last executing test programs: 4m7.12401723s ago: executing program 1 (id=453): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000508000/0xd000)=nil, 0xd000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x3e1f000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getegid() socket$inet_tcp(0x2, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x3, 0x2, 0xffefffff}) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x141) sendto$l2tp6(r1, &(0x7f0000019300)="d95951ac99b5b99ab71ea3dfddbc490cacbc4ce56cbf1dcde49d8f31a11e7544db40f0ae40087f4b86dab1bec198f58c01418424dea1a1bc5d1a6aa2b79b8897c109b0f937ec169427b96f8258ea19781aca2477c25d84a4d6ee5d3eacb4eb42ab28f39acde7de848d2c5ac9f54580983612ca32002e1eea6973982b438055caab52e3", 0x83, 0x4000080, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r4 = semget$private(0x0, 0x6, 0x0) semop(r4, &(0x7f0000001240)=[{0x2, 0x0, 0x1800}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f000b0025bd7000feffffff020000004474a862d6894e4cc093422a78900631401efd52e7aa88480000"], 0x20}}, 0x8040) 4m4.107611951s ago: executing program 1 (id=459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8", 0x23}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x222203, 0x0) accept$alg(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, 0x0, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70b92d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r8, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r8, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) socket$inet_udp(0x2, 0x2, 0x0) 4m2.550816559s ago: executing program 1 (id=462): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = inotify_init() r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x202, &(0x7f00000001c0)={0x0}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) 4m1.816787061s ago: executing program 1 (id=466): openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x2400000) r1 = socket$netlink(0x10, 0x3, 0x4) semctl$GETVAL(0x0, 0x2, 0xc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) getpid() bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = openat$null(0xffffff9c, 0x0, 0x0, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x1, 0x2, 0x0, 0x1}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r2, 0xc0207507, &(0x7f00000006c0)) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x20804}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x300, 0x0, 0x20048054}, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020005ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4m0.426415783s ago: executing program 1 (id=469): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cc, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000ae8ff030900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000208000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close(0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0xa3, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 3m59.127888845s ago: executing program 1 (id=472): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0xa32c, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 3m42.140944679s ago: executing program 32 (id=472): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0xa32c, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 3m40.019824833s ago: executing program 3 (id=538): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) fcntl$getownex(r6, 0x10, &(0x7f0000000480)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x8000, 0x18}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x17, 0xe, 0x7f, 0xe, 0x1802, 0xffffffffffffffff, 0xefc, '\x00', r2, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x12, &(0x7f0000000100)=@raw=[@alu={0x4, 0x1, 0x8, 0x2, 0xb, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000000440)='GPL\x00', 0x6, 0x42, &(0x7f0000000480)=""/66, 0x41000, 0x1, '\x00', r2, 0x0, r5, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x7ee2, 0xffffffffffffffff, 0x4, &(0x7f0000000640)=[r7, r8, r9], &(0x7f0000000680)=[{0x0, 0x5, 0x0, 0xb}, {0x3, 0x3, 0x7, 0x4}, {0x5, 0x1, 0x8, 0xa}, {0x3, 0x3, 0xb, 0xa}], 0x10, 0x1}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$l2tp(&(0x7f0000000780), r10) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) ioctl$VFAT_IOCTL_READDIR_BOTH(r10, 0x82307201, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) listen(r11, 0xfffffffc) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}, @local}) sendto$packet(r0, &(0x7f0000000080)="a084d380d3fc030000e50788031c", 0xe, 0x20004084, &(0x7f00000001c0)={0x11, 0x15, r2, 0x1, 0xb, 0x6, @multicast}, 0x14) 3m39.034112592s ago: executing program 3 (id=542): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000508000/0xd000)=nil, 0xd000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x3e1f000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getegid() socket$inet_tcp(0x2, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x3, 0x2, 0xffefffff}) sendto$l2tp6(r1, &(0x7f0000019300)="d95951ac99b5b99ab71ea3dfddbc490cacbc4ce56cbf1dcde49d8f31a11e7544db40f0ae40087f4b86dab1bec198f58c01418424dea1a1bc5d1a6aa2b79b8897c109b0f937ec169427b96f8258ea19781aca2477c25d84a4d6ee5d3eacb4eb42ab28f39acde7de848d2c5ac9f54580983612ca32002e1eea6973982b438055caab52e3", 0x83, 0x4000080, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) semop(0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x1800}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f000b0025bd7000feffffff020000004474a862d6894e4cc093422a78900631401efd52e7aa88480000"], 0x20}}, 0x8040) 3m37.679507501s ago: executing program 3 (id=545): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, &(0x7f0000000200)=""/210, 0xd2, 0x100, &(0x7f0000000300)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001003019500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) 3m36.559861638s ago: executing program 3 (id=546): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) open(&(0x7f0000000140)='./file3/file0\x00', 0x2200, 0x9a) chdir(&(0x7f0000000240)='./file2\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.usb0/lun.0/nofua\x00', 0x2, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10) 3m36.068292105s ago: executing program 3 (id=547): r0 = socket$can_raw(0x1d, 0x3, 0x1) accept4(r0, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./proc/fs/nfsd\x00', 0x0, 0x0) 3m34.956047554s ago: executing program 3 (id=552): setns(0xc9, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x200200, 0x0) write$binfmt_misc(r0, &(0x7f0000000340)="cd8f9e6dd9f2a888c58d2f6d4228d233861bd80e3337ac1906f35e8c8a9aac60a113f6204519ae14f828589fbb47c5176d7a0980f50a1102582ea3c818a43fa91878d5d773ead527725fb09a48925bfe9e6f5efaf27ba79a9ae805f6986b5a83c3b055980edb8c7956d07e2ae92995e163fd05a902bb6b1aedfe4a600a70f0231d7bc0bcff900d5cc70dcb69445fe4", 0x8f) r1 = socket(0x8, 0x5, 0x5) r2 = syz_io_uring_setup(0x120d, &(0x7f0000000100)={0x0, 0x7f11, 0x20000, 0x0, 0x359}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)) fcntl$notify(r2, 0x402, 0x2) r3 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0xf5, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r2, 0x1a, &(0x7f0000000400)={0x7}, 0x1) sendmsg$kcm(r1, &(0x7f0000002e00)={&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x4, 0x4, 0x2, 0x3}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="818a0bc88419c5a5c50cf3c22b649698d91c6dce1fc139f40220d391d9cc2eeafd8a7fb0f6df4a1bc5c985767e83508af99dc0b2a82818e64acaf5d65ce7e292099607520ea454c3f94f57da924ef8", 0x4f}], 0x2, &(0x7f0000001c80)=[{0x108, 0x111, 0x5, "215b21b3d543cdfd261c1b0d65a05a66f33deba53452e74442901448f805072b47592024474a2a7e1b8ee833547b8eaa2fb97ef26e7d05a77d44294c50bdcc367367974bd64b5f154a8478dfa19d15383b7e5fe2a99a225b0568afefa26b3bee549dcea5e026bb452010a17493751989cf26171dfb17dd090da16f7a5de814e101a472a94f9363129811f718dc32c0e363c256c0011977fab1f0afe5dc9c1a23c8d7fd9817ccc8a0ca9d52a6704cb01b898c31b03eef6543a7aa1a005897ec30bd292c20bee024a0db0af3db839fb63646d1ff3959c993b1127a7def98e91a3852a646edaa57ef8939b54fc6f58dffca41ba"}, {0x30, 0x103, 0xfffffffc, "6ebc2002e5911dc946633e6c21b042c7518c8b706629db8a014a2bbabb"}, {0x1010, 0x114, 0x5, "3032582597b9d996b455d6374728bd5c57b84b7ad4ec4f0e44e26014058fad73794830856a120a7730fcd4f26781d1ee19f476e06ef06d9f38e9d5fc321ce51ea158c97f195bc9d5d5ac92a183f14be183cadd4cb533977b33e45b367a962a66a4973f07a826a351be7b05535fe66f276e4aa0d18366e42e34510cb2a19aee3e6cc703a070bcc4ae9105bdf4cc370f9fb2a02f8c8b7d6abd7b3681232bef99584ca3ba372abd63d032daa140d91c313dd181b2c4c431865a9e5bc1dd7965276e5517f1bf367f9b63fe0a101d4688cd696f2e604eca55d26e8325c08019c344e6c8ec38f92e32f48fb749d352b9db02ffece9089c336e4284d4a01dba766ef0a88c80e095468085aa7570e5803b5822e4dcd85a700be284cf6c103cb8c951bfc4af655ca03ece3ba6e9d7305862b4ddcd3f3a2234b28bad237a2eeef64d8834a631e6f29dfd89fdd33f924fc8391dc21a71899c0c0f2da4c2daddd7dafaa316932bae48f9da9e66ebf6c28e8aeff88899e3aa3fbc4cd272f40e8bb278baf7324673cd60ea56fb4586cc4a8a4731017c98d88f2308081fac6719ccf411929bdcefc56ee64f9d2df2fe3395bf5049430c947029acc8d99937c1b847bca2e44cc680d034944ad5bb49638c5e3e24a0cf262888cd12a2b0e66478ff182ed8f54320e43638ce2beb1cfc43ba33414a0c4b7383d62e2fdfa349324c26a47a917be5fcc1df108ae4a6274ac6238ad7638c75a84a712031f30fc46f1d9390a937278146cc3ccc6294265ba8795c6cda7e73a45026e3e2eec988dac35915a5f7333ef4d2a713a3798e5663cd757506ba5f5c7764bfa77c11ac592289ef356f42ae4d5d47f34cc9ae34c6e9c45817b1151f02b7006e4b77281de52aacabcd57d7931a9c6b02e11330a9ce574aa3f0e37d19fa8be54b3beaaecfdbc49b7e6fa146bc6417201ef1a20f3c64d2f58213ab6d7703dd7c60baa3ba9c8334a825e28ecb39e674a9b12caf3155ef7debf63cbe9a1c89547334cb700617b0baea7db59811dfbf8e0d92f08b6e835f7594f57dbc0dfb0f04e3d38465c55aa956da78793c576c3aa5a3c0269166599d071a6527c8e553adad23cd4291d54e152d81e821e46850c9b3e4fd6262e06772ab276e28a3aef0c0f4ebb5fa9d1a2de9f9ca2c9e1decf441b88b19121bdc1dfb7c697ba2e9f7b00f40f4be901b40adfd98e7a11693c130ce4d1ff03f8811582cdeccfe601bf07d07704224cca73aba164ab83169546adf70c17cafd3a81766eb21d19683feaf3a48f76aab3d0448e3347b7bc4d1dfd9cba12f3117322d88ab59d997da11bf6a7fda273191a78dae1e6a0994d05feb86671b1a71a80f029c953aea209fe87119bb326f0d8c5c6b6b7e286271f981ee375413bc9be6022c5b5c13f640b6c840e042e13c27e622149476a20bdcadc171ce9f96ecf3a8416ab562879b540d0d398ca1af473a14ead3593ff3d4c8d2ace36aca9f742ef302d7dcaa095e910e475f09081fefdb6ccb7405914dd7232687577ba334e0d821eec9c8064ae63d8560df68f93fb53b614742fb7f672ec98f201c7b73960b02d3cf1bffe7d4475f0b2cedf74da676979011717b211d9cfc608f095317ff4e3c7ef02f3b6115bfc4159e43d2dd84c1e85f92c271a041af7ae73b7a32ee2e1b9e7d4eb6929e4601f0f0ca8b3f364206eed99343dae1cde2c8cd4a546eb7dd221a7e5b56c274072f61ac81750a891f1c88bd1f381f82bfe796eef6bf0533589d72eea08c143ad5720562ddfe0732dff808d6d1b1fb3720af75b0570efd4459015a18883151f949988df0592fe9d27d134cad4cfc06389630c1369cd973731559f866c41c2948bddecb05914700f41f13a9f96408ee8c64f4dc46a7583fc8972d82ccf839f86406e2cca1e394528ba717b35d87b323725c255eb7c1b84ca29fe37561f3ae9b98878193f05805702920b9d94465a4691514553080ef943dc0008a74f9f3f1d8edcd440b25043df9130ceb04371b0a5c255ae0ec63338b3713950fdafa7b6ee06c1caa2a1cd1332b412f22da2f998e6390372ea307838cbc0d8361f62d61a59c07c09ae028e83bd176281f46e6259511d9bfc061cb00ec547b4a9bcb5c65379e0ba4907d19eca6f94e2ac248aff2e86f48b65136d641b6c9a96111103a03595c5410b889866fc18ed76b8b9302a63750bb02dd68eddbdf9705eceebb5bb0e9914022b6cfaaa8b594a5e323e655d22f9a51aa2fd84cf3c99b13b0bafaab26c0640283a5aaa486879a2104be13a5e18cb09b70e28f8e12b134e9779bbff5c83c15ab0eb0326bf04d59fce9d9f860354ced8f6d4f5440d4c2cf0f9d4eaddb1b414f7373a56477e0f99c5dafdcf73f6ef88226c5f06b927c80e02df4e50cf200e410a70b97654c439b8477c8d071223c76ee479be53a4a394ca7c14d31f6a94a997538d89639cff47bda62831af2089edcc7b9a4bcfa6f323b53d1c4659d371561f7279883d5ff0ed2c9d83d33fb5e1fd6d7e0ba1e77b9941f942869c83f97668587b54aa742016280ec0caf4feaa47ede3a2a36d885d4dade796bfa8509ee5868ab57eb6489ea62e668b62175abda93d06b5027b8a5c669ade8ed43551186e1e76a70c3b091b54bfbfb7b0cb890cb5d21f785b1f85502b283cbf4225ed69cd73285f933fdd2e9befc83b1fcc4490cf2ce74acdcd0e7ce4563c16f55e240bc7c5e95ab6d3855e687d4b7ee23464812e30aceb4674fec0bd020c1338a32a9ef78665d890991914e27cf0b8745a84293a524566ccc694e27048f3e235b3e3264d0d80e76c92ed69250a975c77b27765b4eb3ae8a8e08172964313bdaedf714e6fa77ca94fdafe1fead2c4f5fbcc89cb8417286510784e6088b46e65ee8172d76ccff43f38ae53b48ecbf60c34b44f7d925ca16bee4eeaec58d1e8e6f6da67d4c491ae6fac417016e10ac54a18b406c2f846a416b184c2f8ad6b762b352edd1111232db10e1a5d1916c63fc13af8b04046f503020c1fa86d36c15a55d8d1cf39424ba76073e3b7ec5c3405b3780b5617cd327ee87d69bebaec8550270a0b820f9f5830f9763ab7a8f84da09a4923c3713ec17af40da458548af23e867a81df26ed3480d515911f372936a41c5f29ed78a7b2801cd6b9820a4ff5bb98223059d0ad0bbd0641dffd53f745d8c27fd539e67b1be677cc51d6eab551fb912162903919c9d262130f280f822018febb7e43782df7d9e8f8569425e7f8d5a4344c9ba9d9d521a92e96dd129a40fbeae2f593a6aedbb47ded9c52f75949381aef441ed42729b02ee541dbda2416881118a60af1c2911d38ab7bf8733aa637d1806287782917b91daeeed4c3d5c9f909fe64d4bf1e7e912962e585e65b1008b66dbef226a8af7067ac803fbe954582155ac77c071725fe4ade0c31059a33dac55bd8aa4bae57f7fd9ec60854e95310b23e54c93b4ca60d4374f0872e43d6cc74cf9a4c218fa568773f06bfad044ab9ef52038e84f90cacdbf4aaf13a5f65e5f6424c83aaebc012134cb3e81dea1830db6466c118fd94467ac3504ce1ba336cde20a3d0f1bc54769d5b41a03f6800c0edc585e3be79c6b528e701cfe5018e3351a1d60d3afe93c06a72116b7692d8a159feb875d60c1f3bfe7fb3894d5b9e23319ed61bd0b43fc31100db0577f1e095bfdd56a9d3cf5202690f76b4622d47c426e099e47a993f4a5d13a99be355ff9c33ae1a3e1b9f517cd985fd5f6d78442fe78b714c418f02add9d7b6aa14b2511c4d6aad3c84834a0b5ea6876c98908e2c88ffc2ac40a8b5959a9c5e1322005f8de379629b9282426ea97261bea5b06f7e55d11b75da5e7a671b5dd219ade473a7f77d8fea932692a77496d773e67e5ea082b1113cd0c0906d20cfac874d7e65196df1a85440ed6ab88f8d0b7ec4a33a3f4ae6e67660613e9dbcb58af9352f5acda5f1e4150fb327587441b3a63b3196874b6f94acd0e2faabcab9f638f91bb5aa927b8f5eb4fd7ea09714042bbb7c4e60d38a489922d1c9258dce6d1770833460a306c8bc96fc9aa78f72d7c5bac9fd81c7126d8fc39d91c425682776368236367fa524021262631832a3a7cf73dc2b93d08039c407f0c0faab60530fe9ae742f12dd1f17eb1d43809b662abe036dfa6bfb81897153ae4378f0a0826190af189f453efab46ed1b5fe411694c15dd838310e5600eab4ba4b501d984735947fb9696ccab5ca9458efa3c9f0e3b864bdfd3a05b66fa68332970a53f4d696093bf073fb5a3d285406bedb4b3cf0a22171493a75369be3f2a8d558574585505827c3fc7dafb011b3067e8212bd3ca93d1bebdf9d403e15a4b51bae978af160aa85eb85e94efe2995dd9fd69065ab30986f01abecdeff3a4a850f91fd5b0c1205d3bd29c54a5b5196c72833e8ee0b4ec1b3f0029146e7ba68fb633802d123172dbb9adb474d061bf99a52caab37381c87c4c587d855b26f00a622cd9a541f1e624c8d858288f60fc0272cbf6a5ef9905b87c1b5bde8f8ffcc1ae05481667ba2bfe403aa39523b5d40b5b0ac786754e48ed8734f8fdf23655d9e1c1301eaa278275d646bef28842c7a163714e60ae7b4bdd89f90e4ee06f749a706c97b80ab087ac5da3aa4a2f2e439dd4df5b0eb517f3687588963cdf68dd1099c5977995022a270ff3cb3d7d23e7645177ecab9043b10b79619dd89259a702d7d89dfe4c6da8db0b3e34d1d2ad14c375c90356efee7df09266e470a8bdefa264ac0963cfcf8bf0d886fad85334017a53d9f1f08c9d0c54002f810bbb0bbb2c554e4e973d7407e1c719604755bf77d9043d779b6776e48b442d64aebf9d70ef4361d84a17031284d6f57f367b4675c8f56c9e19e7fda9ab0bd511fdb2228e1894cba8dd7666a239fe864cc86a58fec66c26fd7692c267cad75cacca6d1fefae279e604afed9b76c51ef2f4a3e135d7b0b65eb6a9ba165442f144fc18ec9c1d4b00d285391ac1532207b27df3f5f2149d27923fa63eae666521d5bc2e2456927d463e96335ce21e5f269dc85e72555f96f7dd700c6aadfaeab20d92b4c296e8b195251711fe98aaca1102d48343b9e36fc1378ac3ad3b887aeab9a9bcc3ae03d341a0851c050813cf7d21b87422dfd5b90195fd96ef1e6a0837fda6497935e8fd0d84e4a45921f8893c8097c0dd63c221477792261d146c59fc1ed6429af0ac993edb627b1711e4244a3c2549158fb4aecac6832fe2089029f95c36f2a20eec6c114424edb085ae47da829b6b2cb8e009cd35989926382e139279bba4411e7b4f9ed530fa8059e20788bd17d2b2db994dad251d3cbc75603c4cf758a712f1dc0a8e50b2d5c82c62d1d883dde228bcb34a0a7b318ed9665924e7c5ab66e3c21cf4e1b908ab48ee926a1f6b27f78b650c5319bea5eb27ebca91aea67cebc3dff36baa09c81284820b6f56912626d14cad1fd68b3ffed6ac714a6af5e0eb7a9d50ea293cb825cc17f162a58f6c9c90fd7b51d8f29be68b4b9f7c58d0efaf0203e96202792f4dc9919f6944ebd57877ef7af07bd84de8ef79d98ea30a09cd5b4d813fab276c68f0aad5204d492bf113d737f929744a6162e62b1a828136b1180fb60f6f610380289116189996e16a42c9b429fb304ceebe75c5b13feb3e5c26ef8e44eeb6a97fe994549fb9a6ff079bbeaecf27188ba868c91e34edc3a901a9c1cfcf6b21c68d6de4b2cf94405f1d0e7f7122c47fef22a052dd1032f85ef01b0a35f0048852a7f90d063199a44c40f6c028ef64c91234d1b59c0824ec0209e676478"}], 0x1148}, 0x8) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x11, 0x0, @private, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr=0x64010100, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@local}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}}}}}}, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9010070900be0083"], 0x0}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r3, 0x8000000) syz_usb_connect$cdc_ncm(0x4, 0x7e, &(0x7f0000000440)={{0x12, 0x1, 0x111, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x8, 0x40, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "f0a7d3"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xff9b, 0xbca6}, {0x6, 0x24, 0x1a, 0x9, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xff, 0xa0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xff, 0x0, 0x81}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x5, 0x1, 0x40, 0x8, 0x6}, 0x5, &(0x7f0000000500)={0x5, 0xf, 0x5}, 0x3, [{0x8f, &(0x7f0000000540)=@string={0x8f, 0x3, "ba97e7a49ac2698330d2585dac014c6c2c3d81c157dffea92d12a8a6b374ff2b9df1d0b1d24b6da4faa5ce45c0e4136e0405e2c6bacf8aae87e4e6896a55f2f1681c3d90fabb66f4e2fea48dcc1207a9ef9afd6de8babdd95cf724ffcf5663d1a7bbbd3aab74ae85aaae946add1d9f8e553b9d5d1718eb188a06a4fbf4d85cfb2eeb9d0fc656cbfecc6d51eaec"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1401}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r6, 0x0, 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x87) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r8, &(0x7f00000000c0), 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) 3m34.699355548s ago: executing program 33 (id=552): setns(0xc9, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x200200, 0x0) write$binfmt_misc(r0, &(0x7f0000000340)="cd8f9e6dd9f2a888c58d2f6d4228d233861bd80e3337ac1906f35e8c8a9aac60a113f6204519ae14f828589fbb47c5176d7a0980f50a1102582ea3c818a43fa91878d5d773ead527725fb09a48925bfe9e6f5efaf27ba79a9ae805f6986b5a83c3b055980edb8c7956d07e2ae92995e163fd05a902bb6b1aedfe4a600a70f0231d7bc0bcff900d5cc70dcb69445fe4", 0x8f) r1 = socket(0x8, 0x5, 0x5) r2 = syz_io_uring_setup(0x120d, &(0x7f0000000100)={0x0, 0x7f11, 0x20000, 0x0, 0x359}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)) fcntl$notify(r2, 0x402, 0x2) r3 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0xf5, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r2, 0x1a, &(0x7f0000000400)={0x7}, 0x1) sendmsg$kcm(r1, &(0x7f0000002e00)={&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x4, 0x4, 0x2, 0x3}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="818a0bc88419c5a5c50cf3c22b649698d91c6dce1fc139f40220d391d9cc2eeafd8a7fb0f6df4a1bc5c985767e83508af99dc0b2a82818e64acaf5d65ce7e292099607520ea454c3f94f57da924ef8", 0x4f}], 0x2, &(0x7f0000001c80)=[{0x108, 0x111, 0x5, "215b21b3d543cdfd261c1b0d65a05a66f33deba53452e74442901448f805072b47592024474a2a7e1b8ee833547b8eaa2fb97ef26e7d05a77d44294c50bdcc367367974bd64b5f154a8478dfa19d15383b7e5fe2a99a225b0568afefa26b3bee549dcea5e026bb452010a17493751989cf26171dfb17dd090da16f7a5de814e101a472a94f9363129811f718dc32c0e363c256c0011977fab1f0afe5dc9c1a23c8d7fd9817ccc8a0ca9d52a6704cb01b898c31b03eef6543a7aa1a005897ec30bd292c20bee024a0db0af3db839fb63646d1ff3959c993b1127a7def98e91a3852a646edaa57ef8939b54fc6f58dffca41ba"}, {0x30, 0x103, 0xfffffffc, "6ebc2002e5911dc946633e6c21b042c7518c8b706629db8a014a2bbabb"}, {0x1010, 0x114, 