ea3c81fd8a3cd52de70d3005ad59d5713b7ec1ff51e58233a3bb606d6dfa991cd3ecb691d4295e7cf8c5f4615bd3422905b4f004f04abc71fadba1cbd1d17d0d6ae7bfe437bed460a9a62d7cd8bea589358135f8e4eb6c966256ab679846500671b7b9f82f537f58892a1286ad4d5084a9f11fee005de5ffe2f2bb357500ff23e69e53238232d560f6bad2cb97efde72e1dad8b9428a83363d6aac32ef5e58d25d4724c88ea5b439a1a458cc872163cdc69f366228b255211014bce56528134593d1354a62d9729bf0cf6ea156343ea811a1cfe0fcee7b1db2106338b5689c95c93d2302fa6f610d4443697a85e502bde43391500b839ff3ae66fb87494547d03b4a6e9fd000a4e7e98bdec7599aef93b4d5d2f91b05e2ce54e7b72e89b43a659f882dcc52a1fe022f03f93f966bbf7f66442f9ef291049de31901ebf4858d105b1459c83bfb74de42bd087660ce36e9d82fb00df5a7e3b462d36aa849df8fddbf40e2c24b1830662bcae090786d6a757db60328fc484a5adc488a42e12f62e77d5a6b1f76d849954ee9e664bf59d2c20fd3257878c64e94b6accaad8520716c39d4affc1428b16bc2be9e3026684694d18124be77083273be2bdd55215a081977e5c07434d62cf184f43068df39ddbc83f984c62704c6fa459f308af1b3b6a155e861e6c5d038ba241810b00b3880d9b56d312aa5c147c879f20965c22a95e22ebc9e50a5fa4100e23962c8feae30ffc74d4d1a484128d031a2fc68cde1043f3f57df3e9ec16d1b5d122b99b9504cf4fd8e50d99e4e3ca4a68fefbdb6e4c07005e9eed9e9a2b7f174aedd0aeb307650f112978c40ba7cc6e5f2776afa80c111165a2d3a3adac5cab1a2e907f21f40cb4c713034a7dd4be4218c385e8b118a4e622457d7424ac53310d0b9d6163358789c6d6f5b5a234a4460f0a5b8462c674da9cfc75d375d26f83ad419a36c2ab9b6ed7fdd84d780bf13c27e262676766eb84c8b895411f660cb9dc0a28a9271dea21a87d3c0d21ac60fe44029b579de6dc44ad71d16f8fc75bdb5185ac87ac036a88c3ea1a47159167624d05b000e640aee20da35bfd059faf97cd2ce808725f85c81552ec702fb2b51159f1ed7e101e3d4c0fc87afe3badd199f9044429cfc9925d0ff48dc2d19df2f3bb04ad10255f6163220815b48ff5b70f8100a65a2c992b4b39749ea6d89a65658603626402310b19b6fa2679ce5926642b4b9c0f5ea2485f6f95338301d992ab278c162cc2c84e0436a3d82e695df7ae81abbdeba3a80f09281c34a7856e8a85c22bcae5ba353a38ce6259b46def19d01797716867d064f7d69cdbd051b0189cb957c6372fbf86907c03218ad17f6daeea30e9e93e0fbdc6e5fa4759c5c514d04181383aa05694c0c75974aa91ba014f9dab4d90f5ca07d97705f95dd47813c5a8fb5dff8fc2c607d2c2ac5dd32c4e924b300716844f8ec6f4598bcc802ddb9155a27efea9f3f604241d9539d2feca0555607fe01cece67ce55c2aeb4aab512b8c01b45f643adff1e42e61ebc65d403375c705619833fab83635b371c90c7c572f175cc9038bbc16141f7ffe4ae9a888fbb2924c47112d7fed879faa8c5b5d4093f1d87b20a1953edd637f1f9ad38f63cde028ac30911726ea443dbd1234a85fad7d872b38aba96ea716bbced20485d57292d97eed1f444c614727655c395d78f78d471a7579e1c999aa3f887cae5b32cb4ad6e72c3b744ea4804e9e5f8fc186716f199a01e2f5e00c626f6c0619f721dcdfe29c7027e05b96bc0f16df3601105af92fb05769a5a3d5edd86e3043fcc007423220aa2a319d04ab102469c5687575ae986f7d70d4567e8a9aaa328ce6b89b7d4ca51c94159f81612ab6e633fd0f08f0b81cc6f83093eeb6cbbab3a686a3b038886162cfc3a2dcff76777c2dbf8e3925c7eac3ae4b74941f7cb81178a449831820ce288853d269018faeb0fffb027ae931a36a845e3d486885da575ef55645d71aa745b3ffa5336a2551bd8cc64b687bf04d0b92f43a2e00f9cdb2c944296053d7b3c564f6e3e246bc9468386a0cd8d4f7dcaff939fb4688c1f6bf829e89c4949da5bcbdd9515fcd2e41620f5983bfe17698b07a40abf27dafb8fc563e43312e5bbc4311ec1efc4009f4da909eb94ca6c59dd1ab60afbef0717d06f80618a8cb619780bb607b3fb1bd2a1f49e0b618cd7a61e030bbada12535e1a3d77453a65f97d67e3b37ba51c6e46070475d2839d4b8ecfcb155dcf9f50cbc71e7829bba5581ade6cdd2a899e714a033c66c2f9f0e37172428d69565885d4aa3cbc00bbe413c4c3b300d0a61e65eb2e5ec0afaec0116c9c21f8c78effe3b62ad7b045063f9c94e8f500143997354d085a9898157fa377fe224a4e4d49455ebaefebf3c126edc8980064a2b6fe171c2da2f217441bc1cdb3f817b0b026244077d11c066be6b203feedc782683e5324d521cc3327a9c0fbd4751fcb6b4dfedc814f2722763e78da72ac8a02bf02f3ac1eda4b6ebc0b95a9468ed7f9434b80fdcf86065104c2624b3bc16f7c1f6e555cdb66471fda5efe5d6116285fa257f393ad87b7bab00eeb5a79c557f5f2ef0c49471655de6c3bff999b9741b431cc133ea79676839081c712914dc0ceb99090cebf273f8dc94ea06d9178b71a795725644e42f867372d12fe24255c6da4175acc70f0c4035ba57b0babd10878b94fc91903fcca5a67839a7335dd8bf0dda1ab52295ab8a0d411b169046c0e4effa652d07760c4d3abae05b994ea5c680e44a0cd2196e8cf962da5a7ed0960fa6bda19a833b7e79a48c618b45639254e40c9211f40778143b4ff00e8ac44c19c18f09c08aac4772090a9544557047f72f20d930aa54da3ddaa2543599391f02cf2be9fced8b31ce163e986d20f85ed162daf14c7814636c3ee44402d4acf5113e4ab8db145055ed35924394a194eab3e5c754c09c4932fe3b8d77876522dd0071dcdda8c0ebafa88f151f7c3daaa692188326b50e7b1821b5e0cdb942d4748bcadc0b8612e4f98ba0a7f58286947707b158529c758dc4e69f41ec320f12fe0367007657509e835fe794512e2ef5f4cad852785c01d89df5de7b3025a3e4b2b4b803e6d6260a18464563c3c8fd5d18687dd60f0660cde23bed48f2f87fc2243b2c084295af9dd97a4b3a9e2696aedda0708c1b548070467966a6a32a4e65f00b43e248f4be6f0bc97734183e9edbc690b334e3d9453435c9c90341142779152ccbc476c5dfa914164f497edeb5a0834a71b19dacd71caca60fd35b73aca27369d4c41ff8c989d5c92ba90484f1b0251c94247c062d30138768d2a200dcf390a068c4b41cd48ebb5962221b1eb22dc208f0a1179f9665a29a69496fb3e42b293ac6d09203ae6ee0286ddb05807658cb3682b032d93d7755f731908dcc93e91a712d30928c74f00970e68df794cf64925d3158c50bc8b5fc6a22a68eebe8a21137e79a8563d66940d7fdfbec593a80f09e4dc10fd1c99a02f4da2f699cdf88cfc0fdf02d53ea905455adbe78d43ad588ff7ca1b509a4bbde0f34a2ea59e3a63569346c1eac934d15ecf19f4ed6882624fee55d986a8a69fa180a924ba8855fbfb58b1861ea4f51816f83aa5fda63cc40961016d048de4e350d7929a3fdae4baf2907134c20e756965133715ea1d73ff6577667d513ff429e10181cb88f493ecae6ab9ee407b275a31c91fd16f77123ebc0c141f45e71afcb96fcb658b457d1309234da9e042ac833b8d902b690ac43fd8c14b71d0a1711da1f0db2ded92c6c690a803a8b472992648a8974252f607e9dff3881f12fd5a7ef45fd5d155cb6ad65033a0f0085f7785e8c7f4122cc968e342abb0e4f93deee8af6b7cab52e2eae0bbb7b584822b5c225a39cd0b1f03157908018508ca2e1ae76f3979af187e738d8f000f3f905a8281bc5a486d0194fd8710ebbadc91f843042f46721c5f2ba3bdadc01cb34bf74a2b03f7bce5b48069ec83d8c9a1ec2b8318d6fb875a2df9c88086c9e53ab7fe5b8c88048185039ac8cec20b62267cc902dcffcf8d69cac06c74a3a3abf5b93830b0c1545305a576a0fce7d1a8f772a3be73e6c1fd3123d70874fb6843806d30885c61bdf7b950e54da1ca243d1867521d76e438b357563331fadd14a33afe794ecdb06c81236d08a5189fe2efd40b9773c1acc5c2b750123f01e05c3ec9ec6be91015168187bc88a79b555a551af97ea9912c8d5eff507f8c0c8fbfb4e11fe01bf17f8d2bd4b2c87fae58d6bad3185990ab95734299c45d94bc9beb1abdd0193eb1e5d818e2ec1ec79960a48c5ffc2bba4923e6b3272b8bc601058a840119f89c4073fef547bff72abda289e119dfd5977978a6ee56a3bd1d55ec62db9ee09520d873b2d304adcb42487840e545c503bc3c7fd23337134dfe1f5218cd4cffb19a61ac09b46ad24d22ac53097d229e6fd7d2416a890d9e0b629c45a967c7ac67cbd57c1177fad750ab11d60cd5480e5223d933f448378435a040424b590f16dcbb828a1b5ead64da3297723382547af2932fdf32280a17f0e5438359c1304f32e1a58abc97322e7250eb0e047b74b0f758928fd08c0ccd399bb0bea2f4356d95f1e52ecca8c7fa14af54cdcb318592910dcde24aab0967898f00465c8f7f45b17fe9542cc5959fdc3774a0240a2dab2a882301cbb97ebe56e527dd11a494bf63a193012808eff0846f18bcc67f8d3efbabf0aa583a9ae7d665581e63353c07f1b335b20d59c9361567716ba5ccfb7c9011ed61fb831158c1588780759057956886b84f44cc00c51f0b0ce56f4532c5c9a82e260386860ac06c6fccc919e88adbda0e504d8e07e7e6751f4b53e33f8092c0f37b95e4afe121dbcb379d4669debbedb5794bc24cf4624bb471d5c829b9bb420775196dc14ee64b2e294b9caba354842247dd70c8fddd252c4143d3fdb6d87787edcb0936e75c535184d8b53943ca507789dce21aeb65d4fbbb6b978b0cd62de2140efb3c1f7c69c1062ffee16ebe2a736e18120ca21ef326309b16c9731caf16e425b7ceee27c0eeede689844a9d39834375f765e24a72222c9e0358f4de206017595f7c80fec861a79f7d5afa50b8c7c55d10aa3930bd203b36bcd5e79d64f5df866afe75c1f0722f3bbefbbd62683ad04e0a5abac975d4d77ca15aa0c95f49ef6ad08211caa98f0e0f67d18349c8ad65e60ab143bd5a5d79ac9eb151f382b854f40a9b6dd45940be2be91407f455a3f8196136f85972b1010c9102a64e8e20fc9c89c06c567b18f16187628b55c506725766807da1efb840c7ab748de4cf1d3fe5d8e36533769ce3fdbb9fd322e9ff82c52bb448bd5928a9933ae91287be98af1e02825b2db13dfac238430d96e17c8f88d92dc381bffc25712282013de0528d8618f7502578c4667fce087f0dd94659029808b9fc3c3c63aedde226ca7db58010af931690ed76679a23f54e239ac928117e0ec14eb9f9e74a207b18dcab63d13cd69fba8f9d3caf80e83cbf3bca3a8b6f52926325e60a9fda66472ebf2e21b98ea4ef7287db1a6986d042edb1e15839dfff4f9ace81191c4cf8491d2f3a62f59070e297b91568c0bed896a3153934c5aebd30b0c545b4f67b1765a429e1b79f8b3aca0840e0f336a154267b3d06dd65b89d5edf6753607846944d3c2383eb1a08ed6150ea01bc716ab0365057f31f6acdedc0d9da52b1e0d72d3c329416658567750ce6147890b5effd0994f04d37e4716b06e4a6d23303c2ebf20e5f9e6685ed4a28040eafe937c22cc5e6956038200e4f06c48541ba083a7d74d0f695c70152398f550d4db11528e821ac7741f792722b8b08fb9c98d1ff1530cb7c05bed8234d8d7b3b1fc029d62b9f394340097bf34978beada5cdc7b65a5b595e52ae50333e30ca2414d3e1296eb0e458427197a0e48729f4ba07a86cefd5210e11f8a1894c703e632038a88997e2a9c5f70fc0064aba1344d9409f8d84c034180b08bb209d3302b14774f0a576d4d81c64b205a9d5e5837e15c87fd7fbf4efca76e638364aaf2978f6616fe0281786f4c0f9c114ba212eab378b59101c1239d310481365594b95232b00ddd9eb353088481e8ee69e6d6668d5899d56e29358132139c47e31c75d6fbfd3a49b357757c36610cdec7dc7c9f3c6f0b0e336aabab5b2a01e08e1a44a4b1235b7b3da4097cae6189c2d16823cbe35e7544001faa95b1ff11594f486b8ba29876b1a4222c7bce88537a141111f2b2735314c683cdd29a5dd9f94eaa99e37720c3d85cec96932a4bbb0f83be82cf6607872bf0b858b521dd2823743fb28077b2191dc523e08cbd73a1a1f881dbef85d0772d8f4b0cf4529d84c96a5f539b07188d177ba340c0e4286781dc30068e8bbd74f66fc9593f63e1e40aa89487d5e887f4f502ae9b6d112a0b62775e57dba8212be68293546c157b69a41f741da3413f84a31b6bf276317e5f6d0a61a10eae8117bf53f8f5f224fe799b9a096be476c1c2af18d6dc05ee086f251cd013eb0c0382a38d8619adbae7019ab5ddea1dba0486b61299702add51d6dfbc9cb8e9cfd030cd4f01cd4be206b700129fc96b54efbd7415996faf693046270abe93d8afd3d5a570c407266137e7281d9552fcf046f075e124ec23d51c5dbdeabbf2eeff18a46ab0a9fcffef9a60dea7790e57ab785916ae0b80ccd59a044bdc24ce6b4a05d20b70d2daa0e7aaf5d57ad0348deb886ddae682e041f5ea5cb861f54a2ef7e493f2bd313926eaca2c9b64e9d347dcc9d00ae17e0fdd677c5bf2521b34d376630ec3f355be7c8d9b43a02a7b4489de33a9c464ac2fb4dd127bcd50c1a96b384a375def1eac7226bd3069413a8cb585fd8c6e2ca07abb3e445817f9f3414c40fdbf416f67d28474528cd3d00f68a3512301842506f565bc57f84c3cc7c89d96709688773536a12f5f872c7476eeea9addadce80a30a52cccaf521e7e80657c3eec42c9e4b1aa1c305782a4480948ed6e91c88fce6413d876d16af0499358f6cfb5523e08dd0474ed6fdebd82e5fa4115a94e20eb925aa60795d3246cb44f2b620bd593559a032cce7f4549347b07104c0b6762e9d4ea8293b250ae78bc3e7003e9d335db4547a9ecee4ab62fbd9c14fbbbcf0df53c46371a5dab059e7b8394e64f5c1c3393431ba8fa0d032049cab859080d4e6d3e17cf02e3d3c21066ac9595661391071a1825261dbe52ca45cb083c562b30130df919b8e3e0d9947c91873f9f4fc3886e0de9d224e00ac81c929d435f2c2f00ad4e3af7fb5043127ea11c47c0984177a720be125fc18c1596a09dc1a13b1f36aab681f8ecc918d16849d6cb19d00c776952e504665902b52cd7c18869ddc027b5009aa322b95fb576ba192588daa0f1693fc258808cc8ceeb6f094f2b267bd50b7ad9924b6ba8790182f744127e3e3dc0407b1187970d2103698e17395d3f2a5080a63120eff1226205f44da66273b35c4b0e0106442a03988b32ef0b47e584ad82a97fb8cce6655e9d8d9f4256d99df52b4fed2848129683f63b2a87aa3cc44060acbbfda7cf40170e6b0579bf1a7c173c927e504b80c56935552c73048bcf1b2966dae1a3ddb76d2539417b81fe43a56c95cc829a3f66c8fa5e14304d57a4763475af814a11ce0543f8de3f8e517af86617ff320df7f75b0c9456e416e30472f4f1d5df24dd96ac4a353147703d0a0dcd22550f80ecc1acb099bf920caa14132d372a85d5f836c9f0d79d8c70d44d400c55c3605fba463fbbdc593dcb3b0057b50541dd54493548c4c602a7a2a9cf3f2e70c20502b30767bb20d2110a886ee2fd1d2a7396059d868fa87a69f331e0d46cb0fdb3d537fa7b5f6496062620d7c734b1df6c069dbd6c9f4af8414950b2892260195e765fcc6f9fb326ed63426bf85b32d5c04cb4d6e5af5846f01affd6d76d2f1c0136ec4a57275a667cec9f5699d044cf0eb44cf3e9393effb8efc116c5064515a7d38b437220f51079773a99ec86f3678838bafa6dd09d705c80eae781ed6fbc847a6b88bd9cf0eb7dfb9f82b7690bd2f42e5e93f0a1fa6a852dfd1c981b1f9431ff1361b4768b5c77933af327860645e915595323e038ff55950811fcff5c1a909e14d9674436c9ab81718b7af45113a37228e74c039ce18f42d23115d755036979dfe5e696773dc6e94485c1275d9b2de41b513e764aa22d71e1c1c7f17373765b3265480802483a2af6f17f0fe3a7038aaea49474fd60a7278a17899d425c24d5892c65de662ebd1e6c3d62b4ab74f6ff514f66d3d5951ba112bc636cba7ccd7dc83073b691942f4540577dae500bf2695e405b74f0d8e09ff53a54aae698f9125cc836c84486d53d8d43b034cf11fc0d2228d0f1635bea072c65d9d9af4b8a2ebca135885837bd10c15b844ddb178bd48169e3c316bff5fa02dc1525c94753c98783f91d250ef654391683730cb371f95c489b05e20d5acb38a798e408a0754fee43a148208646fa1b4c87ac80a62c5ea358c23573b52b1679e7a37a265f000", 0x2000, &(0x7f0000001080)={&(0x7f0000000400)={0x50, 0xffffffffffffffda, 0xd992, {0x7, 0x2b, 0x7f, 0x55432006, 0x23, 0x201, 0x7ff, 0x6, 0x0, 0x0, 0xc0, 0x8001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (rerun: 32) close_range(r8, 0xffffffffffffffff, 0x0) (async, rerun: 32) close_range(r5, 0xffffffffffffffff, 0x0) (rerun: 32) io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x20002f7}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) 3.548012192s ago: executing program 0 (id=1644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) fcntl$setpipe(r4, 0x407, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$CEC_ADAP_S_PHYS_ADDR(r3, 0x40026102, &(0x7f0000000000)=0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.323717894s ago: executing program 5 (id=1645): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0) (async, rerun: 32) mkdir(0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000002500)={0x2020}, 0x2020) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async, rerun: 32) r1 = getpid() (rerun: 32) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xcd, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}, [@feature_unit={0xf, 0x24, 0x6, 0x2, 0x1, 0x4, [0x4, 0x3, 0x0, 0x8], 0x2f}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x3, "4e3e03"}, @selector_unit={0x5, 0x24, 0x5, 0x4, 0x7}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x3, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x1, 0x8, "d341d2", 'H'}, @as_header={0x7, 0x24, 0x1, 0x5, 0x4, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xe3, 0x2, 0x4, {0x7, 0x25, 0x1, 0x0, 0x4, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x7, 0x1}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x5, 0x5, '/'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x2, 0x6b, 0x4f}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x1, 0x4, 0x5, 0x7, "0b42a5", "3d9006"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd6, 0x59, 0xff, {0x7, 0x25, 0x1, 0x80, 0x9, 0x585}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2, 0x2, 0x5, 0x40}, 0x12, &(0x7f0000000340)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x6, 0x8, 0x100}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x404}}, {0xca, &(0x7f00000005c0)=@string={0xca, 0x3, "786ff52571cea9457b15069cb9e712537472e83e91dd44852a1b94a96f77317b858b187d20efc10b8d1fa860409676826edf7feac5d5d84bfd6d423f19cbc8846016d71a51c2da296050e9cc5538a376c76f0ba12d72f68db01501752cfde1034862cb6959d77903d6fb37df7c6bc16b9d332034d7ed701da7648446e32999bbd35a03d5fa9fac876255911f623cc272a01dbd50effca6b5d8378ba31b5a1865afebfea5a9c5fb29d09a001a05e31888c81ab0e74ca2d8d85d673abf07190743d668ac6e9a72e235"}}, {0x5b, &(0x7f00000006c0)=@string={0x5b, 0x3, "cb38ec2154e1e6a1a237650a1ba4656ea3977c982491af2afadd7b30448e11dd4fdd728ce0b1c1505f4cd34ca84319b9d242520dc19d07ef16d2cbabc228207b68166b94dc59fa276eda7f8e91c3da283ec35fe35bb60333c0"}}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) (async, rerun: 32) setgroups(0x0, 0x0) (async, rerun: 32) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x10, &(0x7f0000000080)=0x7fff, 0x4) (async, rerun: 32) setregid(0x0, 0x0) (rerun: 32) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r8, 0x5459, &(0x7f0000000000)) pread64(r0, &(0x7f00000002c0)=""/73, 0xffffffeb, 0x936) 3.027705998s ago: executing program 8 (id=1646): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x60600) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) userfaultfd(0x80001) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) r6 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000280), 0x6a) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) 2.933094265s ago: executing program 4 (id=1647): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4c0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x1, 0x103}, 0x0) pipe(0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000f0000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x79, &(0x7f00000008c0)=ANY=[@ANYBLOB="12011001020000ff2505a1a44000010203f609026700020109102d0904000001020d00000724060001781e05240004000d240f01020000006127ff000906241ac4790404240202fc2301020309058103bf038505ed0904010000220d00000904010102020d0000090582020004040a040905030200040904ffc1fa4c13d8fa312af10e14a5e321e701abe7cb45ab77e289974597baed44674b827de1b92e6188960bbe1a710c24ed6bec870fd8f09cf6c29389aa0d014968be7742"], &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xfc, 0x4, 0x45, 0x8, 0x3}, 0x31, &(0x7f0000000400)={0x5, 0xf, 0x31, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "d981c39f325b7933c258d78cd3ab2a56"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0x4}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x5, 0x9, 0x8001}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xecb2}}]}) 2.894198219s ago: executing program 5 (id=1648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000400), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r5 = userfaultfd(0x80801) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000001dc0)=""/240) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000070000000700000000a0000000400000001000084b815423b3f2434b2f620df9e582702000a0000000300000000000001080000000000000105000000200000000b00000005000084ea0300000700000005000000090000000b000000010000fd80e8d74d862dce0001000000070000000f00000003000000070000001000000002000000"], 0x0, 0x92}, 0x28) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="30a2c02baeebdd357b83f7683dfe6e29a19118fbe6d9ceba5596d6bd180436f651b683fbd2d75a9208dbee8cd4d4168790e579421aee32e65153041db19d12f1c6cc8ee432bb7754f8beb708dc2bc61c1d911b1c4d5b51837f60f457da56f122291dcf59c106a3ed218a3aa3cde32485ebe1537b59613c9f3705be6643a6ff5ff1a5fd6b2fb75fc244a3db17be1bd6fc785a888b1d7f811579243fa68e90f023f993c39613405eda86431f2a67331c571d4292f4f438e88ee6d177374ab65647d4f227", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) ioctl$TCFLSH(r7, 0x540b, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000280)={r1, 0x0, 0x1, 0x3}) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, &(0x7f0000000000)) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) ioctl$PIO_UNIMAPCLR(r9, 0x4b68, 0x0) 2.412257064s ago: executing program 7 (id=1649): syz_open_dev$usbfs(&(0x7f0000000340), 0x1, 0x20e40) syz_open_dev$usbmon(&(0x7f00000001c0), 0x20000000020000c, 0x0) fsopen(&(0x7f00000003c0)='incremental-fs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000010000008c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0xfff, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x549000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x101200, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1d) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, 