last executing test programs: 3m8.089709049s ago: executing program 32 (id=51): openat$vimc2(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$kcm(0x2, 0x3, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0xe00}}], 0x1, 0x0) 2m58.611620107s ago: executing program 1 (id=144): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0xfee0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r2, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x12, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x20040000) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x78) sched_setscheduler(0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) lseek(r5, 0x7fffdfff, 0x2) getdents64(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r8 = openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r9 = timerfd_create(0x8, 0x0) timerfd_settime(r9, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) close(0x3) write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 2m57.407858743s ago: executing program 1 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x7, &(0x7f0000000300)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r5, 0x25, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x3d, 0xffffffff, 0x3, 0x4, 0x3, 0x1, 0x3, 0x101}}) syz_emit_ethernet(0x10c2, &(0x7f00000004c0)=ANY=[], 0x0) write$sndseq(r2, &(0x7f00000005c0)=[{0x3, 0x5, 0x5, 0xff, @tick=0x7fff, {0x1, 0x10}, {0x3, 0x10}, @raw8={"3383c1d8ab201201b5493755"}}, {0x2, 0x7, 0x7f, 0x8, @tick, {0xe}, {0x7, 0x9}, @connect={{0x6, 0x3}, {0x9, 0x4}}}], 0x38) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, 0x40, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 2m56.66248484s ago: executing program 1 (id=148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000a00}, 0x4004804) 2m49.344726299s ago: executing program 33 (id=122): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) r1 = io_uring_setup(0x11a4, &(0x7f0000000080)={0x0, 0xd3e8, 0x80, 0x3, 0x7}) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000004c00)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) (async) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x7, &(0x7f0000000040)={[0x3]}, 0x8) tkill(r2, 0xf) (async, rerun: 64) wait4(r2, 0x0, 0x2, 0x0) (async, rerun: 64) tkill(r2, 0x3) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r0, 0x0, 0x0, 0x3b0}]) epoll_create(0x0) 2m41.41889268s ago: executing program 34 (id=148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000a00}, 0x4004804) 2m22.728784384s ago: executing program 35 (id=193): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x66) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x2) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00003dc000/0x3000)=nil, 0x3000}, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r1 = syz_ublk_setup_io_uring(0x1e71, &(0x7f0000000100)={0x0, 0xbfb0, 0x1000, 0x3, 0x237}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000240)=[0x6, 0x1cb], 0x2) request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x1, 0xc}, &(0x7f0000000080)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00i\xc0\x86\x98t\xc7\xfa\x06\x9f\x10\xc0\x11_E\xec\xb0\xd7S7g\x7f1^', 0x0) 2m8.663282972s ago: executing program 36 (id=238): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000001000000080001006100000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x40000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x60000, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1}, {}, {0x0, 0x4}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x40}, {}, {}, {}, {}, {0xfe, 0xf1}, {}, {}, {0x3}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f00000001c0)={0x1, 0x10, &(0x7f00000024c0)="739c17c2c2cc029eecad068741dfda99"}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xfff3, 0xb}, {0x5, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0xb, 0x4, 0xc, 0x0, 0x7, 0x5, 0xc, 0x3, 0x7, 0x8, 0xd, 0xc, 0xe, 0xf, 0xb, 0x8], 0x0, [0x7, 0x3, 0x2, 0x2, 0x823, 0x8000, 0x9, 0x7, 0x9, 0xeaf, 0x8, 0x8, 0x0, 0x100, 0x3ff, 0x9], [0xe, 0x7, 0x2, 0x0, 0x3, 0x2, 0x7, 0x7, 0x7, 0x3, 0x8, 0x3, 0x8, 0x8, 0x4bc3, 0xff]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24004070}, 0x24000890) write$char_usb(r7, &(0x7f0000000040)="e2", 0xff0f) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x14, r11, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x11) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x8, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r13}, 0x48) 1m45.112816083s ago: executing program 37 (id=305): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r2 = creat(0x0, 0x84) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x2b) sendfile(r3, r1, 0x0, 0x4000000053d2) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000100)={0x34f070f553e8e5db, 0x0, {[0x9, 0x6, 0x8, 0x8001, 0xffffffffffffffff, 0xfffffffffffffffb, 0x2, 0x8]}}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000072009fb3000000000000000007000000121b"], 0x18}}, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000240)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [0x0, 0x0, r5, r5], [0x2bb]}) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd000111"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040004000000000000000000000000180100002020642500000000002020207b1af8ff00000000bf8100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000009500000000000500"], &(0x7f00000005c0)='GPL\x00'}, 0x90) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r8, &(0x7f0000000380)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x33, 0x800) 1m36.886126635s ago: executing program 38 (id=336): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYRESDEC=r2], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000105000100070000000900020073797a30000000000c00078008001240fffffffb0500050002000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x4010) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$binder(0x0, 0x0, 0x0, 0x80000, &(0x7f00000003c0)=ANY=[@ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x2000c1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hci(r7, 0x400448e2, &(0x7f0000000600)) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000cc0000e40b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\x00'/28], 0x50) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(0x0, &(0x7f0000000100), 0x0, 0x0, 0x1) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40040) 1m31.541853101s ago: executing program 6 (id=409): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x1, 0x4, 0xd, 0x5, 0xc08}}, 0x120) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4) 1m30.618728479s ago: executing program 6 (id=412): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c", 0xc2}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="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", 0x123}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 1m29.600346891s ago: executing program 6 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b65994efdbb16a4586ab8445732f6abfaee208d6c9c22c3261257718312d6d137d93b57003f119d089a01f8f8aef62d0fcd267ee7cff07c09904a079a99cda2c0b258277e2b5ddbe722d0c"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r4, 0x25, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x3d, 0xffffffff, 0x3, 0x4, 0x3, 0x1, 0x3, 0x101}}) syz_emit_ethernet(0x10c2, &(0x7f00000004c0)=ANY=[], 0x0) write$sndseq(r2, &(0x7f00000005c0)=[{0x3, 0x5, 0x5, 0xff, @tick=0x7fff, {0x1, 0x10}, {0x3, 0x10}, @raw8={"3383c1d8ab201201b5493755"}}, {0x2, 0x7, 0x7f, 0x8, @tick, {0xe}, {0x7, 0x9}, @connect={{0x6, 0x3}, {0x9, 0x4}}}], 0x38) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, 0x40, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 1m28.531966582s ago: executing program 6 (id=418): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x7, &(0x7f0000000300)=0x400000bce) sendto(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b65994efdbb16a4586ab8445732f6abfaee208d6c9c22c3261257718312d6d137d93b57003f119d089a01f8f8aef62d0fcd267ee7cff07c09904a079a99cda2c0b258277e2b5ddbe722d0c"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r4, 0x25, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x3d, 0xffffffff, 0x3, 0x4, 0x3, 0x1, 0x3, 0x101}}) syz_emit_ethernet(0x10c2, &(0x7f00000004c0)=ANY=[], 0x0) write$sndseq(r2, &(0x7f00000005c0)=[{0x3, 0x5, 0x5, 0xff, @tick=0x7fff, {0x1, 0x10}, {0x3, 0x10}, @raw8={"3383c1d8ab201201b5493755"}}, {0x2, 0x7, 0x7f, 0x8, @tick, {0xe}, {0x7, 0x9}, @connect={{0x6, 0x3}, {0x9, 0x4}}}], 0x38) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, 0x40, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 1m13.176797344s ago: executing program 39 (id=418): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x7, &(0x7f0000000300)=0x400000bce) sendto(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b65994efdbb16a4586ab8445732f6abfaee208d6c9c22c3261257718312d6d137d93b57003f119d089a01f8f8aef62d0fcd267ee7cff07c09904a079a99cda2c0b258277e2b5ddbe722d0c"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r4, 0x25, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x3d, 0xffffffff, 0x3, 0x4, 0x3, 0x1, 0x3, 0x101}}) syz_emit_ethernet(0x10c2, &(0x7f00000004c0)=ANY=[], 0x0) write$sndseq(r2, &(0x7f00000005c0)=[{0x3, 0x5, 0x5, 0xff, @tick=0x7fff, {0x1, 0x10}, {0x3, 0x10}, @raw8={"3383c1d8ab201201b5493755"}}, {0x2, 0x7, 0x7f, 0x8, @tick, {0xe}, {0x7, 0x9}, @connect={{0x6, 0x3}, {0x9, 0x4}}}], 0x38) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, 0x40, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 1m7.448755372s ago: executing program 3 (id=500): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x800000000000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x7, &(0x7f00000009c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xad7, 0x0, 0x0, 0x40f00, 0x3a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c672, r5, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) connect$inet(r1, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x3) bind$inet(r1, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x20000020, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) 1m6.827902135s ago: executing program 3 (id=504): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x351000, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@empty}, 0x14) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) ptrace$peek(0x2, r2, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4048aecb, &(0x7f0000000040)=@riscv64_sbi_sta={0x803000000a000001, 0x0}) 1m5.459338037s ago: executing program 3 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180900"/15, @ANYRES32=r0], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4e, 0x0, 0x100000000007, 0xdb4e, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x8000000, 0xa, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c5210}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x101002) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000300)={'\be\f\x00', 0x3, 0x5, 0xb7, 0x1, 0x4, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000007000003000000ff7f00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "5a060040", "0725eade", "e4eecc1a", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, &(0x7f0000000300), 0x4003) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x8000000, 0xffffffffffffffff, 0x400000, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 1m4.121793953s ago: executing program 3 (id=518): socket$inet_sctp(0x2, 0x4, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x106, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x7, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_l2cap(r5, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) dup(r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='cgroup\x00') pread64(r6, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000002b, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x1, 0x4, 0xfffffe0000000001, 0x7, 0x6b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 57.12511671s ago: executing program 3 (id=523): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f0000000300)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b65994efdbb16a4586ab8445732f6abfaee208d6c9c22c3261257718312d6d137d93b57003f119d089a01f8f8aef62d0fcd267ee7cff07c09904a079a99cda2c0b258277e2b5ddbe722d0c"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r4, 0x25, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x3d, 0xffffffff, 0x3, 0x4, 0x3, 0x1, 0x3, 0x101}}) syz_emit_ethernet(0x10c2, &(0x7f00000004c0)=ANY=[], 0x0) write$sndseq(r2, &(0x7f00000005c0)=[{0x3, 0x5, 0x5, 0xff, @tick=0x7fff, {0x1, 0x10}, {0x3, 0x10}, @raw8={"3383c1d8ab201201b5493755"}}, {0x2, 0x7, 0x7f, 0x8, @tick, {0xe}, {0x7, 0x9}, @connect={{0x6, 0x3}, {0x9, 0x4}}}], 0x38) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, 0x40, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 54.765939664s ago: executing program 9 (id=531): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x5000000}, 0x0, &(0x7f0000000240)={0x1f, 0x40, 0x2000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 54.728820071s ago: executing program 1 (id=474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0xbc, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x20}}, 0x0, @random=0x2, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x6}, @void, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x1, 0xae, 0x4}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x81, 0xa, 0x3}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x85, 0x41}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x38, 0xf, [@random={0x1, 0x32, "3c45522c3ccb3f3b37060be659f41b8840e93301cd258913f0f207b9b80e497364e838ef90d5459091110e01946aefd3ccdb"}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 54.078722712s ago: executing program 1 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x7, &(0x7f0000000300)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b65994efdbb16a4586ab8445732f6abfaee208d6c9c22c3261257718312d6d137d93b57003f119d089a01f8f8aef62d0fcd267ee7cff07c09904a079a99cda2c0b258277e2b5ddbe722d0c"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r4, 0x25, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x3d, 0xffffffff, 0x3, 0x4, 0x3, 0x1, 0x3, 0x101}}) syz_emit_ethernet(0x10c2, &(0x7f00000004c0)=ANY=[], 0x0) write$sndseq(r2, &(0x7f00000005c0)=[{0x3, 0x5, 0x5, 0xff, @tick=0x7fff, {0x1, 0x10}, {0x3, 0x10}, @raw8={"3383c1d8ab201201b5493755"}}, {0x2, 0x7, 0x7f, 0x8, @tick, {0xe}, {0x7, 0x9}, @connect={{0x6, 0x3}, {0x9, 0x4}}}], 0x38) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, 0x40, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 54.011613876s ago: executing program 9 (id=535): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xe, 0x7, 0x8, 0xa102, 0x6, 0x9e000000, 0x7, 0x0, 0x6, 0x0, 0x69, 0xcdf, 0xc, 0x7, 0xf3b, 0x8, 0x2, 0x8, 0x0, 0xfb42, 0xe80a, 0x1a6, 0x5}}) 53.907581059s ago: executing program 9 (id=537): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d000100000000090400000190f19c0009058479f78ceba10c648202d57528ecbee3235f2b4cda02a43dc8eb2e19", @ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0xffffffff00000001, 0x20100) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) capget(&(0x7f0000000900)={0x20080522, r2}, &(0x7f0000000940)={0xb000000, 0x6, 0x5, 0x3, 0x8, 0x400}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0x26, 0x27, {0x27, 0x24, "f6202d310b57113ae91f856d38d6734ec0cf869e9b9ebbecafa1101e237c9140f0d5ab504c"}}, &(0x7f00000000c0)={0x0, 0x3, 0xf3, @string={0xf3, 0x3, "df3b35ad59df5ecb9925c792de01982565ed225c3d98331521d7aed8694e610349c6f6419e67d6c7dd8d231bfede1f41ca52397708579b171a86ad35f22985fc70bfcea41ffac0a48297ec680b493656f83975435e06381fa7536bee3d67a23fa22be65fd0db472a3b9c5f9b3f7d7fa89a0896ac04a025c7deca530ff1139a1aa710aa44322187957d8cf3329d64dc50d41290790939490aaa0fd381d31b1ab1748a4eccba3df778dec9e9ba895659ab64b4ceee9b3739d23a9a881938fe6bab6d45f6d1f7eec292781e07f7f447f9e7094164f31e2665ce2432ef00a71b8e462e5c36963aa80433658d768c8ebc70ebec"}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000200)={0x20, 0x16, 0xf8, "8ba86888162e9814683b75909ba9df8a37319cdbf234f7537beebac1a60f287fb2e1a53d2caa5286e2a6218c1a3672a1121fa9443bc8bd4324913ded3deb7a3d341284edb7dacc7273c447e2914b35f3a195054b9c989f54a0c26f4baa7df3fa0ccafd2b9739879ec0a8aad423a6f70c6bb892435ac833d570a946a25b8423bb26d00235460ea811b8d3ab98b76772a09bc52bc937bfa6d4ffe5cac4e6238e8092789d12c3bd59ad508a1da491715eb150cd5245728bb2293458085528ecb500913910a380852c37bb61d10b23df236a7789385902d1357af19807a00ac6db18a62533e4440930e61294e7c374b8a1b014c5eb37f37de4d1"}, &(0x7f0000000300)={0xa1, 0x1, 0x400, "9537dd0ad309b77744986bae305b52c0b942e80a6978bf9f4a4ea272fa01f8201630ea7c025f79a71c53d511a4fc2947e83bc4e96a2b0e7d1651d548a710d72de42b705cc0988de21aaf177e13ab2fd98bf9d82ade4431a869481abd471f1493d34628a2ef80d03af9f677fe1f3ae836dd897e8c2071b71f88d5d1bbb3e17f59ac8cf5590fb57e8885f8300a9c4d3669bd596343fdf1223bac4f664329d25958cdaa91f89d0b85f96e57ba6678827db72df16dc4d78ab1135521c392cdf7dd8992ced901f1f2f838a44266f95370f567f0686a34a82c41a64f852651fe9a2b251b14f2be851e99e39e34f3bd0f6f24fbd3a72ab7687a37c45e4d4279f0bda3bb4447d3bb61884f3a03adbbdc4a5068075d1e8e36b538bd8566e0d0a4806af5dad9f14054b6d6bdb670413d6404731fff170b77e4640ca0dd9a3a793bdfc82f19488f56522f9987451451f9d97c0c9e4eb972e8e147ad59294bd0709bed071896cc056f64d346cd47d6015d82f8bdb0b03db3d15fd38c5cc36ef049f3ecdafb8e460608316dc6aee4cada5cb462d46e998f1f2d0778b8f9ba51433c559bd93b74553896985582ded91679c2da0770b4eaa3039d328da25721920dab5b29e7cd273520ec798fd4b6494cddc0843a77cc002f8adb44b983365301d817d7a3991350ec14239005ab6188b5f897de25a932e28c8eb58e84b0e8d1a34409f2a2da340b1f6128bd30068cfa81b7fb92040e61342ca3f82389b3cdc2c5b6d7f03452a591f4121f1f70c5db3e0b92188c05527618bafd5cb7ddee30bf87a6bb2efd0c142ac5f3231d0998f0e5e6ca218cd0c78ba3d1e9406a181ad07bc2f8236b789aaf3385977cbceafe249ec2b77ea1f640c7d1d8b510d8dc92e5179578745884f0ddc6e0272fd3be4c3478164401edef1621e4c90aef735c7c43c5359f2303c4390252c5ff7cee9f069b146a68c24f00cab3c76d2e6274dc872a472231360af91c048731cba58db35edc50170a0bcb95111eabb0b3ac0ceb47f43e1f1e987365b9d1798d25e3eafa380cbc4b31e2b425da03d0aa5057218227e70ed81b3bc0b17e02008c1d87529909aa56295dab81751f9261fd8c260048e219e21c454ac98ae297f40306a5ea1582ec72052caf2b602aba96f95f46c84cb26b2bc331e417263178922dadbce1d677d2cef47b63cb9e2107e7d2f0aa8c98415c4e32294412497382d0eaa5a4a1f26855d3287dd46dbbe1a20c5213ce32f4a8848b7f935bff0bec1ba1c21809c7af9a495659d2dd78cba4f0f5d1570b94df5f2aceb39080e1b51e2f6a741f5d1e0ce4c157172f799f0f6288bbc5aee0c39cf930e6e4db03b057186180ccdd9335bba9ce00497fb42ec7aacc423a032a791a0f214b4061fdf8a5919f64b1b9e51ad39a2bbf197bd2fb48d3536098bb2c5ca3f3f35dff88867e8e604f59"}, &(0x7f0000000740)}) syz_usb_control_io$printer(r0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x8, 0x10001) 53.659395675s ago: executing program 3 (id=538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="bad330fbc9b55400041900ea0756a85d86dd4e11bce43a5dbf38ff29aabe94b749222147b4d613739944c056f5616c7bfae9e4f631503eeb57da", 0x3a, 0x1840, &(0x7f00000000c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 52.538143419s ago: executing program 2 (id=545): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x50141, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x10c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9e}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_TUPLE={0x80, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x10c}}, 0x20000004) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={r3, r4, 0x1, 0x0, 0x1000000000000}) close_range(r1, 0xffffffffffffffff, 0x0) 52.27647856s ago: executing program 1 (id=546): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r2 = fsopen(&(0x7f00000002c0)='fusectl\x00', 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYBLOB="9c4d03edd2cb1290c2496b49ba7e54a8b29d9d5dd1386e69774b027c2fd9f361f3c2582e4454d346560adc2eecd098b92bfdb922cd8ebb64bb19783a576c0a58e5a9678c4e894b8ab33f5d3a980d4fd67943127da3d8584985f2ab746dca056dc38ed1aae0", @ANYRES8=r0], 0x24, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000000000053030000060000008c0800000fe34fcc02873cf69fe6c225a6dbd652fe32c25c51297e441da159878021a6b7bd7a00ba7a5da70da1f88f5b77d21ff0d24542a385ee67d03ef980416e93967c8a3055678678cc6697406d8faee00c50f45ebd03588d62c886d801454cef30cecf8e2d329f9b0323a0cd32d5df7ce9be2f7b828b55559edb278ce565bccbce8c4d5a00fad7367f1427296ec28a", @ANYRES8=r1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESHEX, @ANYRES32=0x0], 0x50) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000040)={0x8000, {"4e068be8035430cf8aa1159fe4d0f21c", "0c9f0104000000001400ffffff00", "7aef720000ffff00"}, 0x2e, 0x5}) 52.219724267s ago: executing program 2 (id=547): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$video(0x0, 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x894, 0x30, 0x12f, 0xfffffffc, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x0, 0xfffe, 0x0, 0x98, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x66a, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xa3d7, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7883, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x200000, 0x1]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xf859}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xdfffffff, 0x7ff, 0x2, 0x9, 0xc, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x3, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x3ff, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x1, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0xc, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x105, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0x4, 