0x5, "3032582597b9d996b455d6374728bd5c57b84b7ad4ec4f0e44e26014058fad73794830856a120a7730fcd4f26781d1ee19f476e06ef06d9f38e9d5fc321ce51ea158c97f195bc9d5d5ac92a183f14be183cadd4cb533977b33e45b367a962a66a4973f07a826a351be7b05535fe66f276e4aa0d18366e42e34510cb2a19aee3e6cc703a070bcc4ae9105bdf4cc370f9fb2a02f8c8b7d6abd7b3681232bef99584ca3ba372abd63d032daa140d91c313dd181b2c4c431865a9e5bc1dd7965276e5517f1bf367f9b63fe0a101d4688cd696f2e604eca55d26e8325c08019c344e6c8ec38f92e32f48fb749d352b9db02ffece9089c336e4284d4a01dba766ef0a88c80e095468085aa7570e5803b5822e4dcd85a700be284cf6c103cb8c951bfc4af655ca03ece3ba6e9d7305862b4ddcd3f3a2234b28bad237a2eeef64d8834a631e6f29dfd89fdd33f924fc8391dc21a71899c0c0f2da4c2daddd7dafaa316932bae48f9da9e66ebf6c28e8aeff88899e3aa3fbc4cd272f40e8bb278baf7324673cd60ea56fb4586cc4a8a4731017c98d88f2308081fac6719ccf411929bdcefc56ee64f9d2df2fe3395bf5049430c947029acc8d99937c1b847bca2e44cc680d034944ad5bb49638c5e3e24a0cf262888cd12a2b0e66478ff182ed8f54320e43638ce2beb1cfc43ba33414a0c4b7383d62e2fdfa349324c26a47a917be5fcc1df108ae4a6274ac6238ad7638c75a84a712031f30fc46f1d9390a937278146cc3ccc6294265ba8795c6cda7e73a45026e3e2eec988dac35915a5f7333ef4d2a713a3798e5663cd757506ba5f5c7764bfa77c11ac592289ef356f42ae4d5d47f34cc9ae34c6e9c45817b1151f02b7006e4b77281de52aacabcd57d7931a9c6b02e11330a9ce574aa3f0e37d19fa8be54b3beaaecfdbc49b7e6fa146bc6417201ef1a20f3c64d2f58213ab6d7703dd7c60baa3ba9c8334a825e28ecb39e674a9b12caf3155ef7debf63cbe9a1c89547334cb700617b0baea7db59811dfbf8e0d92f08b6e835f7594f57dbc0dfb0f04e3d38465c55aa956da78793c576c3aa5a3c0269166599d071a6527c8e553adad23cd4291d54e152d81e821e46850c9b3e4fd6262e06772ab276e28a3aef0c0f4ebb5fa9d1a2de9f9ca2c9e1decf441b88b19121bdc1dfb7c697ba2e9f7b00f40f4be901b40adfd98e7a11693c130ce4d1ff03f8811582cdeccfe601bf07d07704224cca73aba164ab83169546adf70c17cafd3a81766eb21d19683feaf3a48f76aab3d0448e3347b7bc4d1dfd9cba12f3117322d88ab59d997da11bf6a7fda273191a78dae1e6a0994d05feb86671b1a71a80f029c953aea209fe87119bb326f0d8c5c6b6b7e286271f981ee375413bc9be6022c5b5c13f640b6c840e042e13c27e622149476a20bdcadc171ce9f96ecf3a8416ab562879b540d0d398ca1af473a14ead3593ff3d4c8d2ace36aca9f742ef302d7dcaa095e910e475f09081fefdb6ccb7405914dd7232687577ba334e0d821eec9c8064ae63d8560df68f93fb53b614742fb7f672ec98f201c7b73960b02d3cf1bffe7d4475f0b2cedf74da676979011717b211d9cfc608f095317ff4e3c7ef02f3b6115bfc4159e43d2dd84c1e85f92c271a041af7ae73b7a32ee2e1b9e7d4eb6929e4601f0f0ca8b3f364206eed99343dae1cde2c8cd4a546eb7dd221a7e5b56c274072f61ac81750a891f1c88bd1f381f82bfe796eef6bf0533589d72eea08c143ad5720562ddfe0732dff808d6d1b1fb3720af75b0570efd4459015a18883151f949988df0592fe9d27d134cad4cfc06389630c1369cd973731559f866c41c2948bddecb05914700f41f13a9f96408ee8c64f4dc46a7583fc8972d82ccf839f86406e2cca1e394528ba717b35d87b323725c255eb7c1b84ca29fe37561f3ae9b98878193f05805702920b9d94465a4691514553080ef943dc0008a74f9f3f1d8edcd440b25043df9130ceb04371b0a5c255ae0ec63338b3713950fdafa7b6ee06c1caa2a1cd1332b412f22da2f998e6390372ea307838cbc0d8361f62d61a59c07c09ae028e83bd176281f46e6259511d9bfc061cb00ec547b4a9bcb5c65379e0ba4907d19eca6f94e2ac248aff2e86f48b65136d641b6c9a96111103a03595c5410b889866fc18ed76b8b9302a63750bb02dd68eddbdf9705eceebb5bb0e9914022b6cfaaa8b594a5e323e655d22f9a51aa2fd84cf3c99b13b0bafaab26c0640283a5aaa486879a2104be13a5e18cb09b70e28f8e12b134e9779bbff5c83c15ab0eb0326bf04d59fce9d9f860354ced8f6d4f5440d4c2cf0f9d4eaddb1b414f7373a56477e0f99c5dafdcf73f6ef88226c5f06b927c80e02df4e50cf200e410a70b97654c439b8477c8d071223c76ee479be53a4a394ca7c14d31f6a94a997538d89639cff47bda62831af2089edcc7b9a4bcfa6f323b53d1c4659d371561f7279883d5ff0ed2c9d83d33fb5e1fd6d7e0ba1e77b9941f942869c83f97668587b54aa742016280ec0caf4feaa47ede3a2a36d885d4dade796bfa8509ee5868ab57eb6489ea62e668b62175abda93d06b5027b8a5c669ade8ed43551186e1e76a70c3b091b54bfbfb7b0cb890cb5d21f785b1f85502b283cbf4225ed69cd73285f933fdd2e9befc83b1fcc4490cf2ce74acdcd0e7ce4563c16f55e240bc7c5e95ab6d3855e687d4b7ee23464812e30aceb4674fec0bd020c1338a32a9ef78665d890991914e27cf0b8745a84293a524566ccc694e27048f3e235b3e3264d0d80e76c92ed69250a975c77b27765b4eb3ae8a8e08172964313bdaedf714e6fa77ca94fdafe1fead2c4f5fbcc89cb8417286510784e6088b46e65ee8172d76ccff43f38ae53b48ecbf60c34b44f7d925ca16bee4eeaec58d1e8e6f6da67d4c491ae6fac417016e10ac54a18b406c2f846a416b184c2f8ad6b762b352edd1111232db10e1a5d1916c63fc13af8b04046f503020c1fa86d36c15a55d8d1cf39424ba76073e3b7ec5c3405b3780b5617cd327ee87d69bebaec8550270a0b820f9f5830f9763ab7a8f84da09a4923c3713ec17af40da458548af23e867a81df26ed3480d515911f372936a41c5f29ed78a7b2801cd6b9820a4ff5bb98223059d0ad0bbd0641dffd53f745d8c27fd539e67b1be677cc51d6eab551fb912162903919c9d262130f280f822018febb7e43782df7d9e8f8569425e7f8d5a4344c9ba9d9d521a92e96dd129a40fbeae2f593a6aedbb47ded9c52f75949381aef441ed42729b02ee541dbda2416881118a60af1c2911d38ab7bf8733aa637d1806287782917b91daeeed4c3d5c9f909fe64d4bf1e7e912962e585e65b1008b66dbef226a8af7067ac803fbe954582155ac77c071725fe4ade0c31059a33dac55bd8aa4bae57f7fd9ec60854e95310b23e54c93b4ca60d4374f0872e43d6cc74cf9a4c218fa568773f06bfad044ab9ef52038e84f90cacdbf4aaf13a5f65e5f6424c83aaebc012134cb3e81dea1830db6466c118fd94467ac3504ce1ba336cde20a3d0f1bc54769d5b41a03f6800c0edc585e3be79c6b528e701cfe5018e3351a1d60d3afe93c06a72116b7692d8a159feb875d60c1f3bfe7fb3894d5b9e23319ed61bd0b43fc31100db0577f1e095bfdd56a9d3cf5202690f76b4622d47c426e099e47a993f4a5d13a99be355ff9c33ae1a3e1b9f517cd985fd5f6d78442fe78b714c418f02add9d7b6aa14b2511c4d6aad3c84834a0b5ea6876c98908e2c88ffc2ac40a8b5959a9c5e1322005f8de379629b9282426ea97261bea5b06f7e55d11b75da5e7a671b5dd219ade473a7f77d8fea932692a77496d773e67e5ea082b1113cd0c0906d20cfac874d7e65196df1a85440ed6ab88f8d0b7ec4a33a3f4ae6e67660613e9dbcb58af9352f5acda5f1e4150fb327587441b3a63b3196874b6f94acd0e2faabcab9f638f91bb5aa927b8f5eb4fd7ea09714042bbb7c4e60d38a489922d1c9258dce6d1770833460a306c8bc96fc9aa78f72d7c5bac9fd81c7126d8fc39d91c425682776368236367fa524021262631832a3a7cf73dc2b93d08039c407f0c0faab60530fe9ae742f12dd1f17eb1d43809b662abe036dfa6bfb81897153ae4378f0a0826190af189f453efab46ed1b5fe411694c15dd838310e5600eab4ba4b501d984735947fb9696ccab5ca9458efa3c9f0e3b864bdfd3a05b66fa68332970a53f4d696093bf073fb5a3d285406bedb4b3cf0a22171493a75369be3f2a8d558574585505827c3fc7dafb011b3067e8212bd3ca93d1bebdf9d403e15a4b51bae978af160aa85eb85e94efe2995dd9fd69065ab30986f01abecdeff3a4a850f91fd5b0c1205d3bd29c54a5b5196c72833e8ee0b4ec1b3f0029146e7ba68fb633802d123172dbb9adb474d061bf99a52caab37381c87c4c587d855b26f00a622cd9a541f1e624c8d858288f60fc0272cbf6a5ef9905b87c1b5bde8f8ffcc1ae05481667ba2bfe403aa39523b5d40b5b0ac786754e48ed8734f8fdf23655d9e1c1301eaa278275d646bef28842c7a163714e60ae7b4bdd89f90e4ee06f749a706c97b80ab087ac5da3aa4a2f2e439dd4df5b0eb517f3687588963cdf68dd1099c5977995022a270ff3cb3d7d23e7645177ecab9043b10b79619dd89259a702d7d89dfe4c6da8db0b3e34d1d2ad14c375c90356efee7df09266e470a8bdefa264ac0963cfcf8bf0d886fad85334017a53d9f1f08c9d0c54002f810bbb0bbb2c554e4e973d7407e1c719604755bf77d9043d779b6776e48b442d64aebf9d70ef4361d84a17031284d6f57f367b4675c8f56c9e19e7fda9ab0bd511fdb2228e1894cba8dd7666a239fe864cc86a58fec66c26fd7692c267cad75cacca6d1fefae279e604afed9b76c51ef2f4a3e135d7b0b65eb6a9ba165442f144fc18ec9c1d4b00d285391ac1532207b27df3f5f2149d27923fa63eae666521d5bc2e2456927d463e96335ce21e5f269dc85e72555f96f7dd700c6aadfaeab20d92b4c296e8b195251711fe98aaca1102d48343b9e36fc1378ac3ad3b887aeab9a9bcc3ae03d341a0851c050813cf7d21b87422dfd5b90195fd96ef1e6a0837fda6497935e8fd0d84e4a45921f8893c8097c0dd63c221477792261d146c59fc1ed6429af0ac993edb627b1711e4244a3c2549158fb4aecac6832fe2089029f95c36f2a20eec6c114424edb085ae47da829b6b2cb8e009cd35989926382e139279bba4411e7b4f9ed530fa8059e20788bd17d2b2db994dad251d3cbc75603c4cf758a712f1dc0a8e50b2d5c82c62d1d883dde228bcb34a0a7b318ed9665924e7c5ab66e3c21cf4e1b908ab48ee926a1f6b27f78b650c5319bea5eb27ebca91aea67cebc3dff36baa09c81284820b6f56912626d14cad1fd68b3ffed6ac714a6af5e0eb7a9d50ea293cb825cc17f162a58f6c9c90fd7b51d8f29be68b4b9f7c58d0efaf0203e96202792f4dc9919f6944ebd57877ef7af07bd84de8ef79d98ea30a09cd5b4d813fab276c68f0aad5204d492bf113d737f929744a6162e62b1a828136b1180fb60f6f610380289116189996e16a42c9b429fb304ceebe75c5b13feb3e5c26ef8e44eeb6a97fe994549fb9a6ff079bbeaecf27188ba868c91e34edc3a901a9c1cfcf6b21c68d6de4b2cf94405f1d0e7f7122c47fef22a052dd1032f85ef01b0a35f0048852a7f90d063199a44c40f6c028ef64c91234d1b59c0824ec0209e676478"}], 0x1148}, 0x8) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x11, 0x0, @private, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr=0x64010100, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@local}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}}}}}}, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9010070900be0083"], 0x0}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r3, 0x8000000) syz_usb_connect$cdc_ncm(0x4, 0x7e, &(0x7f0000000440)={{0x12, 0x1, 0x111, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x8, 0x40, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "f0a7d3"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xff9b, 0xbca6}, {0x6, 0x24, 0x1a, 0x9, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xfd, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xff, 0xa0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xff, 0x0, 0x81}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x5, 0x1, 0x40, 0x8, 0x6}, 0x5, &(0x7f0000000500)={0x5, 0xf, 0x5}, 0x3, [{0x8f, &(0x7f0000000540)=@string={0x8f, 0x3, "ba97e7a49ac2698330d2585dac014c6c2c3d81c157dffea92d12a8a6b374ff2b9df1d0b1d24b6da4faa5ce45c0e4136e0405e2c6bacf8aae87e4e6896a55f2f1681c3d90fabb66f4e2fea48dcc1207a9ef9afd6de8babdd95cf724ffcf5663d1a7bbbd3aab74ae85aaae946add1d9f8e553b9d5d1718eb188a06a4fbf4d85cfb2eeb9d0fc656cbfecc6d51eaec"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1401}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r6, 0x0, 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x87) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r8, &(0x7f00000000c0), 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) 3m28.210478962s ago: executing program 2 (id=567): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x800e34, 0x173e, 0xfffffffffffffffc, 0x400010003, 0x1, 0x1000, 0x1000000000008, 0x7d, 0x0, 0x8000000000, 0xc, 0x2, 0x1, 0x2000000000001, 0x4], 0xeeee0000, 0x304685}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) 3m27.884839781s ago: executing program 2 (id=570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000b6cc0000000000000024000000020000000000000000000006040848fe6301000084ffff0000000000000100b63f0200000000001f1b52dd2c8bd795247b63b848604874120956ff77e0da01f0132fc7f13bcd2a7731cebf90fdf2e68b67d57ee091e2209a82afae1980c8b8a17a009f5dad7c2b9018d1107082a74143854014849aed7fe994d5b17a1f084d2bbfddea66be696a78384269e0519aacd9684f67c1"], 0x0, 0x3e}, 0x20) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x7259d000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000080)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000140)={0xa, {0x1, 0x3, 0xff}}, 0xa) 3m26.308851521s ago: executing program 2 (id=574): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_usb_connect$cdc_ncm(0x4, 0x85, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0x4, 0x80, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "24afb5"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x6, 0xfffb, 0xb2}, {0x6, 0x24, 0x1a, 0x7f, 0x2b}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x8d, 0x3ec}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x5f, 0x4, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0xff, 0x4c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x8, 0x5}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0xfa, 0xff, 0x3, 0x10}, 0x25, &(0x7f0000000500)={0x5, 0xf, 0x25, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x46, 0x61, 0x8, 0x3, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0x2e, 0x1, 0x7, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x94, 0x4, 0x20, 0x6}]}, 0x2, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000680)={0x14, &(0x7f0000000600)={0x0, 0x7, 0xa, {0xa, 0x4, "06df461ef5941858"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000800)={0x20, 0x15, 0xea, "f0b17359c371ee673bc9a5d2eca1fa39798b2e6ac2f12e31e80735738c876c5d9750f549da6386335dc959291a195dcdfbae4e1c1f3b5267a39ee4b466ebc8c3b278c2e2e135d7caba75f375b839edc3fed0b13a2ba82e26115a94724ee5e424f3c85dc03b9676d72c1f7e85623f4ef80c1e70cea035b577016f0b46375d61558fd45046009935fa31dd1b23736dde9b0236383b4b445828d88dfcb839c564177f7ccf84d5d33badd4ff8380c07b68600fc40b4bf0eeaac78723a1677cbed7370a4c8d67294b3ce1ac0e943fa8a493b73e034cbf3f24a1f0250a0e088255091aabc591c9c2fa89f5c12d"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0xfff, 0x6e, 0x10000, 0x7fff, 0x9, 0x1, 0x40, 0x6, 0x5, 0x9, 0x6, 0xff7f}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000a00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000a80)={0x20, 0x89, 0x2, 0x1}}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000009000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0100000004000000000000000000000000002000370500f30000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b080100000000000014ca54f7ad36f04b093ef528dd4bee09bf6302c5856727c712f90fbfc92509fdb076ed9742d66c66788c6e40b70f0f00d1b5e7321e138583d3b86d3ac97ea0074e2bcd36e588f4ce89b75a39000000000000000000"], 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006280)={0x0, 0x0}, &(0x7f00000062c0)=0xc) getresgid(&(0x7f0000006300), &(0x7f0000006340), &(0x7f0000006380)=0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="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", 0x2000, &(0x7f0000006500)={&(0x7f0000004080)={0x50, 0x0, 0xd9, {0x7, 0x2d, 0x3, 0x8000000, 0xffff, 0x8, 0x1, 0x3, 0x0, 0x0, 0x100, 0x8}}, &(0x7f0000004100)={0x18, 0xfffffffffffffff5, 0x8e2, {0x3}}, &(0x7f0000004140)={0x18, 0xfffffffffffffff5, 0x4}, &(0x7f0000004180)={0x18, 0x0, 0x9, {0x8}}, &(0x7f00000041c0)={0x18, 0x0, 0x7, {0x42}}, &(0x7f0000004240)={0x28, 0x0, 0x401, {{0x6, 0xf9e8, 0x1}}}, &(0x7f0000004280)={0x60, 0x0, 0x7fffffffffffffff, {{0x100000001, 0x8, 0x7f, 0x6, 0x10, 0x2ccf788a, 0x5, 0x4fd9}}}, &(0x7f0000004300)={0x18, 0x0, 0x3d, {0x8}}, &(0x7f0000004340)={0x12, 0x0, 0x5, {'/\x00'}}, &(0x7f0000004380)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000004440)={0x78, 0xffffffffffffffda, 0x3, {0xa, 0x0, 0x0, {0x6, 0x5b28, 0x6, 0x7, 0x4, 0x0, 0x0, 0x7, 0x5, 0xa000, 0x57, 0x0, 0x0, 0x7, 0x8b48}}}, &(0x7f0000005540)={0x90, 0xffffffffffffffda, 0xc, {0x0, 0x3, 0x4, 0xfff, 0x727, 0x4, {0x6, 0x1, 0x9, 0x6, 0x5, 0x10000, 0x6, 0x2, 0x2, 0x4000, 0x4, 0x0, 0x0, 0x0, 0xc4}}}, &(0x7f0000005600)={0x88, 0x0, 0x0, [{0x0, 0x0, 0x0, 0xfffffffc}, {0x6, 0x4, 0x6, 0xc, 'team0\x00'}, {0x2, 0x4, 0x5, 0x9, ')^\':-'}, {0x3, 0xfffffffffffffffc, 0x1, 0xb1f7, '\x00'}]}, &(0x7f0000005bc0)={0x5a8, 0xfffffffffffffffe, 0xfffffffffffffffa, [{{0x5, 0x3, 0x101, 0x6, 0x8e4, 0xfff, {0x6, 0x2, 0xccee, 0x5, 0x400, 0x8, 0xf43, 0x9, 0xf95, 0x4000, 0x8, 0x0, 0x0, 0x1, 0x9}}, {0x6, 0xccf, 0x0, 0x4}}, {{0x3, 0x3, 0x8, 0x9, 0x80000000, 0x8, {0x5, 0x8000000000000000, 0x7, 0x9, 0x7, 0x2, 0x0, 0x10, 0x7, 0x0, 0x7f, 0x0, 0x0, 0xa, 0xa}}, {0x4, 0x5, 0xf, 0xc, 'batadv_slave_0\x00'}}, {{0x5, 0x3, 0x5, 0xb0fb, 0x401, 0x675b2907, {0x5, 0x10000, 0x101, 0x5, 0x303, 0x5, 0xfffff153, 0x1, 0xffff, 0x1000, 0xcf2, 0x0, 0x0, 0x4d, 0x6}}, {0x2, 0x4, 0x6, 0x9, 'team0\x00'}}, {{0x3, 0x3, 0x49ba, 0x4, 0x4, 0x7, {0x1, 0x5, 0x200, 0x2, 0x4, 0xfffffffeffffffff, 0xee, 0x2, 0x0, 0x0, 0x22a, 0x0, 0x0, 0x0, 0x7}}, {0x1, 0x40, 0x4, 0x1, '\'(&^'}}, {{0x2, 0x1, 0x80, 0x10000, 0x7, 0xf, {0x3, 0x9, 0xffff, 0x64, 0x40, 0x4, 0x7f, 0xfffffffa, 0xe6f, 0x4000, 0x2, 0x0, 0x0, 0x8, 0xfffffffa}}, {0x5, 0xa774, 0x1, 0x0, ','}}, {{0x4, 0x2, 0x8, 0x2, 0xff, 0x8, {0x2, 0x3, 0x9, 0x7, 0x3, 0x4, 0x9, 0x3, 0x5, 0x4000, 0x8001, 0x0, 0x0, 0x8, 0x7fffffff}}, {0x5, 0x4, 0x2, 0x0, '*('}}, {{0x6, 0x2, 0x7, 0x10001, 0x4, 0xf81, {0x1, 0x7, 0xfffffffffffffffe, 0x7, 0xfffffffffffffff8, 0x100, 0x4, 0x25, 0xfffffff1, 0x2000, 0x6410, 0x0, 0x0, 0x7fffffff, 0x1}}, {0x0, 0x80000000, 0x0, 0x5f0}}, {{0x6, 0x1, 0x400, 0x41a, 0x5, 0x105a99c4, {0x5, 0x7, 0xfff, 0x5, 0x8, 0x44e, 0x8, 0x1, 0x1, 0xc000, 0xdf4, 0x0, 0xee01, 0x5, 0x3}}, {0x4, 0x7, 0x4, 0xfffffffe, '\xa4:Z\xe3'}}, {{0x0, 0x0, 0x6, 0x1ff, 0x2, 0x5, {0x3, 0x6, 0x0, 0x800, 0x101, 0xf, 0x3, 0xffffff65, 0x4, 0x1000, 0x5, 0x0, 0xee00, 0x40, 0x80000000}}, {0x0, 0x3ff, 0x6, 0x2, 'AUDIT\x00'}}]}, &(0x7f0000006180)={0xa0, 0xffffffffffffffda, 0x1ff, {{0x1, 0x0, 0x8, 0x10, 0x8000, 0x9, {0x0, 0x54, 0x100000001, 0x28, 0x5, 0xfc21, 0xfffffffc, 0x7, 0xef96, 0x8000, 0x0, 0x0, r5, 0x8e8, 0xfc}}}}, &(0x7f0000006240)={0x20, 0xfffffffffffffff5, 0x7fff, {0x5, 0x0, 0xf, 0x2}}, &(0x7f00000063c0)={0x130, 0xfffffffffffffffe, 0x8, {0x6e55c125, 0xffffff71, 0x0, '\x00', {0x5002, 0x3, 0xa81, 0x7, r6, r7, 0x2000, '\x00', 0xfffffffffffffff8, 0x1, 0x6e, 0x9, {0x6}, {0xfe00000000000000, 0x6}, {0xdefa, 0x6}, {0x28a2eb5f, 0xac3}, 0x279, 0x3, 0x3, 0x7ff}}}}) r8 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r8, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @local, 0xf66e}}, 0x24) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r8, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x388, 0xffffffff, 0xd0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x17fe582d91d0b905}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @remote, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0x9, 0x4, 0x44}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x4, 0x800, 0xb9e, 0x6, 0x8, 0x440, 0x4], 0x13}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6fb555828d82cb"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, 0x0}, &(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 3m21.66491501s ago: executing program 2 (id=585): r0 = semget$private(0x0, 0x2, 0x344) semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f0000000040)=""/5) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00') sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9820}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x80000003}]}}}, @IFLA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 2m27.776778445s ago: executing program 2 (id=586): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x2, {{0xa, 0x4622, 0x407, @mcast2, 0x7f}}, 0x1}, 0x90) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10b200, 0x2d) 2m27.77651873s ago: executing program 2 (id=587): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0xfffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) accept4(r1, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) 2m27.771092487s ago: executing program 34 (id=587): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0xfffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) accept4(r1, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) 8.720733488s ago: executing program 6 (id=1051): r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) r1 = socket(0x10, 0x803, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r9 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) recvfrom$inet_nvme(r1, &(0x7f0000000240)=""/123, 0x7b, 0x100, 0x0, 0x0) shmctl$IPC_INFO(r9, 0x3, &(0x7f0000000300)=""/222) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="080000000400000004000000040000000000ec00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 6.86762894s ago: executing program 7 (id=1049): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x2000) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0xf1, &(0x7f00000004c0)={@multicast, @link_local, @void, {@ipv4={0x800, @icmp={{0xe, 0x4, 0x0, 0x4, 0xe3, 0x65, 0x0, 0x3, 0x1, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0xb, 0xd4, [@local, @multicast1]}, @ssrr={0x89, 0xb, 0x76, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x22}]}, @rr={0x7, 0xb, 0xfa, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x2, 0x3, 0x0, {0x27, 0x4, 0x1, 0x5, 0x1000, 0x64, 0x6, 0x9, 0x89, 0xfc, @multicast2, @broadcast, {[@noop, @timestamp_addr={0x44, 0x4, 0x9f, 0x1, 0x9}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x2, 0x2}, {0x1, 0x7, "ce47049125"}, {0x2, 0xb, "4efd85a3415e523086"}]}, @generic={0x94, 0x12, "0003bced6953c5090e00ea6906cb8057"}, @noop, @generic={0x86, 0x4, "b7da"}, @rr={0x7, 0xb, 0x72, [@empty, @multicast1]}, @rr={0x7, 0xf, 0x4b, [@local, @loopback, @dev={0xac, 0x14, 0x14, 0xd}]}, @ssrr={0x89, 0x13, 0x8b, [@loopback, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0xbc, 0x3, 0x9, [{@multicast1, 0x400}, {@broadcast, 0x8}, {@private=0xa010102, 0x9}, {@empty, 0x9af}]}]}}, "179e5d0cc845d0"}}}}}, 0x0) listen(r0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x20008004) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904"], 0x0) 6.254404974s ago: executing program 5 (id=1050): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = getpid() futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mkdirat(0xffffffffffffff9c, 0x0, 0x180) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000180)={0x4, 0x0, [{0x2, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x80000019, 0x6, 0x6, 0xfffffffe, 0x0, 0x0, 0xd}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0xe}, {0x80000001, 0xa948a1e9, 0x7, 0x1008, 0x56b7, 0x110, 0x3}]}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x9, 0x2002) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)={0x38, r10, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 6.107777965s ago: executing program 0 (id=1052): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x60001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x1e, 0x0, 0x29) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @private=0xa010102, 0x1, "103ddea1080ccd149bc203201089001e0a96a2acf04e42a64ad6ec6528956adb", 0xf, 0x1c00000, 0xfffffff8, 0x6}, 0x3c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x4e20, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x0, 0x800, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0x4001, 0x6}}, 0xe8) listen(r2, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_emit_ethernet(0x2c, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x0) fcntl$getown(r2, 0x9) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0)=0x4, 0x4) sendmmsg$inet6(r3, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, '\x00', 0x11}, 0x9}, 0x1c, 0x0}}], 0x1, 0x81) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x903, 0x0) close(r4) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x2, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000280)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 5.129330067s ago: executing program 0 (id=1053): syz_usb_connect$uac1(0x1, 0x90, &(0x7f0000000240)=ANY=[@ANYBLOB="1201010200000008630780204000010203010902"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)) 4.999105433s ago: executing program 4 (id=1055): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000200000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 4.933670805s ago: executing program 6 (id=1056): ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000040)={'vlan0\x00', 0xffffffffffffffff, 0x9}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="1bef0c6d4d228ffdf28425e0bd7fd801815f48cd9fc514db9b84ec4be5b4421648d00603ef0218382a444323e73752cd3f81ea1e18c6c03e8044851e8e95060ad8bf03c19b", 0x45) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000240)={0x5, 0x800, 0x3, 0x3, 0xb}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000380)=[{r1, 0x2000}, {r2, 0xc8}, {r1, 0x400}, {r0, 0x20c4}, {r3, 0x551c}, {r0, 0x2500}, {r0, 0x4408}, {r0, 0x4}, {r1, 0xa000}, {r0, 0x40}], 0xa, 