last executing test programs: 29m22.423067002s ago: executing program 32 (id=555): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480040006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r1, @ANYBLOB="140006"], 0x48}}, 0x0) 27m54.942654072s ago: executing program 33 (id=1021): ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000000c0)={0x0, 0x4}) close(0x3) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464d0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000), 0x0) lsm_set_self_attr(0x0, 0x0, 0x0, 0x1f) sendto$inet6(r3, &(0x7f0000000040), 0xfffffe0f, 0x2000c851, &(0x7f0000000080)={0xa, 0x4e27, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c) 19m50.109133245s ago: executing program 2 (id=3125): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1b59ded130e0fd838539f3d3287772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r2) sendfile(r3, r4, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) gettid() r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000011140100"], 0x30}}, 0x24000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000240)="b3251af0715ebce64289d11d38b69bb56ed3a11162c3fc07e77b1a7772f0bd530ef6b13fdcb8f1454178e3087b6f8bf5a93504b4647c3ecfbfc2b7fa79fbd5dfbadbd5ffec5cee32c18062", &(0x7f0000000340)=""/99, &(0x7f00000003c0)="b4257d57aa62ed309b6d5138aca4e5f381ea05950f365684ba7af3a344e7724d26ab2a6403dc74048184be6c8cfa491c838abe62e36169a6db53fd7d723989bb183608af5a69707d53b4de23b080e556f0dda32a2d0c755e1a38de9c541d01a8657cb0223a44e97c9ef2a889641225ffe77439d91c2eb6e698f3a57aac87f81651397e853356d734b59019e38e8c7827f63a989ca043b52a51a5c89822a4d720a3b735648652f30339a57b75978625", &(0x7f0000000480)="f85077cc842e367adef76e2bcfb018060caf5cba9fcf1924c7a2dd71179ab5aeba533492f9f1d6edfba2ea8e049580a10db64816f9ba37e05373ca7ac0d616c875e13fd9f5020e191aaf729084ae1c6edce26b8e5035d8f4dd", 0x800, r4}, 0x38) 19m49.901693728s ago: executing program 2 (id=3127): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x2000000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) chdir(&(0x7f0000000140)='./bus\x00') write$rfkill(r0, &(0x7f0000000180)={0x2, 0x5, 0x1, 0x0, 0x1}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x81000000}]}, 0x20}}, 0x0) socket(0x15, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) sendmmsg(r3, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000002900)="f46dd9e7ee3cae8f1b329eab9fbb16b5c9c51a59a4507417244d124db5fd51ded6420cec714a5614ebac6519572e60376ef869c163c3b0879a4b593549613366b445b7cc712b348bccaf142d31e8f800dfa737a713339fac15ddafb3595b44f100a111f2b3d460c1039252", 0x6b}, {&(0x7f0000000300)="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", 0x4da}, {&(0x7f00000001c0)="673324d8d08545d1b3cd76051a2efda88fe68f6652f84b3719ad9d871a2667fae2403a631befb57f193c26f8061f70802e34183c4f01c3562185a34045a2cb6a19e24b45ad0caf5ef60e678b12563190", 0x50}], 0x3}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="e1", 0x1}], 0x1}}], 0x2, 0x44080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0xcb9145ea640c66cf, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 19m48.85732686s ago: executing program 2 (id=3130): syz_init_net_socket$ax25(0x3, 0x5, 