0x0) inotify_init() syz_open_dev$vbi(&(0x7f0000000280), 0x1, 0x2) poll(0x0, 0x0, 0x100) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r6 = socket$netlink(0x10, 0x3, 0xb) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) listen(r5, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES8=0x0, @ANYBLOB="390008006b005a00d100"], 0x1c}, 0x1, 0x0, 0x0, 0x20004805}, 0x4000895) 2.122959279s ago: executing program 8 (id=1650): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x7, 0x5, 0x0, 0xe06, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x4, 0x81}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x3e, 0x0, 0xa}, 0x28) (async, rerun: 32) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) (rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000210000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d9a97051bfcd58f66bb06e4465b90998c6f6a592b0e7fb63e5025a0e2ec7af28f1072c70db3a14fb69cb7b61109e185df276b8afac06cc09faf4e9307859e329a000efc21acda4fa742fdd6125f2924f96eeab4c34c6dabac7bb17f8e39aea3d16ff4e2b72fb4cb067da022aa4c885736e246d7e530f593ab7e79605fe7e4f97ad18c41b34a2b3539648059f1198e402e479c572a2b3274004e46f439c894a8c849130645c"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) close(0x3) (async) recvmsg$unix(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000780)=""/90, 0x5a}], 0x1}, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 64) r8 = dup3(r5, r1, 0x0) (rerun: 64) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0xfffffe19, 0x0, &(0x7f0000000a00)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 2.064552018s ago: executing program 7 (id=1651): r0 = socket(0x2b, 0x3, 0x0) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0xb) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) (rerun: 64) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_off}]}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'sit0\x00', {0x4}, 0x1}) (async, rerun: 64) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) (async, rerun: 32) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) (async) preadv(r1, 0x0, 0x0, 0x187, 0x7) (async, rerun: 64) write(r0, &(0x7f0000000040)="240000001a005f3814f9dc070009040180002000000000000000000008000f0040000000", 0x24) (rerun: 64) 1.944036208s ago: executing program 8 (id=1652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000002400)="03", 0x1}], 0x1}}], 0x2, 0x2000c044) syz_emit_ethernet(0x36, &(0x7f0000001800)={@random="4d5722d585a8", @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x16}}}}}, 0x0) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) 1.938928375s ago: executing program 5 (id=1653): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0xbd, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000940)=[@uexit={0x0, 0x18, 0x6}, @rdmsr={0x66, 0x18, {0x8aa}}, @rdmsr={0x32, 0x18, {0xbc5}}, @rdmsr={0x32, 0x18, {0x316}}, @wr_crn={0x46, 0x20, {0x3, 0xffffffffffffff00}}, @wrmsr={0x1e, 0x20, {0x339, 0x17fffffff}}, @wr_crn={0x46, 0x20, {0x2, 0x4000000}}, @uexit={0x0, 0x18, 0x7ff}, @rdmsr={0x32, 0x18, {0x35c}}, @rdmsr={0x66, 0x18, {0x3f6}}, @wr_crn={0x46, 0x20, {0x0, 0x4}}, @in_dx={0x69, 0x20, {0x84f9}}, @wrmsr={0x1e, 0x20, {0x340, 0x5}}, @cpuid={0x14, 0x18, {0x3fd, 0x4}}], 0x180}) (async, rerun: 32) r2 = socket(0x11, 0x800000003, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x8932, &(0x7f0000000200)={'bridge0\x00', @ifru_addrs=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x6]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}}, 0x48004) (async, rerun: 32) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000540)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000ac0)={0x624, r9, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_PEERS={0x600, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8000}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x598, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "211114a44a2b189c661ddf3d9cabf4abea06d90bb38726c3e7a2b1420c93a1f6"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x414, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "76d78c14b21629135e6e8c9cab37ed4b1996a64245a7184b10d749491d3d09e6"}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}]}, 0x624}, 0x1, 0x0, 0x0, 0x4800}, 0x2000840) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x80, 0x5, 0xb9, 0x1, 0x11, 0xd, 0x204}, {0x804, 0x0, 0x1, 0xfd, 0x87, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x4000001, 0x3, 0x38, 0x5, 0x8, 0x7, 0x3, 0x50, 0x0, 0x71, 0x3, 0x5, 0x4}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x5, 0x2004ca, 0xfffffffffffffff9, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x1, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.060463686s ago: executing program 8 (id=1654): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) (async) socket$rds(0x15, 0x5, 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 932.563418ms ago: executing program 7 (id=1655): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000140)={0x3, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18007f00", @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf251100000004000980"], 0x18}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5, 0xffffffffffffffff}) close_range(r0, r1, 0x0) ioctl$SYNC_IOC_FILE_INFO(r6, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r8 = fcntl$dupfd(r7, 0x406, r7) setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000040)=0x9f9, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r8}, 0x20) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r11 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r11, 0x2deb, 0xffffff7c, 0x0, 0x0, 0x0) 930.366455ms ago: executing program 4 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) syz_usb_connect(0x6, 0x36, &(0x7f0000002a80)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="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", @ANYRESHEX=r2], 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110001000000fbdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="ae00c13052ff1ac0d2abbba81fc32380080009"], 0x34}, 0x1, 0x0, 0x0, 0x20049000}, 0x40) 841.041911ms ago: executing program 5 (id=1657): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) syz_clone(0x82001200, &(0x7f0000000000)="d289355741ef", 0x6, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="264fb5d398f16dc92386c724fbf99101140b49e33b6e83f5cba4fc8fa4dfbcad38689f75ac58c67194ec84c1ee196fa0dd3df0713d9f12b534b7227c088b3fd2143fad172c3f157aefd78fc9fb9c13d5372990b4738650c45fd128f8155ef912217fc996bc9f3732a1b9dd34448ab7e6da3f00468a1c120c8ce42c9f0f1283382a826064140688c663a54fe19561582fdc6ce916760ccfb1af98fb5336bf6c16a554bb9b6587d9822cd8955268c632eef925cbab80e7e0d0b3ae6d1f0c90b718b882a7c0bf9ed298145dd4940ebafbafbd3e540dbc2c18b05c41298b580b00817ab2295900ba99be01227ee708403d5c7ba359915b0e") (async) r1 = syz_clone(0x82001200, &(0x7f0000000000)="d289355741ef", 0x6, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="264fb5d398f16dc92386c724fbf99101140b49e33b6e83f5cba4fc8fa4dfbcad38689f75ac58c67194ec84c1ee196fa0dd3df0713d9f12b534b7227c088b3fd2143fad172c3f157aefd78fc9fb9c13d5372990b4738650c45fd128f8155ef912217fc996bc9f3732a1b9dd34448ab7e6da3f00468a1c120c8ce42c9f0f1283382a826064140688c663a54fe19561582fdc6ce916760ccfb1af98fb5336bf6c16a554bb9b6587d9822cd8955268c632eef925cbab80e7e0d0b3ae6d1f0c90b718b882a7c0bf9ed298145dd4940ebafbafbd3e540dbc2c18b05c41298b580b00817ab2295900ba99be01227ee708403d5c7ba359915b0e") ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, &(0x7f00000001c0), 0x4001) (async) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, &(0x7f00000001c0), 0x4001) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) 787.323618ms ago: executing program 7 (id=1658): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = fsopen(&(0x7f0000000040)='nsfs\x00', 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0xc, 0x3d0, 0x7, 0x47dc0261, 0x4, "08c694cc53f8ef5d0de7f214d7bd9f691761cb"}) r3 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r3, 0x29, 0x5, 0x0, &(0x7f00000000c0)=0x24) setsockopt$inet_mtu(r2, 0x111, 0xa, &(0x7f0000000000), 0x4) socket$pppoe(0x18, 0x1, 0x0) 635.976251ms ago: executing program 8 (id=1659): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz1\x00', {0x1ff7, 0x101, 0x4, 0xb28}, 0x4b, [0x10000, 0xe5e, 0x7, 0x2, 0x8001, 0x0, 0x0, 0x2, 0x3, 0x10000, 0xfffffff9, 0x7, 0x55, 0x4, 0x1, 0x3, 0x0, 0x3, 0x8, 0x9, 0x3, 0x200, 0x8, 0x80200000, 0x4, 0x650e, 0xfffffeff, 0x401, 0xa963, 0xe, 0x1800, 0x1, 0x79db, 0xffffffff, 0x7, 0x7, 0x6, 0x37f, 0x6, 0x81, 0xe47, 0xffffffff, 0x3, 0x5, 0x2, 0x9, 0x7, 0x10, 0x8001, 0x2a, 0x5, 0x40, 0x7, 0x5, 0x4, 0x7, 0x7, 0xe, 0xdf16, 0x5, 0x3, 0x9, 0x39ac, 0x3], [0xfffffff7, 0x6, 0xa, 0x3ff, 0x400, 0x0, 0xffffffff, 0x4, 0x80000001, 0x9, 0x4, 0x1c2, 0x6, 0x8, 0x4, 0x10001, 0xf7f, 0x1, 0x1, 0xfffffffe, 0x2, 0x8, 0xae, 0x77d, 0x3014c631, 0x9, 0x9, 0x3688, 0x0, 0x7ff, 0x7, 0xa262, 0x9, 0x3, 0x4, 0x3, 0x0, 0x164, 0x2, 0xc, 0x6, 0x8, 0x9, 0x4, 0x3, 0x80, 0x4, 0xf9e4, 0xccb7, 0x1, 0x8, 0x828, 0x0, 0x8f8, 0x7, 0xd, 0x1, 0x8, 0x5b, 0x40, 0x9, 0xffff, 0x4, 0x1000], [0x7ff, 0xa2e, 0x0, 0x5, 0x7f, 0x0, 0x5, 0x7fffffff, 0x4, 0x9, 0x0, 0x5, 0xf, 0x586e75c0, 0x7fff, 0x4, 0x69, 0xe250, 0x4, 0x6, 0x2, 0x418, 0x2, 0x4, 0x4, 0x2, 0x6, 0xc, 0x8001, 0xbe0, 0x7, 0x9, 0x1, 0x9, 0x80000000, 0x2, 0x2, 0xec7, 0x3, 0x1, 0xd4ae, 0x2, 0x5, 0x8d7, 0x7, 0x0, 0xa, 0x5, 0xcb34, 0x81, 0xf2, 0x8, 0x8, 0x7, 0xfffffff9, 0x8, 0x1, 0x3, 0x7fff, 0x4, 0x5, 0x10001, 0x0, 0x9], [0x1, 0x10, 0x9, 0x68e, 0x40, 0x7, 0x368, 0x9, 0x8, 0xd, 0x0, 0xdbd7, 0x4, 0x6, 0x400, 0x7, 0x1, 0x1, 0x1, 0x2, 0x7fffffff, 0x8, 0x4, 0xde, 0x0, 0xfffffffe, 0x1, 0x9, 0x9, 0x100, 0x3, 0x8000, 0x0, 0x4, 0x0, 0x9, 0x1, 0x1, 0x2, 0x9, 0x4, 0xae97, 0x1, 0x2, 0x2, 0x1, 0xffff, 0x40, 0x7, 0xffffff87, 0x2, 0xe, 0x0, 0x8, 0x1, 0x10000, 0x4, 0x401, 0x25b, 0x0, 0x0, 0x1, 0x49, 0x9a]}, 0x45c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x7, 0x10003}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@dellink={0x28, 0x11, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3a, 0xc149}, [@IFLA_GROUP={0x8, 0x1b, 0x1b13}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0) recvmmsg(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="4ff2fff2", @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf25190000000c009900050000007100000005001e000400000005001e00040000000500a2000800000006006d00070000000500a2000100000005001d00e1000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x81) 585.646798ms ago: executing program 7 (id=1660): syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) (async) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x84e24}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) (async) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000140)=@abs={0x1}, 0x6e) socket$unix(0x1, 0x5, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x4000080) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) 439.210394ms ago: executing program 0 (id=1661): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r0 = epoll_create1(0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x305a01, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) setregid(0x0, 0x0) (async, rerun: 64) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2801926611a5ad657fee59887cb300002b7c4b8c90b73dc15bfe4ad4997dd17ca2ff1c27d94e4a9d54fdec4a3eaa9fb34809fce7882272fde520b36e928eab3258a7f31af272f2c5aa3dcfd8e39e1b1313de660952f5574dd3790e3bc7d4e6d2e1cd18", @ANYRES16=r5, @ANYBLOB="070000000000002824000200000014000180080006001100000008000300ac1414bb"], 0x28}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r7 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x1ffffffffffffd58, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x171ec0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x0, 0x3, 0x4, 0x2, 0x6, 0x56, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3a}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="1100000000000000", @ANYRES32=r7, @ANYBLOB="07c64c0f17b800332c801928a366fc481c265b964f8fc1e6853d3307520ceab3101f90847a42b41d4f57179663bc22ac319503791828fe3a64a877e17f10b3d4fc7596b0269f4c02046f9cc4a89608ef8e52eb99bd79f6d1775e4ed749bdbc0001101b70abac206ec8c75120b55442a1d81a11c5ade0cf078dcc5b1e31e44143dca7d3f4d99bd44df94b699eef1553d13be01a2e8029ee61db9352d57c13051ce449f6f3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x11) 276.595435ms ago: executing program 8 (id=1662): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mount$overlay(0x0, 0x0, 0x0, 0x240004, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001580)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x9, 0x0, 0x0, 0x0, @str=']+&\\\x00'}]}]}, 0x28}], 0x1}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e2a, 0x8001, @local, 0x80000001}, 0x1c) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000100)=0x80000401, 0x4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000800080002000000", 0x24) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 274.527783ms ago: executing program 7 (id=1663): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500004000002020207b1af8ff00001e00bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x32, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x20000c, 0x8, 0x20000}, 0x10, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6a}, 0x94) pipe(&(0x7f0000000680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800800000000000850a602200000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x5) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000080)="2e9b5b0007e03dd651", 0x9}, {&(0x7f0000000640)="b700000000000000090000f1dd0fccd5de05", 0x12}], 0x2) (async) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000080)="2e9b5b0007e03dd651", 0x9}, {&(0x7f0000000640)="b700000000000000090000f1dd0fccd5de05", 0x12}], 0x2) 0s ago: executing program 4 (id=1664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000002400)="03", 0x1}], 0x1}}], 0x2, 0x2000c044) syz_emit_ethernet(0x36, &(0x7f0000001800)={@random="4d5722d585a8", @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x16}}}}}, 0x0) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) kernel console output (not intermixed with test programs): bcdDevice=1d.47 [ 369.838604][ T1204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.846792][ T1204] usb 5-1: Product: syz [ 369.851108][ T1204] usb 5-1: Manufacturer: syz [ 369.853722][ T6381] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 369.855832][ T1204] usb 5-1: SerialNumber: syz [ 370.013844][ T5873] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 370.039406][T10659] team0: Port device dummy0 removed [ 370.044895][ T6381] usb 7-1: Using ep0 maxpacket: 8 [ 370.073220][T10659] bridge_slave_0: left allmulticast mode [ 370.079202][T10659] bridge_slave_0: left promiscuous mode [ 370.085619][T10659] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.101036][T10659] bridge_slave_1: left allmulticast mode [ 370.107658][T10659] bridge_slave_1: left promiscuous mode [ 370.280888][T10659] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.317374][ T6381] usb 7-1: unable to get BOS descriptor or descriptor too short [ 370.326377][ T6381] usb 7-1: config 8 has an invalid interface number: 24 but max is 0 [ 370.334909][ T6381] usb 7-1: config 8 has no interface number 0 [ 370.348723][T10659] bond0: (slave bond_slave_0): Releasing backup interface [ 370.356441][ T6381] usb 7-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 370.379132][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 370.385781][ T6381] usb 7-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 370.398104][ T6381] usb 7-1: config 8 interface 24 has no altsetting 0 [ 370.916401][T10659] bond0: (slave bond_slave_1): Releasing backup interface [ 370.938554][T10659] team0: Port device team_slave_0 removed [ 370.951468][T10659] team0: Port device team_slave_1 removed [ 370.959008][T10659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.002087][T10659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.011554][T10659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.025094][ T5873] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.031286][T10659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.036588][ T5936] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 371.058117][ T5873] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.069875][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 371.076677][ T5873] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 371.086165][T10659] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.086966][ T5936] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 371.122512][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.145936][ T6381] usb 7-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 371.160008][ T6381] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 371.170105][ T5873] usb 1-1: config 0 descriptor?? [ 371.178626][ T6381] usb 7-1: Product: syz [ 371.182819][ T6381] usb 7-1: Manufacturer: syz [ 371.196521][ T6381] usb 7-1: SerialNumber: syz [ 371.204926][T10647] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 371.219432][T10666] fido_id[10666]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 371.436065][ T6381] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 371.451465][ T6381] usb 7-1: USB disconnect, device number 32 [ 371.594654][ T5873] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 371.633514][ T5936] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 371.791024][ T5873] usb 1-1: USB disconnect, device number 36 [ 371.800208][ T5936] usb 8-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 371.816470][ T5936] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.835069][ T5936] usb 8-1: config 0 descriptor?? [ 372.128296][ T5936] kaweth 8-1:0.0: Firmware present in device. [ 372.138760][ T5936] kaweth 8-1:0.0: Error reading configuration (-32), no net device created [ 372.148050][ T5936] kaweth 8-1:0.0: probe with driver kaweth failed with error -5 [ 372.905760][ T5924] usb 8-1: USB disconnect, device number 12 [ 372.929516][ T1204] peak_usb 5-1:7.175: probe with driver peak_usb failed with error 175 [ 372.963990][ T1204] usb 5-1: USB disconnect, device number 35 [ 373.024343][ T5936] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 373.239537][T10698] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1099'. [ 373.276501][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.509205][T10703] overlayfs: missing 'lowerdir' [ 373.773654][ T5936] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 