0x1) close(r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f00000004c0)={0xfffffffffffffffd, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) select(0x40, &(0x7f0000000500)={0xd, 0x7, 0x2, 0x3, 0x10000, 0x8, 0x9, 0x6}, &(0x7f0000000540)={0xf978, 0x5, 0x0, 0x0, 0x10, 0x5, 0x3, 0x2}, &(0x7f0000000580)={0x5, 0x10, 0x7fffffff, 0x5, 0xb9, 0x0, 0x1000, 0x9}, &(0x7f00000005c0)={0x0, 0xea60}) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000000}, 0x4040040) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000780)={@mcast1, 0x0}, &(0x7f00000007c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x4, 0x48, 0x2, 0x5, 0x2, @local, @empty, 0x7, 0x700, 0x331b, 0x3}}) sendmsg$nl_route(r0, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@ipv4_delroute={0x40, 0x19, 0x200, 0x70bd29, 0x25dfdbff, {0x2, 0x20, 0x10, 0x4, 0xfd, 0x4, 0xfe, 0x6, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0x9, 0x7b, r6}}, @RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}, @RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_IIF={0x8, 0x3, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c088}, 0x4000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@ifindex=r7, 0x37, 0x0, 0xb1a, &(0x7f0000000980)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000c40)={r0, &(0x7f0000000ac0)="e54c5b01aaf7fb3d02e17fec8149c85a294f02bad19dc93d6f7f4cd32792ee9275a5b1b5f84f8cf01e4bc4d5efb46b7dd59d9c18eb65f357f114c495a89cc67dfd60063c6baab93ec36069e3b50d3a01430661ec18940072e43931fc977062b0f42784fcbd07e179585c14d764b3403f", &(0x7f0000000b40)=""/196}, 0x20) getpeername(r0, &(0x7f0000000c80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000d00)=0x80) close_range(r3, r0, 0x0) socket$inet6(0xa, 0x6, 0x7) r8 = fcntl$getown(r2, 0x9) syz_open_procfs(r8, &(0x7f0000000d40)='oom_score\x00') gettimeofday(&(0x7f0000000d80), &(0x7f0000000dc0)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r9, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) 4.833774093s ago: executing program 4 (id=1057): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = inotify_init() r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x202, &(0x7f00000001c0)={0x0}) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) 4.825581006s ago: executing program 5 (id=1058): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 4.698719562s ago: executing program 4 (id=1059): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) getxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) 4.652443798s ago: executing program 6 (id=1060): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="53000300"], 0x8) 4.588780182s ago: executing program 6 (id=1061): syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) syz_ublk_setup_io_uring(0x753c, &(0x7f0000000340)={0x0, 0x4100, 0x800, 0x2, 0x127}, &(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) r4 = mmap$IORING_OFF_CQ_RING(0x0, 0x5, 0x7, 0x40010, 0xffffffffffffffff, 0x8000000) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000180)=0xe0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES16=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0xbc, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfe}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf8a0}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008880}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000037c0)={r6, 0x20, &(0x7f0000003780)={&(0x7f0000002700)=""/4096, 0x1000, 0x0, &(0x7f0000003700)=""/68, 0x44}}, 0x10) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18010154000000000000000000850000000000c400"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r6, r5, 0x2f}, 0x20) ioctl$KVM_GET_DEBUGREGS(r6, 0x8080aea1, &(0x7f0000000500)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002d00070100000000ffdbdf25017c0000180001801400"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c010) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) syz_io_uring_submit(r3, r4, 0x0, &(0x7f0000000480)=@IORING_OP_NOP={0x0, 0x20, 0x0, r2, 0x10001, 0x10001, 0x8, 0x2f, 0x0, {0x7}}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.500668512s ago: executing program 4 (id=1062): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) time(0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r5, 0x0, r4, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x1b) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000f7ff007911b80000000000851000000200000095000007000000009500a50500000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) read(r6, 0x0, 0x0) 3.801598003s ago: executing program 5 (id=1063): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="7a0af8ff7525736cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f09"], &(0x7f0000000100)='GPL\x00'}, 0x94) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) fanotify_init(0x4000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r6, 0x29, 0xce, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24048085) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000066c0)=[{&(0x7f0000005380)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006640)=""/126, 0x7e}], 0x6}, 0x1}], 0x1, 0x40000021, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 3.617300585s ago: executing program 6 (id=1064): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x60001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x1e, 0x0, 0x29) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @private=0xa010102, 0x1, "103ddea1080ccd149bc203201089001e0a96a2acf04e42a64ad6ec6528956adb", 0xf, 0x1c00000, 0xfffffff8, 0x6}, 0x3c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x4e20, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x0, 0x800, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0x4001, 0x6}}, 0xe8) listen(r2, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_emit_ethernet(0x2c, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x0) fcntl$getown(r2, 0x9) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0)=0x4, 0x4) sendmmsg$inet6(r3, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, '\x00', 0x11}, 0x9}, 0x1c, 0x0}}], 0x1, 0x81) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x903, 0x0) close(r4) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x2, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000280)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.606404357s ago: executing program 0 (id=1065): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x24040810) 3.518491413s ago: executing program 4 (id=1066): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000700)={@broadcast, @random="9e4338bf2d14", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @empty, [], "d5d2a36180eb6baa"}}}}}}}, 0x0) 3.272345368s ago: executing program 7 (id=1067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="fc58d64003030303dd12578bb909d68214000000d1f58c4a844400f21dcb89ce874fdb0e3ac550002f8468b6b71b7c2567a41d0ac5969cce8296683f3680306f1238efc08c064dc34e70577bbad808db8e356515bb83b8707ccddbd72e67932a61cd5faa5502f5511df75904c0e25c0b7e397d17b4c4020138dbb1e145c90748"], 0x30}, 0x1, 0x0, 0x0, 0x4044815}, 0x24000814) 2.357949844s ago: executing program 0 (id=1068): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, 0x50) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200020, 0x0, 0x0, 0x8, 0x1000004}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4], 0x28}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) 2.355854922s ago: executing program 4 (id=1069): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = getpid() futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000180)={0x4, 0x0, [{0x2, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x80000019, 0x6, 0x6, 0xfffffffe, 0x0, 0x0, 0xd}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0xe}, {0x80000001, 0xa948a1e9, 0x7, 0x1008, 0x56b7, 0x110, 0x3}]}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x9, 0x2002) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)={0x38, r10, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 2.302641127s ago: executing program 7 (id=1070): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = inotify_init() r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x202, &(0x7f00000001c0)={0x0}) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) 2.114125356s ago: executing program 6 (id=1071): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x12, 0xffffffffffffffff, 0x0) close(r3) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x509301) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0xfffffffffffffffe, 0x40000000000, 0xffffffffffffffff, 0xffffffeffffffffe, 0x0, 0x6, 0x3, 0x0, 0x7, 0x200000000000000, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3ff, 0x0, 0xfffffffffffffffc, 0x4, 0x4000000000, 0x6, 0x1, 0x40, 0x0, 0xfffffffffffffffd, 0x80100200000, 0xb, 0x8000000000000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x1a8e, 0x0, 0xfffffffffffffffe, 0x0, 0xbb4e, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x6, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0xfffffffffffffffc, 0x80000000000000, 0x8, 0xfffffffffffffffe, 0x200000000, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x4, 0x81, 0xfffffffffffffff9, 0x0, 0x200000000, 0x0, 0x9, 0x0, 0x1, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "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"}) r7 = fsopen(&(0x7f0000000740)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000180)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, 0x0, 0x0, 0x5, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}) 2.10252444s ago: executing program 5 (id=1072): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) getxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) 1.959134993s ago: executing program 5 (id=1073): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x48, r2, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x46}}}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xffffffff, 0xc9b0, 0x4, 0xfffffff9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffffff63}]}]}, 0x48}}, 0x44004) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfbfff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)='*s', 0x2}], 0x1}}], 0x1, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r6, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r6, &(0x7f00000004c0)={&(0x7f0000000800)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)="9414166ac1b574650810a523907a7e6e287e87", 0x13}, {0x0}], 0x2, 0x0, 0x0, 0x900}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000240)=0x4) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r9, 0x7005) ioctl$RTC_IRQP_SET(r9, 0x4008700c, 0x885) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000410}, 0xc, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0100001200040028bd7000fbdbdf250159020b4e224e2308000000f8ffffff060000000800000007000000ff070000030000000e000000e5ea2a4ade40cb3d96e100b1824304e3e6b62af3385b0f74e068a77912", @ANYRES32=r7, @ANYBLOB="06000000ff0700000800000002000000cd00010018bf38d4dfea46fa683d7f830945bd06c04c44ad4995256c5cfe99a197c11a26dd384d6e3ef48d437b62f87d8fe6a04878c62b4865e70218c4ab3e977cf538b16a7e20fa7ed314821449853181d4ce8a68aad03ed7cc9dfd777d145b3d43fa7502fa33c313635ee56eb3f6b9be33f02931e13b186664049e0bf48a6008bc1dc3fcda6d4eb7e479aefc5bfdbca956a01a3278ec82dccd00e0b72352514d3ac4f4b9202fde30f1cce4f773e9d99435553d"], 0x11c}}, 0x50) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x100) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000001c0)={0x2, 0x101, 0xfffffc00, 0x400, 0x3, "54d208457f0b0000000001040000000000f700"}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, r11, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0) 1.915344004s ago: executing program 7 (id=1074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x58}}, 0x4000000) 1.759870515s ago: executing program 7 (id=1075): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/serial8250/driver/unbind\x00', 0x1, 0x0) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='bd', 0x2) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/bdc/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='serial8250\x00', 0xb) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='snd_aloop.0\x00', 0xc) r9 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r9) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 1.023749093s ago: executing program 0 (id=1076): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) time(0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r5, 0x0, r4, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x1b) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000f7ff007911b80000000000851000000200000095000007000000009500a50500000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) read(r6, 0x0, 0x0) 803.767708ms ago: executing program 5 (id=1077): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9, 0x6}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffffffffff, 0xb00) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000140)={0x80000000, 0x251, "cd5544b6651ed19c4ddab0a17cf891fcf3a5d1d2fdc5f86d6d96287ec0b5c0c5", 0xb8, 0x0, 0x0, 0x7, 0x0, 0x7fffffff, 0x7, 0x3, [0xd, 0xdb9, 0x8, 0x2]}) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f0000000180)=""/142, &(0x7f0000000340), &(0x7f0000000440), 0x1, r2}, 0x38) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) flock(r1, 0x16) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f76800090501"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x200080) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000080)={0x0, @motion_det}) 79.752457ms ago: executing program 0 (id=1078): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x24040810) 0s ago: executing program 7 (id=1079): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): 245.529025][ T7895] loop2: p1 start 1601398130 is beyond EOD, truncated [ 245.542651][ T7895] loop2: p2 start 1702059890 is beyond EOD, truncated [ 245.595110][ T30] audit: type=1400 audit(1785553203.129:622): avc: denied { getopt } for pid=7901 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 245.601533][ T7903] tmpfs: Unknown parameter 'P‘ußnteøt' [ 245.654498][ T7888] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 245.660766][ T7888] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 245.673330][ T7888] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 245.691483][ T7888] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 245.705588][ T7888] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 245.744221][ T7888] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 245.775574][ T7888] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 245.806993][ T7563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.037485][ T7563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.131549][ T804] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 246.384011][ T804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 246.448131][ T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.449129][ T7916] fuse: Bad value for 'group_id' [ 246.477262][ T804] usb 1-1: config 0 has no interfaces? [ 246.539338][ T30] audit: type=1400 audit(1785553204.069:623): avc: denied { connect } for pid=7915 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 246.651499][ T804] usb 1-1: string descriptor 0 read error: -22 [ 246.661377][ T804] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 246.670843][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.686573][ T804] usb 1-1: config 0 descriptor?? [ 246.716494][ T7916] fuse: Bad value for 'group_id' [ 246.922841][ T30] audit: type=1400 audit(1785553204.459:624): avc: denied { read } for pid=7915 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 247.121328][ T4927] Bluetooth: hci1: command 0x0c1a tx timeout [ 247.229878][ T7563] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.462885][ T7925] futex_wake_op: syz.2.544 tries to shift op by 144; fix this program [ 247.661473][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 247.710308][ T7871] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.721169][ T805] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 247.729045][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.741680][ T5609] Bluetooth: hci3: command 0x0c1a tx timeout [ 247.742874][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 247.747813][ T4927] Bluetooth: hci5: command 0x041b tx timeout [ 247.768798][ T7871] bridge_slave_0: entered allmulticast mode [ 247.776562][ T7871] bridge_slave_0: entered promiscuous mode [ 247.785332][ T7871] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.792625][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.799943][ T7871] bridge_slave_1: entered allmulticast mode [ 247.807848][ T7871] bridge_slave_1: entered promiscuous mode [ 247.883091][ T805] usb 5-1: Using ep0 maxpacket: 32 [ 247.912500][ T805] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 247.930643][ T805] usb 5-1: config 0 has no interface number 0 [ 247.948430][ T805] usb 5-1: config 0 interface 12 has no altsetting 0 [ 247.972600][ T805] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 247.990612][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.012601][ T805] usb 5-1: Product: syz [ 248.021925][ T805] usb 5-1: Manufacturer: syz [ 248.043611][ T805] usb 5-1: SerialNumber: syz [ 248.053707][ T805] usb 5-1: config 0 descriptor?? [ 248.379325][ T7563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.417137][ T7563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.447894][ T7563] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 248.469308][ T7563] bond0 (unregistering): Released all slaves [ 248.510707][ T7871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.549708][ T7871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.717329][ T7871] team0: Port device team_slave_0 added [ 248.750759][ T805] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 248.762212][ T7871] team0: Port device team_slave_1 added [ 248.779861][ T805] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 248.813141][ T805] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 248.838702][ T805] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 248.872795][ T5724] usb 1-1: USB disconnect, device number 17 [ 248.897028][ T805] usb 5-1: USB disconnect, device number 13 [ 249.088869][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.097522][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.199317][ T7871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.239626][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 249.366040][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.383577][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.806352][ T7871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.841269][ T4927] Bluetooth: hci5: command 0x041b tx timeout [ 250.110092][ T7871] hsr_slave_0: entered promiscuous mode [ 250.122573][ T7871] hsr_slave_1: entered promiscuous mode [ 250.141918][ T7871] debugfs: 'hsr0' already exists in 'hsr' [ 250.168313][ T7871] Cannot create hsr debugfs directory [ 250.429605][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 250.429624][ T30] audit: type=1400 audit(1785553207.959:629): avc: denied { write } for pid=7978 comm="syz.0.554" name="idVendor" dev="configfs" ino=20144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 250.443565][ T7563] hsr_slave_0: left promiscuous mode [ 250.467445][ T30] audit: type=1400 audit(1785553207.959:630): avc: denied { open } for pid=7978 comm="syz.0.554" path="/111/config/usb_gadget/g1/idVendor" dev="configfs" ino=20144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 250.525709][ T7563] hsr_slave_1: left promiscuous mode [ 250.544292][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.561466][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.582828][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.592778][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.619138][ T7563] veth1_macvtap: left promiscuous mode [ 250.627482][ T7563] veth0_macvtap: left promiscuous mode [ 250.633343][ T7563] veth1_vlan: left promiscuous mode [ 250.638819][ T7563] veth0_vlan: left promiscuous mode [ 250.666839][ T30] audit: type=1400 audit(1785553208.199:631): avc: denied { write } for pid=7975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.840659][ T7971] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 250.849131][ T7971] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 250.862742][ T7971] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 250.870249][ T7971] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 250.917785][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.933308][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.947765][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.957847][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.965484][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.974782][ T30] audit: type=1400 audit(1785553208.509:632): avc: denied { write } for pid=7992 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.131206][ T29] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 251.230931][ T8001] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3978288634 (254610472576 ns) > initial count (109740807360 ns). Using initial count to start timer. [ 251.289994][ T7563] team0 (unregistering): Port device team_slave_1 removed [ 251.315472][ T7563] team0 (unregistering): Port device team_slave_0 removed [ 251.331596][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 251.343004][ T29] usb 1-1: config index 0 descriptor too short (expected 65535, got 1289) [ 