0xc3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000001a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000019c0)={&(0x7f0000000080)=@newtaction={0x1910, 0x30, 0x8, 0x70bd27, 0x25dfdbff, {}, [{0x18fc, 0x1, [@m_ipt={0x148, 0x10, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xab, 0x6, {0x8, 'filter\x00', 0x0, 0x400, "8ede8d66b0ad9f395dd491224b824bacbbbe536dc144e5040481078b75ebb2099eb99d5418433a8786f207e1ada566b514f1c3c999dc2631e79b8b1463c115fa44aac40fbd6f9f5880be48db67e4a836b1fb1d2187d8e8da0ffbd579129324aaaa75e307f2802410cd4ed957ab7026f8fb4d4e8c1c77707159b14707f56d7b3d74"}}]}, {0x72, 0x6, "46bf84a410baff860907bf83b6de0f0e856ce58e0303f929184abbcbb3149ad93b5b11aa07ea95598180b72a6230eb4b31b0333e1637b43460c4ea4d6c1e038a9d4353376bd494795e79475279dbe9d3d09b5061184505d46886ce4094c32c81f47f29588374dea0054e8b69000c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0xc8, 0x1b, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x6f, 0x6, {0x5, 'raw\x00', 0x8a, 0x0, "7d1558845175c6ddce3a7bbc1e54d92cbd57f1e3c980f55d2a1a4ed7d22c7a5ae4d2d23e6e7030993873a939dd1c16a133aa99ba26115da8f54b4cd531f5ca88e3622b0c8c"}}]}, {0x2f, 0x6, "01c2c2be57936504773ea66b64fc08bdc5df5d45b5fd61e46917ef2362a6731815f02b5e22fb796bc92a66"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x248, 0x13, 0x0, 0x0, {{0x8}, {0x160, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x5}, @TCA_IPT_TARG={0xf7, 0x6, {0x5, 'mangle\x00', 0x6, 0x6, "50597422ccf5590d453bb44e5a5fe05f4d86cc2ed4824a948eeb46b02643b5b0b51e9238f7242b6aad68522acc6fab62be0578710dc07a80ae413a53dc99298c87697547fba01cdc38db020ffc34ad4bf0a777ddbdd6680b4abda29069b95232bc3c9a5a1ed93618383f94835475351b40ff1f248f26b55bd0ffb2fe6098e49bfc2cf97b98abde7aa72bc4e8b256b40fa91240a540fb066d826750d5a4cfbf65b43f64ed66fc905862d78439cd4326eaf9dcb9063cc09aa04229eef98fd9f7b577ca1b216be327e5652726293a"}}, @TCA_IPT_TARG={0x38, 0x6, {0x8, 'raw\x00', 0x5, 0x677d, "14317a68513bee01b71747bf3991"}}]}, {0xc1, 0x6, "3732df04cdedc6a2958238d9144332c8510b6a097e83978a5a802ab9d13089216c5dea7da2a1be380268fca80ed53ebf8b1017854b0680aa7efcf993f07ca9e7edf8f19fe2e85dfbe6eb617fce39ab3a5f2073412011dca293d1d29b0ffad2f75d44bd051dfa4f7240478f4c26b3b6d11d08806c68714392f495dd825d7f313c05f2e97de47e3a72b0a44a05747e4a554eecec194c389eacfddd28f3d22b7d3aaf8f24ef8a6630957f6db85e5e6530d0ca01fad9b38b129067c1e1622b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xf8, 0x1a, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffffff}]}, {0xbe, 0x6, "d74f81e1959cd12b4215e89ed052747e32b1cd2d99d4e3c60c057b1d3373890ac69cb5c252079b549d4619037b31a68a35cdc62bdba47793e530681debf030d9b9bcfa3b631414fa9f41edb66acdbc7c934bda3e7fec873559ca5837edc49a9434a897edde18d6c3482d563ea40b8cea2824f48bdc1d386d63dc15d2b8368bfaaa3ab720008bebafa9feabb155a7835cf048322a25f847aed127ef78787482c280994c19ba60ced43a796e5ddb14960243ee6be779031b01f599"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x118c, 0x0, 0x0, 0x0, {{0x8}, {0x1114, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x102a, 0x6, {0x5eac, 'nat\x00', 0x2, 