0x7, 0x1, 0x7fffffff, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x4, 0x6, 0x1000007, 0x3, 0x1ff, 0x8, 0x2, 0xfff, 0xde94, 0x5, 0x1, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x4, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x2101, 0x100, 0x7ff, 0x1, 0x2, 0xa, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0x100, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0x100a, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0xb, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0xc0, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0x5, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xc, {0xf8000001, 0x4, 0x2008, 0xffffbfff}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000240), 0x1003) 50.674682587s ago: executing program 2 (id=548): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x0, 0x4}, 'port1\x00', 0xa3, 0x1918ef, 0x4, 0xf2, 0x7fffffff, 0x4, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 50.591219551s ago: executing program 9 (id=549): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c", 0xc2}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205a8d177ffe437570e15e55c72edfd43f3b828ce3dc05ea68517cf917ddc1fa4e5ad006f90fe2d02aa344b9f671f7a4683a945a1f547d2f9b381ef34c62bd754127361576a083cf5a37b03b062076d99189acce7fa1111744e2b07828140640640e933358a56784c3f377b6cbaf4f72aa0d8e993eec8", 0x123}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 50.560697137s ago: executing program 2 (id=550): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x1, {0x0, 0xf0, 0x4}}, 0x18) socket$inet6(0xa, 0xa, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0xc0012fb, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@getchain={0x74, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0x3, 0x5}, {0x6, 0xfff2}}, [{0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x10001}, {0xffffffb9, 0xb, 0x7ff}, {0x8, 0xb, 0x91e}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}]}, 0x74}}, 0x40d4) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x211006, 0x80) lseek(r8, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0xf5, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 50.267563592s ago: executing program 9 (id=551): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x7, &(0x7f0000000300)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b65994efdbb16a4586ab8445732f6abfaee208d6c9c22c3261257718312d6d137d93b57003f119d089a01f8f8aef62d0fcd267ee7cff07c09904a079a99cda2c0b258277e2b5ddbe722d0c"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r2, 0x25, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="840000000206010400000000003b00000000fffe050005000200002040000780080012400000007f05000300a100000008000a400000000308000a40008510ff07b27db70cb21262fb9c1787560000060c00018008000140640101000500150c0b000000060004404e220000050005000200000005000400020000000900020073797a31a5d766883775dd3a5e8ab3a404d044b23f007e2a626c47bd93b83d703799d7ba44bcdbd9b08a98dac2eb25101fc051702c1bc955b942cbf80f87ea995f409182e423abc9b022692a4b8f2df43ad87d000d4e157e7565893a6f6a1ebfa0bed2babb664a00ecb14c391a26844280e63aa98fcfd3aba54ad654a642c3ac6940a691a3acbe48b212f8a654f1da40cf0c1a62ac92b52d8d86d9f775110ee510acc66511357dea68d87c182080f498e72fdec01559af75984cdda9bdf309b30f919b8e2ca1e04e3d5de4b6ef48e732ddb9ade73845e53ff8f18efb29323a03ec7c37813c3534288ee82d8df1191478f265850a43b2f227bce3fee975d48d9ef0448d182d95c9dd636681ef643f509e3fa540f4c0939538c8dc4367b51f29a3b5403270b07d15f0c587ba99023350157f2940229d44d937bc63c97a176002e20eece49aa9a650fa091606b5bfebd6ea2c"], 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x3d, 0xffffffff, 0x3, 0x4, 0x3, 0x1, 0x3, 0x101}}) syz_emit_ethernet(0x10c2, &(0x7f00000004c0)=ANY=[], 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0)=[{0x3, 0x5, 0x5, 0xff, @tick=0x7fff, {0x1, 0x10}, {0x3, 0x10}, @raw8={"3383c1d8ab201201b5493755"}}, {0x2, 0x7, 0x7f, 0x8, @tick, {0xe}, {0x7, 0x9}, @connect={{0x6, 0x3}, {0x9, 0x4}}}], 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, 0x40, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 49.568709493s ago: executing program 2 (id=552): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x7, &(0x7f0000000300)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b65994efdbb16a4586ab8445732f6abfaee208d6c9c22c3261257718312d6d137d93b57003f119d089a01f8f8aef62d0fcd267ee7cff07c09904a079a99cda2c0b258277e2b5ddbe722d0c"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r2, 0x25, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="840000000206010400000000003b00000000fffe050005000200002040000780080012400000007f05000300a100000008000a400000000308000a40008510ff07b27db70cb21262fb9c1787560000060c00018008000140640101000500150c0b000000060004404e220000050005000200000005000400020000000900020073797a31a5d766883775dd3a5e8ab3a404d044b23f007e2a626c47bd93b83d703799d7ba44bcdbd9b08a98dac2eb25101fc051702c1bc955b942cbf80f87ea995f409182e423abc9b022692a4b8f2df43ad87d000d4e157e7565893a6f6a1ebfa0bed2babb664a00ecb14c391a26844280e63aa98fcfd3aba54ad654a642c3ac6940a691a3acbe48b212f8a654f1da40cf0c1a62ac92b52d8d86d9f775110ee510acc66511357dea68d87c182080f498e72fdec01559af75984cdda9bdf309b30f919b8e2ca1e04e3d5de4b6ef48e732ddb9ade73845e53ff8f18efb29323a03ec7c37813c3534288ee82d8df1191478f265850a43b2f227bce3fee975d48d9ef0448d182d95c9dd636681ef643f509e3fa540f4c0939538c8dc4367b51f29a3b5403270b07d15f0c587ba99023350157f2940229d44d937bc63c97a176002e20eece49aa9a650fa091606b5bfebd6ea2c"], 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x3d, 0xffffffff, 0x3, 0x4, 0x3, 0x1, 0x3, 0x101}}) syz_emit_ethernet(0x10c2, &(0x7f00000004c0)=ANY=[], 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0)=[{0x3, 0x5, 0x5, 0xff, @tick=0x7fff, {0x1, 0x10}, {0x3, 0x10}, @raw8={"3383c1d8ab201201b5493755"}}, {0x2, 0x7, 0x7f, 0x8, @tick, {0xe}, {0x7, 0x9}, @connect={{0x6, 0x3}, {0x9, 0x4}}}], 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, 0x40, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 49.2379657s ago: executing program 9 (id=554): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x166, [0x0, 0x200000000480, 0x200000000586, 0x2000000007ba, 0x136], 0x0, 0x0, &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x4, 0x96e0cc25df977d4d, 'pim6reg1\x00', 'dummy0\x00', 'vlan0\x00', 'veth1\x00', @random="b9899f3afa17", [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @remote, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}], @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x1de) 48.767635012s ago: executing program 2 (id=556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600210000000000", 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 40.112321312s ago: executing program 4 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) timer_create(0x0, 0x0, 0x0) io_uring_setup(0x516, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f000001be00)={0x2, 0x1, 0x7, 0x80000}) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x1}}, 0x40) 39.755549283s ago: executing program 4 (id=566): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000200), 0x1, 0x8000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000400)={0xa10000, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000440)={'dmm32at\x00', [0x0, 0x5, 0x3, 0x1, 0xe7, 0x8000000a, 0x0, 0xa82, 0x3, 0x100, 0xcf3, 0x9, 0x1d8, 0x2, 0x6, 0x100, 0x3, 0x1008b, 0x3, 0x8, 0x4, 0x80000001, 0x8, 0x2000007, 0xb, 0x0, 0x3c, 0x5, 0x7fffffff, 0xffff, 0xfffffff6]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 38.60904599s ago: executing program 40 (id=538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="bad330fbc9b55400041900ea0756a85d86dd4e11bce43a5dbf38ff29aabe94b749222147b4d613739944c056f5616c7bfae9e4f631503eeb57da", 0x3a, 0x1840, &(0x7f00000000c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 37.986133124s ago: executing program 4 (id=568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x50) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf650900000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008f630102a0000002174916233c5128f5d856f9c7617b62db9f07d77723b7374d48b044b561b1bade66a2e50b361effc1f7fba325a49da4ac1e429ae28425b43ef77c287bc9008b9ca151269813180f3bc8037935d17a2c34e37869923a139842cb88322a5e29a78829798a5d297230f3c8845983198636cb3baab9368b697843363c1aab75ab1e523fe94dbcf18a9463106719c71f57922fc5c7403672d06e16a93"], 0x28}, 0x1, 0x0, 0x0, 0x4040045}, 0x20000080) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x8321, 0xf080, 0xc, 0xa0002f5}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x44) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x36be6fca, 0x8081) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@iter={&(0x7f00000005c0)=@task, 0x10}}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000e40)) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000008c0), 0x0) 36.952745765s ago: executing program 41 (id=546): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r2 = fsopen(&(0x7f00000002c0)='fusectl\x00', 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYBLOB="9c4d03edd2cb1290c2496b49ba7e54a8b29d9d5dd1386e69774b027c2fd9f361f3c2582e4454d346560adc2eecd098b92bfdb922cd8ebb64bb19783a576c0a58e5a9678c4e894b8ab33f5d3a980d4fd67943127da3d8584985f2ab746dca056dc38ed1aae0", @ANYRES8=r0], 0x24, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000000000053030000060000008c0800000fe34fcc02873cf69fe6c225a6dbd652fe32c25c51297e441da159878021a6b7bd7a00ba7a5da70da1f88f5b77d21ff0d24542a385ee67d03ef980416e93967c8a3055678678cc6697406d8faee00c50f45ebd03588d62c886d801454cef30cecf8e2d329f9b0323a0cd32d5df7ce9be2f7b828b55559edb278ce565bccbce8c4d5a00fad7367f1427296ec28a", @ANYRES8=r1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESHEX, @ANYRES32=0x0], 0x50) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000040)={0x8000, {"4e068be8035430cf8aa1159fe4d0f21c", "0c9f0104000000001400ffffff00", "7aef720000ffff00"}, 0x2e, 0x5}) 36.859124768s ago: executing program 4 (id=570): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b11610100000000851000000200000085000000b200000095003300000000009500a50500000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 36.727212298s ago: executing program 4 (id=571): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x7, &(0x7f0000000300)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b65994efdbb16a4586ab8445732f6abfaee208d6c9c22c3261257718312d6d137d93b57003f119d089a01f8f8aef62d0fcd267ee7cff07c09904a079a99cda2c0b258277e2b5ddbe722d0c"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r3, 0x25, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x3d, 0xffffffff, 0x3, 0x4, 0x3, 0x1, 0x3, 0x101}}) syz_emit_ethernet(0x10c2, &(0x7f00000004c0)=ANY=[], 0x0) write$sndseq(r1, &(0x7f00000005c0)=[{0x3, 0x5, 0x5, 0xff, @tick=0x7fff, {0x1, 0x10}, {0x3, 0x10}, @raw8={"3383c1d8ab201201b5493755"}}, {0x2, 0x7, 0x7f, 0x8, @tick, {0xe}, {0x7, 0x9}, @connect={{0x6, 0x3}, {0x9, 0x4}}}], 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, 0x40, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 35.900292162s ago: executing program 4 (id=572): syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400", @ANYRES64], 0x0) gettid() (async) gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) (async) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x4, &(0x7f00000002c0)={0x0, 0x3, 0x3}, &(0x7f0000000240)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x40000000fd8b, 0x5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex(&(0x7f000000cffc)=0x3, 0x4, 0x5, 0x0, &(0x7f0000000000)=0x3, 0x5000000) mprotect(&(0x7f00008bc000/0x8000)=nil, 0x8000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000fd2c00000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002eb3cff517b26ef12d3b5947741d24ead9923709655459f5f21b6d8d3cd60918fc0cad711d762219cf2f62555e555c5"], 0xd0}}, 0x20008081) epoll_create1(0x80000) (async) epoll_create1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000693000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000693000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x40007, &(0x7f0000000380)={0x0, 0xc8a1, 0x800, 0x1, 0x225}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r4 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x13, r4, 0x0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x13, r4, 0x0) 33.598572468s ago: executing program 42 (id=554): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x166, [0x0, 0x200000000480, 0x200000000586, 0x2000000007ba, 0x136], 0x0, 0x0, &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x4, 0x96e0cc25df977d4d, 'pim6reg1\x00', 'dummy0\x00', 'vlan0\x00', 'veth1\x00', @random="b9899f3afa17", [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @remote, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}], @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x1de) 33.548687709s ago: executing program 43 (id=556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600210000000000", 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 20.350148071s ago: executing program 44 (id=572): syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400", @ANYRES64], 0x0) gettid() (async) gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) (async) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x4, &(0x7f00000002c0)={0x0, 0x3, 0x3}, &(0x7f0000000240)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x40000000fd8b, 0x5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex(&(0x7f000000cffc)=0x3, 0x4, 0x5, 0x0, &(0x7f0000000000)=0x3, 0x5000000) mprotect(&(0x7f00008bc000/0x8000)=nil, 0x8000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000fd2c00000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002eb3cff517b26ef12d3b5947741d24ead9923709655459f5f21b6d8d3cd60918fc0cad711d762219cf2f62555e555c5"], 0xd0}}, 0x20008081) epoll_create1(0x80000) (async) epoll_create1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000693000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000693000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x40007, &(0x7f0000000380)={0x0, 0xc8a1, 0x800, 0x1, 0x225}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r4 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x13, r4, 0x0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x13, r4, 0x0) 11.42034454s ago: executing program 8 (id=623): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1200000004000000080000070100000000000000", @ANYRES32, @ANYBLOB="040000000000000000000000000000d191163e00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001a00000000000000"], 0x50) 10.979928462s ago: executing program 8 (id=625): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDISABIO(r1, 0x4b37) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x2004) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0x8, 0x3, 0xca0, 0xfffa}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendto$inet6(r5, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='./bus\x00', 0x8c242, 0x1df2a23c5997fad6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000080)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) 9.959274424s ago: executing program 8 (id=627): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[{0x4, 0x4, 0xc, 0xb}, {0x2, 0x2, 0x4, 0x3}], 0x10, 0x1000}, 0x94) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_connect$midi(0x6, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x48000) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\xff\xa6\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc8003, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x8880) 8.814406099s ago: executing program 7 (id=630): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x20002150, 0x20, 0x3, 0xc4}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="bccc2190484a", 'ip6gre0\x00'}}, 0x1e) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000000000005}, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffd9c, &(0x7f0000000180)=0x1400200bee) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102397, 0x18ffd) (async, rerun: 32) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x80000) (async, rerun: 32) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x100) (async, rerun: 32) syz_open_procfs$namespace(0x0, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4040010) (async) fanotify_init(0xf00, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) (async) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xa0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000040)={@host}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000000)={0x0, 0x0, 0x1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x80, 0x20, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x2, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) 8.607470673s ago: executing program 7 (id=632): syz_usb_connect(0x3, 0x3d, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x20c200a2, r3}) 8.583018281s ago: executing program 0 (id=633): sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x80, 0x100, 0x7ff, 0x2, 0x7f, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000300)={0x8, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r4, 0x301, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) syz_init_net_socket$x25(0x9, 0x5, 0x0) 7.913693924s ago: executing program 7 (id=634): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000200000014000200626f6e6430000000000000000000000009000100f3797a32000000"], 0x34}}, 0x800) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10b) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) ioctl$VT_ACTIVATE(r3, 0x5606, 0x2) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000000)) 7.776847192s ago: executing program 0 (id=635): socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x191) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x40000000) 6.75026731s ago: executing program 7 (id=637): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@ipv6_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e22}}, @FRA_DST={0x14, 0x1, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000540)={'bridge0\x00', &(0x7f0000000840)=@ethtool_flash}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0)={0x0}, &(0x7f0000000800)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(r5, 0x8, &(0x7f0000000280)=0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_open_dev$radio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x2}, 0x8, 0x0, &(0x7f0000000080)="4c2e8b4ffed5de5db9930f91473f90a1368162003e0c56228b696e0f583149f5a821963eb14b4e50eab5f0fce41d4b437e8d8e1901e77158", 0x38, 0x43a, 0x5e489015, 0x0, 0x8, 0x0, &(0x7f00000000c0)="23947a386403445a484cf098abb479b26169a15c75374dc39da622a5f5b821a59367ddd4402fc8321191de9d631a01fc3a5ab6ca37ffc7ee238acb991022fe2b7fc46c2ab6b9029f63ef82cbd0e3488b61c501ba701161370f5059d8b6b901edc306bca7e1267603dca498676c252893378ef8736134ce010c2d8b9bedcc62fbb768d213142301a3ff3ac48a0218a391bd3d0856dd2a6cb23525ca258b8d63d83d1dc81582fe9fd3829a95db6e2fc81a9fce68e50a90b5db4ad60503d510fbbbef17c9683029e4bb8d931b047fe9b24c8452"}) close_range(r0, r0, 0x0) io_uring_setup(0x4d2f, &(0x7f00000001c0)={0x0, 0xf72, 0x1, 0x4, 0x160}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)={0x34, r7, 0x1, 0x70bd22, 0x40, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r7, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "9f5ada115288de45e35fe266b5097e33"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "2d4112ec134e196110cee07f27040faa"}]}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x4800) 6.736219546s ago: executing program 0 (id=638): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x7, &(0x7f0000000300)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b65994efdbb16a4586ab8445732f6abfaee208d6c9c22c3261257718312d6d137d93b57003f119d089a01f8f8aef62d0fcd267ee7cff07c09904a079a99cda2c0b258277e2b5ddbe722d0c"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r4, 0x25, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x3d, 0xffffffff, 0x3, 0x4, 0x3, 0x1, 0x3, 0x101}}) syz_emit_ethernet(0x10c2, &(0x7f00000004c0)=ANY=[], 0x0) write$sndseq(r2, &(0x7f00000005c0)=[{0x3, 0x5, 0x5, 0xff, @tick=0x7fff, {0x1, 0x10}, {0x3, 0x10}, @raw8={"3383c1d8ab201201b5493755"}}, {0x2, 0x7, 0x7f, 0x8, @tick, {0xe}, {0x7, 0x9}, @connect={{0x6, 0x3}, {0x9, 0x4}}}], 0x38) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, 0x40, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 6.691379049s ago: executing program 8 (id=639): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548fc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee364dad078fc88d17cbde37a2270f90a60afe8548f4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd1045a5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f089021bffffff00004000632f77fbac14140be934a0a662079f4b4d2f87e50aca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000", 0x0, 0xfe, 0x60000000}, 0x50) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf650900000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008f630102a0000002174916233c5128f5d856f9c7617b62db9f07d77723b7374d48b044b561b1bade66a2e50b361effc1f7fba325a49da4ac1e429ae28425b43ef77c287bc9008b9ca151269813180f3bc8037935d17a2c34e37869923a139842cb88322a5e29a78829798a5d297230f3c8845983198636cb3baab9368b697843363c1aab75ab1e523fe94dbcf18a9463106719c71f57922fc5c7403672d06e16a93"], 0x28}, 0x1, 0x0, 0x0, 0x4040045}, 0x20000080) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x8321, 0xf080, 0xc, 0xa0002f5}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x44) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x36be6fca, 