251.358657][ T29] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 251.381937][ T29] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 251.413109][ T29] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 251.433592][ T29] usb 1-1: config index 1 descriptor too short (expected 65535, got 1289) [ 251.442406][ T29] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 251.453604][ T29] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 251.466393][ T29] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 251.482582][ T29] usb 1-1: config index 2 descriptor too short (expected 65535, got 1289) [ 251.491301][ T29] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 251.500986][ T29] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 251.514092][ T29] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 251.789732][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 251.799821][ T29] usb 1-1: string descriptor 0 read error: -71 [ 251.824482][ T29] usb 1-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba [ 251.833847][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.943277][ T29] usb 1-1: rejected 3 configurations due to insufficient available bus power [ 252.004949][ T29] usb 1-1: no configuration chosen from 3 choices [ 252.056244][ T29] usb 1-1: USB disconnect, device number 18 [ 252.322089][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 252.347105][ T8013] futex_wake_op: syz.2.558 tries to shift op by 144; fix this program [ 252.861298][ T4927] Bluetooth: hci2: command 0x0c1a tx timeout [ 252.951167][ T4927] Bluetooth: hci5: command 0x041b tx timeout [ 252.958768][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.098934][ T7871] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 253.111208][ T4927] Bluetooth: hci1: command tx timeout [ 253.183792][ T7871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.259975][ T7871] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 253.312828][ T7871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 253.330399][ T7871] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 253.405529][ T7871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 253.424764][ T7871] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 253.515861][ T30] audit: type=1400 audit(1785553211.049:633): avc: denied { write } for pid=8009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.539771][ T7871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.561552][ T30] audit: type=1400 audit(1785553212.099:634): avc: denied { write } for pid=8033 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.765275][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 254.923067][ T8051] kAFS: unable to lookup cell 'ÿ' [ 255.021552][ T4927] Bluetooth: hci5: command 0x041b tx timeout [ 255.191405][ T4927] Bluetooth: hci1: command tx timeout [ 255.232220][ T8057] netlink: 'syz.4.563': attribute type 10 has an invalid length. [ 255.276404][ T7871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.484558][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.490951][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.590919][ T8048] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 255.627535][ T8048] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 255.637674][ T8057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 255.654955][ T8048] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 255.661954][ T8048] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 255.672769][ T8057] team0: Port device netdevsim1 added [ 255.694478][ T8048] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 255.730373][ T8048] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 255.770055][ T8048] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 255.793214][ T7563] bridge_slave_1: left promiscuous mode [ 255.807845][ T7563] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.847341][ T7563] bridge_slave_0: left allmulticast mode [ 255.862874][ T7563] bridge_slave_0: left promiscuous mode [ 255.884359][ T7563] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.972815][ T30] audit: type=1400 audit(1785553213.489:635): avc: denied { write } for pid=8055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.198207][ T30] audit: type=1400 audit(1785553213.729:636): avc: denied { write } for pid=8073 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.475772][ T7563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.513251][ T7563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.533820][ T7563] bond0 (unregistering): Released all slaves [ 256.581925][ T8080] pim6reg: entered allmulticast mode [ 256.598190][ T8081] pim6reg: left allmulticast mode [ 256.656563][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 256.699756][ T7871] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.863265][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.870375][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.021298][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 257.028188][ T8090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8090 comm=syz.2.567 [ 257.073275][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.080426][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.167918][ T8092] xfrm1: entered allmulticast mode [ 257.216837][ T7563] hsr_slave_0: left promiscuous mode [ 257.223598][ T7563] hsr_slave_1: left promiscuous mode [ 257.229558][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.231262][ T804] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 257.245506][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.576315][ T804] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 257.661410][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 257.661957][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 257.741220][ T5619] Bluetooth: hci1: command 0x0419 tx timeout [ 257.741228][ T4927] Bluetooth: hci5: command 0x041b tx timeout [ 257.987123][ T7563] team0 (unregistering): Port device team_slave_1 removed [ 258.005520][ T7563] team0 (unregistering): Port device team_slave_0 removed [ 258.603424][ T30] audit: type=1400 audit(1785553215.859:637): avc: denied { append } for pid=8106 comm="syz.0.572" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 258.978067][ T8110] wlan0 speed is unknown, defaulting to 1000 [ 258.991277][ T8110] wlan0 speed is unknown, defaulting to 1000 [ 259.275867][ T8110] wlan0 speed is unknown, defaulting to 1000 [ 259.283226][ T8110] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 259.298231][ T8110] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 259.315131][ T8110] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 259.327037][ T8110] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 259.339521][ T8110] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 259.448652][ T8110] wlan0 speed is unknown, defaulting to 1000 [ 259.470314][ T8110] wlan0 speed is unknown, defaulting to 1000 [ 259.503936][ T8110] wlan0 speed is unknown, defaulting to 1000 [ 259.504055][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.517715][ T29] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 259.555383][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.569158][ T7988] bridge_slave_0: entered allmulticast mode [ 259.583636][ T7988] bridge_slave_0: entered promiscuous mode [ 259.593785][ T8110] wlan0 speed is unknown, defaulting to 1000 [ 259.597721][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.607962][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.615936][ T7988] bridge_slave_1: entered allmulticast mode [ 259.649231][ T7988] bridge_slave_1: entered promiscuous mode [ 259.686817][ T8110] wlan0 speed is unknown, defaulting to 1000 [ 259.704836][ T29] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 259.723304][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.788041][ T29] usb 3-1: Product: syz [ 259.839736][ T29] usb 3-1: Manufacturer: syz [ 259.840766][ T5619] Bluetooth: hci1: command 0x0419 tx timeout [ 259.840871][ T5619] Bluetooth: hci5: command 0x041b tx timeout [ 259.919698][ T29] usb 3-1: SerialNumber: syz [ 260.116330][ T29] usb 3-1: config 0 descriptor?? [ 260.150157][ T7988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.204866][ T7988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.236027][ T8137] netlink: 56 bytes leftover after parsing attributes in process `syz.0.576'. [ 260.256630][ T30] audit: type=1400 audit(1785553217.789:638): avc: denied { write } for pid=8117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.314059][ T30] audit: type=1400 audit(1785553217.849:639): avc: denied { create } for pid=8140 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 260.369240][ T29] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 260.407042][ T7988] team0: Port device team_slave_0 added [ 260.420254][ T30] audit: type=1400 audit(1785553217.949:640): avc: denied { remount } for pid=8140 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 260.434247][ T7988] team0: Port device team_slave_1 added [ 260.506724][ T8148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.578'. [ 260.535795][ T8148] /dev/sg0: Can't lookup blockdev [ 260.585209][ T30] audit: type=1400 audit(1785553218.109:641): avc: denied { write } for pid=8146 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.587708][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.659712][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.730488][ T7988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.757378][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 260.991847][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.090991][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.266550][ T30] audit: type=1400 audit(1785553218.799:642): avc: denied { connect } for pid=8120 comm="syz.2.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 261.303023][ T7988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.359308][ T30] audit: type=1400 audit(1785553218.839:643): avc: denied { read } for pid=8120 comm="syz.2.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 261.421030][ T8159] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 261.480983][ T7988] hsr_slave_0: entered promiscuous mode [ 261.520703][ T7988] hsr_slave_1: entered promiscuous mode [ 261.542765][ T7988] debugfs: 'hsr0' already exists in 'hsr' [ 261.560581][ T7988] Cannot create hsr debugfs directory [ 261.695118][ T8166] tipc: Started in network mode [ 261.709467][ T8166] tipc: Node identity 863d56246407, cluster identity 4711 [ 261.727339][ T8166] tipc: Enabled bearer , priority 0 [ 261.773553][ T30] audit: type=1400 audit(1785553219.309:644): avc: denied { write } for pid=8160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.827169][ T29] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 261.830720][ T8175] syzkaller0: entered promiscuous mode [ 261.886407][ T8175] syzkaller0: entered allmulticast mode [ 261.903763][ T5619] Bluetooth: hci1: command 0x0419 tx timeout [ 261.967944][ T30] audit: type=1400 audit(1785553219.499:645): avc: denied { write } for pid=8185 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.060335][ T8166] tipc: Resetting bearer [ 262.074543][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 262.126118][ T7871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.135873][ T30] audit: type=1400 audit(1785553219.669:646): avc: denied { getopt } for pid=8165 comm="syz.0.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 262.194209][ T8165] tipc: Resetting bearer [ 262.227728][ T8165] tipc: Disabling bearer [ 262.321894][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'. [ 263.099311][ T5729] usb 3-1: USB disconnect, device number 13 [ 263.478227][ T30] audit: type=1400 audit(1785553220.989:647): avc: denied { create } for pid=8200 comm="syz.4.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.782043][ T29] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 263.991172][ T5619] Bluetooth: hci1: command 0x0419 tx timeout [ 263.994267][ T29] usb 5-1: device descriptor read/64, error -71 [ 264.474987][ T29] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 264.691317][ T29] usb 5-1: device descriptor read/64, error -71 [ 264.845238][ T29] usb usb5-port1: attempt power cycle [ 265.010605][ T7988] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 265.043085][ T7988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.060292][ T30] audit: type=1400 audit(1785553222.589:648): avc: denied { write } for pid=8203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.089108][ T7988] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 265.127472][ T7988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.150799][ T30] audit: type=1400 audit(1785553222.679:649): avc: denied { write } for pid=8219 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.178118][ T7988] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 265.200697][ T7988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.231051][ T7871] veth0_vlan: entered promiscuous mode [ 265.241194][ T29] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 265.258360][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 265.273063][ T29] usb 5-1: device descriptor read/8, error -71 [ 265.280450][ T7988] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 265.310025][ T7988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.323281][ T7871] veth1_vlan: entered promiscuous mode [ 265.395763][ T7871] veth0_macvtap: entered promiscuous mode [ 265.420815][ T7871] veth1_macvtap: entered promiscuous mode [ 265.497118][ T7871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.521228][ T7871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.521247][ T29] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 265.532348][ T7988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.584967][ T29] usb 5-1: device descriptor read/8, error -71 [ 265.610382][ T7988] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.657144][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.664309][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.711827][ T29] usb usb5-port1: unable to enumerate USB device [ 265.791459][ T6016] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.838301][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.845468][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.941756][ T1117] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.980257][ T7563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.030313][ T7563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.451459][ T6017] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.498220][ T6017] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.507099][ T30] audit: type=1400 audit(1785553224.029:650): avc: denied { write } for pid=8233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.572650][ T7563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.607120][ T7563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.708487][ T30] audit: type=1400 audit(1785553224.239:651): avc: denied { mounton } for pid=7871 comm="syz-executor" path="/root/syzkaller.BJzEbx/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 266.806395][ T30] audit: type=1400 audit(1785553224.239:652): avc: denied { mounton } for pid=7871 comm="syz-executor" path="/root/syzkaller.BJzEbx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 266.897738][ T30] audit: type=1400 audit(1785553224.239:653): avc: denied { mounton } for pid=7871 comm="syz-executor" path="/root/syzkaller.BJzEbx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 266.994696][ T30] audit: type=1400 audit(1785553224.279:654): avc: denied { mounton } for pid=7871 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 267.094012][ T30] audit: type=1400 audit(1785553224.429:655): avc: denied { write } for pid=8258 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.174716][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 267.742558][ T7988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.906116][ T7988] veth0_vlan: entered promiscuous mode [ 267.918243][ T7988] veth1_vlan: entered promiscuous mode [ 267.941330][ T7988] veth0_macvtap: entered promiscuous mode [ 267.949656][ T7988] veth1_macvtap: entered promiscuous mode [ 267.965582][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.979550][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.092764][ T7563] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.102344][ T7563] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.114972][ T7563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.127615][ T7563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.142144][ T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.152839][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.170979][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.180396][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.527357][ T30] audit: type=1400 audit(1785553230.059:656): avc: denied { write } for pid=8302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.586870][ T30] audit: type=1400 audit(1785553230.119:657): avc: denied { write } for pid=8313 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.798535][ T30] audit: type=1400 audit(1785553232.329:658): avc: denied { write } for pid=8322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.849043][ T30] audit: type=1400 audit(1785553232.379:659): avc: denied { write } for pid=8333 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.380132][ T30] audit: type=1400 audit(1785553234.909:660): avc: denied { write } for pid=8336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.445942][ T30] audit: type=1400 audit(1785553234.979:661): avc: denied { write } for pid=8347 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.658212][ T30] audit: type=1400 audit(1785553235.189:662): avc: denied { write } for pid=8350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.709495][ T30] audit: type=1400 audit(1785553235.239:663): avc: denied { write } for pid=8361 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.316872][ T30] audit: type=1400 audit(1785553235.849:664): avc: denied { write } for pid=8364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.376147][ T30] audit: type=1400 audit(1785553235.909:665): avc: denied { write } for pid=8375 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.619732][ T30] audit: type=1400 audit(1785553236.149:666): avc: denied { write } for pid=8378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.685218][ T30] audit: type=1400 audit(1785553236.219:667): avc: denied { write } for pid=8389 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.889379][ T30] audit: type=1400 audit(1785553236.419:668): avc: denied { write } for pid=8392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.950583][ T30] audit: type=1400 audit(1785553236.479:669): avc: denied { write } for pid=8403 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.923429][ T30] audit: type=1400 audit(1785553237.459:670): avc: denied { write } for pid=8406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.980908][ T30] audit: type=1400 audit(1785553237.509:671): avc: denied { write } for pid=8417 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.864534][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.870845][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.323691][ T8429] syzkaller0: entered promiscuous mode [ 317.333436][ T8429] syzkaller0: entered allmulticast mode [ 317.334971][ T8433] CIFS: VFS: Unknown vers= option specified: -òBÓÑ]Ä…RB š,éûˆØgâúWyø‚ã‹ 2"/›­>å4Z Ò„Fö¹YcßIGQ B±*0Ðâ‘’ãÔV&‹S…«“ÉåØmZîÓö)`sååÓAík!OwëìØåë¶zª»ôª‰"õ°RãLÆLñ°|ZuWG4&Þº²á[G [ 317.346374][ T8429] tipc: Started in network mode [ 317.386471][ T8429] tipc: Node identity de63c1d68015, cluster identity 4711 [ 317.414117][ T8429] tipc: Enabled bearer , priority 0 [ 317.701235][ T8427] tipc: Resetting bearer [ 317.962188][ T8427] tipc: Disabling bearer [ 319.488896][ T4927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.501508][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.511899][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.520140][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 319.531459][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.751359][ T8462] Cannot find set identified by id 0 to match [ 319.768013][ T8462] netlink: 24 bytes leftover after parsing attributes in process `syz.6.601'. [ 320.935171][ T8448] wlan0 speed is unknown, defaulting to 1000 [ 321.162573][ T8490] netlink: 20 bytes leftover after parsing attributes in process `syz.5.606'. [ 321.195505][ T8490] team0 (unregistering): Port device team_slave_0 removed [ 321.218252][ T8490] team0 (unregistering): Port device team_slave_1 removed [ 321.493531][ T30] audit: type=1400 audit(1785553279.019:672): avc: denied { map } for pid=8495 comm="syz.4.608" path="socket:[22891]" dev="sockfs" ino=22891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 321.581336][ T5729] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 321.589706][ T4927] Bluetooth: hci4: command tx timeout [ 321.851259][ T5729] usb 7-1: Using ep0 maxpacket: 32 [ 321.864056][ T5729] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 321.874642][ T5729] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 321.884857][ T5729] usb 7-1: config 0 interface 0 has no altsetting 0 [ 321.893594][ T5729] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 321.903993][ T5729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.912144][ T5729] usb 7-1: Product: syz [ 321.916426][ T5729] usb 7-1: Manufacturer: syz [ 321.921044][ T5729] usb 7-1: SerialNumber: syz [ 322.393303][ T5707] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 322.420283][ T5729] usb 7-1: config 0 descriptor?? [ 322.581114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 322.611112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 322.942899][ T5707] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 323.661989][ T4927] Bluetooth: hci4: command tx timeout [ 323.854247][ T5729] gs_usb 7-1:0.0: Couldn't send data format (err=-110) [ 323.854449][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.009886][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.075117][ T8448] bridge_slave_0: entered allmulticast mode [ 324.266753][ T8448] bridge_slave_0: entered promiscuous mode [ 324.457329][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.491027][ T8528] netlink: 56 bytes leftover after parsing attributes in process `syz.5.615'. [ 324.506844][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.561617][ T8448] bridge_slave_1: entered allmulticast mode [ 324.657736][ T8448] bridge_slave_1: entered promiscuous mode [ 325.040360][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.112465][ T5729] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -110 [ 325.120357][ T5707] usb 1-1: Product: syz [ 325.130967][ T5707] usb 1-1: Manufacturer: syz [ 325.148287][ T5707] usb 1-1: SerialNumber: syz [ 325.159133][ T5707] usb 1-1: can't set config #1, error -71 [ 325.180004][ T5707] usb 1-1: USB disconnect, device number 19 [ 325.280539][ T8448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.338005][ T8448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.406787][ T30] audit: type=1400 audit(1785553282.939:673): avc: denied { audit_write } for pid=8537 comm="syz.0.617" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 325.437301][ T8448] team0: Port device team_slave_0 added [ 325.455485][ T8448] team0: Port device team_slave_1 added [ 325.583855][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.595794][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.623432][ T8448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.655402][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.655420][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.655445][ T8448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.741943][ T4927] Bluetooth: hci4: command tx timeout [ 325.914462][ T30] audit: type=1400 audit(1785553283.449:674): avc: denied { write } for pid=8548 comm="syz.5.621" name="core" dev="configfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 325.949905][ T8448] hsr_slave_0: entered promiscuous mode [ 325.964380][ T8448] hsr_slave_1: entered promiscuous mode [ 326.013444][ T8448] debugfs: 'hsr0' already exists in 'hsr' [ 326.116788][ T30] audit: type=1400 audit(1785553283.449:675): avc: denied { add_name } for pid=8548 comm="syz.5.621" name="rd_mcp_0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 326.137807][ T8448] Cannot create hsr debugfs directory [ 326.159803][ T30] audit: type=1400 audit(1785553283.549:676): avc: denied { write } for pid=8548 comm="syz.5.621" name="rd_mcp_0" dev="configfs" ino=22968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 326.232666][ T30] audit: type=1400 audit(1785553283.719:677): avc: denied { accept } for pid=8550 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 326.281660][ T30] audit: type=1400 audit(1785553283.719:678): avc: denied { read write } for pid=8550 comm="syz.0.622" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 326.350259][ T30] audit: type=1400 audit(1785553283.719:679): avc: denied { open } for pid=8550 comm="syz.0.622" path="/131/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 326.415762][ T30] audit: type=1400 audit(1785553283.729:680): avc: denied { ioctl } for pid=8550 comm="syz.0.622" path="/131/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 326.481656][ T30] audit: type=1400 audit(1785553283.979:681): avc: denied { write } for pid=8548 comm="syz.5.621" name="rd_mcp_0" dev="configfs" ino=22968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 326.514060][ T30] audit: type=1400 audit(1785553283.999:682): avc: denied { remove_name } for pid=8548 comm="syz.5.621" name="dev0" dev="configfs" ino=22969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 326.514543][ T5729] usb 7-1: USB disconnect, device number 2 [ 326.556787][ T30] audit: type=1400 audit(1785553284.039:683): avc: denied { rmdir } for pid=8548 comm="syz.5.621" name="dev0" dev="configfs" ino=22969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 326.791475][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.621'. [ 327.042299][ T8448] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 327.091606][ T8448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 327.138377][ T8448] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 327.178925][ T8448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.217592][ T8448] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 327.373532][ T8448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.399570][ T8448] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 327.823033][ T8448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 327.831137][ T4927] Bluetooth: hci4: command tx timeout [ 328.082049][ T30] audit: type=1400 audit(1785553285.609:684): avc: denied { shutdown } for pid=8582 comm="syz.6.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 328.158421][ T30] audit: type=1400 audit(1785553285.619:685): avc: denied { mount } for pid=8582 comm="syz.6.629" name="/" dev="ramfs" ino=23122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 328.184448][ T8448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.202966][ T8448] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.218799][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.226666][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.243825][ T8586] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.268314][ T8591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.287861][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.294949][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.555648][ T8584] futex_wake_op: syz.5.628 tries to shift op by -1; fix this program [ 328.583277][ T30] audit: type=1400 audit(1785553286.119:686): avc: denied { sys_module } for pid=8448 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 329.818504][ T8448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.322438][ T8448] veth0_vlan: entered promiscuous mode [ 330.339183][ T8448] veth1_vlan: entered promiscuous mode [ 330.381442][ T8448] veth0_macvtap: entered promiscuous mode [ 330.391835][ T8448] veth1_macvtap: entered promiscuous mode [ 330.410270][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.421222][ T5724] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 330.437545][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.454346][ T8640] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 330.493295][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.582456][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.602294][ T5724] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 330.613601][ T5724] usb 5-1: config 0 has no interface number 0 [ 330.619733][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.628712][ T5724] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.647111][ T5724] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 330.663608][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.680153][ T5724] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 330.703525][ T8645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.709240][ T5724] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 330.735299][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.743557][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.750626][ T5724] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 330.845076][ T5724] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 330.870653][ T6017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.881409][ T6017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.893253][ T5724] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 331.178801][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.228571][ T5724] usb 5-1: config 0 descriptor?? [ 331.244744][ T8629] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 331.256682][ T8629] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 331.311842][ T5724] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 331.458763][ T8655] netlink: 100 bytes leftover after parsing attributes in process `syz.7.595'. [ 332.521520][ T8629] ldusb 5-1:0.55: Write buffer overflow, 1 bytes dropped [ 332.585964][ T5608] usb 5-1: USB disconnect, device number 18 [ 332.598082][ T5608] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 333.238597][ T8657] mmap: syz.6.644 (8657) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 333.516001][ T8680] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 333.626304][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'. [ 334.439372][ T8685] Set syz1 is full, maxelem 14 reached [ 334.491175][ T30] audit: type=1400 audit(1785553291.999:687): avc: denied { setopt } for pid=8686 comm="syz.7.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.523026][ T30] audit: type=1400 audit(1785553292.009:688): avc: denied { ioctl } for pid=8686 comm="syz.7.651" path="socket:[23320]" dev="sockfs" ino=23320 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.626066][ T30] audit: type=1400 audit(1785553292.159:689): avc: granted { setsecparam } for pid=8689 comm="syz.7.652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 334.705320][ T30] audit: type=1400 audit(1785553292.239:690): avc: denied { write } for pid=8694 comm="syz.4.653" lport=45106 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 334.771212][ T30] audit: type=1400 audit(1785553292.259:691): avc: denied { setopt } for pid=8694 comm="syz.4.653" lport=45106 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 334.883772][ T30] audit: type=1400 audit(1785553292.419:692): avc: denied { name_bind } for pid=8697 comm="syz.7.654" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 335.005717][ T30] audit: type=1400 audit(1785553292.539:693): avc: denied { write } for pid=8701 comm="syz.0.656" name="tracing_on" dev="tracefs" ino=2968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 335.321425][ T5721] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 335.583104][ T5721] usb 6-1: config 105 has an invalid interface number: 207 but max is 0 [ 335.645211][ T8720] Cannot find add_set index 0 as target [ 335.665648][ T4927] Bluetooth: hci1: unexpected subevent 0x06 length: 18 > 10 [ 335.995634][ T5721] usb 6-1: config 105 has no interface number 0 [ 336.002318][ T5721] usb 6-1: config 105 interface 207 has no altsetting 0 [ 336.012071][ T5721] usb 6-1: New USB device found, idVendor=0df7, idProduct=0620, bcdDevice=34.7b [ 336.021993][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.038763][ T5608] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 336.041514][ T5721] usb 6-1: Product: syz [ 336.056428][ T5608] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 336.060075][ T5721] usb 6-1: Manufacturer: syz [ 336.078086][ T5608] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 336.100633][ T5721] usb 6-1: SerialNumber: syz [ 336.108183][ T5608] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 336.125239][ T5608] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 336.145703][ T5608] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 336.167185][ T5608] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 336.331940][ T5608] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 336.339545][ T5608] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 336.347029][ T5608] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 336.370912][ T5608] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.03 Device [syz1] on syz1 [ 336.876478][ T8723] futex_wake_op: syz.7.663 tries to shift op by 144; fix this program [ 337.743254][ T10] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 337.754486][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.658'. [ 337.754963][ T4927] Bluetooth: hci1: command 0x0419 tx timeout [ 337.876815][ T8728] fido_id[8728]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 338.161101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 338.301106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 338.311114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 338.722831][ T5805] IPVS: starting estimator thread 0... [ 338.832327][ T8753] IPVS: using max 41 ests per chain, 98400 per kthread [ 339.186083][ T30] audit: type=1400 audit(1785553296.719:694): avc: denied { write } for pid=8756 comm="syz.6.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 339.503385][ T8761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.195767][ T5721] pl2303 6-1:105.207: required endpoints missing [ 341.326573][ T5729] usb 6-1: USB disconnect, device number 2 [ 341.450815][ T30] audit: type=1400 audit(1785553298.979:695): avc: denied { mounton } for pid=8773 comm="syz.0.675" path="/145/file0" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 341.911233][ T5729] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 342.088532][ T5729] usb 5-1: unable to get BOS descriptor or descriptor too short [ 342.108358][ T5729] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.126960][ T5729] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.155402][ T5729] usb 5-1: string descriptor 0 read error: -22 [ 342.168122][ T5729] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 342.187296][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.228234][ T5729] usb 5-1: skipping empty audio interface (v1) [ 342.346123][ T5729] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 342.512222][ T5707] usb 5-1: USB disconnect, device number 19 [ 343.394811][ T5729] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 343.921492][ T5724] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 344.421656][ T5729] usb 8-1: config 105 has an invalid interface number: 207 but max is 0 [ 344.431041][ T5729] usb 8-1: config 105 has no interface number 0 [ 344.476020][ T5729] usb 8-1: config 105 interface 207 has no altsetting 0 [ 344.584667][ T5729] usb 8-1: New USB device found, idVendor=0df7, idProduct=0620, bcdDevice=34.7b [ 344.646687][ T5729] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.651838][ T5724] usb 7-1: config 105 has an invalid interface number: 207 but max is 0 [ 344.659712][ T5729] usb 8-1: Product: syz [ 344.681772][ T5729] usb 8-1: Manufacturer: syz [ 344.713694][ T5721] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 344.746634][ T5729] usb 8-1: SerialNumber: syz [ 344.784954][ T5724] usb 7-1: config 105 has no interface number 0 [ 344.800711][ T5724] usb 7-1: config 105 interface 207 has no altsetting 0 [ 344.817990][ T5724] usb 7-1: New USB device found, idVendor=0df7, idProduct=0620, bcdDevice=34.7b [ 344.830205][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.838368][ T5724] usb 7-1: Product: syz [ 344.842668][ T5724] usb 7-1: Manufacturer: syz [ 344.847284][ T5724] usb 7-1: SerialNumber: syz [ 345.548897][ T5721] usb 5-1: config 4 has an invalid interface number: 9 but max is 0 [ 345.580796][ T5721] usb 5-1: config 4 has no interface number 0 [ 345.594725][ T5721] usb 5-1: config 4 interface 9 has no altsetting 0 [ 345.641287][ T5721] usb 5-1: New USB device found, idVendor=2357, idProduct=0602, bcdDevice=91.75 [ 345.728833][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.748871][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.6.686'. [ 345.761016][ T5721] usb 5-1: Product: syz [ 345.766223][ T5721] usb 5-1: Manufacturer: syz [ 345.770970][ T5721] usb 5-1: SerialNumber: syz [ 345.877687][ T5721] r8152-cfgselector 5-1: Unknown version 0x0000 [ 345.908551][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.683'. [ 346.158905][ T30] audit: type=1400 audit(1785553303.689:696): avc: denied { write } for pid=8808 comm="syz.4.689" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 346.340511][ T30] audit: type=1400 audit(1785553303.729:697): avc: denied { mounton } for pid=8808 comm="syz.4.689" path="/proc/515/cgroup" dev="proc" ino=25792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 347.102834][ T5721] r8152 5-1:4.9: Expected endpoints are not found [ 347.120255][ T5721] r8152-cfgselector 5-1: USB disconnect, device number 20 [ 347.468807][ T5724] pl2303 7-1:105.207: required endpoints missing [ 347.507351][ T5724] usb 7-1: USB disconnect, device number 3 [ 347.696451][ T8843] futex_wake_op: syz.6.696 tries to shift op by 144; fix this program [ 347.729384][ T5729] pl2303 8-1:105.207: required endpoints missing [ 347.926787][ T5729] usb 8-1: USB disconnect, device number 2 [ 348.941247][ T5608] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 349.083534][ T30] audit: type=1400 audit(1785553306.619:698): avc: denied { read } for pid=8859 comm="syz.7.701" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 349.140766][ T30] audit: type=1400 audit(1785553306.619:699): avc: denied { open } for pid=8859 comm="syz.7.701" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 349.168836][ T30] audit: type=1400 audit(1785553306.639:700): avc: denied { ioctl } for pid=8859 comm="syz.7.701" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 349.329080][ T5608] usb 5-1: unable to get BOS descriptor or descriptor too short [ 349.376185][ T5608] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 349.421039][ T5608] usb 5-1: can't read configurations, error -71 [ 349.912013][ T8867] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.456702][ T30] audit: type=1400 audit(1785553307.859:701): avc: denied { mounton } for pid=8872 comm="syz.6.704" path="/26/file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 351.302249][ T5707] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 351.658846][ T8882] kAFS: unable to lookup cell 'Þ({^ú@' [ 351.668425][ T30] audit: type=1400 audit(1785553309.179:702): avc: denied { listen } for pid=8859 comm="syz.7.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 351.777220][ T5707] usb 7-1: not running at top speed; connect to a high speed hub [ 351.850594][ T5707] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 351.881823][ T8882] kAFS: unable to lookup cell 'Þ({^ú@' [ 351.911038][ T5707] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 352.102270][ T5707] usb 7-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 352.112038][ T5707] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.133425][ T5707] usb 7-1: Product: syz [ 352.143493][ T5707] usb 7-1: Manufacturer: syz [ 352.160889][ T5707] usb 7-1: SerialNumber: syz [ 352.176292][ T8874] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 352.186811][ T8874] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 352.340344][ T8867] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.460812][ T8874] usb usb8: usbfs: process 8874 (syz.6.704) did not claim interface 0 before use [ 352.581108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 352.671117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 353.174282][ T8867] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.379505][ T5707] ax88179_178a 7-1:1.0: probe with driver ax88179_178a failed with error -71 [ 353.422100][ T5707] usb 7-1: USB disconnect, device number 4 [ 353.556570][ T8867] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.851218][ T7563] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.931598][ T30] audit: type=1400 audit(1785553311.469:703): avc: denied { mount } for pid=8901 comm="syz.0.710" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 353.969840][ T6017] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.987184][ T6017] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.034344][ T30] audit: type=1400 audit(1785553311.499:704): avc: denied { search } for pid=8901 comm="syz.0.710" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 354.059743][ T7563] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.545662][ T30] audit: type=1400 audit(1785553311.499:705): avc: denied { write } for pid=8901 comm="syz.0.710" name="max_block_size" dev="nfsd" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 354.782341][ T30] audit: type=1400 audit(1785553311.499:706): avc: denied { open } for pid=8901 comm="syz.0.710" path="/153/nfsd/max_block_size" dev="nfsd" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 354.853029][ T8914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.861976][ T30] audit: type=1400 audit(1785553311.499:707): avc: denied { remount } for pid=8901 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 354.967353][ T30] audit: type=1400 audit(1785553311.779:708): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 356.001244][ T5724] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 356.161210][ T5724] usb 8-1: Using ep0 maxpacket: 32 [ 356.182799][ T5724] usb 8-1: unable to get BOS descriptor or descriptor too short [ 356.201421][ T5724] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.229037][ T5724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.255961][ T5724] usb 8-1: Product: syz [ 356.271426][ T5724] usb 8-1: Manufacturer: syz [ 356.281597][ T5724] usb 8-1: SerialNumber: syz [ 