373.782725][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.802522][ T5936] usb 7-1: config 0 descriptor?? [ 374.003494][ T1204] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 374.165491][ T1204] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 374.179214][ T1204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.195589][ T1204] usb 1-1: config 0 descriptor?? [ 374.379094][T10719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.436057][T10719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.576273][T10722] vhci_hcd vhci_hcd.0: port 0 already used [ 374.601586][T10722] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 374.618683][ T1204] ath6kl: Failed to read usb control message: -71 [ 374.628253][ T5951] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 374.643303][ T1204] ath6kl: Unable to read the bmi data from the device: -71 [ 374.658199][ T1204] ath6kl: Unable to recv target info: -71 [ 374.665281][ T1204] ath6kl: Failed to init ath6kl core: -71 [ 374.671443][ T1204] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 374.701794][ T1204] usb 1-1: USB disconnect, device number 37 [ 374.809061][ T5951] usb 8-1: config 8 has an invalid interface number: 233 but max is 0 [ 374.828797][ T5951] usb 8-1: config 8 has no interface number 0 [ 374.844731][ T5951] usb 8-1: config 8 interface 233 has no altsetting 0 [ 374.864918][ T5951] usb 8-1: string descriptor 0 read error: -22 [ 374.871206][ T5951] usb 8-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c [ 374.904080][ T5951] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.932495][ T5951] cp210x 8-1:8.233: cp210x converter detected [ 375.188215][T10735] netlink: 'syz.5.1111': attribute type 4 has an invalid length. [ 375.196132][T10735] netlink: 'syz.5.1111': attribute type 3 has an invalid length. [ 375.203917][T10735] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1111'. [ 375.214275][T10736] netlink: 'syz.5.1111': attribute type 4 has an invalid length. [ 375.238565][T10736] netlink: 'syz.5.1111': attribute type 3 has an invalid length. [ 375.251094][T10736] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1111'. [ 375.263977][T10735] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1111'. [ 375.341528][ T5936] usbhid 7-1:0.0: can't add hid device: -71 [ 375.376741][ T5936] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 375.407453][ T5936] usb 7-1: USB disconnect, device number 33 [ 375.439134][T10741] atomic_op ffff88802a5ab198 conn xmit_atomic 0000000000000000 [ 375.481918][T10741] lo speed is unknown, defaulting to 1000 [ 375.489020][T10741] lo speed is unknown, defaulting to 1000 [ 375.763540][ T1204] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 376.584383][ T5951] cp210x 8-1:8.233: failed to get vendor val 0x370b size 1: -71 [ 376.603961][ T5951] cp210x 8-1:8.233: querying part number failed [ 376.639199][ T5951] usb 8-1: cp210x converter now attached to ttyUSB0 [ 376.652251][ T1204] usb 1-1: config 6 has an invalid interface number: 130 but max is 0 [ 376.689910][ T1204] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 376.711777][ T5951] usb 8-1: USB disconnect, device number 13 [ 376.733963][ T1204] usb 1-1: config 6 has no interface number 0 [ 376.741340][ T5951] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 376.771678][ T1204] usb 1-1: config 6 interface 130 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 376.794971][ T5951] cp210x 8-1:8.233: device disconnected [ 376.822976][ T1204] usb 1-1: config 6 interface 130 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.845402][ T1204] usb 1-1: config 6 interface 130 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.880567][ T1204] usb 1-1: config 6 interface 130 has no altsetting 0 [ 376.907805][ T1204] usb 1-1: New USB device found, idVendor=07fa, idProduct=0846, bcdDevice=bc.83 [ 376.949856][ T1204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.958367][ T1204] usb 1-1: Product: syz [ 376.962592][ T1204] usb 1-1: Manufacturer: syz [ 376.967451][ T1204] usb 1-1: SerialNumber: syz [ 376.973977][ T5924] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 377.158022][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.168252][ T5924] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 377.248709][ T1204] HFC-S_USB 1-1:6.130: probe with driver HFC-S_USB failed with error -5 [ 377.261874][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.334068][ T30] audit: type=1400 audit(1766589190.847:715): avc: denied { write } for pid=10766 comm="syz.4.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 377.358543][ T1204] usb 1-1: USB disconnect, device number 38 [ 377.365554][ T5924] usb 7-1: config 0 descriptor?? [ 377.447175][T10768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5392 sclass=netlink_route_socket pid=10768 comm=syz.7.1118 [ 377.464596][T10769] SELinux: policydb magic number 0x8a12e589 does not match expected magic number 0xf97cff8c [ 377.478524][T10769] SELinux: failed to load policy [ 377.481090][ T30] audit: type=1400 audit(1766589190.847:716): avc: denied { accept } for pid=10766 comm="syz.4.1120" path="socket:[28858]" dev="sockfs" ino=28858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 377.803153][ T5924] prodikeys 0003:041E:2801.001D: item fetching failed at offset 0/5 [ 377.821746][ T5924] prodikeys 0003:041E:2801.001D: hid parse failed [ 377.843319][ T5924] prodikeys 0003:041E:2801.001D: probe with driver prodikeys failed with error -22 [ 378.010161][ T6381] usb 7-1: USB disconnect, device number 34 [ 378.299083][T10785] wireguard0: entered promiscuous mode [ 378.305001][T10785] wireguard0: entered allmulticast mode [ 378.381346][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.389395][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.443592][ T6381] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 378.493558][ T5924] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 378.664914][ T5924] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 378.687339][ T5924] usb 5-1: config 0 has no interface number 0 [ 378.837906][ T5924] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 378.847746][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.860402][ T5924] usb 5-1: Product: syz [ 378.868773][ T5924] usb 5-1: Manufacturer: syz [ 378.883361][ T5924] usb 5-1: SerialNumber: syz [ 378.892309][ T5924] usb 5-1: config 0 descriptor?? [ 379.418374][ T5924] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 379.454831][ T5924] usb 5-1: USB disconnect, device number 36 [ 379.507918][ T30] audit: type=1400 audit(1766589193.017:717): avc: denied { bind } for pid=10813 comm="syz.6.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 379.529144][ T30] audit: type=1400 audit(1766589193.017:718): avc: denied { name_bind } for pid=10813 comm="syz.6.1132" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 379.552741][ T30] audit: type=1400 audit(1766589193.017:719): avc: denied { node_bind } for pid=10813 comm="syz.6.1132" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 379.818603][T10825] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 379.825154][T10825] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 379.834141][T10825] vhci_hcd vhci_hcd.0: Device attached [ 379.900036][T10825] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 380.110396][T10826] vhci_hcd: connection closed [ 380.110613][ T50] vhci_hcd vhci_hcd.7: stop threads [ 380.121356][ T50] vhci_hcd vhci_hcd.7: release socket [ 380.128280][ T50] vhci_hcd vhci_hcd.7: disconnect device [ 380.153961][ T5936] usb 48-1: enqueue for inactive port 0 [ 380.262139][ T30] audit: type=1400 audit(1766589193.767:720): avc: denied { setopt } for pid=10829 comm="syz.6.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 380.287324][ T30] audit: type=1400 audit(1766589193.797:721): avc: denied { ioctl } for pid=10829 comm="syz.6.1135" path="socket:[29001]" dev="sockfs" ino=29001 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 380.398862][T10836] syzkaller1: entered promiscuous mode [ 380.411911][T10836] syzkaller1: entered allmulticast mode [ 380.871486][ T5936] usb usb48-port1: attempt power cycle [ 381.125212][T10844] lo speed is unknown, defaulting to 1000 [ 381.138117][T10844] lo speed is unknown, defaulting to 1000 [ 382.291072][ T5936] usb usb48-port1: unable to enumerate USB device [ 384.383557][T10887] netlink: 18 bytes leftover after parsing attributes in process `syz.7.1142'. [ 385.294139][ T5924] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 386.506426][ T30] audit: type=1400 audit(1766589200.017:722): avc: denied { ioctl } for pid=10896 comm="syz.6.1150" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x5619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 386.623666][ T5924] usb 1-1: device not accepting address 39, error -71 [ 386.676262][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1153'. [ 386.804031][ T30] audit: type=1400 audit(1766589200.317:723): avc: denied { map } for pid=10902 comm="syz.0.1154" path="socket:[28320]" dev="sockfs" ino=28320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 387.924294][T10923] hfsplus: unable to find HFS+ superblock [ 387.940799][ T30] audit: type=1400 audit(1766589201.447:724): avc: denied { write } for pid=10927 comm="syz.4.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 387.994849][T10934] Cannot find add_set index 0 as target [ 388.003020][T10934] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 388.255514][T10941] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 388.450379][T10939] block nbd4: shutting down sockets [ 388.813497][ T5936] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 388.830488][ T30] audit: type=1400 audit(1766589202.337:725): avc: denied { read } for pid=10949 comm="syz.0.1164" dev="sockfs" ino=28496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 389.025491][ T5936] usb 7-1: Using ep0 maxpacket: 16 [ 389.056422][ T5936] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 389.067737][T10959] usb usb8: usbfs: process 10959 (syz.0.1166) did not claim interface 0 before use [ 389.077518][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 389.098445][ T5936] usb 7-1: Product: syz [ 389.112247][ T5936] usb 7-1: Manufacturer: syz [ 389.131088][ T5936] usb 7-1: SerialNumber: syz [ 389.153919][ T5936] usb 7-1: config 0 descriptor?? [ 389.245912][ T30] audit: type=1400 audit(1766589202.757:726): avc: denied { setopt } for pid=10960 comm="syz.4.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 389.350926][ T30] audit: type=1400 audit(1766589202.777:727): avc: denied { ioctl } for pid=10960 comm="syz.4.1167" path="socket:[28517]" dev="sockfs" ino=28517 ioctlcmd=0x6408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 389.383576][ T6381] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 389.574754][T10965] fuse: Unknown parameter 'ԎS' [ 389.673892][ T6381] usb 1-1: Using ep0 maxpacket: 32 [ 389.690466][ T6381] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 389.701537][ T6381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.719187][ T6381] usb 1-1: config 0 descriptor?? [ 389.864215][ T30] audit: type=1400 audit(1766589203.377:728): avc: denied { getopt } for pid=10971 comm="syz.5.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 389.958331][ T6381] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 389.968371][ T6381] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 389.994243][ T6381] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 390.021737][ T6381] usb 1-1: media controller created [ 390.955432][T10959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.993944][ T6381] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.002742][T10959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.078040][T10969] syz.4.1169 (10969): drop_caches: 2 [ 391.094504][ T6381] az6027: usb out operation failed. (-71) [ 391.107179][ T6381] az6027: usb out operation failed. (-71) [ 391.118770][ T6381] stb0899_attach: Driver disabled by Kconfig [ 391.132733][ T6381] az6027: no front-end attached [ 391.132733][ T6381] [ 391.150615][ T6381] az6027: usb out operation failed. (-71) [ 391.157442][ T6381] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 391.166750][ T6381] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 391.183879][ T6381] dvb-usb: schedule remote query interval to 400 msecs. [ 391.191064][ T6381] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 391.200445][ T30] audit: type=1400 audit(1766589204.707:729): avc: denied { create } for pid=10988 comm="syz.5.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 391.240380][ T6381] usb 1-1: USB disconnect, device number 41 [ 391.242948][ T30] audit: type=1400 audit(1766589204.737:730): avc: denied { ioctl } for pid=10988 comm="syz.5.1175" path="socket:[28562]" dev="sockfs" ino=28562 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 391.282577][T10989] netlink: get zone limit has 8 unknown bytes [ 391.292509][T10989] IPVS: Unknown mcast interface: lo [ 391.362230][ T5823] Bluetooth: hci5: unexpected event for opcode 0x0c58 [ 391.370477][ T6381] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 391.460845][T10997] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 391.526837][ T5873] usb 7-1: USB disconnect, device number 36 [ 393.031372][ T6381] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 393.104912][ T5924] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 393.213946][ T6381] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 393.223022][ T6381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.265726][ T6381] usb 1-1: config 0 descriptor?? [ 393.293348][ T6381] cp210x 1-1:0.0: cp210x converter detected [ 393.383508][ T5924] usb 7-1: Using ep0 maxpacket: 16 [ 393.401221][ T5924] usb 7-1: config index 0 descriptor too short (expected 5508, got 132) [ 393.413491][ T5924] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 393.432900][ T5924] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.453249][ T5924] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 393.479450][ T6381] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 393.479966][ T5924] usb 7-1: config 1 has no interface number 1 [ 393.493317][ T5924] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 393.497350][ T6381] cp210x 1-1:0.0: querying part number failed [ 393.506281][ T5924] usb 7-1: config 1 interface 2 has no altsetting 0 [ 393.522339][ T5924] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 393.522487][ T6381] usb 1-1: cp210x converter now attached to ttyUSB0 [ 393.563448][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.573701][ T5924] usb 7-1: Product: syz [ 393.577882][ T5924] usb 7-1: Manufacturer: syz [ 393.593538][ T5924] usb 7-1: SerialNumber: syz [ 393.698594][ T6381] usb 1-1: USB disconnect, device number 42 [ 393.709934][ T6381] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 393.735004][ T6381] cp210x 1-1:0.0: device disconnected [ 393.746294][ T1204] IPVS: starting estimator thread 0... [ 393.843518][T11017] IPVS: using max 41 ests per chain, 98400 per kthread [ 393.869226][ T30] audit: type=1400 audit(1766589207.377:731): avc: denied { getopt } for pid=11020 comm="syz.7.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 394.182738][ T30] audit: type=1400 audit(1766589207.687:732): avc: denied { map } for pid=11025 comm="syz.7.1186" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 394.239201][ T30] audit: type=1400 audit(1766589207.687:733): avc: denied { execute } for pid=11025 comm="syz.7.1186" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 394.627932][ T30] audit: type=1400 audit(1766589208.117:734): avc: denied { ioctl } for pid=11033 comm="syz.0.1189" path="socket:[29461]" dev="sockfs" ino=29461 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 395.382423][ T5924] usb 7-1: USB disconnect, device number 37 [ 395.591833][T11040] IPVS: persistence engine module ip_vs_pe_ not found [ 395.617825][T11047] Set syz1 is full, maxelem 65536 reached [ 395.865981][ T5873] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 396.973502][ T5873] usb 8-1: Using ep0 maxpacket: 32 [ 396.982583][ T5873] usb 8-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 396.991943][ T5873] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 397.001046][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.183578][ T5924] IPVS: starting estimator thread 0... [ 397.277426][T11075] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 397.482941][T11081] set match dimension is over the limit! [ 398.048217][T11073] IPVS: using max 37 ests per chain, 88800 per kthread [ 398.363835][ T5873] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 398.555603][ T5873] usb 7-1: config 0 has an invalid interface number: 3 but max is 0 [ 398.577963][ T5873] usb 7-1: config 0 has no interface number 0 [ 398.591539][ T5873] usb 7-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 398.613880][ T5873] usb 7-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 398.623802][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1200'. [ 398.632936][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.781278][ T30] audit: type=1400 audit(1766589212.287:735): avc: denied { create } for pid=11086 comm="syz.0.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 398.825981][ T30] audit: type=1400 audit(1766589212.287:736): avc: denied { write } for pid=11086 comm="syz.0.