0x6, "12fffc0aef4649889ba284ff0485de54be1f5c877d43a880e159fd738384dcda5c550dc8cfd3321f3432af696b6ef3741115eb60b8d673ccbb38ba821e28ce1217932fb9fdaad5c3406c48321f8f29c1a7b04860e4b48a41bc47ac4a222b8df034eaf3762defed2c58043d0ba52837b1b4f007949796f79d513790e158d63393aaf332f2e9304762ba98855e64136b1fb4c95ba1cb98be2c62f90fe6748436fa349fb6d2d213a20a8a9c285ae1dac6481f3798d3fb2a8c531d673ad32506ef46d7ad438d42499c855420040da7c572e3be4099310f0af6c69948734e3077ea2b214de88fafd2ff2e00650c1ecf3ab06fcb3059e7a77f817a135c50b14cdef10460bbd415c07b0abd23549518a08c915b7e2271b056e5f5ad94f6f5c077c006de4b4d51b5eae590754cbb3f86065a3030a58a315a8223b15839f2ed87b8ec508811e2402e75a175441e30b7ec33ec5567e7fb593cbe79c80836ca760fcfd4517cc94204e6a6feb8067262d2e217e8566895ab7ed9a7950cd81d88ddf6c89f639ac6c8eba6d5844d626a0db4232c3315b38031288bbc41683526542dba07fc0049378b8ca3cf22d76238eee3370a690f12186c0d1aaee8e65a411597d29599fbc6d30ae741d2a7dce1fba1c32b1b5830143f1f5c14b531c214f9d6e284a7f4df2c448d14d4ab7e67d1db304ab73d9b5f632e3c4ede293aef33e517b4f24f39d88a896def7e81121f0436ac0fa7fb48b12bc9a4a8cfc658b5de89924f5ead5c57ffc932f7cc16f890b2bab190ee3ce983f561a92d58b21e0c42f657fa127694c336e8463c4675809c79763069ae9bc809d160d6a364ff6481c88d3bc15789c7e16867e3064983080263abbbca7b94ae28109b26c982294e7e995f6fd65566f3c3b2bea2734eacd9b4410bcdf24965bb1474afb129a37d4950099b258fd24cfa462d47afea26369205a9a16e874c4931bea8fa7fec7158596393aae4380563975944fc0ce23a099c153f5e7e213cfbcc4aafb7da9f7ed8c9442d188c831c014fecdb0871114545fc937cad7f354798121394f69f2fe06c69abcacaea16bf3b73969303e50f21f2cb457ad00d7196cc1681f8c22141eba80e663d6b718035adea8f89d80c32ea1962de0aff8da0f6231f3f153f626406d70cbe2afa2d00c1662714a4424a38dd2ab24c0da80375c94d27048e67412ee4c6f7fbafd5c7e2b68d8ccc698d34ec63df0a22a41d225461e41b225f8ad8945d2f78b59659a17b413b9b8c735eeddbb468bac3ca559ef6dcb09724683df0fcf6715e31ee33f854ab36b5442557f0df9e44f28d6f3a5211c3bfa2622d29a1eba99ffe9b3c74187d57219bad88eaff65926f105fd6f67cc650eeba00eeef7be589d0157432c83c74e9dc5f671178a2807402262caf3acdafaf4f17036c0c31fdce87ad31bad1db393c44995c4a208343fe0344cce3b9ad2120284b85ae0010ffbe09d825868f67e0062fc8dd5503a963139384ef61df2f9c9c8ddefecea83420e71bdb77d8e0e21248eb034c84a254360f853fde9a5a45e53d5cc68a43e1902861171ae531255cf6c50326b18dfc57bfaff6e6fb315ce46eddff3eb8950e3604b3bc95e8ab376d8001bd3b1aec9181a5ab56bf2b7048ea8fb82bbe91ee1d8b468ed275fcba2250b16c7173cd0caf7a3672760ed7a81f9da7ef733f87a4fcfa54df02c5bb1baafbaa9b8ba00aca112fea6fb2a26246f73e93120549ab49aeb4818fe0eeaabf46cdd22d43b26dbf9063c9926385567fffba85d9a5f1d317c2a145fdbe5330c7d4ca9ffcaa95444a1cf75733608c56d3295928836e024156ca0cf49b5866d777c8f2b385b8829082bae24b085a1e178305b1a4dbd37a77942fa2283cddd7b208ed624c9eeb79b90740b97965e3af5825571629aa5afe974224d235a3793009a884710520b0f2598d28f0b11a2c5c94b63e97f2c3db851e74af3d4268bd5c2367a3dc1a1cc88ec890a240201d159aa0e739d764a421fd515a4ef6887cb715ea259e48abf6df4062d338556870401e83a4be9819ff937601354edd5efc6971bdac700153347c40a915d9e95e34ea256ad83dff5d8eb7aeff95a2a58d19e76838bce77280cfae92bd09368a68ea4aa4b9005e3caa82c4681baaaf8d593bf095738a785365bb8eea172b07a2408af04bc26b19e68e5f9f0dc36deb08a1f732fbc8cbeca7b0491e1b8b2c55309e64abb73dcef38e42a23fb8707ffda06c1b1ecf51dfc0799b813a3b8bf036b0172a630a87edd59d129bb6eee6c6383d880113156a290091536d43b749b7c567d038e74514c355a6912d6