356.293429][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.721'. [ 356.531136][ T5724] usb 8-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 356.567434][ T5724] usb 8-1: 1:1 : sample bitwidth 250 in over sample bytes 4 [ 356.603617][ T5724] usb 8-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 356.642342][ T5724] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 356.711178][ T5707] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 356.763622][ T5724] usb 8-1: USB disconnect, device number 3 [ 356.864689][ T8455] udevd[8455]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.881376][ T5707] usb 6-1: Using ep0 maxpacket: 16 [ 356.920522][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.983361][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.018295][ T5707] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 357.061195][ T5707] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 357.098009][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.147732][ T5707] usb 6-1: config 0 descriptor?? [ 357.189267][ T8952] overlayfs: overlapping lowerdir path [ 357.446316][ T5608] hid_parser_main: 85 callbacks suppressed [ 357.446337][ T5608] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 357.514090][ T5608] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 358.035703][ T8970] wlan0 speed is unknown, defaulting to 1000 [ 359.250549][ T8973] pim6reg: entered allmulticast mode [ 359.414981][ T5707] usbhid 6-1:0.0: can't add hid device: -71 [ 359.425059][ T5707] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 359.439568][ T8979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.449578][ T5707] usb 6-1: USB disconnect, device number 3 [ 359.477970][ T8977] pim6reg: left allmulticast mode [ 360.748829][ T8973] overlayfs: failed to resolve './bus': -2 [ 362.273630][ T5707] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 362.289185][ T5707] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.321161][ T804] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 362.335824][ T5608] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 362.536913][ T804] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 362.595940][ T5608] usb 8-1: config 105 has an invalid interface number: 207 but max is 0 [ 362.621581][ T804] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 362.638821][ T5608] usb 8-1: config 105 has no interface number 0 [ 362.654911][ T5608] usb 8-1: config 105 interface 207 has no altsetting 0 [ 362.672945][ T804] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 362.694104][ T5608] usb 8-1: New USB device found, idVendor=0df7, idProduct=0620, bcdDevice=34.7b [ 362.703805][ T804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.714239][ T5608] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.745742][ T804] usb 7-1: Product: syz [ 362.750048][ T5608] usb 8-1: Product: syz [ 362.794015][ T804] usb 7-1: Manufacturer: syz [ 362.804425][ T5608] usb 8-1: Manufacturer: syz [ 362.831648][ T804] usb 7-1: SerialNumber: syz [ 362.843177][ T5608] usb 8-1: SerialNumber: syz [ 363.480819][ T8995] trusted_key: encrypted_key: hex blob is missing [ 363.516865][ T8995] netlink: 40 bytes leftover after parsing attributes in process `syz.6.734'. [ 363.690161][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.733'. [ 363.842712][ T804] usb 7-1: Can't get UAC3 power state for id 10 [ 363.867131][ T804] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 363.898406][ T804] usb 7-1: applying playback min mute quirk [ 363.906189][ T804] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 363.914182][ T804] usb 7-1: applying playback min mute quirk [ 363.920113][ T804] usb 7-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 363.932608][ T804] usb 7-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 364.231868][ T9020] futex_wake_op: syz.5.739 tries to shift op by 144; fix this program [ 364.883343][ T804] usb 7-1: USB disconnect, device number 5 [ 365.948158][ T8826] udevd[8826]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.223256][ T805] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 366.473435][ T805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 366.502457][ T805] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.520590][ T805] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.544685][ T805] usb 1-1: string descriptor 0 read error: -22 [ 366.558277][ T805] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 366.571690][ T804] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 366.589671][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.643983][ T805] usb 1-1: skipping empty audio interface (v1) [ 366.675321][ T5608] pl2303 8-1:105.207: required endpoints missing [ 366.729614][ T5608] usb 8-1: USB disconnect, device number 4 [ 366.742594][ T804] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 366.766370][ T804] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 366.779844][ T804] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.795641][ T804] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 366.818322][ T804] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.852459][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.860576][ T804] usb 5-1: Product: syz [ 366.866516][ T804] usb 5-1: Manufacturer: syz [ 366.871445][ T804] usb 5-1: SerialNumber: syz [ 366.883448][ T9048] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 366.925258][ T805] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 366.969914][ T805] usb 1-1: USB disconnect, device number 20 [ 367.099777][ T9047] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 367.562675][ T804] cdc_ncm 5-1:1.0: bind() failure [ 367.599733][ T804] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 367.609892][ T804] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 367.619735][ T804] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 367.650144][ T804] usb 5-1: USB disconnect, device number 23 [ 367.875024][ T9068] futex_wake_op: syz.0.754 tries to shift op by 144; fix this program [ 368.901000][ T9080] futex_wake_op: syz.0.756 tries to shift op by 144; fix this program [ 369.615825][ T9085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.490525][ T9100] FAULT_INJECTION: forcing a failure. [ 371.490525][ T9100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.503952][ T9100] CPU: 0 UID: 0 PID: 9100 Comm: syz.0.759 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.503985][ T9100] Tainted: [L]=SOFTLOCKUP [ 371.503992][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 371.504008][ T9100] Call Trace: [ 371.504016][ T9100] [ 371.504025][ T9100] dump_stack_lvl+0x100/0x190 [ 371.504060][ T9100] should_fail_ex.cold+0x5/0xa [ 371.504088][ T9100] _copy_from_user+0x2e/0xd0 [ 371.504114][ T9100] copy_msghdr_from_user+0x9f/0x4c0 [ 371.504145][ T9100] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 371.504190][ T9100] ___sys_sendmsg+0x106/0x1e0 [ 371.504222][ T9100] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.504250][ T9100] ? __lock_acquire+0x49f/0x1a40 [ 371.504275][ T9100] ? get_pid_task+0x106/0x250 [ 371.504327][ T9100] __sys_sendmsg+0x160/0x210 [ 371.504355][ T9100] ? __pfx___sys_sendmsg+0x10/0x10 [ 371.504396][ T9100] do_syscall_64+0x115/0x870 [ 371.504419][ T9100] ? clear_bhb_loop+0x40/0x90 [ 371.504444][ T9100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.504467][ T9100] RIP: 0033:0x7f154fb9e019 [ 371.504485][ T9100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.504505][ T9100] RSP: 002b:00007f15509f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.504531][ T9100] RAX: ffffffffffffffda RBX: 00007f154fe26090 RCX: 00007f154fb9e019 [ 371.504545][ T9100] RDX: 0000000020008034 RSI: 0000200000000c80 RDI: 0000000000000006 [ 371.504558][ T9100] RBP: 00007f15509f0090 R08: 0000000000000000 R09: 0000000000000000 [ 371.504570][ T9100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.504582][ T9100] R13: 00007f154fe26128 R14: 00007f154fe26090 R15: 00007ffc93d2cd68 [ 371.504612][ T9100] [ 372.601704][ T30] audit: type=1400 audit(1785553330.099:709): avc: denied { recv } for pid=9106 comm="syz.5.760" saddr=10.128.0.169 src=49572 daddr=10.128.1.162 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 372.757893][ T9117] Bluetooth: MGMT ver 1.23 [ 375.126266][ T9136] overlayfs: overlapping lowerdir path [ 375.462172][ T9142] netlink: 'syz.5.766': attribute type 1 has an invalid length. [ 375.726781][ T9142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.575005][ T9149] bond1: (slave geneve2): making interface the new active one [ 376.719038][ T9149] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 376.828902][ T9142] geneve3: entered promiscuous mode [ 376.834318][ T9142] geneve3: entered allmulticast mode [ 377.001340][ T5805] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 377.182706][ T5805] usb 7-1: config 105 has an invalid interface number: 207 but max is 0 [ 377.211393][ T5805] usb 7-1: config 105 has no interface number 0 [ 377.230923][ T5805] usb 7-1: config 105 interface 207 has no altsetting 0 [ 377.283805][ T5805] usb 7-1: New USB device found, idVendor=0df7, idProduct=0620, bcdDevice=34.7b [ 377.322108][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.351965][ T5805] usb 7-1: Product: syz [ 377.378628][ T5805] usb 7-1: Manufacturer: syz [ 377.408265][ T5805] usb 7-1: SerialNumber: syz [ 377.767693][ T9171] xt_CT: You must specify a L4 protocol and not use inversions on it [ 377.984958][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.6.774'. [ 378.307168][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.316432][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.543864][ T30] audit: type=1400 audit(1785553338.079:710): avc: denied { mount } for pid=9193 comm="syz.7.783" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 380.618665][ T30] audit: type=1400 audit(1785553338.109:711): avc: denied { read write } for pid=9193 comm="syz.7.783" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 380.851656][ T30] audit: type=1400 audit(1785553338.109:712): avc: denied { open } for pid=9193 comm="syz.7.783" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 380.854860][ T9200] syzkaller0: entered promiscuous mode [ 380.964262][ T30] audit: type=1400 audit(1785553338.469:713): avc: denied { unmount } for pid=8448 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 381.035942][ T9200] syzkaller0: entered allmulticast mode [ 382.779269][ T5805] pl2303 7-1:105.207: required endpoints missing [ 383.522964][ T5721] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 383.576875][ T5721] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 383.838349][ T5707] usb 7-1: USB disconnect, device number 6 [ 384.146049][ T9222] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.551659][ T5707] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 384.741197][ T5707] usb 6-1: Using ep0 maxpacket: 32 [ 384.765906][ T5707] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 384.798904][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.842498][ T5707] usb 6-1: Product: syz [ 384.857830][ T5707] usb 6-1: Manufacturer: syz [ 384.876756][ T5707] usb 6-1: SerialNumber: syz [ 384.911171][ T5707] usb 6-1: config 0 descriptor?? [ 385.750855][ T5707] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 004 [ 386.151184][ T5721] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 386.310440][ T9247] futex_wake_op: syz.7.796 tries to shift op by 144; fix this program [ 386.323026][ T5721] usb 5-1: unable to get BOS descriptor or descriptor too short [ 386.358581][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.370025][ T5805] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 386.401648][ T5721] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.543563][ T5805] usb 7-1: unable to get BOS descriptor or descriptor too short [ 386.612504][ T5721] usb 5-1: string descriptor 0 read error: -22 [ 386.631625][ T5805] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.641995][ T5721] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 386.660280][ T5805] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.669331][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.730037][ T5721] usb 5-1: skipping empty audio interface (v1) [ 386.750380][ T5805] usb 7-1: string descriptor 0 read error: -22 [ 386.773635][ T5805] usb 7-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 386.809708][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.906737][ T8455] udevd[8455]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.909732][ T5721] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 387.054046][ T5721] usb 5-1: USB disconnect, device number 24 [ 387.491585][ T5805] usb 7-1: USB disconnect, device number 7 [ 387.591944][ T9253] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 387.907955][ T9224] i2c i2c-1: failure sending STOP [ 388.079253][ T5721] usb 6-1: USB disconnect, device number 4 [ 388.209220][ T30] audit: type=1400 audit(1785553345.739:714): avc: denied { write } for pid=9257 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 389.271210][ T5721] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 389.341174][ T5707] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 389.445844][ T5721] usb 7-1: config 105 has an invalid interface number: 207 but max is 0 [ 389.476619][ T5721] usb 7-1: config 105 has no interface number 0 [ 389.597672][ T5721] usb 7-1: config 105 interface 207 has no altsetting 0 [ 389.614774][ T5707] usb 1-1: Using ep0 maxpacket: 8 [ 389.627005][ T5707] usb 1-1: config 0 has no interfaces? [ 389.639785][ T5721] usb 7-1: New USB device found, idVendor=0df7, idProduct=0620, bcdDevice=34.7b [ 389.641821][ T5707] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 390.178872][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.210158][ T5707] usb 1-1: Product: syz [ 390.210427][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.221444][ T5707] usb 1-1: Manufacturer: syz [ 390.240555][ T5721] usb 7-1: Product: syz [ 390.244779][ T5707] usb 1-1: SerialNumber: syz [ 390.256556][ T5721] usb 7-1: Manufacturer: syz [ 390.272487][ T5707] usb 1-1: config 0 descriptor?? [ 390.348867][ T5721] usb 7-1: SerialNumber: syz [ 390.532451][ T5608] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 391.146422][ T5608] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 391.709337][ T29] usb 1-1: USB disconnect, device number 21 [ 391.718260][ T5608] usb 5-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 391.741023][ T5608] usb 5-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=91.f6 [ 391.802229][ T5608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.821243][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.6.801'. [ 391.864518][ T5608] usb 5-1: Product: syz [ 391.882425][ T5608] usb 5-1: Manufacturer: syz [ 391.902710][ T5608] usb 5-1: SerialNumber: syz [ 392.346237][ T9296] netlink: 'syz.0.808': attribute type 1 has an invalid length. [ 392.498726][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.808'. [ 392.767676][ T9298] bond2: (slave geneve2): making interface the new active one [ 392.776455][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.830969][ T9298] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 392.887566][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.908278][ T9300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.916940][ T29] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 392.971449][ T48] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 393.014584][ T48] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 393.084450][ T48] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 393.112983][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.128235][ T48] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 393.153606][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.211283][ T29] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 393.259662][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.312830][ T29] usb 1-1: Product: syz [ 393.347088][ T29] usb 1-1: Manufacturer: syz [ 393.357835][ T29] usb 1-1: SerialNumber: syz [ 393.486424][ T5608] usb 5-1: USB disconnect, device number 25 [ 393.518050][ T5721] pl2303 7-1:105.207: required endpoints missing [ 393.536617][ T805] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 393.591848][ T5721] usb 7-1: USB disconnect, device number 8 [ 393.713382][ T805] usb 6-1: unable to get BOS descriptor or descriptor too short [ 393.738377][ T805] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.773703][ T805] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.799583][ T805] usb 6-1: string descriptor 0 read error: -22 [ 393.813208][ T805] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 393.836619][ T805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.878416][ T805] usb 6-1: skipping empty audio interface (v1) [ 394.043651][ T10] wlan0 speed is unknown, defaulting to 1000 [ 394.055457][ T5805] wlan0 speed is unknown, defaulting to 1000 [ 394.080579][ T805] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 394.135043][ T805] usb 6-1: USB disconnect, device number 5 [ 394.160202][ T29] usb 1-1: unit 5 not found! [ 394.370339][ T29] usb 1-1: USB disconnect, device number 22 [ 395.301844][ T5707] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 395.633240][ T5707] usb 8-1: unable to get BOS descriptor or descriptor too short [ 395.705930][ T5707] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.751518][ T5707] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.875484][ T5707] usb 8-1: string descriptor 0 read error: -22 [ 395.946750][ T5707] usb 8-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 395.980268][ T5707] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.046591][ T5707] usb 8-1: USB disconnect, device number 5 [ 397.134614][ T30] audit: type=1400 audit(1785553354.669:715): avc: denied { write } for pid=9327 comm="syz.0.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 397.203450][ T30] audit: type=1400 audit(1785553354.689:716): avc: denied { remount } for pid=9327 comm="syz.0.816" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 397.238804][ T9328] option changes via remount are deprecated (pid=9327 comm=syz.0.816) [ 398.591164][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 398.756592][ T10] usb 8-1: config 105 has an invalid interface number: 207 but max is 0 [ 398.788405][ T10] usb 8-1: config 105 has no interface number 0 [ 398.802382][ T10] usb 8-1: config 105 interface 207 has no altsetting 0 [ 398.823236][ T10] usb 8-1: New USB device found, idVendor=0df7, idProduct=0620, bcdDevice=34.7b [ 398.835003][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.843346][ T10] usb 8-1: Product: syz [ 398.847539][ T10] usb 8-1: Manufacturer: syz [ 398.855498][ T10] usb 8-1: SerialNumber: syz [ 398.910874][ T9362] xt_CT: You must specify a L4 protocol and not use inversions on it [ 399.675271][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.7.821'. [ 399.961550][ T5724] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 401.051266][ T5724] usb 7-1: Using ep0 maxpacket: 32 [ 401.064725][ T5724] usb 7-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 401.075336][ T5724] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 401.086817][ T5724] usb 7-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 401.096527][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.121371][ T5724] usb 7-1: config 0 descriptor?? [ 401.336234][ T5707] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 401.378741][ T5707] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 402.051114][ T10] pl2303 8-1:105.207: required endpoints missing [ 402.061650][ T10] usb 8-1: USB disconnect, device number 6 [ 402.351606][ T9418] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.211392][ T5707] usb 7-1: USB disconnect, device number 9 [ 403.421252][ T30] audit: type=1400 audit(1785553360.949:717): avc: denied { audit_write } for pid=9436 comm="syz.5.846" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 403.638754][ T30] audit: type=1400 audit(1785553361.059:718): avc: denied { watch watch_reads } for pid=9436 comm="syz.5.846" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 403.682115][ T5707] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 403.911133][ T5707] usb 7-1: Using ep0 maxpacket: 32 [ 403.918229][ T5707] usb 7-1: config 0 interface 0 has no altsetting 0 [ 403.928960][ T5707] usb 7-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 403.942241][ T5724] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 404.142386][ T5724] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 404.442797][ T5707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.453565][ T5707] usb 7-1: config 0 descriptor?? [ 404.479893][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.508407][ T5724] usb 5-1: config 0 descriptor?? [ 404.528038][ T5724] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 404.756896][ T30] audit: type=1400 audit(1785553362.289:719): avc: denied { connect } for pid=9434 comm="syz.6.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 404.834179][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.877881][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.886036][ T30] audit: type=1400 audit(1785553362.349:720): avc: denied { write } for pid=9434 comm="syz.6.