0x8081) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@iter={&(0x7f00000005c0)=@task, 0x10}}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000008c0), 0x0) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x35, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 5.087492467s ago: executing program 0 (id=641): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xc, &(0x7f0000000140)={0x8, 0x55}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0xffffffffffffffff, 0x7fffffff, 0x800, 0x719e0da6, 0x2}, 0x0, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 4.183784573s ago: executing program 7 (id=642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x84000) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x200844, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r2]) 3.656465862s ago: executing program 5 (id=643): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x20000000, 0x32}, @in=@local, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) 3.328234947s ago: executing program 5 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/165, 0xa5}, {&(0x7f00000003c0)=""/144, 0x90}, {&(0x7f0000000480)=""/97, 0x61}, {&(0x7f0000000500)=""/7, 0x7}], 0x5, &(0x7f00000005c0)=""/239, 0xef}, 0x10}, {{&(0x7f00000006c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/45, 0x2d}, 0x100}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001e80)=""/150, 0x96}], 0x1, &(0x7f0000001f80)=""/174, 0xae}, 0x1}, {{0x0, 0x0, &(0x7f0000003200)=[{0x0}], 0x1, &(0x7f0000003240)=""/110, 0x6e}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000005180)=@hci, 0x80, &(0x7f0000005780)=[{&(0x7f0000005200)=""/205, 0xcd}, {&(0x7f0000005300)=""/110, 0x6e}, {&(0x7f0000005380)=""/123, 0x7b}, {&(0x7f0000005400)=""/221, 0xdd}, {&(0x7f0000005500)=""/135, 0x87}, {&(0x7f00000055c0)=""/66, 0x42}, {&(0x7f0000005640)=""/85, 0x55}, {&(0x7f00000056c0)=""/140, 0x8c}], 0x8, &(0x7f0000005800)=""/135, 0x87}, 0x8001}], 0x6, 0x12001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3.117188715s ago: executing program 5 (id=645): sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x80, 0x100, 0x7ff, 0x2, 0x7f, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000300)={0x8, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r4, 0x301, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) syz_init_net_socket$x25(0x9, 0x5, 0x0) 2.527494928s ago: executing program 7 (id=646): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) userfaultfd(0x80001) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000004000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.427524875s ago: executing program 5 (id=647): socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x191) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x40000000) 2.335386437s ago: executing program 8 (id=648): openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x4000, 0x4000, 0x8}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0x4, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000640)=@svm={0x2, 0x1, 0x1080, {0x10000}, {"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"}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.415185843s ago: executing program 5 (id=649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000d06010800000000000000000200000405000100070000000500050000000000140003"], 0x38}, 0x1, 0x0, 0x7000000, 0x40080}, 0x20040884) 1.074562806s ago: executing program 5 (id=650): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) syz_usb_connect$uac3(0x5, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000208205b20040000102030109028e0003010f10fa080b00020101300309040000"], 0x0) io_getevents(r0, 0x7, 0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0) io_destroy(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000240)=0x100000001, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000198000/0x3000)=nil, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000047d000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x189000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x0, 0xff, 0x200000000000007}) io_submit(r3, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r2, 0x0, 0x0, 0x6}]) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000080)=""/105, &(0x7f0000000100)=0x69) syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x4, "b4865713"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000300)={0x60, 0xc, 0x4, "dc275721"}, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, 0x0) 931.843744ms ago: executing program 8 (id=651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = syz_open_dev$MSR(0x0, 0xdc, 0x0) read$msr(r1, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000040)={0x2, 0x7e}, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000200)={0x1007, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x3, 0x0, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4880) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x33}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="b8", 0x1}], 0x1}, 0x404481c) 931.471607ms ago: executing program 6 (id=589): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/72, 0x48}, {&(0x7f0000002540)=""/20, 0x14}], 0x3, &(0x7f00000025c0)=""/75, 0x4b}, 0x3}], 0x1, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x24000145, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000400)=0x55e, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x109, 0x80, 0x2, 0x1, 0x80000000, 0x20000006, 0x4d, 0x6, 0x60, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x1, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x10001, 0x4c75, 0x80000000, 0x242, 0x3, 0xe, 0xe464, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x9c7, 0x3e, 0x8c, 0x3000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x5, 0x5, 0x6, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0xffffffff, 0x2008004, 0x5, 0xfffffff3, 0x129432e4, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0x3, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x79, 0xea4, 0x0, 0x5, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0x1fb, 0x4, 0x9, 0x8008, 0x9, 0x5, 0x47, 0x8000, 0x2, 0xfe000000, 0xffff, 0x200002, 0x4, 0x5, 0x3, 0x3, 0x9, 0x1, 0x0, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x9, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x200000, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x6, 0x3, 0x20000008, 0x20004, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0xb2, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x1, 0xac8, 0xca, 0x0, 0x3, 0x7ff, 0x12b, 0x7fffffff, 0x40001, 0x6, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x4, 0x80a2ed, 0xffffffff, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xfffffffb, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x9, 0xffff, 0xa622, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xfffffffd, 0x7, 0x5, 0x4, 0xc8, 0xfffffff9, 0x7, 0x10000, 0x0, 0x9, 0x100, 0x9602, 0xb, 0xaf, 0x5, 0x6, 0x226, 0x9, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x2, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x13f, 0x2}}, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) 571.639921ms ago: executing program 0 (id=652): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r1, &(0x7f0000001b00), 0xfffffd9d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x403, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x1, 0x0, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005e00)=@vmx={0x9, 0x0, 0x2080, {0xa000, 0x8000000, {}, 0x0, 0x8b}, {"46a8b1a6947b77cc53765de93df409a157682dede3f39c61db94f9be8c6076975d5db1de766f34829101342966e9c94ff085854dbd67711c6ecf77ab65d4907441abc048c2f284adac10997e60a59f6df55fe0394b5fa0d99e5fab73866bcddda63b652679d0053c7cfa474928fc059e796990a3a702ffd36812ecb78f8bb538e843f1e5dca0c14f138450e2ae6cd94a9d8ec136a3f49d20529cac9a5bc1dec8ba52f3ede323c647fa89f2de9a56d696198d37e259f358869e4a2fbc49738e5e79e315af6dafeaf6935bf42b93270fd002b1e371656db5235e13bce6595566fbed18a527f08f4f7a5b0566f7ef5b2fa47682dd3b72799e38db0a38843aa92a94a0fbbcb7c005849e2aa28735850afd95fd3d3f72ac8e140fdcbc99a894c7238678a9fa5f77c0ab3d1d456f8d93f5228edc0063b927902342f5ddefa391549585080ba3a0fdd29c7e2f77e78b3f966058931080f21b85753748f1aaadfb559b25f2f5854e597fe2b007687297e08c90e84b43667a4917318df29b4256f6a204744a0fa7189b9386bb66ecfc850c17c0ec0fd868b44393e9a64117ef7a6842053c2935d61cb3bf4e408289134b9a031938c4f58581d18418bb1180a2bb8c27b9fa41cdd18e7d6e6f343197c01a5066ae90e24a91c76229d9663633c8c0b1601783c8a6c3e129685ffd3a9576c36f2f575ea4d136dc94d37ec780d222b10a31ced8fd0859194c227fb1afedd557fd87fe52241d10fd4f1985e51fee19aaa27caf28cb9181f83433e0d3dbede03f37af831b794f3fa9e7382938e9336dc3c26ce64d1611dd246f22f5dc62e00bf7e1b5b9ce0c0e0a6eb210e1d2cbcad57c5962bba70144b7156d9352c9aea6dbe8a104f7f38e1fe36942f6e1bd450027fef85723ee46fd22dcea7e99c38e26c4a840c0f2f4fad05d64800daff48bde98625a9c8c0197cf212ba7c74195b6db95501f08affa9b0a6e227c5399ed9f2efd9ab767e1bf732a1bfe52d7c195b658cacbb791c63363d17178917c42d8471d4e4fa6069f97d3d32f6d672478edeb8616772c8aabb4128adc67d6c688b299e62fd1844df711b197bf19ff5b1b785173b0bd07e0c7e76635eab20da5a81dfcdfaa1fcb8ce677363acc7dad390f1841131aadd2b24cb2daae03e765ea563ee797d33a949dab71341f762f3936b3843d4f2b5d1ef2115ccff44c509d0e5bd1e79a6445a00b4959c9c9c5ca7437af0b7552005b8657f7b9e440b763a481a32e86484e6fb0c48b6f9c897f5a2aee34ff02b48ebaf41ae500eea9b6496c0dc08fa17dc955fcd646fa009e715a371d8bdf6c7269d7f8baf5201218c13cb01dff8987618890a5ba2ea2f02159c8a15e04a15511c5de27474f2c03daa565168364b330f8afc06ebc0611420aea0d0b1738a8c543a35b6766f2ae703c88730150cab904db017fb932c6d5eae9a68f2724070b3bad32cad49e86bc073619919e18162cf8f42e3de4c1da09b537c367217dd9dab5bdfafa86791cc8c2c7012ea687a0464b09d4cb0eea3515589d902d4fc5e791d45d5b4269ecfc4f426bfb0b02b7fd33565f01358eedca0e65290d99721cc00abebdf261cd9f5e6e76d9c615e3f91ccefa8efda3d73680c24b6638ec9784557e1b6688861e34e004bedb32669353261d326f785126db68fc11cccd266b62ea226fac74ab0bb6a452090a0c246b18f057aa42eec339b461f664ca2d2fd002e6ae30624a29959dadbdc2d38b9bbf831b49a17d10be354b36952925b68fe3af46f3d9f4a1f08060b000e2a06f6b1abb0cc3875da6fef7f3688a7e91672f3b42e68095992b2087692d62df580b23e3c112a7393948e931b55ef9e622346c685faecc85c2bfe6cfaaf43edb26b054e4635620f8040ca0002611ef9bf13569531f748ccd61810056b99f489f340566f4d8778177042ee09061fdade70285fb661d304ea7071c081656d5304450db1b3e1b3abcea69dcbdeeb31694a84357744ff3115de2153bcf5524e85a714e4d9ed6eec33d16efa01c23caa51524350a6b9c47d7646c5ecd9743373838f05e1c6b35c733d1bdd3f115b6540f6d1bced4805b1b2465aaab9e751b316d46361c2dd2b073316cf77fd1faed200c4a46422eb58af3821efe2f3704d91b4c243fe06f239ca43fe870a34a9ec6c65ab09f53fba688a69b7935f0359eb9ed137aa340ce174c3acc6de21d29d1dbb60c1d833821ad81e76267b9ff186f3181e261d38b884aefcc13dec535832ea2d5bc3749c533bc6b1c0c1b649b5f7307f3d5812c236436b91dd97867cee03b321d8e893146c42c8bfbe3b32faace037e161d05e3019324147d4a2943d54501caf05f8a6807b8fc9918f5ef79e56363360a7cd85ba971fefbef395d67b6e049b98b3940f8017c9d63be7f979b71320a081f1ae88020410d239a7a2ec46e935b850e469d61fef88f87f5d1f28eaf35bfb415c38647e2e4b87978e91ff4a74e75ac9bf4b9ac6f08c55606f14cd37f05f02fce25cb2579a8c208b010b58e76805edf42175ef10d07db8587c6ae94e54e55546a1963bbab7766bf78fd46bb24b46f531be37844d16f9e1a33e9fdcf2c46be6e8973cef10ed4e0309d3003e5c9bd4dba67170b878a1a6cfa36bfecd36625048e52d69ed7b8314e7877df93780b9956676f7e531293539f79a09e6e1192ee68a4607f6ee13c69a7ed9da21ced779300b9dc100428186dfb83c24ad0ec02bc14acbe2e3ab1185b9c60ef39edf38686648947fa17ca9013c51d6f7b06bfe8b7370358d3d975fd677075da40f69cc951c36b06cc02ea061ca72a53e92236e077a9b15a3f8aed3d1a36aac2b2bc5b6b6c2372cba96cc99e5633ac8bd6cc343076a49a94f56507f90ddfb31943073c739b29bad5e3490130e44509e0147d135b0ec495177a08bc0d783ca2b958838286fa05aa64d834328f2bd381e4dda7f15a9acfa0c1611a9472a320124ba0e07ca12734de7bd3b91020c45fd3b2bc2e331ccd9768068c57ebf6adb710391e30901d04ebcae90375f2d25eb9f413f11484aea953447ae92194e1aba0da460e808b3b64ca1fb07e03a703e9eb8e4f055b1c05e6c4819b3ee48fb0625dc897a110056f305fea68f67700e4d5c7b86c0a9e8952f98d585fc9263b2fc7cde2f7e8e3d5a023ea5591e2041f3a2af26b588e6fa16bcdd0da890bb0037d2a3025757c2cf87be2419a11e5a792a53ab34f9fb12ba1bfcea32eeea305163b9d5122e6e83d831579302fd4d5ee668397709d32b1df796e7ea448d5bd6369423d08e0840fd8eba6b793d2dcb5dc06b59c003174ace733b745af1a6eeb20171648a44b6b03d14e40d0466b947a0d899d37fa260398735f829256020346f932b9e3cc0fe4674aa5b37aadd980647d64f2d2333ed7e8b316de735956e44dbe206a391e31f259ad38381dfd6e27f22ef30380c6d3c443deadd2f9d253937f6f127be31989bf53ea25da52a12c99a6c56faa1c5d93888375762a73bfb2c006ce3031324d3f97ff83a923a960fdd6b2dcba8ecf416d8165f975c309c84ad4ffc44189e1178f0e757be7346b86adea8e33c87178aef36f45682fb48f8e00c94b96c0ee419aa2888da5b2272458eb28066e962900bac19eeda7263a4d7d8903ad4bebcef40c4bdd294da8cb31eaab15d7a86a86e9685bc9a745b9625068ed1167a21920eb47c2e33108529fdab87ac4dab4bf6d49f43022383801c5e46adb61fa8207977cea136a0bd4e6fbab4d2ce54d472917ffedad24617aa5b47710c55488218bdd2f74ed975a6a3910e31dbd2e18804e4c3dbb020f994b07d308bdbecf4287a09623921273a4c07fd406d84d274c9090d6dab7cc45ed8606f371bba8b8f092bc1d612c97b2b813927b163ea9b536f8a18fea276130ac83315376eddbe6f846bd652faa877b02f134d98e2879c8d8a6c72a757067946a9180cef9ed22ebcf1ee42bce4145947f4ad8601379f7f6414b7b95b5fa06ac2716f8abb57cb7b44f419d5ef6e3b1a982c2474a25a20f6b08cd8515c06065da4dcab8769b0b73b7c6db2694b60fddd8f69fc09ca4eb79d2b9f94853d33be6740fd2c7214309a71ec9f0f05cbf6cdb1860bb4e7bf6143eb04f60069e081a1dc549854365a0f422e949b7896720df72bcfd4d215c474aed7a308fd628dd60e9997e8e227fc0fe8ba84e309797f1892706e1e88bd719745238ddcb25d7904a96aae60442112b08dc94207f4a74a3ea9b348f933981a04b3c0d3654858e50a0037f66cef206d56c22f6745763daad1c19bbdde5bc4e50e415ce15eb4a3d2b026ecb59afc32eace1bbf938ea22ab44fe2fba7f8f6bd36f2686c9b13ec8008862c9c90af6754b20c53afdc4717daee3f5910630d039a10cb2526a9009d06c9f636517a3f78651136f770e2f4957672d506edb5534ff24fd48f602eb8e4c9f43aa7e224125544f2aa4b4c56979e789ed76c47319c1faeb7a2e32ad8c6019f116810bc8c086f69bf97f17ecfc3b2ffaab54f74613f250754f4c0af992b33d73cf7ba91901b7b072c5355b541d4ab0c26fa0441aa2d12efd373ac2665d0d9ee18c21ab5f3fe2ae6f41f4d54cbae563a1c2a4b4a17fcd00ee5e57ee29db4a974962510ffdae3447b19266a0c52fc131b4033e385eea9fdfd624929b3b76c2a3a095b02bb306e4b8c50c0eb45755b5826dd03e76138cd983c906fa080889c9c1fd6210441d418682dd8f18de775b6d5b2a2d201581dd9d728c8ac97b70f6650167d544253e8a6123af8fe8994bb14e6fff1627df6708d8d114798c384fb5f773ccd895e5d86cd502f8111f33c520cfba1be0883ffe6d198667c9219af610e40f9d84f422eb89116daf6832e381ef29be0fd5c82b8d8a08d11b3d08eb1fba8251ef5a102e4411cb69eb80c303d0d4b848f482ac549fb8c253545d3f08144e659d84fe551453ed69f37106df598c564e695e4d67390b1b8d5ea48480a525adc1846bbbdf69fe27c332a1e3814137e065b1b728d40d0d4ad0918ffb7fe0d05406e90f15edd7b7ec0c1fa0d4b03bea6b0e5a942abdb60c9b91bcd2395e4792237a8d13b866e85d18cfebafd2e28e2988d33d64e8fe44d3b17b072328cb2515cbe1fcabcb30a07b50cfa347f8acc0efc75940ae83eeff032346b07493a5b6ae37fc8c9b0284f33916cb067ef63585703ad8a2b8cb08506468d8a9711e98e8e403e8cf437da95149f4e365a62d031f5f688d92f39216fa53bbc2b37a61bb9d738bc0965e733adfce851059e48bb4171b6811ea7f40c8eb837910f0663377c5ee5f21578b9e01cf95c50c117ef81204718e36ef8bfac2c92e15e7556ea0388ce5ec704080df592ffa92122857249b6ca260dcbb2fbfb3267cf1773881eded7ad3ea1ed88133d2ed0fc4fb4356c557d4fe1b05c959af59077a881a0957da971699f809efe6b6d51cf6ef4901fdc60fab0277861c50b76d08682a18bd4a06c00c6a74201da0b5f7fbf308f92c9989c89154d7fd96ffea038f8a1b30a5c7da94e737b26bfad65eafa106e8dc0cbc8348fc0b63b96a5cd978987f139a940d78fe3d0f39fbd504c80f2691eaeab5388afd0f44525e13fc63922b2ee6676fef6fa97416c469f56738b85484b4df724362fa064fc2fac0ac8553a2e7a65725d271c304cc12dcdec21425a158597b090185673ce5bd1a3c3713ddff3daf4b74dba0930915569dd3737f1dad533f8396bda083b97c0eaa7f16480ae7ba02642e665f10bb2624b1cc1540edf837485a62b944f0be4f8c33125b2e8871a6d1184fa196cd6b2363b9", "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"}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r6 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='D', 0x1}], 0x1}, 0x4048841) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet(0x2, 0x4, 0x8) sendmsg$802154_raw(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000200)={&(0x7f0000000080)="7eec7ca256fd7500d2a6b142f2cba3a64a0bbaf0ca99685b35b9857663a04146e5a5b3ca5c18ccf7e1def15b27590f687ee0bcd9424d524a6fa2d8a7cb0066f6ab6212503b854a55d204c0b4bb56e23d8cab12f2eaabc3476d449a441fa94dea80adf679ff8b0e3723927a811ed7a9bd6cac3fb2b50db60d523dafb5dd0c5d58d302874edd376a212385277baabd4c6c1b8e0a2c265d8eb692d7ea054da28ef7ea1948de8c114b4773cc4386658ad3279bbee1e282a7d328439a359d315a71ea89c1ba46e0467c2d0aaf986321f350087db7305c166b7af50ba37cd6185fb8e23c8fcfaea7cc", 0xe6}, 0x1, 0x0, 0x0, 0x40400c0}, 0x24004084) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r6], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x20004000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448e0, &(0x7f0000000140)) 0s ago: executing program 6 (id=654): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/165, 0xa5}, {&(0x7f00000003c0)=""/144, 0x90}, {&(0x7f0000000480)=""/97, 0x61}, {&(0x7f0000000500)=""/7, 0x7}], 0x5, &(0x7f00000005c0)=""/239, 0xef}, 0x10}, {{&(0x7f00000006c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/45, 0x2d}, 0x100}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001e80)=""/150, 0x96}], 0x1, &(0x7f0000001f80)=""/174, 0xae}, 0x1}, {{0x0, 0x0, &(0x7f0000003200)=[{0x0}], 0x1, &(0x7f0000003240)=""/110, 0x6e}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000005180)=@hci, 0x80, &(0x7f0000005780)=[{&(0x7f0000005200)=""/205, 0xcd}, {&(0x7f0000005300)=""/110, 0x6e}, {&(0x7f0000005380)=""/123, 0x7b}, {&(0x7f0000005400)=""/221, 0xdd}, {&(0x7f0000005500)=""/135, 0x87}, {&(0x7f00000055c0)=""/66, 0x42}, {&(0x7f0000005640)=""/85, 0x55}, {&(0x7f00000056c0)=""/140, 0x8c}], 0x8, &(0x7f0000005800)=""/135, 0x87}, 0x8001}], 0x6, 0x12001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) kernel console output (not intermixed with test programs): r 180 minor 0 [ 175.273639][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 175.306622][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 175.347268][ T24] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 175.358982][ T24] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 175.369212][ T7096] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.402153][ T24] usb 10-1: USB disconnect, device number 2 [ 175.429587][ T30] audit: type=1400 audit(2000000043.490:564): avc: denied { watch } for pid=7828 comm="syz.6.371" path="/40/file0" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.510056][ T7832] sg_write: process 134 (syz.6.371) changed security contexts after opening file descriptor, this is not allowed. [ 175.528645][ T7096] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.549192][ T30] audit: type=1400 audit(2000000043.610:565): avc: denied { ioctl } for pid=7828 comm="syz.6.371" path="/dev/sg0" dev="devtmpfs" ino=798 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.633188][ T7096] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.824117][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 175.841404][ T7096] bridge_slave_1: left allmulticast mode [ 175.847570][ T7096] bridge_slave_1: left promiscuous mode [ 175.853814][ T7096] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.863630][ T7096] bridge_slave_0: left allmulticast mode [ 175.871909][ T7096] bridge_slave_0: left promiscuous mode [ 175.878895][ T7096] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.992179][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 176.000327][ T24] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 176.019743][ T24] usb 10-1: config 0 has no interface number 0 [ 176.028065][ T24] usb 10-1: config 0 interface 12 has no altsetting 0 [ 176.050245][ T24] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 176.092735][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.117603][ T24] usb 10-1: Product: syz [ 176.123331][ T24] usb 10-1: Manufacturer: syz [ 176.128650][ T24] usb 10-1: SerialNumber: syz [ 176.142024][ T24] usb 10-1: config 0 descriptor?? [ 176.275169][ T30] audit: type=1400 audit(2000000044.330:566): avc: denied { listen } for pid=7837 comm="syz.6.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.743906][ T5616] Bluetooth: hci3: command tx timeout [ 176.845799][ T7096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.862635][ T7096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.873540][ T7096] bond0 (unregistering): Released all slaves [ 176.901518][ T7839] syzkaller1: entered promiscuous mode [ 176.911059][ T7839] syzkaller1: entered allmulticast mode [ 176.939124][ T24] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 176.974182][ T24] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 176.992034][ T24] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 177.017476][ T24] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 177.054101][ T24] usb 10-1: USB disconnect, device number 3 [ 177.302085][ T5726] usb 5-1: USB disconnect, device number 17 [ 177.338060][ T5726] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 177.536103][ T7096] hsr_slave_0: left promiscuous mode [ 177.560976][ T7096] hsr_slave_1: left promiscuous mode [ 177.569539][ T7096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.577929][ T7096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.589794][ T7096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.607138][ T7096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.631774][ T7096] veth1_macvtap: left promiscuous mode [ 177.646861][ T7096] veth1_vlan: left promiscuous mode [ 177.662395][ T7096] veth0_vlan: left promiscuous mode [ 177.747843][ T30] audit: type=1400 audit(2000000045.790:567): avc: denied { read write } for pid=7862 comm="syz.6.377" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 177.987179][ T30] audit: type=1400 audit(2000000045.790:568): avc: denied { open } for pid=7862 comm="syz.6.377" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 178.392212][ T7096] team0 (unregistering): Port device team_slave_1 removed [ 178.410361][ T7096] team0 (unregistering): Port device team_slave_0 removed [ 178.544805][ T5271] 8021q: adding VLAN 0 to HW filter on device eth21 [ 178.765663][ T30] audit: type=1400 audit(2000000046.830:569): avc: denied { create } for pid=7888 comm="syz.6.