c36a1599e27aebbf352e3241e1e9d218bb8da211d1351d5ecadbe03964078a7fbc65d70c5c2283cf98d7281c94c204fa76d82f3af84060ebb95af456b838607bc6983436460b77f8b264fa800b45d1c254504fd8c0e8d54e365a31a91dedf537334d6b74bdd9c1acad2d1a146be001bcad19a91164851e3d912d880a6772bac8d3f80db957c183b60465edb500fa91cf59274ca24e6ffd049c73d93271f42d9fa158e14265c824350ab676d66c48219ffa9d7d49dd57753999542c00a7fbab593c96439e0d7c07e525577849bc6bc8654ac7801e3c732d0a0754f509a455341720e524e917caed57e94d15cb7759abd31fa3802be8f71e88d69e993822914c170850e14c3ba02289fbfbcdcb5092b4aaffcb85b3ce93008da0ad6e8d6c2fa719c024d09c4454f2ead9fb6ab65e2df6421b5cd9e2a3f280cec51b3ca97f3f67a4d3fb0a6c5e4277f3ec53e33b670a337fa16f7ac33167be4dc1fdc8e3ff37739a244b9b43bcf764bb007cc46f6abfba7e23bc578f86bfbb2b56bba0b79aa6322191b2ce8879fc509f8c33876c9526e0aecef13b931fded5959e3eb1c73690f3c92f7c7c3a782e269420774ad957b53be19a32b68fd85916c68ba83a56cc45339c7fe3e7a7a2bee5fbcd2512a338a4e684851d39bc349c20a220c56d5c1454880ee7056278f3d03236514ffc7a4ff00e22b8a3a5af1d1069e2141ffeb4246d539cbf568240b5f87a4e45635d53b337232dcfbb16344621eaee0dc8db06bf7ab6a03207cb6fca9054fd82bea9662714334ac27f284badb70b338358c8c49787e9552087b06dbb2403b21567bb35bea613a3297f6760d961c0fc5538894d9489d106d9b6f95d4e2d16e36bf44faaddd1503f27c66d7c78ca563f96f0a63866e53f66e40ac8b3b20a8f44028ec845799f90b8f9b0fdb6d8ead809fa709a3f9505a2a747033771ae87c787fa98cecd1d186348297f454d135d7c6cfe521058c74cec7f3f05b76459a9f5c3f395cc9646ddf1d0b619055c3cc0ec8719452f7a15e37dca8c82c6817db84225181e7a6e56a613e13633a7b0d8e0d4ceba3a827e6e7d9fbf8ba9e60b67415574988ae66afc55fd4e2a2ca06f982b3213927163f55f5e806fc4135913b05e1710457612877277e00177b215f7e2f79a6c4277c84dcb6b2b643ff75840068b0ef470a914302e335b0908b0b39964d9bcea50aeafddd6fabd2bf40abba3010bebbce822f3e9d04924d0c26f7ac7f04eaac790da81abda84fb1063f862a1d17bb5302af1b704665d375ac3cded7ca632c9446f3f283774e14474a4041d5bf950dec46dddabf149d8754406b1c668d95cd59985c38ccdf490b28793b4b2f24478088cd9b2c18b0881cb103b86853e2414c55c7f944d674c78ff939374a17f588d5068baa0b1c4a0f6923ccbb825d660535dd053c9e5b10f4a7f435db26e2fef0f84f545f513da33aa6f29f23229ce548e17d12cd2d1b2a03fe27d3211d4531e8e26ff38b5149c9a35e3057d0dcf8dafd10047d5a2d226ebfa76c706ea3b09c8152dfbbc4ee2084dc98de407d5967560707d13046f5d38ad71c01a5f8af16991df28024dae025314fa188cd70a4f01c4ebe9e985b339a35496f966e88dcf3558454c2d763a30a8b00ddfcd9f9c440058dcaf4888e3c64e8c4fb257d2742ba890b9e4eebc1a74d6ed88947de41b64f6bdca4d33fcf71b308b2adf5efb001f0485f030418dc56e6aaf54cfda5df1213bcc9aa79f7d7ffb286047f8bf1af43a3738a358d7db37e9c706ed31f944912b8a5a20974ae954e056ca43add93ff329c46e37db48792286f2c9629298b2a2ff717d5b6c7347564deb2720299e3fa99683685a420b76f9791890a2009886377e0113fb053044583f3a8008006f98339f4d45e2061856500128cd0febbd0abe9b03faace3d8263ebd5085dd89098dede10db6b5f5059dfaca598e9acffa46fffa9994c3e2ca83a19351b19559eca0302dff5fdc0c2f6f984aac1b449871190e85b22ce2b18e954e87fc03eb720fb4e7dc4a9b57c11fe19d23f481e748bb18861d80825da4359d6bf84bc1aaa488789fbe6602a9772556f0d0fb89bffba1be75c80f5330b7d11c0f6138ef9a6523d2b092f2a771dad29124845185a792bc7cf860e06a01f7b806f37f5ea85b51e60d61ed14db38e4f51885562a2f3f87a49b066c032133c1611c05e08b937bfa264d75a543f975d8363608d1566cf