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 404.936077][ T5724] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 405.135863][ T5724] gspca_cpia1: usb_control_msg 01, error -32 [ 405.162717][ T5724] gspca_cpia1: usb_control_msg 01, error -32 [ 405.178994][ T5707] hid (null): global environment stack underflow [ 405.210062][ T5707] hid (null): global environment stack underflow [ 405.419432][ T5724] gspca_cpia1: usb_control_msg 02, error -71 [ 405.454572][ T5724] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 405.674171][ T5724] usb 5-1: USB disconnect, device number 26 [ 406.095518][ T5707] wacom 0003:056A:0318.000C: unknown main item tag 0x1 [ 406.102562][ T5707] wacom 0003:056A:0318.000C: unknown main item tag 0x6 [ 406.109987][ T5707] wacom 0003:056A:0318.000C: unknown main item tag 0x0 [ 406.116905][ T5707] wacom 0003:056A:0318.000C: unknown main item tag 0x0 [ 406.123838][ T5707] wacom 0003:056A:0318.000C: unknown main item tag 0x0 [ 406.132199][ T5707] wacom 0003:056A:0318.000C: unknown main item tag 0x0 [ 406.139138][ T5707] wacom 0003:056A:0318.000C: collection stack underflow [ 406.146179][ T5707] wacom 0003:056A:0318.000C: item 0 2 0 12 parsing failed [ 406.153872][ T5707] wacom 0003:056A:0318.000C: parse failed [ 406.159723][ T5707] wacom 0003:056A:0318.000C: probe with driver wacom failed with error -22 [ 406.176956][ T5707] usb 7-1: USB disconnect, device number 10 [ 406.237474][ T9471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 406.375634][ T9469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9469 comm=syz.0.854 [ 406.396967][ T30] audit: type=1400 audit(1785553363.929:721): avc: denied { create } for pid=9474 comm="syz.7.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 407.447382][ T9487] wlan0 speed is unknown, defaulting to 1000 [ 408.365502][ T9509] comedi: valid board names for 8255 driver are: [ 408.415369][ T9509] 8255 [ 408.427685][ T9509] comedi: valid board names for vmk80xx driver are: [ 408.435159][ T9509] vmk80xx [ 408.451889][ T9509] comedi: valid board names for usbduxsigma driver are: [ 408.500142][ T9509] usbduxsigma [ 408.514756][ T9509] comedi: valid board names for usbduxfast driver are: [ 408.541782][ T9509] usbduxfast [ 408.557467][ T9509] comedi: valid board names for usbdux driver are: [ 408.568202][ T9509] usbdux [ 408.582830][ T9509] comedi: valid board names for ni6501 driver are: [ 408.658596][ T9509] ni6501 [ 408.669877][ T9509] comedi: valid board names for dt9812 driver are: [ 408.678776][ T9509] dt9812 [ 408.712059][ T9509] comedi: valid board names for ni_labpc_cs driver are: [ 408.740476][ T30] audit: type=1400 audit(1785553366.269:722): avc: denied { read } for pid=9519 comm="syz.7.867" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 408.743187][ T9509] ni_labpc_cs [ 408.799065][ T9509] comedi: valid board names for ni_daq_700 driver are: [ 408.807684][ T9522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.819812][ T9509] ni_daq_700 [ 408.839351][ T30] audit: type=1400 audit(1785553366.269:723): avc: denied { open } for pid=9519 comm="syz.7.867" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 408.883029][ T9509] comedi: valid board names for labpc_pci driver are: [ 408.901430][ T9509] labpc_pci [ 408.924967][ T9509] comedi: valid board names for adl_pci9118 driver are: [ 408.936571][ T30] audit: type=1400 audit(1785553366.269:724): avc: denied { ioctl } for pid=9519 comm="syz.7.867" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 408.969237][ T9509] pci9118dg [ 408.977438][ T9509] pci9118hg [ 408.989242][ T9509] pci9118hr [ 409.003632][ T9509] comedi: valid board names for 8255_pci driver are: [ 409.043122][ T9509] 8255_pci [ 409.053084][ T9509] comedi: valid board names for s526 driver are: [ 409.061251][ T9509] s526 [ 409.064063][ T9509] comedi: valid board names for multiq3 driver are: [ 409.070662][ T9509] multiq3 [ 409.074092][ T9509] comedi: valid board names for pcmuio driver are: [ 409.083466][ T9509] pcmuio48 [ 409.138392][ T9509] pcmuio96 [ 409.156231][ T30] audit: type=1400 audit(1785553366.689:725): avc: denied { unmount } for pid=7988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 409.176768][ T9509] comedi: valid board names for pcmmio driver are: [ 409.205446][ T9509] pcmmio [ 409.214822][ T9509] comedi: valid board names for pcmda12 driver are: [ 409.240042][ T9509] pcmda12 [ 409.288428][ T9509] comedi: valid board names for pcmad driver are: [ 409.383146][ T9509] pcmad12 [ 409.396856][ T9509] pcmad16 [ 409.408751][ T9509] comedi: valid board names for ni_labpc driver are: [ 409.465118][ T9509] lab-pc-1200 [ 409.500696][ T9509] lab-pc-1200ai [ 409.548663][ T9509] lab-pc+ [ 409.568059][ T9509] comedi: valid board names for atmio16 driver are: [ 409.620889][ T9509] atmio16 [ 409.636047][ T9509] atmio16d [ 409.648797][ T9509] comedi: valid board names for ni_at_ao driver are: [ 409.667847][ T9509] at-ao-6 [ 409.671482][ T9509] at-ao-10 [ 409.674659][ T9509] comedi: valid board names for ni_at_a2150 driver are: [ 409.681733][ T5805] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 409.705624][ T9509] ni_at_a2150 [ 409.727527][ T9509] comedi: valid board names for adq12b driver are: [ 409.782257][ T9509] adq12b [ 409.795802][ T9509] comedi: valid board names for mpc624 driver are: [ 409.849231][ T5805] usb 7-1: config 105 has an invalid interface number: 207 but max is 0 [ 410.065162][ T9509] mpc624 [ 410.080366][ T5805] usb 7-1: config 105 has no interface number 0 [ 410.093033][ T9509] comedi: valid board names for c6xdigio driver are: [ 410.128018][ T5805] usb 7-1: config 105 interface 207 has no altsetting 0 [ 410.142526][ T9509] c6xdigio [ 410.153675][ T9509] comedi: valid board names for aio_iiro_16 driver are: [ 410.176878][ T9509] aio_iiro_16 [ 410.183142][ T5805] usb 7-1: New USB device found, idVendor=0df7, idProduct=0620, bcdDevice=34.7b [ 410.200596][ T9509] comedi: valid board names for aio_aio12_8 driver are: [ 410.207716][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.215945][ T9509] aio_aio12_8 [ 410.220197][ T5805] usb 7-1: Product: syz [ 410.225134][ T9509] aio_ai12_8 [ 410.239316][ T9509] aio_ao12_4 [ 410.242682][ T5805] usb 7-1: Manufacturer: syz [ 410.251846][ T9509] comedi: valid board names for fl512 driver are: [ 410.258824][ T5805] usb 7-1: SerialNumber: syz [ 410.295641][ T9509] fl512 [ 410.319361][ T9509] comedi: valid board names for dmm32at driver are: [ 410.359705][ T9509] dmm32at [ 410.498629][ T9509] comedi: valid board names for dt282x driver are: [ 410.511163][ T9509] dt2821 [ 410.525629][ T9509] dt2821-f [ 410.530226][ T9509] dt2821-g [ 410.967222][ T9509] dt2823 [ 410.984744][ T9509] dt2824-pgh [ 410.992269][ T9509] dt2824-pgl [ 411.003150][ T9509] dt2825 [ 411.014290][ T9509] dt2827 [ 411.028065][ T9509] dt2828 [ 411.042434][ T9509] dt2829 [ 411.049314][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.870'. [ 411.063076][ T9509] dt21-ez [ 411.076184][ T9509] dt23-ez [ 411.094118][ T9509] dt24-ez [ 411.104536][ T9509] dt24-ez-pgl [ 411.122257][ T9509] comedi: valid board names for dt2817 driver are: [ 411.144852][ T9509] dt2817 [ 411.160205][ T9509] comedi: valid board names for dt2815 driver are: [ 411.176602][ T9509] dt2815 [ 411.185277][ T9509] comedi: valid board names for dt2814 driver are: [ 411.274934][ T9509] dt2814 [ 411.288830][ T9509] comedi: valid board names for dt2811 driver are: [ 411.295880][ T9509] dt2811-pgh [ 411.301477][ T9509] dt2811-pgl [ 411.306191][ T9509] comedi: valid board names for dt2801 driver are: [ 411.323093][ T9509] dt2801 [ 411.326311][ T9509] comedi: valid board names for das6402 driver are: [ 411.357977][ T9509] das6402-12 [ 411.370993][ T9509] das6402-16 [ 411.380443][ T9509] comedi: valid board names for das1800 driver are: [ 411.396746][ T9509] das-1701st [ 411.401166][ T5707] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 411.412281][ T9509] das-1701st-da [ 411.427423][ T9509] das-1702st [ 411.436653][ T9509] das-1702st-da [ 411.448972][ T9509] das-1702hr [ 411.462538][ T9509] das-1702hr-da [ 411.474497][ T9509] das-1701ao [ 411.484269][ T9509] das-1702ao [ 411.494877][ T9509] das-1801st [ 411.510197][ T9509] das-1801st-da [ 411.525151][ T9509] das-1802st [ 411.537486][ T9509] das-1802st-da [ 411.548401][ T9509] das-1802hr [ 411.557902][ T9509] das-1802hr-da [ 411.563284][ T5707] usb 8-1: Using ep0 maxpacket: 8 [ 411.577600][ T9509] das-1801hc [ 411.587791][ T5707] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.606813][ T9509] das-1802hc [ 411.625316][ T5707] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 411.639692][ T9509] das-1801ao [ 411.654336][ T9509] das-1802ao [ 411.658907][ T5707] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 411.679722][ T9509] comedi: valid board names for das800 driver are: [ 411.698144][ T5707] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 411.709003][ T9509] das-800 [ 411.712657][ T5707] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.720905][ T9509] cio-das800 [ 411.724710][ T9509] das-801 [ 411.727903][ T5707] usb 8-1: Product: syz [ 411.732636][ T5707] usb 8-1: Manufacturer: syz [ 411.737359][ T9509] cio-das801 [ 411.740816][ T5707] usb 8-1: SerialNumber: syz [ 411.746464][ T9509] das-802 [ 411.751912][ T9509] cio-das802 [ 411.768814][ T9509] cio-das802/16 [ 411.786646][ T9509] comedi: valid board names for isa-das08 driver are: [ 411.795890][ T9509] isa-das08 [ 411.801576][ T9509] das08-pgm [ 411.805465][ T9509] das08-pgh [ 411.808937][ T9509] das08-pgl [ 411.813011][ T9509] das08-aoh [ 411.819744][ T9509] das08-aol [ 411.824056][ T9509] das08-aom [ 411.828527][ T9509] das08/jr-ao [ 411.832578][ T9509] das08jr-16-ao [ 411.836943][ T9509] pc104-das08 [ 411.842677][ T9509] das08jr/16 [ 411.846668][ T9509] comedi: valid board names for das16m1 driver are: [ 411.854405][ T9509] das16m1 [ 411.857919][ T9509] comedi: valid board names for dac02 driver are: [ 411.894798][ T9509] dac02 [ 411.932932][ T9509] comedi: valid board names for rti802 driver are: [ 411.969528][ T9509] rti802 [ 411.975707][ T9509] comedi: valid board names for rti800 driver are: [ 411.982989][ T9509] rti800 [ 412.001940][ T9559] fuse: Bad value for 'fd' [ 412.010116][ T9509] rti815 [ 412.023333][ T9509] comedi: valid board names for pcm3724 driver are: [ 412.044826][ T9509] pcm3724 [ 412.052138][ T9509] comedi: valid board names for pcl818 driver are: [ 412.058807][ T9509] pcl818l [ 412.062596][ T9509] pcl818h [ 412.065846][ T9509] pcl818hd [ 412.070962][ T9509] pcl818hg [ 412.074365][ T9509] pcl818 [ 412.077536][ T9509] pcl718 [ 412.080550][ T9509] pcm3718 [ 412.085373][ T9509] comedi: valid board names for pcl816 driver are: [ 412.092254][ T9509] pcl816 [ 412.095322][ T9509] pcl814b [ 412.098475][ T9509] comedi: valid board names for pcl812 driver are: [ 412.105539][ T9509] pcl812 [ 412.108679][ T9509] pcl812pg [ 412.114118][ T9509] acl8112pg [ 412.117464][ T9509] acl8112dg [ 412.120831][ T9509] acl8112hg [ 412.124388][ T9509] a821pgl [ 412.127737][ T9509] a821pglnda [ 412.131211][ T9509] a821pgh [ 412.134367][ T9509] a822pgl [ 412.140859][ T9509] a822pgh [ 412.144441][ T9509] a823pgl [ 412.147569][ T9509] a823pgh [ 412.150693][ T9509] pcl813 [ 412.154204][ T9509] pcl813b [ 412.157372][ T9509] acl8113 [ 412.160539][ T9509] iso813 [ 412.164198][ T9509] acl8216 [ 412.167317][ T9509] a826pg [ 412.170401][ T9509] comedi: valid board names for pcl730 driver are: [ 412.179249][ T9509] pcl730 [ 412.182622][ T9509] iso730 [ 412.185624][ T9509] acl7130 [ 412.188748][ T9509] pcm3730 [ 412.193175][ T9509] pcl725 [ 412.196247][ T9509] p8r8dio [ 412.199386][ T9509] acl7225b [ 412.203380][ T9509] p16r16dio [ 412.206655][ T9509] pcl733 [ 412.209734][ T9509] pcl734 [ 412.213246][ T9509] opmm-1616-xt [ 412.216856][ T9509] pearl-mm-p [ 412.220290][ T9509] ir104-pbf [ 412.226231][ T9509] comedi: valid board names for pcl726 driver are: [ 412.234544][ T9509] pcl726 [ 412.237590][ T9509] pcl727 [ 412.240602][ T9509] pcl728 [ 412.245168][ T9509] acl6126 [ 412.248329][ T9509] acl6128 [ 412.251862][ T9509] comedi: valid board names for pcl724 driver are: [ 412.258624][ T9509] pcl724 [ 412.262147][ T9509] pcl722 [ 412.265178][ T9509] pcl731 [ 412.268183][ T9509] acl7122 [ 412.271895][ T9509] acl7124 [ 412.275786][ T9509] pet48dio [ 412.278997][ T9509] pcmio48 [ 412.283380][ T9509] onyx-mm-dio [ 412.286838][ T9509] comedi: valid board names for pcl711 driver are: [ 412.293971][ T9509] pcl711 [ 412.297048][ T9509] pcl711b [ 412.300241][ T9509] acl8112hg [ 412.304211][ T9509] acl8112dg [ 412.307617][ T9509] comedi: valid board names for amplc_pc263 driver are: [ 412.316934][ T9509] pc263 [ 412.319889][ T9509] comedi: valid board names for amplc_pc236 driver are: [ 412.328121][ T9509] pc36at [ 412.333868][ T9509] comedi: valid board names for amplc_dio200 driver are: [ 412.342800][ T9509] pc212e [ 412.345817][ T9509] pc214e [ 412.348813][ T9509] pc215e [ 412.352555][ T9509] pc218e [ 412.355571][ T9509] pc272e [ 412.358567][ T9509] comedi: valid board names for comedi_parport driver are: [ 412.366378][ T9509] comedi_parport [ 412.370116][ T9509] comedi: valid board names for comedi_test driver are: [ 412.378234][ T5608] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 412.387527][ T9509] comedi_test [ 412.392288][ T9509] comedi: valid board names for comedi_bond driver are: [ 412.399477][ T9509] comedi_bond [ 412.419279][ T5707] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 412.431380][ T5707] usb 8-1: clock source 0 is not valid, cannot use [ 412.457581][ T5707] usb 8-1: 1:1: cannot get freq (v2/v3): err -32 [ 412.458593][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.459047][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.460089][ T5707] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 412.544002][ T5608] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 412.558249][ T5608] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 412.587359][ T5608] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.601408][ T5724] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 412.618770][ T5608] usb 1-1: Product: syz [ 412.632438][ T5608] usb 1-1: Manufacturer: syz [ 412.643968][ T5608] usb 1-1: SerialNumber: syz [ 412.669863][ T5608] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 412.684440][ T5707] usb 8-1: USB disconnect, device number 7 [ 412.760061][ T8826] udevd[8826]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.804867][ T5724] usb 5-1: Using ep0 maxpacket: 8 [ 412.825648][ T5724] usb 5-1: unable to get BOS descriptor or descriptor too short [ 412.853579][ T5724] usb 5-1: config 4 interface 0 has no altsetting 0 [ 412.864366][ T5724] usb 5-1: string descriptor 0 read error: -22 [ 412.870752][ T5724] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 412.883273][ T5724] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 412.929744][ T5724] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 412.949380][ T5724] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 412.967726][ T5724] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 412.999113][ T5724] usb 5-1: media controller created [ 413.049587][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 413.303409][ T5805] pl2303 7-1:105.207: required endpoints missing [ 413.327473][ T5805] usb 7-1: USB disconnect, device number 11 [ 413.396280][ T9570] vlan2: entered promiscuous mode [ 413.413103][ T9570] bridge0: entered promiscuous mode [ 413.874874][ T30] audit: type=1400 audit(1785553371.409:726): avc: denied { setopt } for pid=9569 comm="syz.7.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 415.208678][ T5608] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 415.295564][ T5608] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 415.352034][ T5608] usb 1-1: media controller created [ 415.420308][ T5608] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 415.534241][ T5805] usb 5-1: USB disconnect, device number 27 [ 415.611988][ T9598] futex_wake_op: syz.7.886 tries to shift op by 144; fix this program [ 415.842248][ T29] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 415.970059][ T5608] usb 1-1: USB disconnect, device number 23 [ 416.036007][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 416.053450][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.066023][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.323232][ T29] usb 6-1: string descriptor 0 read error: -22 [ 416.468228][ T29] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 416.486127][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.944466][ T29] usb 6-1: USB disconnect, device number 6 [ 418.662320][ T5805] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 419.281126][ T5805] usb 1-1: device descriptor read/64, error -71 [ 419.297202][ T9637] futex_wake_op: syz.5.900 tries to shift op by 144; fix this program [ 419.789644][ T5805] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 420.251134][ T5805] usb 1-1: device descriptor read/64, error -71 [ 420.414541][ T5805] usb usb1-port1: attempt power cycle [ 420.771125][ T29] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 420.771134][ T5805] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 420.803503][ T5805] usb 1-1: device descriptor read/8, error -71 [ 421.030647][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 421.043099][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.096528][ T9660] netlink: 220 bytes leftover after parsing attributes in process `syz.4.907'. [ 421.107288][ T5805] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 421.116164][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.131972][ T5805] usb 1-1: device descriptor read/8, error -71 [ 421.141570][ T29] usb 6-1: string descriptor 0 read error: -22 [ 421.196760][ T29] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 421.232258][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.301886][ T5805] usb usb1-port1: unable to enumerate USB device [ 421.367353][ T9666] futex_wake_op: syz.4.909 tries to shift op by 144; fix this program [ 421.867659][ T9672] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1424729573 (182365385344 ns) > initial count (134528494848 ns). Using initial count to start timer. [ 422.019055][ T29] usb 6-1: USB disconnect, device number 7 [ 422.988553][ T9684] netlink: 48 bytes leftover after parsing attributes in process `syz.4.915'. [ 423.003086][ T29] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 423.034705][ T29] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 423.099251][ T9690] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.857821][ T9709] netlink: 'syz.0.920': attribute type 1 has an invalid length. [ 424.884227][ T30] audit: type=1400 audit(1785553382.389:727): avc: denied { ioctl } for pid=9683 comm="syz.4.915" path="/199/file0" dev="tmpfs" ino=1112 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 424.925387][ T9701] netlink: 20 bytes leftover after parsing attributes in process `syz.5.914'. [ 425.040730][ T9709] bond3: entered promiscuous mode [ 425.048754][ T9709] bond3: entered allmulticast mode [ 425.054437][ T9709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 425.220557][ T9705] erspan1: entered allmulticast mode [ 425.394132][ T9705] bond3: (slave erspan1): making interface the new active one [ 425.401855][ T9705] erspan1: entered promiscuous mode [ 425.415494][ T9705] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 425.502249][ T5805] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 426.051145][ T5805] usb 1-1: device descriptor read/64, error -71 [ 426.199651][ T9732] /dev/sg0: Can't lookup blockdev [ 426.256402][ T9733] futex_wake_op: syz.7.925 tries to shift op by 144; fix this program [ 426.279985][ T9729] omfs: Invalid superblock (0) [ 426.338548][ T5805] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 426.991271][ T5805] usb 1-1: device descriptor read/64, error -71 [ 427.151390][ T5805] usb usb1-port1: attempt power cycle [ 428.207631][ T9717] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.215190][ T9717] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.212976][ T9717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.256156][ T9717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.499158][ T542] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.531147][ T5608] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 429.583192][ T9740] wlan0 speed is unknown, defaulting to 1000 [ 429.591405][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.600510][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.905287][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.984434][ T5608] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 430.000155][ T5608] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.036430][ T5608] usb 8-1: config 0 has no interface number 0 [ 430.058147][ T5608] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 430.083706][ T5608] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.109632][ T5608] usb 8-1: Product: syz [ 430.124606][ T5608] usb 8-1: Manufacturer: syz [ 430.141722][ T5608] usb 8-1: SerialNumber: syz [ 430.165466][ T9783] xt_hashlimit: size too large, truncated to 1048576 [ 430.267053][ T5608] usb 8-1: config 0 descriptor?? [ 430.353210][ T5608] uvcvideo 8-1:0.64: probe with driver uvcvideo failed with error -22 [ 432.337257][ T9802] netlink: 48 bytes leftover after parsing attributes in process `syz.6.943'. [ 432.354056][ T9799] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 432.360426][ T9799] [U] J"—e:ÀÆ" [ 432.378540][ T9802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.426496][ T9804] netlink: 'syz.4.945': attribute type 1 has an invalid length. [ 432.473956][ T9804] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.486249][ T9804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.945'. [ 432.508639][ T9804] bond2: (slave bridge6): making interface the new active one [ 432.518101][ T9804] bond2: (slave bridge6): Enslaving as an active interface with an up link [ 432.631670][ T5608] usb 8-1: USB disconnect, device number 8 [ 432.652948][ T804] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 432.831471][ T804] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.127134][ T804] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.213825][ T804] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 433.363827][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.630874][ T804] usb 6-1: Product: syz [ 433.661813][ T804] usb 6-1: Manufacturer: syz [ 433.695454][ T804] usb 6-1: SerialNumber: syz [ 433.846491][ T804] symbolserial 6-1:1.0: symbol converter detected [ 434.261882][ T804] usb 6-1: symbol converter now attached to ttyUSB0 [ 434.357879][ T804] usb 6-1: USB disconnect, device number 8 [ 434.395070][ T804] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 434.419830][ T804] symbolserial 6-1:1.0: device disconnected [ 435.878512][ T9841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.699665][ T30] audit: type=1400 audit(1785553394.229:728): avc: denied { write } for pid=9848 comm="syz.5.