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.822687][ T7892] netlink: 149 bytes leftover after parsing attributes in process `syz.6.380'. [ 178.833893][ T5616] Bluetooth: hci3: command tx timeout [ 178.878894][ T7893] comedi comedi3: unsupported base address 0x0 [ 179.130531][ T30] audit: type=1400 audit(2000000047.190:570): avc: denied { ioctl } for pid=7895 comm="syz.9.381" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.392415][ T7805] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.409897][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.435315][ T7805] bridge_slave_0: entered allmulticast mode [ 179.460583][ T7805] bridge_slave_0: entered promiscuous mode [ 179.743198][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 179.957724][ T7805] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.967922][ T9] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 179.975476][ T30] audit: type=1400 audit(2000000048.030:571): avc: denied { mount } for pid=7916 comm="syz.6.385" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 180.003640][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.013302][ T9] usb 10-1: config 0 has no interface number 0 [ 180.037533][ T7805] bridge_slave_1: entered allmulticast mode [ 180.043528][ T9] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.066545][ T7805] bridge_slave_1: entered promiscuous mode [ 180.084313][ T9] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 180.130547][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.178922][ T9] usb 10-1: Product: syz [ 180.196259][ T9] usb 10-1: Manufacturer: syz [ 180.215487][ T9] usb 10-1: SerialNumber: syz [ 180.222498][ T7805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.244561][ T9] usb 10-1: config 0 descriptor?? [ 180.272687][ T7805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.301236][ T9] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 180.434917][ T7805] team0: Port device team_slave_0 added [ 180.468780][ T9] usb 10-1: USB disconnect, device number 4 [ 180.477321][ T7805] team0: Port device team_slave_1 added [ 180.524456][ T9] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 180.609059][ T7939] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 180.616938][ T1217] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 180.630913][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.642232][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.670361][ T7805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.700169][ T30] audit: type=1400 audit(2000000048.750:572): avc: denied { name_bind } for pid=7938 comm="syz.4.388" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 180.722980][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.730314][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.756654][ T30] audit: type=1400 audit(2000000048.750:573): avc: denied { node_bind } for pid=7938 comm="syz.4.388" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 180.780352][ T7805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.852705][ T7805] hsr_slave_0: entered promiscuous mode [ 180.859955][ T7805] hsr_slave_1: entered promiscuous mode [ 180.879827][ T7805] debugfs: 'hsr0' already exists in 'hsr' [ 180.885716][ T7805] Cannot create hsr debugfs directory [ 180.905041][ T5616] Bluetooth: hci3: command tx timeout [ 182.301436][ T5271] 8021q: adding VLAN 0 to HW filter on device eth22 [ 182.983840][ T5616] Bluetooth: hci3: command tx timeout [ 183.108651][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 183.122309][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 183.134505][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 183.143858][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 183.151296][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.517504][ T8001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.566786][ T8001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.900211][ T58] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.320489][ T58] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.473460][ T1217] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 184.588125][ T58] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.615177][ T7805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 184.629539][ T7805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.640131][ T7805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 184.651862][ T1217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 184.668351][ T7805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.679837][ T1217] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 184.689065][ T1217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.699956][ T1217] usb 5-1: config 0 descriptor?? [ 184.715762][ T7991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 184.797171][ T5271] 8021q: adding VLAN 0 to HW filter on device eth23 [ 184.817947][ T8016] netlink: 16 bytes leftover after parsing attributes in process `syz.9.399'. [ 184.845317][ T58] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.876209][ T7805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.898572][ T7805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.932682][ T7805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 184.960271][ T1217] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 184.968008][ T7805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.976135][ T1217] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 184.988640][ T1217] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 184.995809][ T1217] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 185.017393][ T1217] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 185.025036][ T1217] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 185.032159][ T1217] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 185.040794][ T1217] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 185.048339][ T1217] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 185.055335][ T1217] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 185.095269][ T1217] asus 0003:0B05:1ABE.0002: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.4-1/input0 [ 185.143798][ T9] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 185.173398][ T5698] usb 5-1: USB disconnect, device number 18 [ 185.227313][ T5620] Bluetooth: hci5: command tx timeout [ 185.335481][ T9] usb 10-1: config 0 has an invalid interface number: 214 but max is 0 [ 185.359018][ T9] usb 10-1: config 0 has no interface number 0 [ 185.399843][ T9] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 185.489527][ T9] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 185.522756][ T9] usb 10-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 185.562392][ T9] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 185.591402][ T58] bridge_slave_1: left allmulticast mode [ 185.598033][ T9] usb 10-1: Manufacturer: syz [ 185.607728][ T58] bridge_slave_1: left promiscuous mode [ 185.613329][ T9] usb 10-1: SerialNumber: syz [ 185.623570][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.634783][ T9] usb 10-1: config 0 descriptor?? [ 185.650914][ T58] bridge_slave_0: left allmulticast mode [ 185.668238][ T58] bridge_slave_0: left promiscuous mode [ 185.677006][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.779551][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 185.791167][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 185.880274][ T9] usbtouchscreen 10-1:0.214: Failed to read FW rev: 0 [ 185.911225][ T9] usbtouchscreen 10-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 185.923572][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.6.403'. [ 185.952271][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.403'. [ 185.968131][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.978572][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.989660][ T58] bond0 (unregistering): Released all slaves [ 186.008893][ T8055] kernel profiling enabled (shift: 63) [ 186.048148][ T8055] profiling shift: 63 too large [ 186.141908][ T803] usb 10-1: USB disconnect, device number 5 [ 186.184038][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 186.197563][ T7805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.219123][ T7805] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.295816][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.302929][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.367378][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.374571][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.384635][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 186.394880][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 186.412093][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 186.423009][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 186.445984][ T24] usb 5-1: Product: syz [ 186.456320][ T24] usb 5-1: Manufacturer: syz [ 186.466486][ T24] usb 5-1: SerialNumber: syz [ 186.481756][ T24] usb 5-1: config 0 descriptor?? [ 186.494804][ T7982] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.503264][ T24] usb 5-1: selecting invalid altsetting 0 [ 186.511150][ T7982] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.527450][ T7982] bridge_slave_0: entered allmulticast mode [ 186.547189][ T7982] bridge_slave_0: entered promiscuous mode [ 186.571604][ T58] hsr_slave_0: left promiscuous mode [ 186.587656][ T58] hsr_slave_1: left promiscuous mode [ 186.600120][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.621339][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.646482][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.677030][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.733025][ T58] veth1_macvtap: left promiscuous mode [ 186.749574][ T58] veth0_macvtap: left promiscuous mode [ 186.769482][ T58] veth1_vlan: left promiscuous mode [ 186.777321][ T58] veth0_vlan: left promiscuous mode [ 186.922434][ T30] audit: type=1400 audit(2000000054.980:574): avc: denied { bind } for pid=8083 comm="syz.9.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 187.080374][ T803] usb 5-1: USB disconnect, device number 19 [ 187.129740][ T58] team0 (unregistering): Port device team_slave_1 removed [ 187.145790][ T58] team0 (unregistering): Port device team_slave_0 removed [ 187.227473][ T7982] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.235934][ T7982] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.243089][ T7982] bridge_slave_1: entered allmulticast mode [ 187.253632][ T7982] bridge_slave_1: entered promiscuous mode [ 187.274938][ T5271] 8021q: adding VLAN 0 to HW filter on device eth24 [ 187.304514][ T5616] Bluetooth: hci5: command tx timeout [ 187.375286][ T7982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.401489][ T7982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.478379][ T7982] team0: Port device team_slave_0 added [ 187.491436][ T7982] team0: Port device team_slave_1 added [ 187.526250][ T30] audit: type=1400 audit(2000000055.590:575): avc: denied { read write } for pid=8098 comm="syz.6.408" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 187.562078][ T30] audit: type=1400 audit(2000000055.590:576): avc: denied { open } for pid=8098 comm="syz.6.408" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 187.586660][ T30] audit: type=1400 audit(2000000055.620:577): avc: denied { ioctl } for pid=8098 comm="syz.6.408" path="/dev/uhid" dev="devtmpfs" ino=1272 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 187.629926][ T7982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.647410][ T7982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.715269][ T7982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.750227][ T7982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.766157][ T7982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.818855][ T7982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.923043][ T7982] hsr_slave_0: entered promiscuous mode [ 187.944667][ T7982] hsr_slave_1: entered promiscuous mode [ 187.968233][ T7982] debugfs: 'hsr0' already exists in 'hsr' [ 187.993556][ T7982] Cannot create hsr debugfs directory [ 188.167092][ T8124] CIFS: VFS: UNC: path must begin with // or \\ [ 188.183014][ T8124] CIFS: VFS: Malformed UNC in devname [ 188.333940][ T30] audit: type=1400 audit(2000000056.390:578): avc: denied { add_name } for pid=8123 comm="syz.9.411" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.364399][ T8131] syzkaller0: entered promiscuous mode [ 188.370684][ T8124] o2cb: This node has not been configured. [ 188.386323][ T8131] syzkaller0: entered allmulticast mode [ 188.398544][ T8124] o2cb: Cluster check failed. Fix errors before retrying. [ 188.407576][ T30] audit: type=1400 audit(2000000056.430:579): avc: denied { create } for pid=8123 comm="syz.9.411" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 188.430426][ T8124] (syz.9.411,8124,1):user_dlm_register:674 ERROR: status = -22 [ 188.446905][ T8124] (syz.9.411,8124,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 188.461097][ T30] audit: type=1400 audit(2000000056.430:580): avc: denied { associate } for pid=8123 comm="syz.9.411" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 188.489927][ T8131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8131 comm=syz.9.411 [ 188.818896][ T30] audit: type=1400 audit(2000000056.880:581): avc: denied { append } for pid=8139 comm="syz.6.412" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 188.842546][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.842597][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.181413][ T30] audit: type=1326 audit(2000000057.220:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.9.413" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35e79cdd9 code=0x7ffc0000 [ 189.296278][ T30] audit: type=1326 audit(2000000057.220:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.9.413" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35e79cdd9 code=0x7ffc0000 [ 189.405501][ T5616] Bluetooth: hci5: command tx timeout [ 189.430481][ T8151] netlink: 28 bytes leftover after parsing attributes in process `syz.9.413'. [ 189.439536][ T8151] netlink: 28 bytes leftover after parsing attributes in process `syz.9.413'. [ 189.450964][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.9.413'. [ 189.459915][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.9.413'. [ 189.490271][ T7805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.786968][ T7805] veth0_vlan: entered promiscuous mode [ 189.879080][ T7805] veth1_vlan: entered promiscuous mode [ 190.003785][ T8176] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in; [ 190.003785][ T8176] program syz.6.415 not setting count and/or reply_len properly [ 190.094953][ T8176] openvswitch: netlink: IPv6 tunnel dst address is zero [ 190.174602][ T8180] 9pnet_virtio: no channels available for device syz [ 190.255254][ T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 190.264514][ T7805] veth0_macvtap: entered promiscuous mode [ 190.469447][ T7805] veth1_macvtap: entered promiscuous mode [ 190.472581][ T8181] input: syz0 as /devices/virtual/input/input10 [ 190.479054][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 190.657052][ T24] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 190.702265][ T24] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 190.747718][ T24] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 190.784029][ T24] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 190.803042][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 190.819108][ T24] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 190.843022][ T24] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 190.864820][ T24] usb 10-1: Product: syz [ 190.874907][ T24] usb 10-1: Manufacturer: syz [ 190.904169][ T24] usb 10-1: SerialNumber: syz [ 190.912498][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.941641][ T24] usb 10-1: config 0 descriptor?? [ 190.957064][ T24] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 190.965302][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.979948][ T24] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 190.995414][ T7096] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.017172][ T7982] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.029884][ T7982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 191.039529][ T7096] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.049145][ T8191] 8021q: VLANs not supported on wg1 [ 191.060238][ T7982] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.076524][ T7982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.085202][ T7096] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.108071][ T7982] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.121036][ T7982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 191.131590][ T7982] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.140447][ T7982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.147742][ T7096] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.335640][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.367039][ T5713] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 191.378678][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.442562][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.456586][ T7982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.458782][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.470584][ T5616] Bluetooth: hci5: command tx timeout [ 191.483126][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.9.417'. [ 191.533807][ T5713] usb 5-1: Using ep0 maxpacket: 32 [ 191.564937][ T5713] usb 5-1: config 0 has no interfaces? [ 191.582749][ T5713] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 191.593322][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.599726][ T7982] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.612112][ T5713] usb 5-1: Product: syz [ 191.618353][ T5713] usb 5-1: Manufacturer: syz [ 191.623220][ T5713] usb 5-1: SerialNumber: syz [ 191.625044][ T24] usb 10-1: USB disconnect, device number 6 [ 191.640092][ T5713] usb 5-1: config 0 descriptor?? [ 191.650989][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.658161][ T5882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.685758][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.692937][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.701653][ T24] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 191.716606][ T8216] loop6: detected capacity change from 0 to 2640 [ 191.735105][ T8216] buffer_io_error: 45 callbacks suppressed [ 191.735119][ T8216] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.764190][ T8216] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.779833][ T8216] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.804356][ T8216] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.827709][ T8216] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.846871][ T8216] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.888643][ T8216] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.914548][ T8216] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.932203][ T8216] ldm_validate_partition_table(): Disk read failed. [ 191.950486][ T8216] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.966473][ T8216] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.975952][ T8216] Dev loop6: unable to read RDB block 0 [ 191.982549][ T8216] loop6: unable to read partition table [ 191.991611][ T8216] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 192.150499][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 192.150524][ T30] audit: type=1400 audit(2000000060.210:588): avc: denied { read append } for pid=8232 comm="syz.2.420" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 192.208126][ T30] audit: type=1400 audit(2000000060.210:589): avc: denied { open } for pid=8232 comm="syz.2.420" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 192.261732][ T30] audit: type=1400 audit(2000000060.250:590): avc: denied { ioctl } for pid=8232 comm="syz.2.420" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x563f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 192.594059][ T5615] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 192.686983][ T7982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.740525][ T7982] veth0_vlan: entered promiscuous mode [ 192.762260][ T5615] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 192.772070][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.783570][ T7982] veth1_vlan: entered promiscuous mode [ 192.790326][ T5615] usb 3-1: Product: syz [ 192.800506][ T5615] usb 3-1: Manufacturer: syz [ 192.812669][ T5615] usb 3-1: SerialNumber: syz [ 192.834858][ T5615] usb 3-1: config 0 descriptor?? [ 192.841265][ T7982] veth0_macvtap: entered promiscuous mode [ 192.851902][ T5615] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 192.868324][ T5615] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 192.881193][ T7982] veth1_macvtap: entered promiscuous mode [ 192.918000][ T5615] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 192.929594][ T7982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.944070][ T7982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.965242][ T5882] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.986089][ T5882] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.007635][ T5882] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.024536][ T5712] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 193.062935][ T5882] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.073713][ T5713] usb 3-1: USB disconnect, device number 2 [ 193.138974][ T7096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.153305][ T7096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.187673][ T5882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.196264][ T5712] usb 10-1: Using ep0 maxpacket: 16 [ 193.203486][ T5882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.216094][ T5712] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.245479][ T5712] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.256604][ T5712] usb 10-1: config 0 interface 0 has no altsetting 0 [ 193.270660][ T5712] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 193.309148][ T5712] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.322558][ T5712] usb 10-1: config 0 descriptor?? [ 193.711906][ T8292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.426'. [ 193.761691][ T5712] hid_parser_main: 453 callbacks suppressed [ 193.761721][ T5712] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 193.810100][ T5712] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 193.826465][ T5712] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 193.845549][ T5712] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 193.875145][ T5712] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 193.904195][ T8300] netlink: 48 bytes leftover after parsing attributes in process `syz.2.427'. [ 193.921254][ T5712] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 193.975084][ T5726] usb 5-1: USB disconnect, device number 20 [ 194.150800][ T8307] loop5: detected capacity change from 0 to 7 [ 194.181018][ T8307] ldm_validate_partition_table(): Disk read failed. [ 194.208617][ T8307] Dev loop5: unable to read RDB block 0 [ 194.334122][ T8311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.428'. [ 194.367999][ T8307] loop5: unable to read partition table [ 194.408440][ T8307] loop5: partition table beyond EOD, truncated [ 194.445838][ T30] audit: type=1400 audit(2000000062.500:591): avc: denied { write } for pid=8306 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.481509][ T8307] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 194.858690][ T29] usb 10-1: USB disconnect, device number 7 [ 195.191555][ T30] audit: type=1400 audit(2000000063.250:592): avc: denied { accept } for pid=8337 comm="syz.4.431" lport=37150 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 195.318728][ T30] audit: type=1400 audit(2000000063.290:593): avc: denied { setopt } for pid=8337 comm="syz.4.431" lport=37150 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 195.841778][ T30] audit: type=1400 audit(2000000063.900:594): avc: denied { connect } for pid=8341 comm="syz.9.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.863547][ T30] audit: type=1400 audit(2000000063.900:595): avc: denied { name_bind } for pid=8341 comm="syz.9.432" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 195.891786][ T30] audit: type=1400 audit(2000000063.900:596): avc: denied { setopt } for pid=8341 comm="syz.9.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.027949][ T8344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.149080][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.434'. [ 196.429730][ T8346] veth0_macvtap: left promiscuous mode [ 196.632432][ T8360] FAULT_INJECTION: forcing a failure. [ 196.632432][ T8360] name fail_futex, interval 1, probability 0, space 0, times 0 [ 196.645798][ T8360] CPU: 1 UID: 0 PID: 8360 Comm: syz.2.436 Not tainted syzkaller #0 PREEMPT(full) [ 196.645813][ T8360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.645820][ T8360] Call Trace: [ 196.645824][ T8360] [ 196.645828][ T8360] dump_stack_lvl+0x100/0x190 [ 196.645847][ T8360] should_fail_ex.cold+0x5/0xa [ 196.645865][ T8360] should_fail_futex+0x4c/0x60 [ 196.645889][ T8360] futex_lock_pi_atomic+0xe7/0xaf0 [ 196.645910][ T8360] futex_requeue+0xb76/0x20d0 [ 196.645934][ T8360] ? __pfx_futex_requeue+0x10/0x10 [ 196.645947][ T8360] ? get_pid_task+0x106/0x250 [ 196.645963][ T8360] ? find_held_lock+0x2b/0x80 [ 196.645973][ T8360] ? ksys_write+0x190/0x250 [ 196.645984][ T8360] ? ksys_write+0x190/0x250 [ 196.645997][ T8360] do_futex+0x2af/0x350 [ 196.646013][ T8360] ? __pfx_do_futex+0x10/0x10 [ 196.646032][ T8360] __x64_sys_futex+0x34f/0x4d0 [ 196.646048][ T8360] ? fput+0x79/0x100 [ 196.646061][ T8360] ? __pfx___x64_sys_futex+0x10/0x10 [ 196.646076][ T8360] ? ksys_write+0x1ac/0x250 [ 196.646087][ T8360] ? __pfx_ksys_write+0x10/0x10 [ 196.646099][ T8360] ? rcu_is_watching+0x12/0xc0 [ 196.646117][ T8360] do_syscall_64+0x10b/0xf80 [ 196.646129][ T8360] ? clear_bhb_loop+0x40/0x90 [ 196.646141][ T8360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.646152][ T8360] RIP: 0033:0x7f8cf5f9cdd9 [ 196.646162][ T8360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.646172][ T8360] RSP: 002b:00007f8cf6e44028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 196.646183][ T8360] RAX: ffffffffffffffda RBX: 00007f8cf6216180 RCX: 00007f8cf5f9cdd9 [ 196.646189][ T8360] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 196.646195][ T8360] RBP: 00007f8cf6e44090 R08: 0000200000048000 R09: 0000000000000000 [ 196.646201][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.646207][ T8360] R13: 00007f8cf6216218 R14: 00007f8cf6216180 R15: 00007ffe4a5f6fc8 [ 196.646220][ T8360] [ 197.578409][ T30] audit: type=1800 audit(2000000065.630:597): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.439" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 197.958943][ T8375] vlan2: entered promiscuous mode [ 197.965298][ T8375] bridge0: entered promiscuous mode [ 198.093077][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 198.102366][ T8379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.110315][ T8379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.121254][ T8379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.134846][ T8379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.188726][ T30] audit: type=1400 audit(2000000066.250:598): avc: denied { set_context_mgr } for pid=8382 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 198.210026][ T8384] binder: 8382:8384 ioctl c018620c 200000000240 returned -22 [ 198.474748][ T8394] random: crng reseeded on system resumption [ 198.474753][ T30] audit: type=1400 audit(2000000066.540:599): avc: denied { write } for pid=8393 comm="syz.3.444" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 198.533384][ T8395] netlink: 'syz.4.442': attribute type 4 has an invalid length. [ 198.556546][ T8395] netlink: 'syz.4.442': attribute type 4 has an invalid length. [ 198.708206][ T8403] IPVS: persistence engine module ip_vs_pe_ not found [ 198.726083][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 198.745040][ T8403] netlink: 244 bytes leftover after parsing attributes in process `syz.3.445'. [ 198.925536][ T8412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.369069][ T8418] syzkaller1: entered promiscuous mode [ 199.389605][ T30] audit: type=1400 audit(2000000067.450:600): avc: denied { getopt } for pid=8419 comm="syz.9.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.392561][ T8418] syzkaller1: entered allmulticast mode [ 199.428416][ T8424] Cannot find del_set index 2 as target [ 200.066326][ T8446] fuse: Bad value for 'fd' [ 200.703986][ T5713] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 200.729841][ T30] audit: type=1400 audit(2000000068.780:601): avc: denied { setopt } for pid=8460 comm="syz.9.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 200.754953][ T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 200.809304][ T8469] netlink: 'syz.9.456': attribute type 21 has an invalid length. [ 200.906948][ T5713] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 200.924584][ T5713] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.939070][ T5713] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.956313][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 200.970459][ T5713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.973750][ T29] usb 4-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config [ 201.006179][ T5713] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.016552][ T5713] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.019157][ T29] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 201.041585][ T5713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.052385][ T5713] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.078899][ T5713] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.090242][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 100, changing to 10 [ 201.109621][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25022, setting to 1024 [ 201.250644][ T5713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.262923][ T5713] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.266940][ T29] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 201.288113][ T5713] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.301092][ T5713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.324543][ T29] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 201.330079][ T5713] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.346505][ T29] usb 4-1: Product: syz [ 201.362930][ T29] usb 4-1: Manufacturer: syz [ 201.369793][ T5713] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.388466][ T5713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.396315][ T5713] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.397767][ T29] usb 4-1: SerialNumber: syz [ 201.433042][ T5713] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.445566][ T5713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.446837][ T29] usb 4-1: config 0 descriptor?? [ 201.462449][ T5713] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.490405][ T5713] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.503352][ T5713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.521464][ T5713] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.553276][ T5713] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.581171][ T5713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.591655][ T5713] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 201.617898][ T5713] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 201.626560][ T29] rc_core: IR keymap rc-imon-rsc not found [ 201.626580][ T29] Registered IR keymap rc-empty [ 201.627528][ T29] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 201.680175][ T5713] usb 3-1: Product: syz [ 201.689289][ T5713] usb 3-1: Manufacturer: syz [ 201.699281][ T5713] usb 3-1: SerialNumber: syz [ 201.711679][ T29] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 201.759054][ T5713] usb 3-1: config 0 descriptor?? [ 201.798813][ T5713] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 201.822495][ T29] usb 4-1: USB disconnect, device number 3 [ 202.139947][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 202.140291][ T29] usb 3-1: USB disconnect, device number 3 [ 202.179903][ T29] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 203.039393][ T8532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.461'. [ 203.192633][ T30] audit: type=1400 audit(2000000071.250:602): avc: denied { read } for pid=8531 comm="syz.2.461" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 203.257818][ T30] audit: type=1400 audit(2000000071.250:603): avc: denied { open } for pid=8531 comm="syz.2.461" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 203.328215][ T30] audit: type=1400 audit(2000000071.250:604): avc: denied { ioctl } for pid=8531 comm="syz.2.461" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x7ab scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 203.357055][ T30] audit: type=1400 audit(2000000071.420:605): avc: denied { ioctl } for pid=8539 comm="syz.3.463" path="socket:[22423]" dev="sockfs" ino=22423 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 203.409792][ T30] audit: type=1400 audit(2000000071.460:606): avc: denied { write } for pid=8539 comm="syz.3.463" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 203.527087][ T30] audit: type=1400 audit(2000000071.570:607): avc: denied { accept } for pid=8546 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 203.629831][ T30] audit: type=1400 audit(2000000071.680:608): avc: denied { ioctl } for pid=8546 comm="syz.4.464" path="socket:[22980]" dev="sockfs" ino=22980 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 204.086536][ T8561] syz_tun: entered allmulticast mode [ 204.131612][ T8561] dvmrp8: entered allmulticast mode [ 204.142283][ T30] audit: type=1400 audit(2000000072.210:609): avc: denied { accept } for pid=8558 comm="syz.2.466" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.213926][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.221602][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.618057][ T8563] vlan2: left promiscuous mode [ 204.624174][ T8563] bridge0: left promiscuous mode [ 204.647213][ T8558] syz_tun: left allmulticast mode [ 204.669681][ T58] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.692411][ T58] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.712541][ T58] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.730557][ T58] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.019984][ T8593] capability: warning: `syz.9.472' uses 32-bit capabilities (legacy support in use) [ 205.676458][ T8585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.920148][ T8610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.475'. [ 206.991924][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.007651][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.015767][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.031746][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.040171][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.564669][ T8643] binder: 8642:8643 ioctl c0306201 0 returned -14 [ 207.574403][ T30] audit: type=1400 audit(2000000075.640:610): avc: denied { call } for pid=8642 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 207.581622][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 207.690016][ T5882] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.906043][ T5712] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 208.671358][ T8664] netlink: 'syz.9.485': attribute type 10 has an invalid length. [ 208.815485][ T8665] netlink: 14 bytes leftover after parsing attributes in process `syz.9.485'. [ 209.002750][ T5712] usb 5-1: Using ep0 maxpacket: 16 [ 209.060984][ T8668] netlink: 36 bytes leftover after parsing attributes in process `syz.3.486'. [ 209.061227][ T8668] nbd: illegal input index -67109120 [ 209.125193][ T5712] usb 5-1: config index 0 descriptor too short (expected 804, got 36) [ 209.125223][ T5712] usb 5-1: config 0 has an invalid interface number: 181 but max is 0 [ 209.125241][ T5712] usb 5-1: config 0 has no interface number 0 [ 209.125285][ T5712] usb 5-1: config 0 interface 181 altsetting 36 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.125308][ T5712] usb 5-1: config 0 interface 181 altsetting 36 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.125329][ T5712] usb 5-1: config 0 interface 181 altsetting 36 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.125351][ T5712] usb 5-1: config 0 interface 181 has no altsetting 0 [ 209.125379][ T5712] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 209.125397][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.164217][ T5620] Bluetooth: hci1: command tx timeout [ 209.363806][ T5712] usb 5-1: config 0 descriptor?? [ 209.437345][ T5882] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.474096][ T8664] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.529178][ T8664] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 209.566166][ T8665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.584293][ T8665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.617646][ T8665] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 209.633185][ T8665] bond0 (unregistering): Released all slaves [ 209.673473][ T5882] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.789154][ T5712] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 209.796490][ T5712] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 209.802219][ T5882] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.804173][ T5712] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 209.804889][ T5712] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 209.804913][ T5712] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 209.804933][ T5712] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 209.804953][ T5712] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 209.804974][ T5712] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 209.804994][ T5712] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 209.805015][ T5712] uclogic 0003:5543:0522.0004: unknown main item tag 0x0 [ 209.807433][ T5712] uclogic 0003:5543:0522.0004: hidraw0: USB HID vea.f1 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input181 [ 209.888078][ T29] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 209.954482][ T8685] input: syz0 as /devices/virtual/input/input12 [ 210.063833][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 210.068497][ T803] usb 5-1: USB disconnect, device number 21 [ 210.081859][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.094660][ T29] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 210.138384][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.323380][ T29] usb 3-1: config 0 descriptor?? [ 210.449998][ T5615] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 210.589138][ T29] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 210.619277][ T8694] loop8: detected capacity change from 0 to 8 [ 210.623801][ T5615] usb 10-1: device descriptor read/64, error -71 [ 210.626768][ T8694] Dev loop8: unable to read RDB block 8 [ 210.645977][ T8694] loop8: unable to read partition table [ 210.661167][ T8694] loop8: partition table beyond EOD, truncated [ 210.669636][ T8694] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 210.885067][ T5615] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 210.932388][ T8703] [U]  [ 211.064222][ T5615] usb 10-1: device descriptor read/64, error -71 [ 211.136842][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.168061][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.193897][ T8613] bridge_slave_0: entered allmulticast mode [ 211.204178][ T5615] usb usb10-port1: attempt power cycle [ 211.216809][ T8613] bridge_slave_0: entered promiscuous mode [ 211.224515][ T5620] Bluetooth: hci1: command tx timeout [ 211.293434][ T8613] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.303438][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.310770][ T8613] bridge_slave_1: entered allmulticast mode [ 211.317742][ T8613] bridge_slave_1: entered promiscuous mode [ 211.336155][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 211.349049][ T5790] usb 3-1: USB disconnect, device number 4 [ 211.358783][ T8613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.377422][ T5882] bridge_slave_1: left allmulticast mode [ 211.394495][ T5882] bridge_slave_1: left promiscuous mode [ 211.405051][ T8214] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 211.408733][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.428097][ T5882] bridge_slave_0: left allmulticast mode [ 211.435307][ T5882] bridge_slave_0: left promiscuous mode [ 211.442754][ T8731] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.495'. [ 211.458649][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.569042][ T5615] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 211.591613][ T8214] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.615785][ T8214] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.615830][ T5615] usb 10-1: device descriptor read/8, error -71 [ 211.635859][ T8214] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 211.658211][ T8214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 211.679116][ T8214] usb 5-1: SerialNumber: syz [ 211.702490][ T8738] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 211.713440][ T8738] block device autoloading is deprecated and will be removed. [ 211.893736][ T5615] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 211.898229][ T8721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.912155][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.922789][ T8721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.938076][ T5615] usb 10-1: device descriptor read/8, error -71 [ 211.954276][ T8214] usb 5-1: 0:2 : does not exist [ 211.959590][ T8214] usb 5-1: unit 4 not found! [ 