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 398.868731][ T30] audit: type=1400 audit(1766589212.317:737): avc: denied { mount } for pid=11091 comm="syz.4.1201" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 398.973971][T11099] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1202'. [ 399.114214][ T6381] usb 8-1: USB disconnect, device number 14 [ 399.126693][ T5873] usb 7-1: config 0 descriptor?? [ 399.132586][T11072] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 399.145901][ T5873] hub 7-1:0.3: bad descriptor, ignoring hub [ 399.151846][ T5873] hub 7-1:0.3: probe with driver hub failed with error -5 [ 399.164618][ T5873] sierra 7-1:0.3: Sierra USB modem converter detected [ 399.362234][ T5873] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 399.409446][ T5873] usb 7-1: USB disconnect, device number 38 [ 399.427287][ T5873] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 399.480233][ T5873] sierra 7-1:0.3: device disconnected [ 399.514062][T11112] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 399.669786][T11107] netlink: 'syz.5.1204': attribute type 30 has an invalid length. [ 399.683516][T11108] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 399.690053][T11108] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 399.702582][T11108] vhci_hcd vhci_hcd.0: Device attached [ 399.720663][T11109] netlink: 'syz.5.1204': attribute type 30 has an invalid length. [ 399.773658][T11114] 9pnet_virtio: no channels available for device syz [ 400.912397][ T6381] usb 48-1: SetAddress Request (10) to port 0 [ 400.933574][ T6381] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd [ 401.236792][T11120] FAULT_INJECTION: forcing a failure. [ 401.236792][T11120] name failslab, interval 1, probability 0, space 0, times 0 [ 401.381486][T11126] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.391987][T11126] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.412668][ T30] audit: type=1400 audit(1766589214.917:738): avc: denied { audit_read } for pid=11124 comm="syz.5.1209" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 401.429335][T11120] CPU: 0 UID: 0 PID: 11120 Comm: syz.6.1206 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.429372][T11120] Tainted: [L]=SOFTLOCKUP [ 401.429378][T11120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.429401][T11120] Call Trace: [ 401.429408][T11120] [ 401.429416][T11120] dump_stack_lvl+0x16c/0x1f0 [ 401.429447][T11120] should_fail_ex+0x512/0x640 [ 401.429478][T11120] ? fs_reclaim_acquire+0xae/0x150 [ 401.429509][T11120] should_failslab+0xc2/0x120 [ 401.429536][T11120] __kmalloc_noprof+0xeb/0x910 [ 401.429568][T11120] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 401.429602][T11120] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 401.429629][T11120] tomoyo_realpath_from_path+0xc2/0x6e0 [ 401.429660][T11120] ? tomoyo_profile+0x47/0x60 [ 401.429692][T11120] tomoyo_path_number_perm+0x245/0x580 [ 401.429715][T11120] ? tomoyo_path_number_perm+0x237/0x580 [ 401.429740][T11120] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 401.429766][T11120] ? find_held_lock+0x2b/0x80 [ 401.429821][T11120] ? find_held_lock+0x2b/0x80 [ 401.429850][T11120] ? hook_file_ioctl_common+0x144/0x410 [ 401.429887][T11120] ? __fget_files+0x20e/0x3c0 [ 401.429925][T11120] security_file_ioctl+0x9b/0x240 [ 401.429954][T11120] __x64_sys_ioctl+0xb7/0x210 [ 401.429979][T11120] do_syscall_64+0xcd/0xf80 [ 401.430007][T11120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.430028][T11120] RIP: 0033:0x7efe64b8f749 [ 401.430045][T11120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.430064][T11120] RSP: 002b:00007efe659e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.430084][T11120] RAX: ffffffffffffffda RBX: 00007efe64de5fa0 RCX: 00007efe64b8f749 [ 401.430098][T11120] RDX: 0000200000000600 RSI: 00000000c018937b RDI: 0000000000000004 [ 401.430111][T11120] RBP: 00007efe659e2090 R08: 0000000000000000 R09: 0000000000000000 [ 401.430124][T11120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.430136][T11120] R13: 00007efe64de6038 R14: 00007efe64de5fa0 R15: 00007ffc82c1e8b8 [ 401.430165][T11120] [ 401.430181][T11120] ERROR: Out of memory at tomoyo_realpath_from_path. [ 401.726288][T11126] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.736696][T11126] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.756219][T11110] vhci_hcd: connection reset by peer [ 401.762737][ T6178] vhci_hcd vhci_hcd.7: stop threads [ 401.772656][ T6178] vhci_hcd vhci_hcd.7: release socket [ 401.789565][ T6178] vhci_hcd vhci_hcd.7: disconnect device [ 401.812074][T11126] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.822521][T11126] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.895273][T11126] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.905689][T11126] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.961878][T11134] loop7: detected capacity change from 0 to 7 [ 402.024194][ T6178] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.034239][ T6178] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.059564][T11134] buffer_io_error: 313 callbacks suppressed [ 402.059576][T11134] Buffer I/O error on dev loop7, logical block 0, async page read [ 402.089269][ T6178] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.114205][ T6178] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.216334][ T6439] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.226101][ T6439] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.234706][ T6439] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.236700][T11134] Buffer I/O error on dev loop7, logical block 0, async page read [ 402.270966][ T6439] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.309341][T11134] Buffer I/O error on dev loop7, logical block 0, async page read [ 402.369252][T11134] Buffer I/O error on dev loop7, logical block 0, async page read [ 402.400882][T11134] Buffer I/O error on dev loop7, logical block 0, async page read [ 402.423797][T11134] Buffer I/O error on dev loop7, logical block 0, async page read [ 402.431683][T11134] Buffer I/O error on dev loop7, logical block 0, async page read [ 402.513608][T11134] ldm_validate_partition_table(): Disk read failed. [ 402.520493][T11134] Buffer I/O error on dev loop7, logical block 0, async page read [ 402.528541][T11134] Buffer I/O error on dev loop7, logical block 0, async page read [ 402.545052][T11134] Buffer I/O error on dev loop7, logical block 0, async page read [ 402.573575][T11134] Dev loop7: unable to read RDB block 0 [ 402.579203][T11134] loop7: unable to read partition table [ 402.591025][T11134] loop7: partition table beyond EOD, truncated [ 402.603555][T11134] loop_reread_partitions: partition scan of loop7 (7x~Sj̖P) failed (rc=-5) [ 402.854767][ T5823] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 403.554074][ T5823] Bluetooth: hci4: Injecting HCI hardware error event [ 403.566106][ T5817] Bluetooth: hci4: hardware error 0x00 [ 403.867841][T11165] nvme_fabrics: unknown parameter or missing value 'C' in ctrl creation request [ 404.551050][T11166] vhci_hcd vhci_hcd.0: port 0 already used [ 404.606654][T11166] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 405.655750][ T5817] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 406.940389][ T6381] usb 48-1: device descriptor read/8, error -110 [ 407.253703][ T5936] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 407.384738][ T6381] usb usb48-port1: attempt power cycle [ 407.445393][T11209] overlayfs: failed to clone upperpath [ 408.043543][ T1204] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 408.183616][ T5936] usb 1-1: Using ep0 maxpacket: 8 [ 408.190260][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 408.283793][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.293867][ T5936] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.303668][ T5936] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 408.316907][ T5936] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 408.345422][ T1204] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 408.353468][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.363697][ T1204] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.394794][ T1204] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 408.394979][ T5936] usb 1-1: config 0 descriptor?? [ 408.413358][ T1204] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 408.432605][T11200] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 408.441916][ T1204] usb 7-1: Manufacturer: syz [ 408.460004][ T1204] usb 7-1: config 0 descriptor?? [ 408.623696][ T1204] rc_core: IR keymap rc-hauppauge not found [ 408.645705][ T1204] Registered IR keymap rc-empty [ 408.666907][ T1204] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 408.686364][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.703903][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.705163][ T1204] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input21 [ 408.733722][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.769173][ T6381] usb usb48-port1: unable to enumerate USB device [ 408.776784][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.804350][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.833283][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.863069][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.882849][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.885783][ T1204] usb 1-1: USB disconnect, device number 43 [ 408.893828][ T5817] Bluetooth: hci2: Opcode 0x0c03 failed: -19 [ 408.914631][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.948633][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.006892][T11217] lo speed is unknown, defaulting to 1000 [ 409.016322][T11217] lo speed is unknown, defaulting to 1000 [ 409.403005][ T1204] usb 7-1: USB disconnect, device number 39 [ 409.437252][T11229] tipc: Started in network mode [ 409.442153][T11229] tipc: Node identity 00000200000000000000000000000001, cluster identity 4711 [ 409.451896][T11229] tipc: Enabling of bearer rejected, failed to enable media [ 409.484912][T11232] FAULT_INJECTION: forcing a failure. [ 409.484912][T11232] name failslab, interval 1, probability 0, space 0, times 0 [ 409.513845][T11232] CPU: 1 UID: 0 PID: 11232 Comm: syz.6.1233 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.513880][T11232] Tainted: [L]=SOFTLOCKUP [ 409.513888][T11232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 409.513900][T11232] Call Trace: [ 409.513906][T11232] [ 409.513915][T11232] dump_stack_lvl+0x16c/0x1f0 [ 409.513947][T11232] should_fail_ex+0x512/0x640 [ 409.513978][T11232] ? fs_reclaim_acquire+0xae/0x150 [ 409.514009][T11232] should_failslab+0xc2/0x120 [ 409.514038][T11232] __kmalloc_noprof+0xeb/0x910 [ 409.514072][T11232] ? tomoyo_encode2+0x100/0x3e0 [ 409.514104][T11232] ? tomoyo_encode2+0x100/0x3e0 [ 409.514131][T11232] tomoyo_encode2+0x100/0x3e0 [ 409.514163][T11232] tomoyo_encode+0x29/0x50 [ 409.514190][T11232] tomoyo_realpath_from_path+0x18f/0x6e0 [ 409.514223][T11232] ? tomoyo_profile+0x47/0x60 [ 409.514254][T11232] tomoyo_path_number_perm+0x245/0x580 [ 409.514277][T11232] ? tomoyo_path_number_perm+0x237/0x580 [ 409.514302][T11232] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 409.514328][T11232] ? find_held_lock+0x2b/0x80 [ 409.514392][T11232] ? find_held_lock+0x2b/0x80 [ 409.514422][T11232] ? hook_file_ioctl_common+0x144/0x410 [ 409.514461][T11232] ? __fget_files+0x20e/0x3c0 [ 409.514496][T11232] security_file_ioctl+0x9b/0x240 [ 409.514527][T11232] __x64_sys_ioctl+0xb7/0x210 [ 409.514554][T11232] do_syscall_64+0xcd/0xf80 [ 409.514583][T11232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.514605][T11232] RIP: 0033:0x7efe64b8f749 [ 409.514622][T11232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.514642][T11232] RSP: 002b:00007efe659e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.514663][T11232] RAX: ffffffffffffffda RBX: 00007efe64de5fa0 RCX: 00007efe64b8f749 [ 409.514677][T11232] RDX: 0000200000000600 RSI: 00000000c018937b RDI: 0000000000000004 [ 409.514691][T11232] RBP: 00007efe659e2090 R08: 0000000000000000 R09: 0000000000000000 [ 409.514705][T11232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.514719][T11232] R13: 00007efe64de6038 R14: 00007efe64de5fa0 R15: 00007ffc82c1e8b8 [ 409.514751][T11232] [ 409.514874][T11232] ERROR: Out of memory at tomoyo_realpath_from_path. [ 409.761971][T11241] fuse: Unknown parameter '00000000000000000000000' [ 409.826719][T11243] Invalid source name [ 409.831051][T11243] UBIFS error (pid: 11243): cannot open "ubifs", error -22 [ 409.832065][T11243] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1236'. [ 409.914608][T11247] netlink: 'syz.5.1238': attribute type 1 has an invalid length. [ 409.935180][T11247] bond2: entered promiscuous mode [ 409.940224][T11247] bond2: entered allmulticast mode [ 409.945741][T11247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 409.957109][T11247] erspan1: entered allmulticast mode [ 409.966731][T11247] bond2: (slave erspan1): making interface the new active one [ 409.975881][T11247] erspan1: entered promiscuous mode [ 409.981981][T11247] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 410.143871][ T1204] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 410.175095][T11252] batadv_slave_0: entered promiscuous mode [ 410.395965][T11260] random: crng reseeded on system resumption [ 410.493207][ T1204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 410.504625][ T1204] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 410.513746][ T1204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.524206][ T1204] usb 1-1: config 0 descriptor?? [ 411.933492][ T5873] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 412.093492][ T5873] usb 8-1: Using ep0 maxpacket: 32 [ 412.105594][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.132662][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.159182][ T5873] usb 8-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 412.178844][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.201611][ T5873] usb 8-1: config 0 descriptor?? [ 412.632609][T11278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.646176][T11278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.658072][ T5873] usbhid 8-1:0.0: can't add hid device: -71 [ 412.665274][ T5873] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 412.773796][ T5873] usb 8-1: USB disconnect, device number 15 [ 412.946103][ T1204] usb 1-1: USB disconnect, device number 44 [ 412.987825][ T30] audit: type=1400 audit(1766589226.497:739): avc: denied { accept } for pid=11294 comm="syz.0.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 413.117853][ T30] audit: type=1400 audit(1766589226.627:740): avc: denied { read } for pid=11294 comm="syz.0.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 413.483745][ T1204] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 413.643482][ T1204] usb 5-1: Using ep0 maxpacket: 32 [ 413.655898][ T1204] usb 5-1: unable to get BOS descriptor or descriptor too short [ 413.668368][ T1204] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 413.683464][ T1204] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 413.692354][ T1204] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 413.710176][ T1204] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 413.719427][ T1204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.727487][ T1204] usb 5-1: Product: syz [ 413.731661][ T1204] usb 5-1: Manufacturer: syz [ 413.736598][ T1204] usb 5-1: SerialNumber: syz [ 413.848278][T11314] lo speed is unknown, defaulting to 1000 [ 413.857406][T11314] lo speed is unknown, defaulting to 1000 [ 414.017448][ T1204] cdc_ncm 5-1:1.0: skipping garbage [ 414.022694][ T1204] cdc_ncm 5-1:1.0: skipping garbage [ 414.027953][ T1204] cdc_ncm 5-1:1.0: skipping garbage [ 414.033129][ T1204] cdc_ncm 5-1:1.0: skipping garbage [ 414.054691][ T1204] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 414.061648][ T1204] cdc_ncm 5-1:1.0: bind() failure [ 414.071561][ T1204] usb 5-1: USB disconnect, device number 38 [ 414.113536][ T5873] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 414.385082][ T5873] usb 1-1: config index 0 descriptor too short (expected 12580, got 36) [ 414.393710][ T5873] usb 1-1: config 83 has too many interfaces: 42, using maximum allowed: 32 [ 414.403188][ T5873] usb 1-1: config 83 has 1 interface, different from the descriptor's value: 42 [ 414.424174][ T5873] usb 1-1: config 83 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 414.447919][ T5873] usb 1-1: config 83 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.123554][ T1204] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 415.375951][ T1204] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.386096][ T1204] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 415.400105][ T1204] usb 5-1: config 0 interface 0 has no altsetting 0 [ 415.411225][ T1204] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 415.422043][ T1204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.423102][ T5873] usb 1-1: config 83 interface 0 has no altsetting 0 [ 415.432782][ T1204] usb 5-1: config 0 descriptor?? [ 415.437059][ T5873] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 415.450943][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.664659][ T1204] wacom 0003:056A:00C5.001E: item fetching failed at offset 0/1 [ 415.683284][ T1204] wacom 0003:056A:00C5.001E: parse failed [ 415.695807][ T1204] wacom 0003:056A:00C5.001E: probe with driver wacom failed with error -22 [ 415.937050][ T5873] usb 1-1: string descriptor 0 read error: -71 [ 415.947891][ T5873] usbhid 1-1:83.0: can't add hid device: -71 [ 415.957949][ T5873] usbhid 1-1:83.0: probe with driver usbhid failed with error -71 [ 415.969182][ T5873] usb 1-1: USB disconnect, device number 45 [ 416.180492][ T5873] usb 5-1: USB disconnect, device number 39 [ 416.353515][ T1204] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 416.493875][ T1204] usb 8-1: device descriptor read/64, error -71 [ 416.568267][T11371] syzkaller0: entered promiscuous mode [ 416.574699][T11371] syzkaller0: entered allmulticast mode [ 416.723750][T11377] tipc: Enabling of bearer rejected, failed to enable media [ 416.743513][ T1204] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 416.884127][ T1204] usb 8-1: device descriptor read/64, error -71 [ 417.034881][ T1204] usb usb8-port1: attempt power cycle [ 417.357550][T11401] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 417.364092][T11401] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 417.393468][ T1204] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 417.407712][T11401] vhci_hcd vhci_hcd.0: Device attached [ 417.435437][ T1204] usb 8-1: device descriptor read/8, error -71 [ 417.622419][T11401] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 417.753753][ T1204] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 417.764533][ T5924] usb 46-1: SetAddress Request (18) to port 0 [ 417.765302][T11402] vhci_hcd: connection closed [ 417.771074][ T5924] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd [ 417.785263][ T1204] usb 8-1: device descriptor read/8, error -71 [ 417.808026][ T3844] vhci_hcd vhci_hcd.6: stop threads [ 417.813231][ T3844] vhci_hcd vhci_hcd.6: release socket [ 417.818856][ T3844] vhci_hcd vhci_hcd.6: disconnect device [ 417.957880][ T1204] usb usb8-port1: unable to enumerate USB device [ 418.983749][T11423] trusted_key: encrypted_key: hex blob is missing [ 419.481633][ T30] audit: type=1400 audit(1766589232.987:741): avc: denied { read } for pid=11430 comm="syz.7.