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 436.722472][ T9849] syzkaller0: entered promiscuous mode [ 436.741221][ T9849] syzkaller0: entered allmulticast mode [ 436.746949][ T30] audit: type=1400 audit(1785553394.249:729): avc: denied { setopt } for pid=9848 comm="syz.5.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 436.798159][ T30] audit: type=1400 audit(1785553394.249:730): avc: denied { read } for pid=9848 comm="syz.5.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 436.921440][ T5724] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 437.250548][ T5724] usb 5-1: unable to get BOS descriptor or descriptor too short [ 437.370714][ T5724] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.392425][ T4927] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 437.397857][ T5724] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.426450][ T9859] bridge3: entered promiscuous mode [ 437.445664][ T5724] usb 5-1: string descriptor 0 read error: -22 [ 437.469930][ T5724] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 437.502384][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.100188][ T804] usb 5-1: USB disconnect, device number 28 [ 439.753069][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.759567][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.055382][ T9909] 9pnet_virtio: no channels available for device 127.0.0.1 [ 441.146205][ T30] audit: type=1400 audit(1785553398.589:731): avc: denied { mounton } for pid=9903 comm="syz.4.974" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 441.564018][ T9913] futex_wake_op: syz.0.978 tries to shift op by 144; fix this program [ 443.209934][ T30] audit: type=1400 audit(1785553400.739:732): avc: denied { read } for pid=9914 comm="syz.6.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 443.799432][ T5721] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 443.999609][ T10] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 444.021125][ T5721] usb 1-1: Using ep0 maxpacket: 16 [ 444.035955][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.063437][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.097790][ T5721] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 444.117755][ T5721] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 444.141469][ T10] usb 7-1: device descriptor read/64, error -71 [ 444.157916][ T5721] usb 1-1: Manufacturer: syz [ 444.183720][ T5721] usb 1-1: config 0 descriptor?? [ 444.391180][ T10] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 444.546186][ T10] usb 7-1: device descriptor read/64, error -71 [ 444.639673][ T5721] creative-sb0540 0003:041E:3100.000E: collection stack underflow [ 444.667295][ T5721] creative-sb0540 0003:041E:3100.000E: item 0 0 0 12 parsing failed [ 444.682886][ T10] usb usb7-port1: attempt power cycle [ 444.708148][ T5721] creative-sb0540 0003:041E:3100.000E: parse failed [ 444.753629][ T5721] creative-sb0540 0003:041E:3100.000E: probe with driver creative-sb0540 failed with error -22 [ 445.051148][ T10] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 445.095380][ T10] usb 7-1: device descriptor read/8, error -71 [ 445.531171][ T10] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 446.124384][ T10] usb 7-1: device descriptor read/8, error -71 [ 446.245819][ T10] usb usb7-port1: unable to enumerate USB device [ 446.885636][ T10] usb 1-1: USB disconnect, device number 31 [ 448.520856][ T9996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.313860][T10018] netlink: 'syz.4.1007': attribute type 1 has an invalid length. [ 449.341183][ T5608] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 449.501673][ T5608] usb 1-1: device descriptor read/64, error -71 [ 449.624363][T10018] bond3: entered promiscuous mode [ 449.658113][T10018] bond3: entered allmulticast mode [ 449.699808][T10018] 8021q: adding VLAN 0 to HW filter on device bond3 [ 449.741173][ T5608] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 449.805462][T10015] erspan1: entered allmulticast mode [ 449.889641][T10015] bond3: (slave erspan1): making interface the new active one [ 449.900393][ T5608] usb 1-1: device descriptor read/64, error -71 [ 449.911634][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 450.001190][T10015] erspan1: entered promiscuous mode [ 450.045473][T10015] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 450.056715][ T10] usb 5-1: device descriptor read/64, error -71 [ 450.173355][ T5608] usb usb1-port1: attempt power cycle [ 450.613156][ T5608] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 450.655310][ T5608] usb 1-1: device descriptor read/8, error -71 [ 450.741387][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 450.759187][ T30] audit: type=1400 audit(1785553408.289:733): avc: denied { write } for pid=10028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.163085][ T10] usb 5-1: device descriptor read/64, error -71 [ 451.231178][ T5608] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 451.284474][ T10] usb usb5-port1: attempt power cycle [ 451.325168][ T5608] usb 1-1: device descriptor read/8, error -71 [ 451.411756][ T30] audit: type=1400 audit(1785553408.949:734): avc: denied { write } for pid=10055 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.441603][ T5608] usb usb1-port1: unable to enumerate USB device [ 451.584781][T10061] futex_wake_op: syz.6.1019 tries to shift op by 144; fix this program [ 451.631107][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 451.651741][ T10] usb 5-1: device descriptor read/8, error -71 [ 452.505388][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1021'. [ 452.547467][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 452.777705][T10083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1025'. [ 452.806698][ T30] audit: type=1400 audit(1785553410.339:735): avc: denied { write } for pid=10059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.843032][ T10] usb 5-1: device not accepting address 32, error -71 [ 452.865591][ T10] usb usb5-port1: unable to enumerate USB device [ 452.924059][T10094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.956743][T10093] serio: Serial port ttyS3 [ 453.092381][ T30] audit: type=1400 audit(1785553410.619:736): avc: denied { write } for pid=10097 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.223130][ T5805] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 453.509037][T10106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 453.509152][T10106] IPv6: NLM_F_CREATE should be set when creating new route [ 453.592637][ T5805] usb 6-1: config 105 has an invalid interface number: 207 but max is 0 [ 453.592668][ T5805] usb 6-1: config 105 has no interface number 0 [ 453.592697][ T5805] usb 6-1: config 105 interface 207 has no altsetting 0 [ 453.595222][ T5805] usb 6-1: New USB device found, idVendor=0df7, idProduct=0620, bcdDevice=34.7b [ 453.595254][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.595278][ T5805] usb 6-1: Product: syz [ 453.595297][ T5805] usb 6-1: Manufacturer: syz [ 453.595315][ T5805] usb 6-1: SerialNumber: syz [ 454.337395][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1027'. [ 454.566608][T10125] futex_wake_op: syz.0.1034 tries to shift op by 144; fix this program [ 455.434184][ T10] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 455.587002][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 455.605818][ T30] audit: type=1400 audit(1785553413.128:737): avc: denied { write } for pid=10109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.638369][ T10] usb 8-1: config 0 has no interfaces? [ 455.652662][ T10] usb 8-1: string descriptor 0 read error: -22 [ 455.668852][ T10] usb 8-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 455.684812][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.732388][ T10] usb 8-1: config 0 descriptor?? [ 455.946508][ T30] audit: type=1400 audit(1785553413.468:738): avc: denied { write } for pid=10148 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.984490][ T10] usb 8-1: USB disconnect, device number 9 [ 456.214399][T10153] omfs: Invalid superblock (0) [ 457.115149][ T5805] pl2303 6-1:105.207: required endpoints missing [ 457.145194][ T5805] usb 6-1: USB disconnect, device number 9 [ 457.322809][T10169] omfs: Invalid superblock (0) [ 457.870683][ T804] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 457.899803][ T804] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 458.855538][ T30] audit: type=1400 audit(1785553416.378:739): avc: denied { create } for pid=10184 comm="syz.7.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 458.897277][ T30] audit: type=1400 audit(1785553416.378:740): avc: denied { read } for pid=10184 comm="syz.7.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 459.241465][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 459.299513][T10189] futex_wake_op: syz.5.1050 tries to shift op by 144; fix this program [ 459.631122][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 459.638144][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.656452][ T10] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 459.700107][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.725194][ T10] usb 8-1: Product: syz [ 459.737601][ T10] usb 8-1: Manufacturer: syz [ 459.756018][ T10] usb 8-1: SerialNumber: syz [ 459.798385][ T10] usb 8-1: config 0 descriptor?? [ 459.816344][ T10] quatech2 8-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 460.191188][ T5805] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 460.353717][ T5805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 460.383293][ T5805] usb 1-1: config 0 has no interfaces? [ 460.398801][ T5805] usb 1-1: string descriptor 0 read error: -22 [ 460.411346][ T5805] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 460.420611][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.437265][ T5805] usb 1-1: config 0 descriptor?? [ 460.506751][T10217] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 460.513583][T10217] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 460.522607][T10218] vhci_hcd: xmit failed -107 [ 460.535953][T10217] vhci_hcd vhci_hcd.0: Device attached [ 460.550657][ T542] vhci_hcd vhci_hcd.0: stop threads [ 460.567097][ T542] vhci_hcd vhci_hcd.0: release socket [ 460.575184][ T542] vhci_hcd vhci_hcd.0: disconnect device [ 460.652949][ T5805] usb 1-1: USB disconnect, device number 36 [ 460.707838][T10217] netlink: 'syz.6.1061': attribute type 1 has an invalid length. [ 461.716038][ T10] usb 8-1: qt2_attach - failed to power on unit: -71 [ 462.576148][ T10] quatech2 8-1:0.0: probe with driver quatech2 failed with error -71 [ 462.599736][T10241] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1067'. [ 462.633950][ T10] usb 8-1: USB disconnect, device number 10 [ 462.723949][T10245] futex_wake_op: syz.4.1069 tries to shift op by 144; fix this program [ 463.361963][ T30] audit: type=1400 audit(1785553420.888:741): avc: denied { bind } for pid=10265 comm="syz.7.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 465.036402][T10259] ================================================================== [ 465.044486][T10259] BUG: KASAN: use-after-free in release_card_device+0x17d/0x1a0 [ 465.052103][T10259] Read of size 1 at addr ffff88814a848909 by task syz.6.1071/10259 [ 465.059963][T10259] [ 465.062272][T10259] CPU: 0 UID: 0 PID: 10259 Comm: syz.6.1071 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.062299][T10259] Tainted: [L]=SOFTLOCKUP [ 465.062306][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 465.062318][T10259] Call Trace: [ 465.062324][T10259] [ 465.062331][T10259] dump_stack_lvl+0x100/0x190 [ 465.062355][T10259] print_report+0x13d/0x4b0 [ 465.062380][T10259] ? __virt_addr_valid+0x239/0x430 [ 465.062404][T10259] ? release_card_device+0x17d/0x1a0 [ 465.062430][T10259] kasan_report+0xdf/0x1c0 [ 465.062453][T10259] ? release_card_device+0x17d/0x1a0 [ 465.062482][T10259] release_card_device+0x17d/0x1a0 [ 465.062508][T10259] ? __pfx_release_card_device+0x10/0x10 [ 465.062533][T10259] device_release+0xd2/0x270 [ 465.062560][T10259] kobject_put+0x1f7/0x640 [ 465.062586][T10259] put_device+0x1f/0x30 [ 465.062601][T10259] snd_card_file_remove+0x38f/0x560 [ 465.062620][T10259] snd_ctl_release+0x357/0x420 [ 465.062640][T10259] ? __pfx_snd_disconnect_release+0x10/0x10 [ 465.062667][T10259] __fput+0x3ff/0xb50 [ 465.062690][T10259] task_work_run+0x150/0x240 [ 465.062710][T10259] ? __pfx_task_work_run+0x10/0x10 [ 465.062727][T10259] ? free_time_ns+0x162/0x320 [ 465.062751][T10259] do_exit+0x951/0x2ae0 [ 465.062779][T10259] ? __pfx_do_exit+0x10/0x10 [ 465.062803][T10259] ? do_raw_spin_lock+0x128/0x260 [ 465.062827][T10259] ? find_held_lock+0x2b/0x80 [ 465.062843][T10259] ? get_signal+0x7e0/0x21e0 [ 465.062866][T10259] do_group_exit+0xd5/0x2a0 [ 465.062883][T10259] get_signal+0x1ec7/0x21e0 [ 465.062909][T10259] ? __pfx_get_signal+0x10/0x10 [ 465.062932][T10259] ? do_futex+0x190/0x440 [ 465.062959][T10259] arch_do_signal_or_restart+0x91/0x7e0 [ 465.062979][T10259] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 465.063012][T10259] exit_to_user_mode_loop+0x139/0x6f0 [ 465.063035][T10259] ? rcu_is_watching+0x12/0xc0 [ 465.063061][T10259] do_syscall_64+0x666/0x870 [ 465.063081][T10259] ? clear_bhb_loop+0x40/0x90 [ 465.063102][T10259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.063120][T10259] RIP: 0033:0x7f062f59e019 [ 465.063133][T10259] Code: Unable to access opcode bytes at 0x7f062f59dfef. [ 465.063142][T10259] RSP: 002b:00007f06303d10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 465.063160][T10259] RAX: fffffffffffffe00 RBX: 00007f062f826188 RCX: 00007f062f59e019 [ 465.063173][T10259] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f062f826188 [ 465.063184][T10259] RBP: 00007f062f826180 R08: 0000000000000000 R09: 0000000000000000 [ 465.063195][T10259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.063206][T10259] R13: 00007f062f826218 R14: 00007fff7d968fe0 R15: 00007fff7d9690c8 [ 465.063226][T10259] [ 465.063232][T10259] [ 465.323724][T10259] The buggy address belongs to the physical page: [ 465.330115][T10259] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14a848 [ 465.338955][T10259] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 465.346150][T10259] raw: 057ff00000000000 ffff8880b8541800 ffff8880b8541800 0000000000000000 [ 465.354736][T10259] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 465.363299][T10259] page dumped because: kasan: bad access detected [ 465.369808][T10259] page_owner tracks the page as freed [ 465.375161][T10259] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 19352377594, free_ts 464960513203 [ 465.392363][T10259] post_alloc_hook+0xfd/0x120 [ 465.397047][T10259] get_page_from_freelist+0xf48/0x3530 [ 465.402489][T10259] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 465.408379][T10259] alloc_pages_mpol+0x1fb/0x540 [ 465.413235][T10259] ___kmalloc_large_node+0xe5/0x120 [ 465.418431][T10259] __kmalloc_large_node_noprof+0x1c/0x70 [ 465.424062][T10259] __kmalloc_node_track_caller_noprof+0x5ac/0x830 [ 465.430466][T10259] __devres_alloc_node+0x6e/0x1e0 [ 465.435480][T10259] snd_devm_card_new+0x9d/0x190 [ 465.440311][T10259] loopback_probe+0x140/0x11a0 [ 465.445059][T10259] platform_probe+0x106/0x1d0 [ 465.449716][T10259] really_probe+0x241/0xa60 [ 465.454202][T10259] __driver_probe_device+0x20e/0x450 [ 465.459472][T10259] driver_probe_device+0x4a/0x140 [ 465.464480][T10259] __device_attach_driver+0x1df/0x320 [ 465.469840][T10259] bus_for_each_drv+0x159/0x1e0 [ 465.474673][T10259] page last free pid 10268 tgid 10265 stack trace: [ 465.481154][T10259] __free_frozen_pages+0x79f/0x1090 [ 465.486344][T10259] release_nodes+0xc3/0x120 [ 465.490832][T10259] devres_release_all+0x112/0x180 [ 465.495846][T10259] device_unbind_cleanup+0x81/0x270 [ 465.501029][T10259] device_release_driver_internal+0x4c4/0x620 [ 465.507083][T10259] unbind_store+0xf8/0x110 [ 465.511479][T10259] drv_attr_store+0x74/0xb0 [ 465.515971][T10259] sysfs_kf_write+0xf2/0x150 [ 465.520548][T10259] kernfs_fop_write_iter+0x3e0/0x5f0 [ 465.525829][T10259] vfs_write+0x6ac/0x1050 [ 465.530155][T10259] ksys_write+0x12a/0x250 [ 465.534473][T10259] do_syscall_64+0x115/0x870 [ 465.539046][T10259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.544923][T10259] [ 465.547227][T10259] Memory state around the buggy address: [ 465.552851][T10259] ffff88814a848800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 465.560904][T10259] ffff88814a848880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 465.568971][T10259] >ffff88814a848900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 465.577013][T10259] ^ [ 465.581327][T10259] ffff88814a848980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 465.589371][T10259] ffff88814a848a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 465.597429][T10259] ================================================================== [ 465.615266][T10259] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 465.622478][T10259] CPU: 0 UID: 0 PID: 10259 Comm: syz.6.1071 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.633415][T10259] Tainted: [L]=SOFTLOCKUP [ 465.637725][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 465.647771][T10259] Call Trace: [ 465.651051][T10259] [ 465.654065][T10259] dump_stack_lvl+0x100/0x190 [ 465.658751][T10259] vpanic+0x552/0x970 [ 465.662735][T10259] ? __pfx_vpanic+0x10/0x10 [ 465.667241][T10259] ? release_card_device+0x17d/0x1a0 [ 465.672533][T10259] panic+0xd1/0xe0 [ 465.676258][T10259] ? __pfx_panic+0x10/0x10 [ 465.680676][T10259] ? release_card_device+0x17d/0x1a0 [ 465.685970][T10259] ? preempt_schedule_common+0x42/0xc0 [ 465.691437][T10259] ? check_panic_on_warn+0x1f/0x90 [ 465.696553][T10259] check_panic_on_warn.cold+0x19/0x34 [ 465.701918][T10259] end_report.part.0+0x3a/0x90 [ 465.706673][T10259] kasan_report.cold+0xe/0x18 [ 465.711344][T10259] ? release_card_device+0x17d/0x1a0 [ 465.716631][T10259] release_card_device+0x17d/0x1a0 [ 465.721735][T10259] ? __pfx_release_card_device+0x10/0x10 [ 465.727359][T10259] device_release+0xd2/0x270 [ 465.731947][T10259] kobject_put+0x1f7/0x640 [ 465.736360][T10259] put_device+0x1f/0x30 [ 465.740501][T10259] snd_card_file_remove+0x38f/0x560 [ 465.745699][T10259] snd_ctl_release+0x357/0x420 [ 465.750455][T10259] ? __pfx_snd_disconnect_release+0x10/0x10 [ 465.756348][T10259] __fput+0x3ff/0xb50 [ 465.760325][T10259] task_work_run+0x150/0x240 [ 465.764902][T10259] ? __pfx_task_work_run+0x10/0x10 [ 465.769999][T10259] ? free_time_ns+0x162/0x320 [ 465.774669][T10259] do_exit+0x951/0x2ae0 [ 465.778819][T10259] ? __pfx_do_exit+0x10/0x10 [ 465.783400][T10259] ? do_raw_spin_lock+0x128/0x260 [ 465.788424][T10259] ? find_held_lock+0x2b/0x80 [ 465.793083][T10259] ? get_signal+0x7e0/0x21e0 [ 465.797662][T10259] do_group_exit+0xd5/0x2a0 [ 465.802147][T10259] get_signal+0x1ec7/0x21e0 [ 465.806643][T10259] ? __pfx_get_signal+0x10/0x10 [ 465.811481][T10259] ? do_futex+0x190/0x440 [ 465.815803][T10259] arch_do_signal_or_restart+0x91/0x7e0 [ 465.821338][T10259] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 465.827493][T10259] exit_to_user_mode_loop+0x139/0x6f0 [ 465.832856][T10259] ? rcu_is_watching+0x12/0xc0 [ 465.837616][T10259] do_syscall_64+0x666/0x870 [ 465.842193][T10259] ? clear_bhb_loop+0x40/0x90 [ 465.846857][T10259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.852735][T10259] RIP: 0033:0x7f062f59e019 [ 465.857133][T10259] Code: Unable to access opcode bytes at 0x7f062f59dfef. [ 465.864127][T10259] RSP: 002b:00007f06303d10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 465.872527][T10259] RAX: fffffffffffffe00 RBX: 00007f062f826188 RCX: 00007f062f59e019 [ 465.880482][T10259] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f062f826188 [ 465.888432][T10259] RBP: 00007f062f826180 R08: 0000000000000000 R09: 0000000000000000 [ 465.896383][T10259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.904337][T10259] R13: 00007f062f826218 R14: 00007fff7d968fe0 R15: 00007fff7d9690c8 [ 465.912297][T10259] [ 465.915517][T10259] Kernel Offset: disabled [ 465.919818][T10259] Rebooting in 86400 seconds..