211.969211][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.992614][ T5882] bond0 (unregistering): Released all slaves [ 212.020347][ T8214] usb 5-1: USB disconnect, device number 22 [ 212.049071][ T8613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.065661][ T5615] usb usb10-port1: unable to enumerate USB device [ 212.102591][ T8750] bridge_slave_0 (unregistering): left allmulticast mode [ 212.119917][ T8750] bridge_slave_0 (unregistering): left promiscuous mode [ 212.131528][ T8750] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.355735][ T8613] team0: Port device team_slave_0 added [ 212.383231][ T8613] team0: Port device team_slave_1 added [ 212.470823][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.490561][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.519631][ T8613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.532206][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.561186][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.629289][ T8613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.663993][ T5712] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 212.673569][ T5712] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 212.946357][ T30] audit: type=1326 audit(2000000081.010:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.9.509" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35e79cdd9 code=0x7ffc0000 [ 212.977600][ T30] audit: type=1326 audit(2000000081.010:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.9.509" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35e79cdd9 code=0x7ffc0000 [ 213.023233][ T30] audit: type=1326 audit(2000000081.010:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.9.509" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7ff35e79cdd9 code=0x7ffc0000 [ 213.104872][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.9.509'. [ 213.156122][ T8613] hsr_slave_0: entered promiscuous mode [ 213.212409][ T30] audit: type=1326 audit(2000000081.010:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.9.509" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35e79cdd9 code=0x7ffc0000 [ 213.313409][ T5620] Bluetooth: hci1: command tx timeout [ 213.566516][ T30] audit: type=1326 audit(2000000081.010:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.9.509" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35e79cdd9 code=0x7ffc0000 [ 213.594808][ T8613] hsr_slave_1: entered promiscuous mode [ 213.601029][ T8613] debugfs: 'hsr0' already exists in 'hsr' [ 213.606810][ T8613] Cannot create hsr debugfs directory [ 213.613816][ T30] audit: type=1326 audit(2000000081.040:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.9.509" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff35e79cdd9 code=0x7ffc0000 [ 213.660439][ T30] audit: type=1326 audit(2000000081.040:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.9.509" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35e79cdd9 code=0x7ffc0000 [ 213.689860][ T30] audit: type=1326 audit(2000000081.040:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.9.509" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35e79cdd9 code=0x7ffc0000 [ 213.722509][ T30] audit: type=1326 audit(2000000081.040:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.9.509" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff35e79cdd9 code=0x7ffc0000 [ 213.822163][ T30] audit: type=1400 audit(2000000081.680:620): avc: denied { write } for pid=8770 comm="syz.4.506" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 214.032886][ T8796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8796 comm=syz.9.511 [ 214.352011][ T8802] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 214.412160][ T8807] vlan2: entered allmulticast mode [ 214.419682][ T8807] bond0: entered allmulticast mode [ 214.461082][ T8807] gretap1: entered allmulticast mode [ 214.565313][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 214.848930][ T8822] netlink: 'syz.4.517': attribute type 1 has an invalid length. [ 214.952372][ T8822] bond1: entered promiscuous mode [ 214.973154][ T8822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.018142][ T8826] bond1: (slave bridge2): making interface the new active one [ 215.025864][ T8826] bridge2: entered promiscuous mode [ 215.032359][ T8826] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 215.066538][ T5712] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 215.066887][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout [ 215.075417][ T5712] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 215.166683][ T8829] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 215.236117][ T8829] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 215.394064][ T5620] Bluetooth: hci1: command tx timeout [ 215.653599][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 216.502147][ T8613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.651262][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.671427][ T8613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.699064][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.710826][ T8613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.734045][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.753114][ T8613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.782733][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.968427][ T8613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.987517][ T8613] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.998873][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.006027][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.126507][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.133730][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.517175][ T8613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.577198][ T8613] veth0_vlan: entered promiscuous mode [ 217.593447][ T8613] veth1_vlan: entered promiscuous mode [ 217.636413][ T8613] veth0_macvtap: entered promiscuous mode [ 217.647171][ T8613] veth1_macvtap: entered promiscuous mode [ 217.668384][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.685974][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.704013][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout [ 217.708884][ T3381] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.711306][ T5712] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 217.730775][ T3381] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.731260][ T5712] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 217.758114][ T3381] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.783425][ T3381] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.793960][ T5620] Bluetooth: hci5: command 0x0c1a tx timeout [ 219.800483][ T5712] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 219.806723][ T5712] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 220.049085][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 220.290092][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 220.526995][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 220.762088][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 221.874376][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout [ 221.880832][ T5712] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 221.887058][ T5712] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 221.978062][ T5882] hsr_slave_0: left promiscuous mode [ 221.984557][ T5882] hsr_slave_1: left promiscuous mode [ 221.990535][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.008639][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.144638][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.169877][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.218103][ T5882] veth1_macvtap: left promiscuous mode [ 222.226441][ T5882] veth0_macvtap: left promiscuous mode [ 222.232428][ T5882] veth1_vlan: left promiscuous mode [ 222.238092][ T5882] veth0_vlan: left promiscuous mode [ 222.484999][ T5882] team0 (unregistering): Port device team_slave_1 removed [ 222.512988][ T5882] team0 (unregistering): Port device team_slave_0 removed [ 222.581635][ T9182] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in; [ 222.581635][ T9182] program syz.3.523 not setting count and/or reply_len properly [ 222.641451][ T9182] openvswitch: netlink: IPv6 tunnel dst address is zero [ 222.743053][ T9181] 9pnet_virtio: no channels available for device syz [ 222.756398][ T7096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.789990][ T7096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.876839][ T9191] netlink: 72 bytes leftover after parsing attributes in process `syz.4.525'. [ 223.399776][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 223.399792][ T30] audit: type=1326 audit(2000000091.460:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9186 comm="syz.2.527" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf5f9cdd9 code=0x7ffc0000 [ 223.484912][ T30] audit: type=1326 audit(2000000091.460:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9186 comm="syz.2.527" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf5f9cdd9 code=0x7ffc0000 [ 223.486840][ T7096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.583807][ T9197] overlayfs: failed to resolve './file1': -2 [ 223.611689][ T7096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.700347][ T30] audit: type=1400 audit(2000000091.510:633): avc: denied { mount } for pid=9187 comm="syz.9.526" name="/" dev="hugetlbfs" ino=25844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 224.181100][ T5882] IPVS: stop unused estimator thread 0... [ 224.513112][ T9213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9213 comm=syz.4.530 [ 224.823035][ T30] audit: type=1400 audit(2000000092.760:634): avc: denied { accept } for pid=9209 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 225.009383][ T9225] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.441077][ T9240] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 225.474158][ T9230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.533'. [ 225.663094][ T9238] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in; [ 225.663094][ T9238] program syz.1.534 not setting count and/or reply_len properly [ 225.714038][ T5712] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 225.757751][ T9238] openvswitch: netlink: IPv6 tunnel dst address is zero [ 225.863921][ T5712] usb 10-1: device descriptor read/64, error -71 [ 225.891591][ T9245] 9pnet_virtio: no channels available for device syz [ 226.124494][ T5712] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 226.145905][ T30] audit: type=1400 audit(2000000094.210:635): avc: denied { write } for pid=9266 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 226.166560][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 226.263734][ T5712] usb 10-1: device descriptor read/64, error -71 [ 226.263735][ T5615] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 226.446059][ T5712] usb usb10-port1: attempt power cycle [ 226.517499][ T5615] usb 5-1: Using ep0 maxpacket: 8 [ 226.639761][ T5615] usb 5-1: unable to get BOS descriptor or descriptor too short [ 226.656202][ T5615] usb 5-1: config 2 has an invalid interface number: 216 but max is 0 [ 226.687460][ T5615] usb 5-1: config 2 has no interface number 0 [ 226.717925][ T5615] usb 5-1: config 2 interface 216 has no altsetting 0 [ 226.761963][ T5615] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=6c.76 [ 226.802121][ T5615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.812643][ T5615] usb 5-1: Product: syz [ 226.819164][ T5615] usb 5-1: Manufacturer: ဇ [ 226.825480][ T5615] usb 5-1: SerialNumber: syz [ 226.994951][ T5712] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 227.024227][ T5712] usb 10-1: device descriptor read/8, error -71 [ 227.327232][ T5712] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 228.173689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 228.176320][ T30] audit: type=1400 audit(2000000096.240:636): avc: denied { map } for pid=9263 comm="syz.4.542" path="socket:[25978]" dev="sockfs" ino=25978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.227922][ T30] audit: type=1400 audit(2000000096.240:637): avc: denied { accept } for pid=9263 comm="syz.4.542" path="socket:[25978]" dev="sockfs" ino=25978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.253121][ T5712] usb 10-1: device descriptor read/8, error -71 [ 228.364042][ T5712] usb usb10-port1: unable to enumerate USB device [ 228.794781][ T30] audit: type=1400 audit(2000000096.860:638): avc: denied { connect } for pid=9306 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.921485][ T30] audit: type=1400 audit(2000000096.880:639): avc: denied { mount } for pid=9306 comm="syz.2.550" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 229.085166][ T9314] netlink: 76 bytes leftover after parsing attributes in process `syz.2.550'. [ 229.227772][ T9316] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 229.240607][ T30] audit: type=1400 audit(2000000097.280:640): avc: denied { mounton } for pid=9306 comm="syz.2.550" path="/37/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 229.707659][ T30] audit: type=1400 audit(2000000097.770:641): avc: denied { unmount } for pid=7805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 229.772341][ T9320] openvswitch: netlink: IPv6 tunnel dst address is zero [ 229.836975][ T9320] 9pnet_virtio: no channels available for device syz [ 229.956376][ T5615] pcwd_usb: The device isn't a Human Interface Device [ 229.978587][ T5615] usb 5-1: USB disconnect, device number 23 [ 230.259357][ T9326] openvswitch: netlink: IPv6 tunnel dst address is zero [ 230.369390][ T9326] 9pnet_virtio: no channels available for device syz [ 233.608330][ T9426] trusted_key: encrypted_key: insufficient parameters specified [ 233.658900][ T30] audit: type=1400 audit(2000000101.720:642): avc: denied { name_bind } for pid=9423 comm="syz.4.557" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 235.442534][ T30] audit: type=1400 audit(2000000103.500:643): avc: denied { read } for pid=9433 comm="syz.4.559" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 235.465754][ T30] audit: type=1400 audit(2000000103.500:644): avc: denied { open } for pid=9433 comm="syz.4.559" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 237.176696][ T9443] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 239.252566][ T30] audit: type=1400 audit(2000000107.310:645): avc: denied { bind } for pid=9462 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.723739][ T5698] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 239.877807][ T5698] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 239.886986][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.897261][ T5698] usb 5-1: config 0 descriptor?? [ 239.904727][ T5698] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 240.308887][ T5698] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 240.719975][ T9466] comedi comedi3: unsupported base address 0x0 [ 240.738338][ T5698] gspca_cpia1: usb_control_msg 02, error -71 [ 240.757227][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.769273][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.774516][ T5698] gspca_cpia1: usb_control_msg 05, error -71 [ 240.782794][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.790877][ T5698] cpia1 5-1:0.0: unexpected systemstate: 00 [ 240.798964][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.805539][ T5698] usb 5-1: USB disconnect, device number 24 [ 240.812277][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.867024][ T30] audit: type=1400 audit(2000000108.930:646): avc: denied { sys_module } for pid=9468 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 241.244528][ T9468] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.251685][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.259002][ T9468] bridge_slave_0: entered allmulticast mode [ 241.266483][ T9468] bridge_slave_0: entered promiscuous mode [ 241.330435][ T9468] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.341226][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.349412][ T9468] bridge_slave_1: entered allmulticast mode [ 241.359864][ T9468] bridge_slave_1: entered promiscuous mode [ 241.394721][ T9468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.412909][ T9468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.889031][ T9468] team0: Port device team_slave_0 added [ 241.939152][ T9468] team0: Port device team_slave_1 added [ 242.339580][ T9468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.356005][ T9468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.385671][ T9468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.397970][ T9468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.409987][ T9468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.436631][ T9468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.479005][ T58] bridge_slave_1: left allmulticast mode [ 242.499052][ T58] bridge_slave_1: left promiscuous mode [ 242.524493][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.641654][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.660338][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.680595][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.751520][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.769802][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.903963][ T5620] Bluetooth: hci4: command tx timeout [ 242.924409][ T9499] openvswitch: netlink: IPv6 tunnel dst address is zero [ 243.000383][ T9499] 9pnet_virtio: no channels available for device syz [ 243.262903][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.285694][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.296402][ T58] bond0 (unregistering): Released all slaves [ 243.373275][ T9468] hsr_slave_0: entered promiscuous mode [ 243.380270][ T9468] hsr_slave_1: entered promiscuous mode [ 243.410715][ T9468] debugfs: 'hsr0' already exists in 'hsr' [ 243.433755][ T9468] Cannot create hsr debugfs directory [ 243.622323][ T58] hsr_slave_0: left promiscuous mode [ 243.629799][ T58] hsr_slave_1: left promiscuous mode [ 243.820752][ T58] team0 (unregistering): Port device team_slave_1 removed [ 243.839331][ T58] team0 (unregistering): Port device team_slave_0 removed [ 243.943978][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 244.667197][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.768892][ T9493] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.781874][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.796230][ T9493] bridge_slave_0: entered allmulticast mode [ 244.803569][ T9493] bridge_slave_0: entered promiscuous mode [ 244.843514][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.881515][ T9493] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.895738][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.905143][ T5620] Bluetooth: hci5: command tx timeout [ 244.918363][ T9493] bridge_slave_1: entered allmulticast mode [ 244.928801][ T9493] bridge_slave_1: entered promiscuous mode [ 244.975798][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.995609][ T5620] Bluetooth: hci4: command tx timeout [ 245.018872][ T9493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.033062][ T9493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.075987][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.139871][ T9493] team0: Port device team_slave_0 added [ 245.147385][ T9468] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.162238][ T9468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.176420][ T9493] team0: Port device team_slave_1 added [ 245.185994][ T9468] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 245.198770][ T9468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.230849][ T9468] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 245.250294][ T9468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.268994][ T9468] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 245.287017][ T9468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.296937][ T9493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.305783][ T9493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.336616][ T9493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.360877][ T9493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.368000][ T9493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.394713][ T9493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.512154][ T9493] hsr_slave_0: entered promiscuous mode [ 245.522773][ T9493] hsr_slave_1: entered promiscuous mode [ 245.530017][ T9493] debugfs: 'hsr0' already exists in 'hsr' [ 245.537427][ T9493] Cannot create hsr debugfs directory [ 245.577795][ T58] bridge_slave_1: left allmulticast mode [ 245.586727][ T58] bridge_slave_1: left promiscuous mode [ 245.592572][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.604388][ T58] bridge_slave_0: left allmulticast mode [ 245.611180][ T58] bridge_slave_0: left promiscuous mode [ 245.617439][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.945065][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.957518][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.968309][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.980647][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.988317][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.071835][ T5620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 246.088941][ T5620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 