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 419.517661][T11435] netlink: 'syz.4.1285': attribute type 1 has an invalid length. [ 419.572801][T11435] bond3: entered promiscuous mode [ 419.578494][T11435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 419.609981][T11439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 419.617748][T11439] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 419.715187][T11439] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 419.800157][T11439] bond3: (slave wireguard0): making interface the new active one [ 419.808261][T11439] wireguard0: entered promiscuous mode [ 419.815264][T11439] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 419.827855][T11446] ip6gre1: entered allmulticast mode [ 419.947621][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1288'. [ 420.277375][T11435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.285077][T11435] IPv6: NLM_F_CREATE should be set when creating new route [ 420.292277][T11435] IPv6: NLM_F_CREATE should be set when creating new route [ 420.302058][T11435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.634591][ T5873] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 420.684676][T11455] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 420.783691][ T5873] usb 5-1: device descriptor read/64, error -71 [ 420.934269][ T30] audit: type=1400 audit(1766589234.427:742): avc: denied { append } for pid=11463 comm="syz.6.1295" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 421.124086][ T5873] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 421.403552][ T5873] usb 5-1: device descriptor read/64, error -71 [ 421.551429][ T5873] usb usb5-port1: attempt power cycle [ 421.755434][T11485] netlink: 'syz.7.1301': attribute type 7 has an invalid length. [ 421.902495][T11491] xt_TPROXY: Can be used only with -p tcp or -p udp [ 421.955312][ T5873] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 421.983996][ T5873] usb 5-1: device descriptor read/8, error -71 [ 421.993515][ T6381] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 422.013519][ T5880] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 422.074286][ T5936] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 422.123496][ T6381] usb 1-1: device descriptor read/64, error -71 [ 422.165317][ T5880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.183658][ T5880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.205149][ T5880] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 422.214906][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.223529][ T5873] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 422.232624][ T5880] usb 8-1: config 0 descriptor?? [ 422.241600][ T5936] usb 7-1: config 0 has no interfaces? [ 422.247149][ T5936] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 422.260518][ T5873] usb 5-1: device descriptor read/8, error -71 [ 422.268708][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.281502][ T5936] usb 7-1: config 0 descriptor?? [ 422.363578][ T6381] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 422.384079][ T5873] usb usb5-port1: unable to enumerate USB device [ 422.493473][ T6381] usb 1-1: device descriptor read/64, error -71 [ 422.539242][ T5873] usb 7-1: USB disconnect, device number 40 [ 422.604579][ T6381] usb usb1-port1: attempt power cycle [ 422.670833][ T5880] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 422.680054][ T5880] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 422.853708][ T5924] usb 46-1: device descriptor read/8, error -110 [ 422.878816][ T5880] cp2112 0003:10C4:EA90.001F: Part Number: 0x82 Device Version: 0xFE [ 422.943503][ T6381] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 422.974845][ T6381] usb 1-1: device descriptor read/8, error -71 [ 423.087766][ T5880] cp2112 0003:10C4:EA90.001F: error requesting SMBus config [ 423.111333][ T5880] cp2112 0003:10C4:EA90.001F: probe with driver cp2112 failed with error -32 [ 423.217264][ T6381] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 423.247615][ T6381] usb 1-1: device descriptor read/8, error -71 [ 423.653704][ T5924] usb usb46-port1: attempt power cycle [ 423.664381][ T6381] usb usb1-port1: unable to enumerate USB device [ 424.071967][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1310'. [ 424.085927][T11512] hsr_slave_0: left promiscuous mode [ 424.096770][T11512] hsr_slave_1: left promiscuous mode [ 424.163695][ T6882] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 424.252106][ T5924] usb usb46-port1: unable to enumerate USB device [ 424.334982][T11522] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 424.341521][T11522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 424.349343][T11522] vhci_hcd vhci_hcd.0: Device attached [ 424.354900][ T6882] usb 5-1: Using ep0 maxpacket: 16 [ 424.364875][ T6882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.376273][ T6882] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 424.385457][T11523] vhci_hcd: connection closed [ 424.385684][ T6882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.385753][ T5999] vhci_hcd vhci_hcd.6: stop threads [ 424.404831][ T5999] vhci_hcd vhci_hcd.6: release socket [ 424.404939][ T6882] usb 5-1: config 0 descriptor?? [ 424.410312][ T5999] vhci_hcd vhci_hcd.6: disconnect device [ 424.695743][ T30] audit: type=1800 audit(1766589238.207:743): pid=11528 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1313" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 424.734935][T11531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.750282][T11531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.929023][ T6381] usb 8-1: USB disconnect, device number 20 [ 425.036153][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1314'. [ 425.064141][T11541] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1316'. [ 425.069750][T11539] netlink: 'syz.5.1314': attribute type 21 has an invalid length. [ 425.267220][ T6882] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 425.332104][T11551] fuse: Unknown parameter 'groQd' [ 425.347846][T11551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.433598][ T6381] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 425.460451][T11554] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 425.502767][ T30] audit: type=1400 audit(1766589238.997:744): avc: denied { relabelto } for pid=11549 comm="syz.6.1318" name="file0" dev="tmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 425.803516][ T6381] usb 8-1: Using ep0 maxpacket: 32 [ 425.831779][ T6381] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 425.842135][ T6381] usb 8-1: config 0 has no interface number 0 [ 425.851105][ T30] audit: type=1400 audit(1766589239.007:745): avc: denied { associate } for pid=11549 comm="syz.6.1318" name="file0" dev="tmpfs" ino=1341 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 425.878705][ T6381] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 425.880638][ T6381] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 425.903990][ T6381] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.934353][ T6381] usb 8-1: Product: syz [ 425.939592][ T6381] usb 8-1: Manufacturer: syz [ 425.944285][ T6381] usb 8-1: SerialNumber: syz [ 425.951370][ T6381] usb 8-1: config 0 descriptor?? [ 425.960302][ T6381] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 425.970221][ T6381] em28xx 8-1:0.132: Video interface 132 found: [ 426.314102][T11551] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 426.824302][T11551] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 426.859741][ T6381] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 426.878775][T11551] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 426.890611][T11551] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 427.059734][T11551] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 427.091216][T11551] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 427.579418][ T30] audit: type=1326 audit(1766589240.667:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11577 comm="syz.5.1321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1a558f749 code=0x0 [ 427.602555][ T6381] em28xx 8-1:0.132: failed to read eeprom (err=-110) [ 427.628167][ T6381] em28xx 8-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 427.854755][T11551] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 427.864260][ T6381] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 427.883789][ T6381] em28xx 8-1:0.132: analog set to bulk mode. [ 427.889973][T11551] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 427.900123][ T5936] em28xx 8-1:0.132: Registering V4L2 extension [ 427.950032][ T6381] usb 8-1: USB disconnect, device number 21 [ 427.967701][ T6381] em28xx 8-1:0.132: Disconnecting em28xx [ 427.975779][ T5880] usb 5-1: USB disconnect, device number 44 [ 428.262847][ T5936] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 428.272689][ T5936] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 428.284372][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 428.291406][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 428.298471][ T5936] em28xx 8-1:0.132: No AC97 audio processor [ 428.363954][ T5936] usb 8-1: Decoder not found [ 428.368876][ T5936] em28xx 8-1:0.132: failed to create media graph [ 428.375918][ T5936] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 428.402202][ T5936] em28xx 8-1:0.132: Remote control support is not available for this card. [ 428.411732][ T6381] em28xx 8-1:0.132: Closing input extension [ 428.569279][ T5936] libceph: connect (1)[c::]:6789 error -101 [ 428.601715][ T6381] em28xx 8-1:0.132: Freeing device [ 428.612345][ T5936] libceph: mon0 (1)[c::]:6789 connect error [ 428.665355][T11607] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1325'. [ 428.880480][T11598] ceph: No mds server is up or the cluster is laggy [ 429.090975][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1330'. [ 429.111837][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1330'. [ 430.163721][T11649] overlayfs: failed to clone upperpath [ 430.267261][T11652] netlink: 'syz.5.1337': attribute type 1 has an invalid length. [ 430.275518][T11652] netlink: 'syz.5.1337': attribute type 1 has an invalid length. [ 430.283305][T11652] netlink: 'syz.5.1337': attribute type 1 has an invalid length. [ 430.291791][T11652] netlink: 'syz.5.1337': attribute type 2 has an invalid length. [ 431.029127][ T30] audit: type=1326 audit(1766589244.517:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 431.062638][ T30] audit: type=1326 audit(1766589244.517:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 431.094928][ T30] audit: type=1326 audit(1766589244.517:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 431.131083][ T30] audit: type=1326 audit(1766589244.517:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 431.175192][T11659] pim6reg: entered allmulticast mode [ 431.181737][T11659] pim6reg: left allmulticast mode [ 431.204255][ T30] audit: type=1326 audit(1766589244.517:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 431.333554][ T5936] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 431.376977][ T30] audit: type=1326 audit(1766589244.517:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 431.783751][ T6882] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 431.829871][ T30] audit: type=1326 audit(1766589244.527:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 431.855108][ T30] audit: type=1326 audit(1766589244.537:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 431.881493][ T30] audit: type=1326 audit(1766589244.667:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 431.906306][ T30] audit: type=1326 audit(1766589244.667:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 431.943494][ T5936] usb 7-1: Using ep0 maxpacket: 32 [ 431.951199][ T5936] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 431.959477][ T5936] usb 7-1: config 0 has no interface number 0 [ 431.965663][ T5936] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 431.976326][ T5936] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 431.987487][ T5936] usb 7-1: config 0 interface 126 has no altsetting 0 [ 431.996307][ T5936] usb 7-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 432.005414][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.013458][ T5936] usb 7-1: Product: syz [ 432.013557][ T6882] usb 5-1: Using ep0 maxpacket: 16 [ 432.017617][ T5936] usb 7-1: Manufacturer: syz [ 432.017639][ T5936] usb 7-1: SerialNumber: syz [ 432.033142][ T5936] usb 7-1: config 0 descriptor?? [ 432.034440][ T6882] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 432.038935][T11663] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 432.057821][T11663] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 432.143762][ T6882] usb 5-1: config 0 has no interface number 0 [ 432.149904][ T6882] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 432.173262][ T6882] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 432.185127][ T6882] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 432.194425][ T6882] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 432.202507][ T6882] usb 5-1: Product: syz [ 432.206816][ T6882] usb 5-1: SerialNumber: syz [ 432.213892][ T6882] usb 5-1: config 0 descriptor?? [ 432.222122][ T6882] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 432.230616][ T6882] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input22 [ 432.333384][ T6381] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 432.420805][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 432.892327][ T5936] ir_usb 7-1:0.126: IR Dongle converter detected [ 432.899796][ T5936] usb 7-1: IRDA class descriptor not found, device not bound [ 432.908500][ T6381] usb 1-1: Invalid ep0 maxpacket: 32 [ 432.928166][ T6882] usb 5-1: USB disconnect, device number 45 [ 432.943574][ T6882] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 433.078797][ T6381] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 433.129282][ T1204] usb 7-1: USB disconnect, device number 41 [ 433.256285][ T6381] usb 1-1: Invalid ep0 maxpacket: 32 [ 433.273985][ T6381] usb usb1-port1: attempt power cycle [ 433.721223][ T6381] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 433.744197][ T6381] usb 1-1: Invalid ep0 maxpacket: 32 [ 433.888621][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1347'. [ 433.995827][T11705] 9pnet_virtio: no channels available for device syz [ 434.033584][ T6381] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 434.064778][ T6381] usb 1-1: Invalid ep0 maxpacket: 32 [ 434.070332][ T6381] usb usb1-port1: unable to enumerate USB device [ 434.178556][T11720] ipvlan2: entered allmulticast mode [ 434.184869][T11720] dummy0: entered allmulticast mode [ 434.307274][T11718] ipvlan3: entered allmulticast mode [ 434.516956][T11729] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 434.592247][T11729] bond4 (unregistering): Released all slaves [ 434.679715][T11736] IPv6: NLM_F_REPLACE set, but no existing node found! [ 434.702878][T11730] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 434.724357][T11730] bond4 (unregistering): Released all slaves [ 434.854175][T11743] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 435.111174][T11745] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1357'. [ 435.273488][ T6882] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 435.426328][ T6882] usb 5-1: config 0 has an invalid interface number: 139 but max is 0 [ 435.436602][ T6882] usb 5-1: config 0 has no interface number 0 [ 435.450795][ T6882] usb 5-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 435.469698][ T6882] usb 5-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 435.492688][ T6882] usb 5-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 435.513486][ T6882] usb 5-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 435.560140][ T6882] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 435.569743][ T6882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.578153][ T6882] usb 5-1: Product: syz [ 435.587122][ T6882] usb 5-1: Manufacturer: syz [ 435.591755][ T6882] usb 5-1: SerialNumber: syz [ 435.710696][ T6882] usb 5-1: config 0 descriptor?? [ 435.716732][T11742] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 435.724172][T11742] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 436.237684][ T6882] mct_u232 5-1:0.139: MCT U232 converter detected [ 436.260940][T11768] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 436.267485][T11768] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 436.276925][ T6882] usb 5-1: MCT U232 converter now attached to ttyUSB0 [ 436.292544][ T6882] usb 5-1: USB disconnect, device number 46 [ 436.301499][ T6882] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 436.315447][ T6882] mct_u232 5-1:0.139: device disconnected [ 436.322150][T11768] vhci_hcd vhci_hcd.0: Device attached [ 436.508826][T11768] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 437.014935][T11769] vhci_hcd: connection closed [ 437.014987][ T6882] usb 34-1: SetAddress Request (15) to port 0 [ 437.034729][ T6882] usb 34-1: new SuperSpeed USB device number 15 using vhci_hcd [ 437.053701][ T6178] vhci_hcd vhci_hcd.0: stop threads [ 437.059143][ T6178] vhci_hcd vhci_hcd.0: release socket [ 437.066160][ T6178] vhci_hcd vhci_hcd.0: disconnect device [ 437.105887][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 437.105898][ T30] audit: type=1326 audit(1766589250.617:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.5.1366" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1a558f749 code=0x0 [ 437.207912][ T30] audit: type=1326 audit(1766589250.647:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.5.1366" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1a558f749 code=0x0 [ 437.930152][T11795] syz_tun: entered allmulticast mode [ 438.263525][ T5924] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 438.323545][ T5936] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 438.426002][T11811] SELinux: Context system_u:object is not valid (left unmapped). [ 438.441766][ T5924] usb 5-1: config 4 has an invalid interface number: 3 but max is 0 [ 438.449874][ T5924] usb 5-1: config 4 has an invalid interface number: 3 but max is 0 [ 438.463517][ T5936] usb 8-1: device descriptor read/64, error -71 [ 438.473531][ T5924] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 438.483902][ T30] audit: type=1400 audit(1766589251.987:769): avc: denied { relabelto } for pid=11810 comm="syz.0.1374" name="cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 438.543936][ T5924] usb 5-1: config 4 has no interface number 0 [ 438.564379][ T5924] usb 5-1: config 4 interface 3 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 438.566871][ T30] audit: type=1400 audit(1766589252.017:770): avc: denied { associate } for pid=11810 comm="syz.0.1374" name="cgroup.procs" dev="cgroup" ino=120 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 438.609536][ T5924] usb 5-1: config 4 interface 3 has no altsetting 0 [ 438.613241][T11816] overlayfs: failed to clone upperpath [ 438.624972][ T5924] usb 5-1: config 4 interface 3 has no altsetting 1 [ 438.631757][ T5924] usb 5-1: New USB device found, idVendor=05ac, idProduct=1204, bcdDevice= 7.6c [ 438.644011][T11816] overlayfs: failed to clone upperpath [ 438.753107][T11821] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1377'. [ 438.763999][ T5936] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 438.771028][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.913552][ T5936] usb 8-1: device descriptor read/64, error -71 [ 439.003179][T11828] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1379'. [ 439.054259][ T5936] usb usb8-port1: attempt power cycle [ 439.081124][T11831] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 439.427454][ T5924] apple-mfi-fastcharge 5-1: string descriptor 0 read error: -71 [ 439.455860][ T5924] usb-storage 5-1:4.3: USB Mass Storage device detected [ 439.582772][ T5924] usb-storage 5-1:4.3: Quirks match for vid 05ac pid 1204: 90 [ 439.757392][ T5936] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 439.776549][ T5924] apple-mfi-fastcharge 5-1: USB disconnect, device number 47 [ 439.784243][ T5936] usb 8-1: device descriptor read/8, error -71 [ 439.820553][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.827175][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.927509][T11854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1383'. [ 439.970764][ T30] audit: type=1804 audit(1766589253.467:771): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1383" name="/newroot/246/file0" dev="tmpfs" ino=1360 res=1 errno=0 [ 440.163678][ T5936] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 440.244153][ T5936] usb 8-1: device descriptor read/8, error -71 [ 440.294082][ T30] audit: type=1400 audit(1766589253.807:772): avc: denied { write } for pid=11857 comm="syz.6.