2305524b4d7ba983da6b1afc450b5919035a40d37b6c69e6463cfe0f62cd0311244cc17ce09ffa093c269e23c0100634c43396f68de7a138f9229dd3a18f0fae5077b4ba7bc458bce9711d86fbd7a897107f21c1b430917bbc31b7f984e3d9794aad6ea7fbdddd05013e1d231cf26a6921baf5b44085dd75ade6ddd8756d5c591cf89d55b5d4ccb086ad58f4ed5c16651f1984619ffbf6faa6fe1d39fbf0d45ea278b92b7918351ec930ce8909435828316e43f8dab10549f6e3e0b4cb82146bf67f4c016c0ebdf46ba53b6577300a1480f653098a101aa5ee0b3d27bca5ce73cc945f162689adf287ce1fc33c5d1450e8e82b4aa0af1f361754f267a609fd0535648177ea161dea11555b62131419e65a14b596efc106de10571f9898b6792c3998a3538b210f725af4d14c15ce713deeb84bf419268277bec4b8c793eca7305d505dc6eea4bd57ff2e9802b25401114733724d23b14afcdca0e0b41884e2c9a199e399a2c57042cfc1773bed2ce359804430a79bd03cfd6787a31e35a8c36825f165df65802fabb3304ac9ad7dcb35e9b5d77c6591402b01df8c04998645c364c389830a384834264e39366e170a29fc6d7cbc0b6f15f6e1bf2a5233cbf7a2af43fe2b53fd803062e037c9348cc1cc8bf1cecac616c43a0669bf0da4bf4f7e9f317fb5e29236f5e848e1fcac79bf79bc531e5bfd86b44564dd3d2dd2f4f8140a04d087cb96e22bb32815e97b3402a45872908ba7158d3a973a67a3a82c6e931121e43ca5f661265a91c7568e833b2f4a9a6fc224d9d59ec2ac7d26aeb7c26ab83868b2b44b3abe8dd08417cf4c2466d2c227b71a2e3c1adb638f2617192324179a7fbfc9cc342468f79d26c0719ee524e16d5e060babb77ecdd0d908f03d08a642c1114695da792305aa632e3cdc879bbbe8f3c706b929ce5004eb58bc2b1bad9d705240bd4d299c1f6687dc421d564286853db49cb40466de47be19489055d66b147799e8751734ffe246459d35185da4f83fb130732d173fb8ad3791e5ddc42946849e92c64ae75e5eac6abb246f9823931eb0d88cdcf30681dded80d862f2767e987332a57d76326647702b1d2a824efcaa39d0dfd90e94dde16b909ff824a474fc9a640af8e0d29fded4b240ee89652b6e4cbf9b503198b884fc5cf707c3aab0954bd2cb5c6ce16fb984c208aa52e3830961d481511380382a20cd5259cb543912cd38"}}, @TCA_IPT_TARG={0xa6, 0x6, {0x102, 'filter\x00', 0x8, 0x8, "888f35dc3a9ed87ec735f880157e06ac501ae6a8792d2cc0f136da38c90d993ddbcc3e50d66d3ad8f982d698845eb9576652b63f59ce734f1feb93038aba29ca7dd47e0cbe0cbfef261f280225de83c5dd1935eafda111990712b048d6e5dd9ed71d18ef08065a0ac2845dbfe1dc265e6108662a02c6cf939ba5ac15"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x31, 0x6, {0x3, 'filter\x00', 0xe, 0x594, "8929873ca1859a"}}]}, {0x54, 0x6, "a8b90141b9465e126e2c5d2beaf26e3b125e9f10629fe0449d2431e020091a0d0183b48398129465febcd5b35ae105ae1b0018303aaa0e42ae7dd713af226b4e9f43ff357a2969b45f2371aacc5be0e0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x21c, 0x9, 0x0, 0x0, {{0x8}, {0x128, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x109, 0x6, {0x0, 'filter\x00', 0x7f, 0x8, "b45f38af232167a494f0aaa430a15d852634aedc5d5196b72125280648535b195946224f09e2493a4c55cc90a116f2b54b64780aaa76624d6123561e736d03eee66a62095ae791fb3f3a5106c10fb95f5b3a0afd739172ec5639854c8140e3e6cd727da05d861fe7ca3748812b7165bf2b801be7198172f395a3530a215531770dcdd9a8876ec14c4a00c294ca03b327cbe68d5fa88a1af082e5d61ec82ad97979e1c17d8f62a0f27f6dcba75961abcda41f7e1d0ec9570ad544ff1c954f41587a453154538228b6ae2110984f76ca8d55950033289e8fc7db7aaf1f2c9322"}}, @TCA_IPT_HOOK={0x8}]}, {0xcf, 