246.099106][ T5620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 246.109035][ T5620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 246.116608][ T5620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 246.216664][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.269867][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.302078][ T58] bond0 (unregistering): Released all slaves [ 246.853106][ T58] hsr_slave_0: left promiscuous mode [ 246.860156][ T58] hsr_slave_1: left promiscuous mode [ 246.867664][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.875332][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.883211][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.892218][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.908208][ T58] veth1_macvtap: left promiscuous mode [ 246.914671][ T58] veth0_macvtap: left promiscuous mode [ 246.920230][ T58] veth1_vlan: left promiscuous mode [ 246.925838][ T58] veth0_vlan: left promiscuous mode [ 247.000779][ T5620] Bluetooth: hci5: command tx timeout [ 247.064702][ T5620] Bluetooth: hci4: command tx timeout [ 247.089046][ T58] team0 (unregistering): Port device team_slave_1 removed [ 247.101849][ T58] team0 (unregistering): Port device team_slave_0 removed [ 247.272624][ T9468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.488574][ T9468] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.562654][ T246] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.569833][ T246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.616778][ T246] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.623960][ T246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.023766][ T5620] Bluetooth: hci1: command tx timeout [ 248.070850][ T58] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.131461][ T9594] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.159586][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.173537][ T9594] bridge_slave_0: entered allmulticast mode [ 248.185327][ T5620] Bluetooth: hci6: command tx timeout [ 248.202708][ T9594] bridge_slave_0: entered promiscuous mode [ 248.212623][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.220950][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.228421][ T9594] bridge_slave_1: entered allmulticast mode [ 248.236194][ T9594] bridge_slave_1: entered promiscuous mode [ 248.280626][ T58] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.360061][ T9594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.397971][ T58] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.416456][ T9594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.467446][ T9493] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 248.485193][ T9493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.523811][ T58] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.557158][ T9594] team0: Port device team_slave_0 added [ 248.562858][ T9590] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.570299][ T9590] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.580245][ T9590] bridge_slave_0: entered allmulticast mode [ 248.587573][ T9590] bridge_slave_0: entered promiscuous mode [ 248.602792][ T9493] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 248.615955][ T9493] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.626880][ T9594] team0: Port device team_slave_1 added [ 248.640204][ T9590] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.647997][ T9590] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.657731][ T9590] bridge_slave_1: entered allmulticast mode [ 248.666707][ T9590] bridge_slave_1: entered promiscuous mode [ 248.701650][ T9493] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 248.724073][ T9493] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 248.731871][ T9493] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 248.758686][ T9493] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.782260][ T9590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.837946][ T9594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.847216][ T9594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.873390][ T9594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.887648][ T9590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.915384][ T9594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.922849][ T9594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.950662][ T9594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.973148][ T9590] team0: Port device team_slave_0 added [ 248.980989][ T9590] team0: Port device team_slave_1 added [ 249.021875][ T9468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.052257][ T9590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.060725][ T9590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.086791][ T5620] Bluetooth: hci5: command tx timeout [ 249.092780][ T9590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.130573][ T9590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.137727][ T9590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.165894][ T5620] Bluetooth: hci4: command tx timeout [ 249.166311][ T9590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.218981][ T9594] hsr_slave_0: entered promiscuous mode [ 249.225849][ T9594] hsr_slave_1: entered promiscuous mode [ 249.231874][ T9594] debugfs: 'hsr0' already exists in 'hsr' [ 249.238045][ T9594] Cannot create hsr debugfs directory [ 249.315012][ T9590] hsr_slave_0: entered promiscuous mode [ 249.322055][ T9590] hsr_slave_1: entered promiscuous mode [ 249.330245][ T9590] debugfs: 'hsr0' already exists in 'hsr' [ 249.336339][ T9590] Cannot create hsr debugfs directory [ 249.377759][ T58] bridge_slave_1: left allmulticast mode [ 249.384050][ T58] bridge_slave_1: left promiscuous mode [ 249.389839][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.401355][ T58] bridge_slave_0: left allmulticast mode [ 249.411811][ T58] bridge_slave_0: left promiscuous mode [ 249.417995][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.692392][ T58] bond0 (unregistering): (slave gretap1): Releasing backup interface [ 249.701335][ T58] gretap1 (unregistering): left allmulticast mode [ 249.851974][ T58] bond0 (unregistering): Released all slaves [ 250.113797][ T5620] Bluetooth: hci1: command tx timeout [ 250.231747][ T58] hsr_slave_0: left promiscuous mode [ 250.247060][ T58] hsr_slave_1: left promiscuous mode [ 250.252762][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.262124][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.271037][ T5620] Bluetooth: hci6: command tx timeout [ 250.271044][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.271083][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.298814][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.306601][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.319508][ T58] veth1_macvtap: left promiscuous mode [ 250.325359][ T58] veth0_macvtap: left promiscuous mode [ 250.330954][ T58] veth1_vlan: left promiscuous mode [ 250.336551][ T58] veth0_vlan: left promiscuous mode [ 250.488383][ T58] team0 (unregistering): Port device team_slave_1 removed [ 250.499966][ T58] team0 (unregistering): Port device team_slave_0 removed [ 250.571245][ T9468] veth0_vlan: entered promiscuous mode [ 250.668314][ T9468] veth1_vlan: entered promiscuous mode [ 250.690955][ T9493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.722388][ T9468] veth0_macvtap: entered promiscuous mode [ 250.737410][ T9493] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.837750][ T9468] veth1_macvtap: entered promiscuous mode [ 250.856572][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.863760][ T5882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.959974][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.967153][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.986595][ T9468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.016000][ T9468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.036787][ T7096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.093629][ T7096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.102745][ T7096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.146961][ T7096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.154218][ T5620] Bluetooth: hci5: command tx timeout [ 251.363595][ T7096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.392352][ T7096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.470869][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.479437][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.612963][ T30] audit: type=1400 audit(2000000119.670:647): avc: denied { setopt } for pid=9745 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 251.881494][ T9493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.906837][ T9594] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 251.929073][ T9594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.949377][ T9594] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 251.971694][ T9594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.980852][ T9594] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 251.989980][ T9594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.998688][ T9594] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 252.008229][ T9594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.112212][ T9765] netlink: 'syz.0.575': attribute type 1 has an invalid length. [ 252.160148][ T9764] erspan1: entered allmulticast mode [ 252.197546][ T5620] Bluetooth: hci1: command tx timeout [ 252.212843][ T9590] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.229230][ T9590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.237606][ T9590] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.254323][ T9590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.275580][ T9590] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.288175][ T9590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.319368][ T9590] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.328312][ T9590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.353933][ T5620] Bluetooth: hci6: command tx timeout [ 252.418665][ T9493] veth0_vlan: entered promiscuous mode [ 252.456610][ T9493] veth1_vlan: entered promiscuous mode [ 252.492640][ T9594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.577935][ T9594] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.619550][ T246] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.626742][ T246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.656349][ T9493] veth0_macvtap: entered promiscuous mode [ 252.689325][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.696518][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.710255][ T9493] veth1_macvtap: entered promiscuous mode [ 252.716296][ T5790] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 252.753074][ T9590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.838367][ T9493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.866260][ T9493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.896274][ T9590] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.914480][ T7096] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.914494][ T5790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.914544][ T7096] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.950975][ T5790] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 252.954986][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.967141][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.997960][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.001497][ T7096] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.029738][ T5790] usb 1-1: config 0 descriptor?? [ 253.058590][ T246] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.065734][ T246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.091013][ T5790] smsusb:smsusb_probe: board id=8, interface number 0 [ 253.111697][ T5790] smsusb:smsusb_probe: Device initialized with return code -19 [ 253.126457][ T7096] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.323328][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.336850][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.471666][ T30] audit: type=1400 audit(2000000121.520:648): avc: denied { read } for pid=9772 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 253.523309][ T7096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.541123][ T7096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.019914][ T9594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.074394][ T5790] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 254.222082][ T9590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.246377][ T5790] usb 8-1: Using ep0 maxpacket: 16 [ 254.271491][ T5790] usb 8-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30 [ 254.273870][ T5620] Bluetooth: hci1: command tx timeout [ 254.318734][ T5790] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.380840][ T5790] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.425215][ T5790] usb 8-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 254.433915][ T5620] Bluetooth: hci6: command tx timeout [ 254.473329][ T5790] usb 8-1: config 0 interface 0 has no altsetting 0 [ 254.520623][ T5790] usb 8-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 254.559959][ T5790] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.606598][ T9594] veth0_vlan: entered promiscuous mode [ 254.611185][ T5790] usb 8-1: config 0 descriptor?? [ 254.648030][ T9594] veth1_vlan: entered promiscuous mode [ 254.708808][ T9594] veth0_macvtap: entered promiscuous mode [ 254.737538][ T9594] veth1_macvtap: entered promiscuous mode [ 254.782654][ T9594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.828041][ T9594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.871208][ T3381] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.894053][ T3381] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.914657][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.930638][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.049468][ T5790] usbhid 8-1:0.0: can't add hid device: -71 [ 255.062843][ T5790] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 255.085645][ T9590] veth0_vlan: entered promiscuous mode [ 255.100345][ T5790] usb 8-1: USB disconnect, device number 2 [ 255.139699][ T7096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.149619][ T7096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.179231][ T9590] veth1_vlan: entered promiscuous mode [ 255.204161][ T246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.213561][ T246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.241483][ T9590] veth0_macvtap: entered promiscuous mode [ 255.271266][ T9590] veth1_macvtap: entered promiscuous mode [ 255.328102][ T9590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.350122][ T9590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.375246][ T1038] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.391080][ T1038] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.410551][ T1038] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.432749][ T1038] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.624721][ T246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.656392][ T246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.717640][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.738183][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.911070][ T9882] virtio-fs: tag not found [ 255.947316][ T803] usb 1-1: USB disconnect, device number 6 [ 255.958299][ T9883] o2cb: This node has not been configured. [ 256.009409][ T9883] o2cb: Cluster check failed. Fix errors before retrying. [ 256.036301][ T5790] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 256.092952][ T9883] (syz.8.574,9883,0):user_dlm_register:674 ERROR: status = -22 [ 256.110333][ T9888] syzkaller0: entered promiscuous mode [ 256.126084][ T9888] syzkaller0: entered allmulticast mode [ 256.135862][ T9883] (syz.8.574,9883,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 256.148017][ T30] audit: type=1400 audit(2000000124.200:649): avc: denied { shutdown } for pid=9863 comm="syz.8.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.217265][ T5790] usb 8-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 256.261827][ T5790] usb 8-1: config 0 interface 0 has no altsetting 0 [ 256.286480][ T5790] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 256.311957][ T5790] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 256.335412][ T5790] usb 8-1: Product: syz [ 256.353565][ T5790] usb 8-1: Manufacturer: syz [ 256.375171][ T5790] usb 8-1: SerialNumber: syz [ 256.395758][ T5790] usb 8-1: config 0 descriptor?? [ 256.417996][ T30] audit: type=1400 audit(2000000124.480:650): avc: denied { map } for pid=9901 comm="syz.5.582" path="socket:[30128]" dev="sockfs" ino=30128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 256.487353][ T30] audit: type=1400 audit(2000000124.480:651): avc: denied { accept } for pid=9901 comm="syz.5.582" path="socket:[30128]" dev="sockfs" ino=30128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 256.519587][ T5790] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 256.632662][ T9907] netlink: 552 bytes leftover after parsing attributes in process `syz.5.582'. [ 256.697338][ T9910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.741975][ T5595] udevd[5595]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.820018][ T1217] usb 8-1: USB disconnect, device number 3 [ 257.921072][ T9936] Cannot find del_set index 0 as target [ 257.940220][ T9936] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 ! [ 258.152741][ T30] audit: type=1400 audit(2000000126.210:652): avc: denied { lock } for pid=9943 comm="syz.0.587" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 258.235871][ T9947] netlink: 'syz.5.586': attribute type 21 has an invalid length. [ 259.104860][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.123516][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.142267][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.153678][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.162860][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.495345][ T30] audit: type=1400 audit(2000000127.560:653): avc: denied { connect } for pid=9972 comm="syz.7.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 259.939033][ T9980] macvlan2: entered promiscuous mode [ 259.970510][ T9980] bridge0: entered promiscuous mode [ 260.087199][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.8.591'. [ 260.568641][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.172558][ T9994] syzkaller1: entered promiscuous mode [ 261.178157][ T9994] syzkaller1: entered allmulticast mode [ 261.206933][T10004] netlink: 32 bytes leftover after parsing attributes in process `syz.0.594'. [ 261.223783][ T5620] Bluetooth: hci2: command tx timeout [ 261.333750][ T30] audit: type=1400 audit(2000000130.349:654): avc: denied { connect } for pid=10003 comm="syz.0.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.764295][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.024126][ T5790] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 262.037762][T10022] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.597'. [ 262.090817][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.155235][T10022] netlink: Unknown conntrack attr (type=14, max=9) [ 262.213414][T10026] loop8: detected capacity change from 0 to 8 [ 262.255325][ T5790] usb 1-1: Using ep0 maxpacket: 8 [ 262.260487][T10026] Dev loop8: unable to read RDB block 8 [ 262.269360][T10026] loop8: unable to read partition table [ 262.279820][ T5790] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.293913][T10026] loop8: partition table beyond EOD, truncated [ 262.303921][ T5790] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.316534][T10026] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 262.341395][ T5790] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.377494][ T5790] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.404217][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.432573][ T5790] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.466148][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.639222][T10034] binder: 10031:10034 ioctl c0306201 200000000080 returned -14 [ 262.686411][T10034] binder: 10031:10034 ioctl c0306201 2000000003c0 returned -14 [ 262.734727][ T30] audit: type=1400 audit(2000000131.789:655): avc: denied { bind } for pid=9982 comm="syz.7.