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 440.353849][ T5936] usb usb8-port1: unable to enumerate USB device [ 441.276409][ T30] audit: type=1400 audit(1766589254.787:773): avc: denied { ioctl } for pid=11873 comm="syz.7.1391" path="socket:[32501]" dev="sockfs" ino=32501 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 442.336281][ T6882] usb 34-1: device descriptor read/8, error -110 [ 442.567921][T11888] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 442.734456][ T6882] usb usb34-port1: attempt power cycle [ 443.314549][ T6882] usb usb34-port1: unable to enumerate USB device [ 443.459249][ T30] audit: type=1400 audit(1766589256.947:774): avc: denied { create } for pid=11906 comm="syz.7.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 443.522868][T11905] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 443.539758][ T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 443.563041][ T30] audit: type=1400 audit(1766589256.947:775): avc: denied { ioctl } for pid=11906 comm="syz.7.1395" path="socket:[33147]" dev="sockfs" ino=33147 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 443.593456][ T30] audit: type=1400 audit(1766589256.947:776): avc: denied { ioctl } for pid=11906 comm="syz.7.1395" path="socket:[33148]" dev="sockfs" ino=33148 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 444.020566][ T24] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 444.039893][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.286298][ T24] usb 1-1: config 0 descriptor?? [ 444.549363][ T24] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 444.626504][T11916] lo speed is unknown, defaulting to 1000 [ 444.635831][T11916] lo speed is unknown, defaulting to 1000 [ 444.682174][T11921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.690938][T11921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.725480][T11921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.755613][T11923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.757387][T11921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.801509][ T24] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 444.808840][ T24] [drm] Initialized udl on minor 2 [ 444.883009][T11923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.913769][ T5873] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 444.948177][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 444.975420][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 445.179943][ T5873] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 445.193492][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.201528][ T5873] usb 8-1: Product: syz [ 445.205287][T11903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.206043][ T6381] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 445.225417][ T5873] usb 8-1: Manufacturer: syz [ 445.231196][T11903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.239016][ T5873] usb 8-1: SerialNumber: syz [ 445.325731][T11938] random: crng reseeded on system resumption [ 445.408988][ T5924] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 445.417570][ T30] audit: type=1400 audit(1766589258.827:777): avc: denied { listen } for pid=11932 comm="syz.4.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 445.676337][ T6381] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 445.718187][ T30] audit: type=1400 audit(1766589258.827:778): avc: denied { read } for pid=11932 comm="syz.4.1409" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 445.758780][ T6381] usb 1-1: USB disconnect, device number 54 [ 445.833551][ T5924] usb 7-1: device descriptor read/64, error -71 [ 446.020194][ T5873] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 446.032477][ T5873] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 446.043449][ T5873] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 446.046155][ T30] audit: type=1400 audit(1766589259.557:779): avc: denied { bind } for pid=11945 comm="syz.4.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 446.076012][ T5873] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 446.087259][ T5873] usb 8-1: USB disconnect, device number 26 [ 446.093625][ T5924] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 446.233760][ T5924] usb 7-1: device descriptor read/64, error -71 [ 446.343900][ T5924] usb usb7-port1: attempt power cycle [ 446.523536][ T5873] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 446.674834][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 446.685625][ T5924] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 446.708934][ T5873] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 446.721758][T11950] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 446.734591][T11950] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 446.744690][ T30] audit: type=1400 audit(1766589260.237:780): avc: denied { firmware_load } for pid=11948 comm="syz.7.1413" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 446.765615][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.765729][ T5924] usb 7-1: device descriptor read/8, error -71 [ 446.774428][ T5873] usb 5-1: Product: syz [ 446.790790][ T5873] usb 5-1: Manufacturer: syz [ 446.792623][T11953] overlayfs: missing 'lowerdir' [ 446.800919][ T5873] usb 5-1: SerialNumber: syz [ 446.808144][ T5873] usb 5-1: config 0 descriptor?? [ 446.852424][T11953] NFSD: Failed to start, no listeners configured. [ 447.033556][ T5924] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 447.076450][ T5924] usb 7-1: device descriptor read/8, error -71 [ 447.084358][T11956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54298 sclass=netlink_route_socket pid=11956 comm=syz.4.1412 [ 447.102249][T11956] xt_hashlimit: max too large, truncated to 1048576 [ 447.224925][ T5924] usb usb7-port1: unable to enumerate USB device [ 447.583052][ T30] audit: type=1400 audit(1766589261.087:781): avc: denied { setattr } for pid=11965 comm="syz.0.1419" name="" dev="pipefs" ino=5200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 447.668769][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 447.677906][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 447.787558][ T5873] usb 5-1: USB disconnect, device number 48 [ 447.804298][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1420'. [ 448.063520][ T6882] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 448.243580][ T6882] usb 8-1: Using ep0 maxpacket: 8 [ 448.251533][ T6882] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.262039][ T6882] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 448.271220][ T6882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.284417][ T6882] usb 8-1: config 0 descriptor?? [ 448.531704][T11979] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1422'. [ 449.071790][ T5873] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 449.166204][ T6882] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 449.376965][T11998] netlink: 'syz.5.1427': attribute type 178 has an invalid length. [ 449.389707][ T5873] usb 7-1: config 1 has an invalid interface number: 140 but max is 0 [ 449.398179][ T5873] usb 7-1: config 1 has no interface number 0 [ 449.404481][ T5873] usb 7-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 449.437787][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.536417][ T5873] usb 7-1: MBOX3: Invalid descriptor size=18. [ 449.795248][ T30] audit: type=1400 audit(1766589263.307:782): avc: denied { mounton } for pid=11971 comm="syz.7.1421" path="/file0" dev="ramfs" ino=32758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 450.181481][ T30] audit: type=1800 audit(1766589263.487:783): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1430" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 450.745077][ T6882] gspca_vc032x: reg_w err -110 [ 450.749979][ T6882] vc032x 8-1:0.0: probe with driver vc032x failed with error -110 [ 450.908256][T12013] xt_hashlimit: size too large, truncated to 1048576 [ 451.034043][ T6882] usb 7-1: USB disconnect, device number 46 [ 451.167263][T12018] overlayfs: missing 'lowerdir' [ 451.623737][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1434'. [ 451.814448][ T6882] usb 8-1: USB disconnect, device number 27 [ 452.025639][T12047] netlink: 'syz.4.1435': attribute type 10 has an invalid length. [ 452.033586][T12047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1435'. [ 452.054538][T12047] batman_adv: batadv0: Adding interface: virt_wifi0 [ 452.061210][T12047] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.093440][T12047] batman_adv: batadv0: Interface activated: virt_wifi0 [ 452.492070][T12051] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1440'. [ 453.156057][T12065] openvswitch: netlink: IP tunnel TTL not specified. [ 453.189791][ T30] audit: type=1400 audit(1766589266.697:784): avc: denied { write } for pid=12067 comm="syz.7.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 453.215350][ T30] audit: type=1400 audit(1766589266.727:785): avc: denied { getopt } for pid=12067 comm="syz.7.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 453.303507][ T6381] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 453.473524][ T6381] usb 5-1: Using ep0 maxpacket: 32 [ 453.499141][ T6381] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 453.513656][ T5873] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 453.530320][ T6381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.554266][ T6381] usb 5-1: config 0 descriptor?? [ 453.689739][ T5873] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 453.699900][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.708955][ T5873] usb 8-1: Product: syz [ 453.716291][ T5873] usb 8-1: Manufacturer: syz [ 453.720997][ T5873] usb 8-1: SerialNumber: syz [ 453.744762][ T5873] usb 8-1: config 0 descriptor?? [ 453.757873][ T5873] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 453.766689][ T6381] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 453.778277][ T6381] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 453.787620][ T6381] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 453.834304][ T24] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 454.005548][ T24] usb 1-1: config 0 has an invalid interface number: 17 but max is 0 [ 454.014131][ T24] usb 1-1: config 0 has no interface number 0 [ 454.020541][ T24] usb 1-1: config 0 interface 17 has no altsetting 0 [ 454.048582][ T24] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 454.058423][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.066998][ T24] usb 1-1: Product: syz [ 454.074096][ T24] usb 1-1: Manufacturer: syz [ 454.091748][ T24] usb 1-1: SerialNumber: syz [ 454.100093][ T24] usb 1-1: config 0 descriptor?? [ 454.107728][ T24] esd_usb 1-1:0.17: sending version message failed [ 454.114407][ T24] esd_usb 1-1:0.17: probe with driver esd_usb failed with error -22 [ 454.315131][T12079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.323999][T12079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.996536][ T5873] gspca_sunplus: reg_w_riv err -71 [ 455.006187][ T5873] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 455.053492][ T5924] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 455.140846][ T5873] usb 8-1: USB disconnect, device number 28 [ 455.384850][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 455.441885][ T5924] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 455.554845][ T5924] usb 7-1: config 0 has no interface number 0 [ 455.880640][ T5924] usb 7-1: config 0 interface 184 has no altsetting 0 [ 456.114003][ T5924] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 456.364306][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.531663][ T5924] usb 7-1: Product: syz [ 456.554853][ T5924] usb 7-1: Manufacturer: syz [ 456.594840][ T5924] usb 7-1: SerialNumber: syz [ 456.625232][ T5924] usb 7-1: config 0 descriptor?? [ 456.767956][ T24] usb 1-1: USB disconnect, device number 55 [ 456.794655][ T5924] smsc75xx v1.0.0 [ 457.424124][ T5924] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 457.494117][ T5924] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 457.758069][ T5924] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 458.457971][ T5924] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 458.479323][ T5924] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 458.499007][ T5924] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 458.518917][ T5924] usb 7-1: USB disconnect, device number 47 [ 458.758146][T12144] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 458.758146][T12144] The task syz.5.1462 (12144) triggered the difference, watch for misbehavior. [ 458.873534][ T5873] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 458.925191][ T30] audit: type=1400 audit(1766589272.437:786): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 459.341047][T12149] netlink: 'syz.6.1463': attribute type 10 has an invalid length. [ 459.345289][ T5873] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 185 [ 459.360256][T12149] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1463'. [ 459.360285][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 459.378990][T12149] dummy0: entered promiscuous mode [ 459.379520][ T30] audit: type=1400 audit(1766589272.477:787): avc: denied { setopt } for pid=12151 comm="syz.7.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 459.395182][T12161] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 459.410424][T12161] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 459.526742][ T5873] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 459.546907][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.548229][T12161] vhci_hcd vhci_hcd.0: Device attached [ 459.567904][ T30] audit: type=1400 audit(1766589272.487:788): avc: denied { bpf } for pid=12151 comm="syz.7.1465" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 459.577551][T12149] bridge0: port 1(dummy0) entered blocking state [ 459.605341][ T5873] usb 1-1: Product: syz [ 459.609631][ T5873] usb 1-1: Manufacturer: syz [ 459.614350][ T5873] usb 1-1: SerialNumber: syz [ 459.629597][T12162] vhci_hcd: connection closed [ 459.629762][ T132] vhci_hcd vhci_hcd.4: stop threads [ 459.640328][ T5873] usb 1-1: config 0 descriptor?? [ 459.653952][ T30] audit: type=1400 audit(1766589272.807:789): avc: denied { read write } for pid=9490 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.655480][ T132] vhci_hcd vhci_hcd.4: release socket [ 459.700486][T12139] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 459.705262][T12149] bridge0: port 1(dummy0) entered disabled state [ 459.723659][T12149] dummy0: entered allmulticast mode [ 459.732098][ T132] vhci_hcd vhci_hcd.4: disconnect device [ 459.743868][ T5936] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 459.765367][ T5873] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 459.783867][ T5873] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 459.799471][ T30] audit: type=1400 audit(1766589272.807:790): avc: denied { open } for pid=9490 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.801906][T12168] binder: 12143:12168 ioctl c0306201 0 returned -14 [ 459.824792][ T5873] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 459.863583][ T5873] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 459.871847][ T5873] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 459.880356][ T30] audit: type=1400 audit(1766589272.807:791): avc: denied { ioctl } for pid=9490 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.906059][ T5873] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 459.923531][ T5873] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 459.943675][ T5873] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 459.952968][T12139] dlm: plock device version mismatch: kernel (1.2.0), user (170.0.121) [ 459.972080][ T30] audit: type=1400 audit(1766589273.037:792): avc: denied { perfmon } for pid=12166 comm="syz.5.1468" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 460.029303][ T5873] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 460.043136][ T5873] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 460.061210][ T5873] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 460.096351][ T5873] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 460.121920][ T5873] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 460.142419][ T5873] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 460.192713][ T5873] usb 1-1: USB disconnect, device number 56 [ 460.215853][ T30] audit: type=1400 audit(1766589273.727:793): avc: denied { read } for pid=12171 