0x6, "3205c0a7c49a1ca1ec136adcce089435127ed51d220f71e389c79ccfe0b7b13e3d60840b7d2babb19d81ce8e8223f8d655053bb2b589ae6b7c5f9b5255c73a8a35512253bc8ce5af878a22c206689a98c94dd0c3316110c9198dbaf1c96d925897f171248cd3d8bb0f07fe4610f6e72fe26280188ec351aba7d654db96e68853942ea3585a3f34a338d7d33da38beef5c37f0c5d42457b8ad81e976a239ebdfade8cec8ba2d3fbd2b980fa7e4bc7ecaa517ec4f3418ad6c60be4798facee365d6381020a48b930e83a05e7"}, {0xc, 0x7, {0x0, 0x4c260a58264cba7f}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1910}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008040) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000007500)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @dontfrag={{0x14}}, @flowinfo={{0x14}}], 0x48}}], 0x1, 0x68034) bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="0f00000004000000040004000048a44eebb70915bca80c0519c7c2980f000000000000", @ANYRESOCT=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$inet6_sctp(0xa, 0x4, 0x84) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'macvtap0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x0, 0x0, "31c53b"}}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000880)={0x0, 0x3}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000900)={r5, 0x8000, 0x0, 0x8000000000000000, 0x1}, &(0x7f0000000940)=0x18) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000980), 0x1, 0x0) writev(r6, &(0x7f00000009c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="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", 0x1000}], 0x2) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r6, 0x8926, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x0, 0x0, "4feda26323b172e0"}) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_MIDI_INFO(r6, 0xc074510c, &(0x7f0000001a40)={"350389440bc73bebb6eecd6897387ac90aeb457f6f31d264d0b8d1f18915", 0x5, 0x4, 0x5, [0x7, 0x7, 0x7, 0x6, 0x7, 0x526d, 0x8, 0x5, 0x7fffffff, 0x7c9, 0x7, 0x9, 0x350a1400, 0xfffffff9, 0xef1, 0x5, 0x7, 0x200]}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) sendto$inet(r8, 0x0, 0x0, 0x60, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) 19m47.072146563s ago: executing program 2 (id=3136): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000440)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'lblc\x00', 0x1, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lblc\x00', 0x4, 0x8, 0x77}, {@local, 0x4e21, 0x2, 0x400000cd, 0x12d5f, 0xd}}, 0x44) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) io_setup(0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$inet_smc(0x2b, 0x1, 0x0) 19m46.180500169s ago: executing program 2 (id=3142): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x12) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r6, 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 19m44.974834644s ago: executing program 2 (id=3149): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_usb_connect(0x0, 0x8a2, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xec, 0x40, 0x97, 0x40, 0x6f8, 0x3002, 0xfa7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x890, 0x2, 0x4, 0xf, 0x0, 0x2, [{{0x9, 0x4, 0xbe, 0x9, 0x9, 0xc2, 0xae, 0xbf, 0x2, [@hid_hid={0x9, 0x21, 0x100, 0x4, 0x1, {0x22, 0x417}}], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0x4, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x5}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x7, 