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 262.775451][ T5790] usb 1-1: GET_CAPABILITIES returned 0 [ 262.795919][ T5790] usbtmc 1-1:16.0: can't read capabilities [ 262.863738][ T5711] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 262.973411][ T36] bridge_slave_1: left allmulticast mode [ 262.985496][ T36] bridge_slave_1: left promiscuous mode [ 262.999446][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.030764][ T36] bridge_slave_0: left allmulticast mode [ 263.040886][ T5711] usb 6-1: Using ep0 maxpacket: 32 [ 263.073532][ T36] bridge_slave_0: left promiscuous mode [ 263.081051][ T5711] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 263.099706][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.109619][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.152592][ T5711] usb 6-1: Product: syz [ 263.174105][ T5711] usb 6-1: Manufacturer: syz [ 263.197908][ T5711] usb 6-1: SerialNumber: syz [ 263.250863][ T5711] usb 6-1: config 0 descriptor?? [ 263.289015][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.306806][ T5620] Bluetooth: hci2: command tx timeout [ 263.327551][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.338516][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.347598][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.356649][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.365747][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.374889][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.384011][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.393109][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.473016][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.482150][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.491228][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.500286][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.515202][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.524352][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.533431][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.588439][ T5711] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 007 [ 264.132145][ T36] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 264.152336][ T36] bridge2 (unregistering): left promiscuous mode [ 264.222252][ T36] bond0 (unregistering): (slave 5@): Releasing backup interface [ 264.261542][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.290249][ T36] bond0 (unregistering): Released all slaves [ 264.322982][ T36] bond1 (unregistering): Released all slaves [ 264.430402][T10079] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 264.465433][ T9] usb 1-1: USB disconnect, device number 7 [ 264.474199][T10079] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -19 [ 264.521214][T10079] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -19 [ 264.836760][ T9964] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.883966][ T9964] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.897529][ T9964] bridge_slave_0: entered allmulticast mode [ 264.919013][ T9964] bridge_slave_0: entered promiscuous mode [ 264.973811][ T9964] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.992435][ T9964] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.011266][ T9964] bridge_slave_1: entered allmulticast mode [ 265.032429][ T9964] bridge_slave_1: entered promiscuous mode [ 265.166741][ T30] audit: type=1326 audit(2000000134.229:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.0.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1b39cdd9 code=0x7ffc0000 [ 265.239603][ T30] audit: type=1326 audit(2000000134.229:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.0.604" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1b39cdd9 code=0x7ffc0000 [ 265.267632][ T9964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.311144][ T9964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.360260][ T36] hsr_slave_0: left promiscuous mode [ 265.379520][ T36] hsr_slave_1: left promiscuous mode [ 265.383778][ T5620] Bluetooth: hci2: command tx timeout [ 265.405534][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.476641][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.543390][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.608297][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.701934][ T36] veth1_macvtap: left promiscuous mode [ 265.709240][ T36] veth1_vlan: left promiscuous mode [ 265.741597][ T36] veth0_vlan: left promiscuous mode [ 265.784037][T10030] i2c i2c-1: failure reading data [ 265.867113][ T9] usb 6-1: USB disconnect, device number 7 [ 266.296554][ T9] hid_parser_main: 28 callbacks suppressed [ 266.296578][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 266.350511][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 266.373773][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 266.382202][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 266.389918][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 266.444928][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 266.466596][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 266.483206][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 266.495804][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 266.503406][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 266.548004][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 266.548004][ T9] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on [ 266.603826][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.8.611'. [ 266.694981][T10131] fido_id[10131]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 266.729648][ T36] team0 (unregistering): Port device team_slave_1 removed [ 266.769197][ T36] team0 (unregistering): Port device team_slave_0 removed [ 267.019570][ T30] audit: type=1400 audit(2000000136.079:658): avc: denied { read } for pid=10146 comm="syz.7.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 267.059872][ T9964] team0: Port device team_slave_0 added [ 267.086057][T10130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.101025][T10130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.122003][T10130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.149035][T10130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.172035][T10154] netlink: 'syz.0.616': attribute type 62 has an invalid length. [ 267.187270][ T9964] team0: Port device team_slave_1 added [ 267.333292][ T9964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.361174][ T9964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.446089][ T9964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.464682][ T5620] Bluetooth: hci2: command tx timeout [ 267.506374][ T9964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.516895][ T9964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.548988][ T9964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.564019][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 267.618342][ T9964] hsr_slave_0: entered promiscuous mode [ 267.638650][ T9964] hsr_slave_1: entered promiscuous mode [ 267.725317][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.762995][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 267.791637][T10180] overlayfs: failed to resolve './file0': -2 [ 267.971741][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.088599][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.174466][ T9] usb 1-1: Product: syz [ 268.204706][ T9] usb 1-1: Manufacturer: syz [ 268.225201][ T9] usb 1-1: SerialNumber: syz [ 268.296121][ T9] cdc_ether 1-1:1.0: slave class 0 [ 268.567647][T10154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.634300][T10154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.819453][ T9] usb 1-1: USB disconnect, device number 8 [ 269.449972][T10201] lo speed is unknown, defaulting to 1000 [ 269.457751][T10201] lo speed is unknown, defaulting to 1000 [ 269.468252][T10201] lo speed is unknown, defaulting to 1000 [ 269.475805][T10201] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 269.491293][T10201] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 269.508217][T10201] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 269.522212][T10201] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 269.537945][T10201] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 269.571013][T10201] lo speed is unknown, defaulting to 1000 [ 269.578474][T10201] lo speed is unknown, defaulting to 1000 [ 269.585538][T10201] lo speed is unknown, defaulting to 1000 [ 269.592647][T10201] lo speed is unknown, defaulting to 1000 [ 269.601101][T10201] lo speed is unknown, defaulting to 1000 [ 269.620115][T10201] lo speed is unknown, defaulting to 1000 [ 269.635095][T10201] lo speed is unknown, defaulting to 1000 [ 269.648804][ T5790] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 269.883820][ T5790] usb 6-1: Using ep0 maxpacket: 8 [ 269.979032][ T5790] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.050445][ T5790] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.100699][ T5790] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 270.151337][ T5790] usb 6-1: config 0 interface 0 has no altsetting 0 [ 270.167803][ T5790] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 270.177754][ T5790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.196822][ T5790] usb 6-1: config 0 descriptor?? [ 270.253192][T10220] Invalid argument reading file caps for ./file0 [ 270.596049][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 270.707507][ T5790] lenovo 0003:17EF:60A4.0006: hidraw0: USB HID vff.fc Device [HID 17ef:60a4] on usb-dummy_hcd.5-1/input0 [ 271.343475][ T9964] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 271.364459][ T9964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 271.391584][ T9964] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 271.409732][ T9964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 271.420899][ T9964] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 271.445609][ T9964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.461111][ T9964] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 271.488632][ T9964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.671083][ T9964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.681736][ T9964] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.704933][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.714161][ T5882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.738642][ T7096] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.745860][ T7096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.800855][T10266] overlayfs: failed to resolve './file0': -2 [ 272.199600][ T29] usb 6-1: USB disconnect, device number 8 [ 273.519412][T10284] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in; [ 273.519412][T10284] program syz.0.638 not setting count and/or reply_len properly [ 273.632715][ T30] audit: type=1400 audit(2000000142.689:659): avc: denied { getopt } for pid=10277 comm="syz.7.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 273.888753][T10281] openvswitch: netlink: IPv6 tunnel dst address is zero [ 274.185829][T10296] netlink: 'syz.5.640': attribute type 10 has an invalid length. [ 274.318533][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 274.484998][T10296] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.588500][ T29] usb 9-1: too many configurations: 53, using maximum allowed: 8 [ 274.738081][T10296] bond0: (slave team0): Enslaving as an active interface with an up link [ 274.791121][ T29] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 274.901181][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.017952][ T29] usb 9-1: Product: syz [ 275.077954][ T29] usb 9-1: Manufacturer: syz [ 275.159638][ T29] usb 9-1: SerialNumber: syz [ 275.926686][T10312] tmpfs: Unknown parameter '0x000000000000000500000000000000000005' [ 276.101523][ T29] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 276.154247][ T29] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 276.189429][ T29] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 276.334447][ T29] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 276.438861][ T29] usb 9-1: USB disconnect, device number 2 [ 276.496856][ T9964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.003752][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 277.163830][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 277.222440][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.353185][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 277.518320][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 277.589509][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.604868][ T9964] veth0_vlan: entered promiscuous mode [ 277.622174][ T9] usb 8-1: config 0 descriptor?? [ 277.640043][ T9964] veth1_vlan: entered promiscuous mode [ 277.721981][ T9964] veth0_macvtap: entered promiscuous mode [ 277.767864][ T9964] veth1_macvtap: entered promiscuous mode [ 277.792067][ T9964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.803302][ T9964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.895673][ T137] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.981201][ T137] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.000495][ T137] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.046670][ T137] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.070729][ T7096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.101742][ T7096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.162749][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.183472][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.392076][T10366] random: crng reseeded on system resumption [ 278.685338][T10375] lo speed is unknown, defaulting to 1000 [ 278.693765][ T29] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 278.713919][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 278.873735][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 278.893286][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.920381][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.972141][ T29] usb 6-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 279.003759][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 279.011187][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.041319][ T9] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 279.045689][ T29] usb 6-1: Product: syz [ 279.050877][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.078716][ T29] usb 6-1: Manufacturer: syz [ 279.093695][ T29] usb 6-1: SerialNumber: syz [ 279.101951][ T9] usb 9-1: config 0 descriptor?? [ 279.140918][ T9] as10x_usb: device has been detected [ 279.184652][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 279.289722][ T9] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 279.331919][T10365] ------------[ cut here ]------------ [ 279.337829][T10365] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 279.337842][T10365] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x94f/0x1b10, CPU#1: syz.8.651/10365 [ 279.354334][T10365] Modules linked in: [ 279.358445][T10365] CPU: 1 UID: 0 PID: 10365 Comm: syz.8.651 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.369385][T10365] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 279.373737][T10365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.384256][T10365] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 279.389987][T10365] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d 16 4c 05 45 85 f6 75 13 48 8d 3d 71 34 4f 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 279.409666][T10365] RSP: 0018:ffffc90004307a50 EFLAGS: 00010246 [ 279.414427][T10397] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.416017][T10365] RAX: 0000000000000003 RBX: ffff88802db20b30 RCX: 1ffffffff21af8dc [ 279.430401][T10365] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90dae520 [ 279.438519][T10365] RBP: ffffc90004307bc0 R08: 0000000000000001 R09: 0000000000000000 [ 279.446792][T10365] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 279.454783][T10365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.462769][T10365] FS: 00007f53cbbf66c0(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 279.471777][T10365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.478368][T10365] CR2: 00007f1d41464286 CR3: 0000000052b46000 CR4: 00000000003526f0 [ 279.486549][T10365] Call Trace: [ 279.489829][T10365] [ 279.492734][T10365] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 279.498522][T10365] ? __mutex_lock+0x26d/0x1b10 [ 279.503278][T10365] ? dmx_section_feed_start_filtering+0x56/0x660 [ 279.509627][T10365] ? find_held_lock+0x2b/0x80 [ 279.514295][T10365] ? __pfx___mutex_lock+0x10/0x10 [ 279.519303][T10365] ? __pfx___mutex_lock+0x10/0x10 [ 279.524323][T10365] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 279.529951][T10365] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 279.535575][T10365] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 279.541020][T10365] dmx_section_feed_start_filtering+0x3a8/0x660 [ 279.547378][T10365] dvb_dmxdev_filter_start+0x767/0xdd0 [ 279.552836][T10365] dvb_demux_do_ioctl+0xe64/0x1200 [ 279.557943][T10365] dvb_usercopy+0x167/0x340 [ 279.562431][T10365] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 279.567979][T10365] ? __pfx_dvb_usercopy+0x10/0x10 [ 279.572987][T10365] ? selinux_file_ioctl+0x13b/0x290 [ 279.578184][T10365] ? selinux_file_ioctl+0xb6/0x290 [ 279.583276][T10365] dvb_demux_ioctl+0x29/0x40 [ 279.588042][T10365] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 279.593317][T10365] __x64_sys_ioctl+0x18e/0x210 [ 279.598222][T10365] do_syscall_64+0x10b/0xf80 [ 279.602796][T10365] ? clear_bhb_loop+0x40/0x90 [ 279.607460][T10365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.613346][T10365] RIP: 0033:0x7f53cd99cdd9 [ 279.617750][T10365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.637402][T10365] RSP: 002b:00007f53cbbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.645832][T10365] RAX: ffffffffffffffda RBX: 00007f53cdc15fa0 RCX: 00007f53cd99cdd9 [ 279.653804][T10365] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 000000000000000a [ 279.661794][T10365] RBP: 00007f53cda32d69 R08: 0000000000000000 R09: 0000000000000000 [ 279.669833][T10365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.677840][T10365] R13: 00007f53cdc16038 R14: 00007f53cdc15fa0 R15: 00007ffc4dad7ab8 [ 279.685853][T10365] [ 279.688883][T10365] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 279.696161][T10365] CPU: 1 UID: 0 PID: 10365 Comm: syz.8.651 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.707015][T10365] Tainted: [L]=SOFTLOCKUP [ 279.711335][T10365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.721393][T10365] Call Trace: [ 279.724660][T10365] [ 279.727574][T10365] dump_stack_lvl+0x100/0x190 [ 279.732239][T10365] vpanic+0x552/0x970 [ 279.736198][T10365] ? __pfx_vpanic+0x10/0x10 [ 279.740678][T10365] ? lock_release+0x245/0x310 [ 279.745364][T10365] panic+0xd1/0xe0 [ 279.749063][T10365] ? __pfx_panic+0x10/0x10 [ 279.753460][T10365] check_panic_on_warn.cold+0x19/0x34 [ 279.758811][T10365] ? __mutex_lock+0x94f/0x1b10 [ 279.763561][T10365] __warn.cold+0x191/0x328 [ 279.767956][T10365] __report_bug+0x296/0x3d0 [ 279.772439][T10365] ? __mutex_lock+0x94f/0x1b10 [ 279.777185][T10365] ? __pfx___report_bug+0x10/0x10 [ 279.782190][T10365] ? register_lock_class+0x40/0x560 [ 279.787370][T10365] report_bug_entry+0xe1/0x290 [ 279.792113][T10365] ? __mutex_lock+0x956/0x1b10 [ 279.796859][T10365] handle_bug+0x1cd/0x2a0 [ 279.801170][T10365] exc_invalid_op+0x17/0x50 [ 279.805654][T10365] asm_exc_invalid_op+0x1a/0x20 [ 279.810484][T10365] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 279.815839][T10365] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d 16 4c 05 45 85 f6 75 13 48 8d 3d 71 34 4f 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 279.835426][T10365] RSP: 0018:ffffc90004307a50 EFLAGS: 00010246 [ 279.841471][T10365] RAX: 0000000000000003 RBX: ffff88802db20b30 RCX: 1ffffffff21af8dc [ 279.849429][T10365] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90dae520 [ 279.857379][T10365] RBP: ffffc90004307bc0 R08: 0000000000000001 R09: 0000000000000000 [ 279.865326][T10365] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 279.873276][T10365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.881229][T10365] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 279.886870][T10365] ? __mutex_lock+0x26d/0x1b10 [ 279.891665][T10365] ? dmx_section_feed_start_filtering+0x56/0x660 [ 279.897995][T10365] ? find_held_lock+0x2b/0x80 [ 279.902657][T10365] ? __pfx___mutex_lock+0x10/0x10 [ 279.907664][T10365] ? __pfx___mutex_lock+0x10/0x10 [ 279.912669][T10365] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 279.918286][T10365] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 279.923907][T10365] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 279.929354][T10365] dmx_section_feed_start_filtering+0x3a8/0x660 [ 279.935578][T10365] dvb_dmxdev_filter_start+0x767/0xdd0 [ 279.941034][T10365] dvb_demux_do_ioctl+0xe64/0x1200 [ 279.946133][T10365] dvb_usercopy+0x167/0x340 [ 279.950622][T10365] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 279.956153][T10365] ? __pfx_dvb_usercopy+0x10/0x10 [ 279.961163][T10365] ? selinux_file_ioctl+0x13b/0x290 [ 279.966345][T10365] ? selinux_file_ioctl+0xb6/0x290 [ 279.971439][T10365] dvb_demux_ioctl+0x29/0x40 [ 279.976011][T10365] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 279.981281][T10365] __x64_sys_ioctl+0x18e/0x210 [ 279.986027][T10365] do_syscall_64+0x10b/0xf80 [ 279.990602][T10365] ? clear_bhb_loop+0x40/0x90 [ 279.995262][T10365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.001138][T10365] RIP: 0033:0x7f53cd99cdd9 [ 280.005533][T10365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.025120][T10365] RSP: 002b:00007f53cbbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.033510][T10365] RAX: ffffffffffffffda RBX: 00007f53cdc15fa0 RCX: 00007f53cd99cdd9 [ 280.041462][T10365] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 000000000000000a [ 280.049410][T10365] RBP: 00007f53cda32d69 R08: 0000000000000000 R09: 0000000000000000 [ 280.057361][T10365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.065311][T10365] R13: 00007f53cdc16038 R14: 00007f53cdc15fa0 R15: 00007ffc4dad7ab8 [ 280.073266][T10365] [ 280.076556][T10365] Kernel Offset: disabled [ 280.080855][T10365] Rebooting in 86400 seconds..