comm="syz.7.1469" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 460.254297][ T5873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 460.378872][ T5873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 460.398783][ T30] audit: type=1400 audit(1766589273.727:794): avc: denied { open } for pid=12171 comm="syz.7.1469" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 460.895333][ T5873] keyspan 1-1:0.0: device disconnected [ 461.653638][ T6882] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 462.010491][ T6882] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 462.031524][T12205] lo speed is unknown, defaulting to 1000 [ 462.033506][ T6882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.049418][T12205] lo speed is unknown, defaulting to 1000 [ 462.051451][ T6882] usb 1-1: config 0 descriptor?? [ 462.277413][ T6882] kaweth 1-1:0.0: Firmware present in device. [ 462.333765][ T5873] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 462.496406][ T6882] kaweth 1-1:0.0: Statistics collection: 0 [ 462.505743][ T5873] usb 7-1: Using ep0 maxpacket: 16 [ 462.512931][ T6882] kaweth 1-1:0.0: Multicast filter limit: 0 [ 462.520085][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.524369][ T6882] kaweth 1-1:0.0: MTU: 0 [ 462.531360][ T5873] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 462.550951][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.579383][ T6882] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 462.600282][ T5873] usb 7-1: config 0 descriptor?? [ 464.926393][ T6882] kaweth 1-1:0.0: Error setting SOFS wait [ 464.937272][ T6882] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 464.979504][ T6882] usb 1-1: USB disconnect, device number 57 [ 465.147817][T12251] binder: BINDER_SET_CONTEXT_MGR already set [ 465.180733][T12251] binder: 12250:12251 ioctl 4018620d 2000000000c0 returned -16 [ 465.188706][ T5873] usbhid 7-1:0.0: can't add hid device: -71 [ 465.221272][ T5873] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 465.244960][ T5873] usb 7-1: USB disconnect, device number 48 [ 466.116639][ T30] audit: type=1400 audit(1766589279.627:795): avc: denied { ioctl } for pid=12265 comm="syz.6.1495" path="socket:[34291]" dev="sockfs" ino=34291 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 466.163513][ T5873] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 466.323519][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 466.342861][ T5873] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 466.394762][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.416061][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 466.474039][ T5873] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 466.793698][ T24] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 466.810415][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.879590][ T5873] usb 1-1: config 0 descriptor?? [ 467.005697][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 467.031825][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 467.064519][ T24] usb 7-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 467.078259][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.090319][ T24] usb 7-1: config 0 descriptor?? [ 467.097127][T12256] overlayfs: failed lookup in lower (newroot/293, name='bus', err=-40): overlapping layers [ 467.136229][T12285] netlink: 'syz.7.1501': attribute type 1 has an invalid length. [ 467.136243][T12286] netlink: 'syz.7.1501': attribute type 1 has an invalid length. [ 467.171539][T12286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.192073][T12286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.199204][T12286] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 467.211060][T12286] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 467.241699][T12285] veth3: entered promiscuous mode [ 467.251526][T12285] bond1: (slave veth3): Enslaving as an active interface with a down link [ 467.261859][T12288] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1501'. [ 467.274963][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1501'. [ 467.286771][T12285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.458727][ T5873] smartjoyplus 0003:6666:8801.0021: global environment stack underflow [ 467.472133][ T5873] smartjoyplus 0003:6666:8801.0021: item 0 1 1 11 parsing failed [ 468.091124][ T5873] smartjoyplus 0003:6666:8801.0021: parse failed [ 468.106710][ T5873] smartjoyplus 0003:6666:8801.0021: probe with driver smartjoyplus failed with error -22 [ 468.453322][T12256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12256 comm=syz.0.1492 [ 468.473332][T12295] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1492'. [ 468.701754][ T30] audit: type=1400 audit(1766589282.207:796): avc: denied { connect } for pid=12297 comm="syz.7.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 469.026962][ T30] audit: type=1400 audit(1766589282.537:797): avc: denied { append } for pid=12307 comm="syz.7.1506" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 469.052626][T12308] loop6: detected capacity change from 0 to 4096 [ 469.300405][ T30] audit: type=1400 audit(1766589282.807:798): avc: denied { mount } for pid=12307 comm="syz.7.1506" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 469.385740][ T30] audit: type=1400 audit(1766589282.807:799): avc: denied { mounton } for pid=12307 comm="syz.7.1506" path="/110/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 469.447284][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 469.597177][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 469.599180][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ea0c00: rx timeout, send abort [ 469.607575][ T24] usb 7-1: USB disconnect, device number 49 [ 469.649748][ T30] audit: type=1400 audit(1766589283.157:800): avc: denied { unmount } for pid=9490 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 469.657951][ T6882] usb 1-1: USB disconnect, device number 58 [ 470.100192][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ea0400: rx timeout, send abort [ 470.114815][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ea0c00: abort rx timeout. Force session deactivation [ 470.185728][ T30] audit: type=1400 audit(1766589283.687:801): avc: denied { append } for pid=12317 comm="syz.0.1510" name="sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 470.219772][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1509'. [ 470.270740][ T30] audit: type=1400 audit(1766589283.777:802): avc: denied { ioctl } for pid=12317 comm="syz.0.1510" path="socket:[35217]" dev="sockfs" ino=35217 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 470.315239][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1509'. [ 470.363517][ T30] audit: type=1400 audit(1766589283.827:803): avc: denied { wake_alarm } for pid=12314 comm="syz.6.1508" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 470.599145][ T30] audit: type=1400 audit(1766589284.107:804): avc: denied { block_suspend } for pid=12333 comm="syz.5.1512" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 470.608441][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ea0400: abort rx timeout. Force session deactivation [ 471.354532][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1516'. [ 471.535157][ T30] audit: type=1400 audit(1766589285.017:805): avc: denied { ioctl } for pid=12350 comm="syz.5.1517" path="socket:[34560]" dev="sockfs" ino=34560 ioctlcmd=0x6109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 471.936003][ T5951] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 472.436081][ T5951] usb 1-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 1024 [ 472.463695][ T5951] usb 1-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 472.493669][ T5951] usb 1-1: config 1 interface 0 has no altsetting 0 [ 472.501669][ T30] audit: type=1400 audit(1766589286.007:806): avc: denied { listen } for pid=12340 comm="syz.6.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 472.523379][ T5951] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 472.551809][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.564093][ T5951] usb 1-1: Product: Л [ 472.590515][ T5951] usb 1-1: Manufacturer: 实鋪닡鵕ꌾ麄 [ 472.609594][ T5951] usb 1-1: SerialNumber: syz [ 472.625051][T12353] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 472.632969][T12353] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 472.679355][T12368] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1521'. [ 472.692735][T12368] syz_tun: entered allmulticast mode [ 472.742098][T12374] lo speed is unknown, defaulting to 1000 [ 472.751125][T12374] lo speed is unknown, defaulting to 1000 [ 472.848117][ T5951] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 472.882335][ T5951] usb 1-1: USB disconnect, device number 59 [ 473.376094][T12367] syz_tun: left allmulticast mode [ 473.529639][ T30] audit: type=1400 audit(1766589287.037:807): avc: denied { append } for pid=12377 comm="syz.0.1523" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 473.578412][T12378] netlink: 'syz.0.1523': attribute type 2 has an invalid length. [ 473.740284][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1524'. [ 474.897546][T12406] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 474.904105][T12406] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 474.913920][T12406] vhci_hcd vhci_hcd.0: Device attached [ 474.955443][T12406] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 475.293280][ T24] usb 34-1: SetAddress Request (19) to port 0 [ 475.300175][ T24] usb 34-1: new SuperSpeed USB device number 19 using vhci_hcd [ 475.300631][T12407] vhci_hcd: connection closed [ 475.315372][ T9626] vhci_hcd vhci_hcd.0: stop threads [ 475.326619][ T9626] vhci_hcd vhci_hcd.0: release socket [ 475.333123][ T9626] vhci_hcd vhci_hcd.0: disconnect device [ 476.375268][ T30] audit: type=1400 audit(1766589289.887:808): avc: denied { append } for pid=12424 comm="syz.6.1536" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 476.426117][T12423] lo speed is unknown, defaulting to 1000 [ 476.444338][T12423] lo speed is unknown, defaulting to 1000 [ 477.533552][ T5936] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 477.735402][ T5936] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 477.755305][ T30] audit: type=1400 audit(1766589291.267:809): avc: denied { read } for pid=12441 comm="syz.4.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 477.761226][ T5936] usb 1-1: config 0 has no interface number 0 [ 477.793631][ T5936] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 477.802729][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.841388][ T5936] usb 1-1: config 0 descriptor?? [ 478.073528][T12437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.109231][ T5936] usb 1-1: string descriptor 0 read error: -71 [ 478.131608][ T5936] usb-storage 1-1:0.168: USB Mass Storage device detected [ 478.173538][ T5936] usb-storage 1-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 478.207915][ T5936] usb 1-1: USB disconnect, device number 60 [ 479.463343][T12464] xt_ecn: cannot match TCP bits for non-tcp packets [ 479.863506][ T6882] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 480.376095][ T24] usb 34-1: device descriptor read/8, error -110 [ 480.774984][ T24] usb usb34-port1: attempt power cycle [ 481.202780][ T6882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.213268][ T6882] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.226719][ T6882] usb 1-1: config 0 interface 0 has no altsetting 0 [ 481.236351][ T6882] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 481.245588][ T6882] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 481.263102][ T6882] usb 1-1: Product: syz [ 481.270413][ T6882] usb 1-1: Manufacturer: syz [ 481.275394][ T6882] usb 1-1: SerialNumber: syz [ 481.282470][ T6882] usb 1-1: config 0 descriptor?? [ 481.303060][ T6882] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 481.676273][ T24] usb usb34-port1: unable to enumerate USB device [ 482.310266][T12503] netlink: 4376 bytes leftover after parsing attributes in process `syz.5.1557'. [ 482.319501][T12503] netlink: 4376 bytes leftover after parsing attributes in process `syz.5.1557'. [ 483.085844][T12524] overlayfs: failed to clone upperpath [ 483.814371][ T6882] usb 1-1: USB disconnect, device number 61 [ 484.324348][ T30] audit: type=1326 audit(1766589297.737:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 484.455541][ T30] audit: type=1326 audit(1766589297.737:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 484.499385][ T30] audit: type=1326 audit(1766589297.737:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 484.539865][T12544] 9p: Bad value for 'wfdno' [ 484.545381][ T30] audit: type=1326 audit(1766589297.737:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 484.603461][ T30] audit: type=1326 audit(1766589297.737:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 484.680719][ T30] audit: type=1326 audit(1766589297.737:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 484.739972][ T30] audit: type=1326 audit(1766589297.737:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 484.774263][ T30] audit: type=1326 audit(1766589297.737:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 484.876765][ T30] audit: type=1326 audit(1766589297.737:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 485.238077][ T30] audit: type=1326 audit(1766589297.737:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12536 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 485.461456][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1574'. [ 485.496617][T12571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1574'. [ 485.550927][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1574'. [ 485.559935][T12571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1574'. [ 486.154162][T12584] Set syz1 is full, maxelem 65536 reached [ 486.412739][T12586] netlink: get zone limit has 8 unknown bytes [ 487.039513][T12599] bridge_slave_1: entered promiscuous mode [ 487.680579][T12607] comedi comedi0: Minor 3 specified more than once! [ 487.690173][T12607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1584'. [ 489.155775][T12642] netlink: 'syz.0.1595': attribute type 16 has an invalid length. [ 489.163768][T12642] netlink: 'syz.0.1595': attribute type 17 has an invalid length. [ 489.185323][T12646] netlink: 'syz.5.1596': attribute type 1 has an invalid length. [ 489.193080][T12646] netlink: 'syz.5.1596': attribute type 2 has an invalid length. [ 489.234794][T12643] @: renamed from vlan0 (while UP) [ 489.251315][T12648] comedi comedi4: bad chanlist[0]=0x00000fff chan=4095 range length=2 [ 489.677643][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 491.683060][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 491.693230][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 491.704684][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 491.712541][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 491.720575][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 491.732370][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 491.739888][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 491.747613][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 491.756474][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 491.765886][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 491.808843][T12679] lo speed is unknown, defaulting to 1000 [ 491.821840][T12679] lo speed is unknown, defaulting to 1000 [ 491.977928][T12679] chnl_net:caif_netlink_parms(): no params data found [ 492.092897][T12679] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.100173][T12679] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.107629][T12679] bridge_slave_0: entered allmulticast mode [ 492.115131][T12679] bridge_slave_0: entered promiscuous mode [ 492.122702][T12679] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.130047][T12679] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.138707][T12679] bridge_slave_1: entered allmulticast mode [ 492.145865][T12679] bridge_slave_1: entered promiscuous mode [ 492.172283][T12679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.184796][T12679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.213304][T12679] team0: Port device team_slave_0 added [ 492.221356][T12679] team0: Port device team_slave_1 added [ 492.245735][T12679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.252717][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.279347][T12679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.291203][T12679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.299872][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.326324][T12679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.367127][T12679] hsr_slave_0: entered promiscuous mode [ 492.373775][T12679] hsr_slave_1: entered promiscuous mode [ 492.379900][T12679] debugfs: 'hsr0' already exists in 'hsr' [ 492.386197][T12679] Cannot create hsr debugfs directory [ 492.518144][T12679] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 492.528086][T12679] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 492.538073][T12679] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 492.548295][T12679] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 492.572387][T12679] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.579536][T12679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.586880][T12679] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.593956][T12679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.646273][T12679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.661571][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.670830][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.686745][T12679] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.701102][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.708252][ T5999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.725189][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.732377][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.904606][T12679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.039030][T12707] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 493.127919][T12679] veth0_vlan: entered promiscuous mode [ 493.149561][T12679] veth1_vlan: entered promiscuous mode [ 493.177750][T12679] veth0_macvtap: entered promiscuous mode [ 493.187902][T12679] veth1_macvtap: entered promiscuous mode [ 493.208787][T12679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.272221][T12679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.286256][ T1093] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.295740][ T1093] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.306086][ T1093] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.318194][ T1093] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.394878][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.402925][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.432809][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.441041][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.813961][ T5823] Bluetooth: hci2: command tx timeout [ 494.815241][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 494.815257][ T30] audit: type=1326 audit(1766589308.327:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.0.