0x5, 0x2, [@generic={0xcc, 0x21, "5e5b6d83afef2f0e9c9121d7ebe16b8879d24db5c06de7353f5e88ff59705c5b2330e8126856ac431d3e021fd5a43bfa1b38779d1dbbda35cecd6f1b13a4373facfd1918a4cfce87f13646db387f76e84f812c6e4595e16ac151bbfb600e265b1b5293e35d9975ae4f6adb779d17e49dcfeace269b4b490c744676356cb9031b75baeb09533983d2e6e207c2c69535424c615c8ced2fa8c6011009020e6d7b4e62adbc19f1b3db4fc2b62cf747e702a590a696608bcb6d26b20ab6c624ba816ebfca38330c3e09b89441"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x61}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xb9, 0xf8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x81}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7, 0xb0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x6}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x0, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}, {{0x9, 0x5, 0x7, 0x10, 0x30, 0x0, 0x3, 0x7, [@generic={0x40, 0x23, "70fc08ec1a72c2ccb7c3d0a65bdd7f07596cbde1e0e52ba46a5209a415a739beab6c846421b9c1ab6b99f34cf4c2f85fff869fc18d852216d743f7643104"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xb5, 0xd, 0x7, [@generic={0xf0, 0x5, "47d0b20ac0ffb205b9ded4027e458d318593e3cb08d5193abba9531f86b9eefd33729ff352d12b26a0863a54e31ce25d5ba98d6a50026f6aee6ae50b7f27b13316449320b30489d281460a8e0e27eefffe27433e160ca5dbde0845a45d06b96be8bb2c46b8fb3a1a3f19d5968fa2714b597b4c058799f5a1692363eb5debfa50da9238dc5054c8bf3038c9a45177678868f63da97600665de0172c210827529c2426b6882763fae86229002362d55dcc1ff146a28c3de441ceefa1002d4241b8929afacfa525b13bcd19e7d2c7cf75db9d1e75430fabeef0a6e7894551341b82a2a3b11d173cbaaf386072865876"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x80, 0x3, 0x1, [@generic={0x4c, 0x10, "7cf70db7334a7cda55444d0587b8419967b678651dfda122bdc9d37a5f52e0b351222e888111a9c3eab27c0ea09041e95b2167adb547538e26ce1c47a4d85d887422aaa933b240de5b5a"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x9, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x2}]}}]}}, {{0x9, 0x4, 0x35, 0xf7, 0xa, 0xcc, 0x7e, 0xb4, 0x82, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "53268f7087b9"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffa, 0xfff7, 0x755c}, [@mbim={0xc, 0x24, 0x1b, 0x2000, 0x4, 0x4, 0x48, 0xd1cd, 0x1}]}], [{{0x9, 0x5, 0x8, 0x18, 0x400, 0x8, 0x8, 0x5, [@generic={0xe8, 0x2, "553ed3dba59a8885317c7eac79c0cf9ff12c87446ab8bc2aae0ca78ffec970e462779906f9b53be528f310918390716969dd1767c809130630426ef0195d8fb5b76e9ece5164d7108d2d007eabb2f8cd10e1ed09c93d98872c50feb5b58f75e6a0e9d12f23c79d925cfaf090ac82b3eec7a9d4351f7fc0c3868ae901f6a8e0010e58168fe6b9e266f5fde578f232e8983d0b6063a10618f30de8d3ac2fb6011d41d90d1a7cc9df8e41cf8a5d509b48ede0e28596a30f4346f5d7ab92bd5af7c860b2d047e07951a4282613a9baa0840ef542cae042bc0b3452ce06654d28ed1b63e21ca5a57e"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x6, 0x10, 0x2, [@generic={0xea, 