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 494.910719][ T30] audit: type=1326 audit(1766589308.357:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.0.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 494.980540][ T30] audit: type=1326 audit(1766589308.357:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.0.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 495.012191][ T30] audit: type=1326 audit(1766589308.357:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.0.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 495.012347][T12751] netlink: 220 bytes leftover after parsing attributes in process `syz.8.1613'. [ 495.045877][ T30] audit: type=1326 audit(1766589308.357:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.0.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 495.070652][T12751] netlink: 220 bytes leftover after parsing attributes in process `syz.8.1613'. [ 495.089728][ T30] audit: type=1326 audit(1766589308.357:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.0.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 495.119773][ T30] audit: type=1326 audit(1766589308.357:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.0.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2d18f749 code=0x7ffc0000 [ 495.146319][ T30] audit: type=1326 audit(1766589308.357:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.0.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b2d191667 code=0x7ffc0000 [ 495.172738][ T30] audit: type=1326 audit(1766589308.357:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.0.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3b2d1915dc code=0x7ffc0000 [ 495.210029][ T30] audit: type=1326 audit(1766589308.357:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.0.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3b2d191514 code=0x7ffc0000 [ 495.932976][ T5823] Bluetooth: hci2: command tx timeout [ 497.373636][ T5936] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 497.513731][ T5873] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 497.533523][ T5936] usb 9-1: Using ep0 maxpacket: 8 [ 497.540027][ T5936] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.571821][ T5936] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 497.619323][ T5936] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 497.634281][ T5936] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.653973][ T5936] usb 9-1: Product: syz [ 497.664953][ T5873] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 497.683526][ T5873] usb 1-1: config 0 has no interface number 0 [ 497.689736][ T5936] usb 9-1: Manufacturer: syz [ 497.694997][ T5936] usb 9-1: SerialNumber: syz [ 497.701736][ T5873] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 497.713498][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.724304][ T5873] usb 1-1: Product: syz [ 497.731179][ T5936] gspca_main: spca501-2.14.0 probing 0000:0000 [ 497.738514][ T5873] usb 1-1: Manufacturer: syz [ 497.773688][ T5873] usb 1-1: SerialNumber: syz [ 497.785251][ T5873] usb 1-1: config 0 descriptor?? [ 497.975318][ T5823] Bluetooth: hci2: command tx timeout [ 498.064597][ T5873] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 498.324561][ T5936] gspca_spca501: reg write: error -110 [ 498.330057][ T5936] spca501 9-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 498.354683][ T5873] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 498.365015][ T5936] spca501 9-1:1.0: probe with driver spca501 failed with error -22 [ 498.378646][ T5873] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 498.398192][ T5936] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 498.410248][ T5873] usb 1-1: media controller created [ 498.448343][T12792] IPVS: ip_vs_add_dest(): server weight less than zero [ 498.459306][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.473328][ T5936] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 498.523918][ T5873] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 498.562240][ T5873] usb 1-1: USB disconnect, device number 62 [ 499.032078][ T5873] usb 9-1: USB disconnect, device number 2 [ 499.465748][T12822] Set syz1 is full, maxelem 65536 reached [ 499.483504][ T5873] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 499.643537][ T5873] usb 9-1: Using ep0 maxpacket: 8 [ 499.650610][ T5873] usb 9-1: config 5 has an invalid descriptor of length 12, skipping remainder of the config [ 499.815133][ T5873] usb 9-1: config 5 has 0 interfaces, different from the descriptor's value: 6 [ 500.113707][ T5823] Bluetooth: hci2: command tx timeout [ 500.673029][ T5873] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 500.690055][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.854364][ T5873] usb 9-1: Product: syz [ 500.858636][ T5873] usb 9-1: Manufacturer: syz [ 500.863319][ T5873] usb 9-1: SerialNumber: syz [ 501.259316][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.265914][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.545087][T12844] bridge0: port 3(gretap0) entered blocking state [ 501.551883][T12844] bridge0: port 3(gretap0) entered disabled state [ 501.559382][T12844] gretap0: entered allmulticast mode [ 501.572587][T12844] gretap0: entered promiscuous mode [ 501.579796][T12844] bridge0: port 3(gretap0) entered blocking state [ 501.586353][T12844] bridge0: port 3(gretap0) entered forwarding state [ 504.188444][ T5873] usb 9-1: USB disconnect, device number 3 [ 504.326041][T12863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.344622][T12863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.374303][T12863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.385578][T12863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.742132][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1641'. [ 504.849487][ T30] kauditd_printk_skb: 250 callbacks suppressed [ 504.849505][ T30] audit: type=1400 audit(1766589318.357:1089): avc: denied { read write } for pid=12871 comm="syz.8.1641" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 505.063484][ T30] audit: type=1400 audit(1766589318.397:1090): avc: denied { open } for pid=12871 comm="syz.8.1641" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 505.665565][T12893] Set syz1 is full, maxelem 65536 reached [ 506.245430][T12904] 9p: Bad value for 'wfdno' [ 506.603848][ T30] audit: type=1400 audit(1766589320.117:1091): avc: denied { write } for pid=12906 comm="syz.7.1649" path="socket:[37611]" dev="sockfs" ino=37611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 506.631589][ T30] audit: type=1400 audit(1766589320.137:1092): avc: denied { listen } for pid=12906 comm="syz.7.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 508.086017][T12932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1656'. [ 508.656653][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1662'. [ 508.924223][T12958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 508.931483][T12958] IPv6: NLM_F_CREATE should be set when creating new route [ 508.938767][T12958] IPv6: NLM_F_CREATE should be set when creating new route [ 509.134221][T12958] ------------[ cut here ]------------ [ 509.140121][T12958] WARNING: drivers/net/netdevsim/fib.c:831 at nsim_fib_event_nb+0xb73/0xec0, CPU#1: syz.7.1663/12958 [ 509.151561][T12958] Modules linked in: [ 509.155983][T12958] CPU: 1 UID: 0 PID: 12958 Comm: syz.7.1663 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.167014][T12958] Tainted: [L]=SOFTLOCKUP [ 509.171339][T12958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 509.181481][T12958] RIP: 0010:nsim_fib_event_nb+0xb73/0xec0 [ 509.187353][T12958] Code: 20 48 8b 5c 24 28 e8 4c 6f be fa e8 47 6f be fa 44 89 ee 44 89 ff e8 1c 69 be fa 45 39 ef 0f 84 dd fd ff ff e8 2e 6f be fa 90 <0f> 0b 90 e9 cf fd ff ff e8 20 6f be fa 49 8d 7c 24 38 be 01 00 00 [ 509.207694][T12958] RSP: 0000:ffffc9000496f030 EFLAGS: 00010293 [ 509.214156][T12958] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 509.222267][T12958] RDX: ffff8880799a4980 RSI: ffffffff87007742 RDI: ffff888042894c18 [ 509.230351][T12958] RBP: ffffc9000496f180 R08: 0000000000000005 R09: 0000000000000000 [ 509.239320][T12958] R10: 0000000000000001 R11: ffffffff8b77814d R12: ffff88807e42b000 [ 509.247702][T12958] R13: 0000000000000001 R14: ffff888031c58400 R15: ffff888042894c00 [ 509.255780][T12958] FS: 00007feb03ab96c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 509.264758][T12958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.271350][T12958] CR2: 000000110c2e943f CR3: 000000003d3ac000 CR4: 00000000003526f0 [ 509.279394][T12958] Call Trace: [ 509.282672][T12958] [ 509.285650][T12958] notifier_call_chain+0xbc/0x3e0 [ 509.290702][T12958] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 509.296741][T12958] atomic_notifier_call_chain+0x71/0x1c0 [ 509.302404][T12958] call_fib_notifiers+0x33/0x70 [ 509.307673][T12958] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 509.314333][T12958] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 509.321385][T12958] ? find_held_lock+0x2b/0x80 [ 509.326151][T12958] ? ip6_route_multipath_add+0xaa2/0x1c30 [ 509.331903][T12958] ip6_route_multipath_add+0xb4f/0x1c30 [ 509.337917][T12958] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 509.344382][T12958] ? avc_has_perm_noaudit+0x117/0x3b0 [ 509.349789][T12958] ? avc_has_perm_noaudit+0x149/0x3b0 [ 509.355594][T12958] ? inet6_rtm_newroute+0xe4/0x1a0 [ 509.360721][T12958] inet6_rtm_newroute+0xe4/0x1a0 [ 509.365736][T12958] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 509.371294][T12958] ? __lock_acquire+0x436/0x2890 [ 509.376291][T12958] ? find_held_lock+0x2b/0x80 [ 509.380989][T12958] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 509.386618][T12958] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 509.392178][T12958] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 509.397614][T12958] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 509.403151][T12958] rtnetlink_rcv_msg+0x95e/0xe90 [ 509.408459][T12958] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 509.413966][T12958] ? ref_tracker_free+0x37c/0x830 [ 509.418982][T12958] netlink_rcv_skb+0x158/0x420 [ 509.423793][T12958] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 509.429263][T12958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.434616][T12958] ? netlink_deliver_tap+0x1ae/0xd30 [ 509.439903][T12958] netlink_unicast+0x5aa/0x870 [ 509.445111][T12958] ? __pfx_netlink_unicast+0x10/0x10 [ 509.450430][T12958] netlink_sendmsg+0x8c8/0xdd0 [ 509.455590][T12958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.460908][T12958] ____sys_sendmsg+0xa5d/0xc30 [ 509.465770][T12958] ? copy_msghdr_from_user+0x10a/0x160 [ 509.471243][T12958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.476594][T12958] ? find_held_lock+0x2b/0x80 [ 509.481290][T12958] ? futex_unqueue+0x133/0x2c0 [ 509.486107][T12958] ___sys_sendmsg+0x134/0x1d0 [ 509.490771][T12958] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.496307][T12958] ? __pfx___futex_wait+0x10/0x10 [ 509.501323][T12958] ? find_held_lock+0x2b/0x80 [ 509.506270][T12958] __sys_sendmmsg+0x200/0x420 [ 509.510937][T12958] ? __pfx___sys_sendmmsg+0x10/0x10 [ 509.516148][T12958] ? __schedule+0x10b9/0x6150 [ 509.520813][T12958] ? __pfx_do_futex+0x10/0x10 [ 509.525571][T12958] ? xfd_validate_state+0x61/0x180 [ 509.530666][T12958] __x64_sys_sendmmsg+0x9c/0x100 [ 509.535618][T12958] ? lockdep_hardirqs_on+0x7c/0x110 [ 509.540800][T12958] do_syscall_64+0xcd/0xf80 [ 509.545523][T12958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.551396][T12958] RIP: 0033:0x7feb02b8f749 [ 509.556034][T12958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.575874][T12958] RSP: 002b:00007feb03ab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 509.584335][T12958] RAX: ffffffffffffffda RBX: 00007feb02de5fa0 RCX: 00007feb02b8f749 [ 509.592290][T12958] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000d [ 509.600544][T12958] RBP: 00007feb02c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 509.608754][T12958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.616773][T12958] R13: 00007feb02de6038 R14: 00007feb02de5fa0 R15: 00007fff1d19fcc8 [ 509.624766][T12958] [ 509.627768][T12958] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 509.635025][T12958] CPU: 1 UID: 0 PID: 12958 Comm: syz.7.1663 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.645937][T12958] Tainted: [L]=SOFTLOCKUP [ 509.650236][T12958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 509.660284][T12958] Call Trace: [ 509.663553][T12958] [ 509.666479][T12958] dump_stack_lvl+0x3d/0x1f0 [ 509.671073][T12958] vpanic+0x640/0x6f0 [ 509.675070][T12958] ? nsim_fib_event_nb+0xb73/0xec0 [ 509.680163][T12958] panic+0xca/0xd0 [ 509.683863][T12958] ? __pfx_panic+0x10/0x10 [ 509.688261][T12958] ? check_panic_on_warn+0x1f/0xb0 [ 509.693350][T12958] check_panic_on_warn+0xab/0xb0 [ 509.698272][T12958] __warn+0x108/0x3c0 [ 509.702237][T12958] __report_bug+0x2a0/0x520 [ 509.706720][T12958] ? nsim_fib_event_nb+0xb73/0xec0 [ 509.711820][T12958] ? __pfx___report_bug+0x10/0x10 [ 509.716862][T12958] ? nsim_fib_event_nb+0xb73/0xec0 [ 509.721969][T12958] report_bug+0xb2/0x220 [ 509.726192][T12958] ? nsim_fib_event_nb+0xb73/0xec0 [ 509.731289][T12958] handle_bug+0x127/0x260 [ 509.735615][T12958] exc_invalid_op+0x17/0x50 [ 509.740107][T12958] asm_exc_invalid_op+0x1a/0x20 [ 509.744932][T12958] RIP: 0010:nsim_fib_event_nb+0xb73/0xec0 [ 509.750630][T12958] Code: 20 48 8b 5c 24 28 e8 4c 6f be fa e8 47 6f be fa 44 89 ee 44 89 ff e8 1c 69 be fa 45 39 ef 0f 84 dd fd ff ff e8 2e 6f be fa 90 <0f> 0b 90 e9 cf fd ff ff e8 20 6f be fa 49 8d 7c 24 38 be 01 00 00 [ 509.770213][T12958] RSP: 0000:ffffc9000496f030 EFLAGS: 00010293 [ 509.776256][T12958] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 509.784203][T12958] RDX: ffff8880799a4980 RSI: ffffffff87007742 RDI: ffff888042894c18 [ 509.792149][T12958] RBP: ffffc9000496f180 R08: 0000000000000005 R09: 0000000000000000 [ 509.800097][T12958] R10: 0000000000000001 R11: ffffffff8b77814d R12: ffff88807e42b000 [ 509.808055][T12958] R13: 0000000000000001 R14: ffff888031c58400 R15: ffff888042894c00 [ 509.816021][T12958] ? do_syscall_64+0xcd/0xf80 [ 509.820694][T12958] ? nsim_fib_event_nb+0xb72/0xec0 [ 509.825789][T12958] notifier_call_chain+0xbc/0x3e0 [ 509.830792][T12958] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 509.836228][T12958] atomic_notifier_call_chain+0x71/0x1c0 [ 509.841837][T12958] call_fib_notifiers+0x33/0x70 [ 509.846663][T12958] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 509.853147][T12958] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 509.860154][T12958] ? find_held_lock+0x2b/0x80 [ 509.864812][T12958] ? ip6_route_multipath_add+0xaa2/0x1c30 [ 509.870520][T12958] ip6_route_multipath_add+0xb4f/0x1c30 [ 509.876062][T12958] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 509.882036][T12958] ? avc_has_perm_noaudit+0x117/0x3b0 [ 509.887396][T12958] ? avc_has_perm_noaudit+0x149/0x3b0 [ 509.892921][T12958] ? inet6_rtm_newroute+0xe4/0x1a0 [ 509.898011][T12958] inet6_rtm_newroute+0xe4/0x1a0 [ 509.902958][T12958] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 509.908483][T12958] ? __lock_acquire+0x436/0x2890 [ 509.913417][T12958] ? find_held_lock+0x2b/0x80 [ 509.918092][T12958] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 509.923613][T12958] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 509.929145][T12958] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 509.934235][T12958] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 509.939760][T12958] rtnetlink_rcv_msg+0x95e/0xe90 [ 509.944677][T12958] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 509.950115][T12958] ? ref_tracker_free+0x37c/0x830 [ 509.955122][T12958] netlink_rcv_skb+0x158/0x420 [ 509.959862][T12958] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 509.965300][T12958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.970571][T12958] ? netlink_deliver_tap+0x1ae/0xd30 [ 509.975832][T12958] netlink_unicast+0x5aa/0x870 [ 509.980580][T12958] ? __pfx_netlink_unicast+0x10/0x10 [ 509.985848][T12958] netlink_sendmsg+0x8c8/0xdd0 [ 509.990592][T12958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.995859][T12958] ____sys_sendmsg+0xa5d/0xc30 [ 510.000600][T12958] ? copy_msghdr_from_user+0x10a/0x160 [ 510.006031][T12958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.011319][T12958] ? find_held_lock+0x2b/0x80 [ 510.015983][T12958] ? futex_unqueue+0x133/0x2c0 [ 510.020727][T12958] ___sys_sendmsg+0x134/0x1d0 [ 510.025379][T12958] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.030552][T12958] ? __pfx___futex_wait+0x10/0x10 [ 510.035559][T12958] ? find_held_lock+0x2b/0x80 [ 510.040224][T12958] __sys_sendmmsg+0x200/0x420 [ 510.044906][T12958] ? __pfx___sys_sendmmsg+0x10/0x10 [ 510.050076][T12958] ? __schedule+0x10b9/0x6150 [ 510.054734][T12958] ? __pfx_do_futex+0x10/0x10 [ 510.059398][T12958] ? xfd_validate_state+0x61/0x180 [ 510.064491][T12958] __x64_sys_sendmmsg+0x9c/0x100 [ 510.069404][T12958] ? lockdep_hardirqs_on+0x7c/0x110 [ 510.074581][T12958] do_syscall_64+0xcd/0xf80 [ 510.079062][T12958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.084928][T12958] RIP: 0033:0x7feb02b8f749 [ 510.089315][T12958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.108897][T12958] RSP: 002b:00007feb03ab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 510.117295][T12958] RAX: ffffffffffffffda RBX: 00007feb02de5fa0 RCX: 00007feb02b8f749 [ 510.125245][T12958] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000d [ 510.133193][T12958] RBP: 00007feb02c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 510.141140][T12958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.149090][T12958] R13: 00007feb02de6038 R14: 00007feb02de5fa0 R15: 00007fff1d19fcc8 [ 510.157149][T12958] [ 510.160465][T12958] Kernel Offset: disabled [ 510.164769][T12958] Rebooting in 86400 seconds..