0xc, "5d0db164e644f25d481fb4457775d86408f2caf5ea2193d0396181f577dae76c191656401d5bad7172f20e4ccbe3a07c05cbc45d1e12e80bee993d3a3010e7c7e2a7c00762efa0c64395de3654089be534c8278c4d115de775c10bd7ff3da5b61bb257b232af74633182047beeb48b8271a256459ea044b875c660691be4ed389e494a3706cf2a9fba67444256899fa6182b321144f2640995260ff9ad476f7edc682759b77cd10982e6e3ff39f8972729f45c0596188997b554f72ae0c411c3d44b0d35399a5d78d625be9dcd42968a376a65df924715a5baec90ee15ffb9596060b1fedf6d5118"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x2, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0xf6, 0xce}]}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0xed, 0x7, 0xeb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7ff}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x1, 0xd, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x7fff}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x4, 0x5, 0x6, [@generic={0xf6, 0x3, "faa04e002c4983755b33e828d3aba74acd40edbeb73514bab16aae13ba7c2b0e4392b1ec5e8f072492cb270e7d6952fd1d9ea87947c10583fcfdd266881761cf40b87a6c95f66888e79197989ffc9ace25cee6c8a4eb6e5575b9e195fc310fcd08a16d7ae85446d80a2e79728fd3efc1148084c8ce5f5f22fc016c1450acbcd5f595fdb657a539a000bdf6348d68086658e5d517873e1a6a75588d590b7ff34954d3e704c955edfed4e9dde42f62dbfe6e4ffd0b9b202395d93f358f3a29e982e8114ad104d323f5116d79fe4b0c264098c11bbb6d6b3288cd435ecae7c96031d29886a745bdb90a778124358512033bf08f3bb1"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0xfe, 0x7, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x2}, @generic={0xae, 0xa, "a34c5c04b432dd6d326c54a2d15eae32714039af7a96f081a73e9f56bab2cb6b7caeceb071194c11c2fc5278f6a2807fb8c08cfb0231e6ae669b1d9b164e1a877cb5e109664968651943a0a6f1141aa1b8b0dcf4b3820929253eb45e4e7421b65bcd7401aa9b4247ad2a3f504bfbad3b0c56876eadf4c68ae6b14296befca0789764701027e2e688dbc2f9fd37f4649dbd104fe38119b856daa15f88ca56fb8843b95ef5ba9c62fac271d908"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x81, 0xd, 0xd6, [@generic={0x87, 0x11, "9d3c60dbb30ca68fac32bd64e4b3c8b37f41d5eca9215e83ad1430cbba006a47fac832ba07ea6166401a6853ee03bc5ddee8a0c1a4bc79e05f7e388ef27cf5493505a3a64a66238c93f7a1e23851c40a5daf9cbcd1ef7a115feee1b01190b11aacbf6cb99b12ee46d6ee52d669a78c6b3446cf71d46d1dd13156c8b9c89a36320c18aadb19"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x4, 0x2, 0x5, [@generic={0xea, 0x30, "4321a8d8328c44d4ac52223cd2c3ad538a9db1eb34b5820e94957fdd30845403c4163fd64123dd104ce43fa595993c1fa900beaac758689c93661acab0315fb0191712a9200a8dcd249badc1d68f9646116c7e948276cb7325c5981a4f034fe5d3b970b77ecde3e3d338879cabafd9bea7c6b2410cfc9973edf19d0129e6367b2532a7a3259e45b84c766d3b60f4d6c358cc99c8e7acb1b8eb86bd10bb39484c01379a69f5b9b22702084d70f532e2fbf4f2e126540d4bf7393e61cfbf1bca271f58bb1ec3ac6572673d38bc7ddbbd1b941e0b4818398cc472b55c7b32e06a37f3356f61f5665d15"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7ff}]}}, {{0x9, 0x5, 0xb, 0x1, 0x9e9a68adad68d10b, 0xf, 0x23, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x101}]}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xa, 0x5, 0x4, 0x20, 0xd5}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x9, [{0x51, &(0x7f0000000240)=@string={0x51, 0x3, "df11ded1f1651b1c8bf332b7b9a054018a7a1e3091093c943f53d1e2ac3a6424a9a8542d51f43abd35775da7f317fd8f7e032782d8b70501c6f75dbc80ed789b43accfbae07e6ef45d88d4a045ae4c"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2874}}, {0x19, &(0x7f00000002c0)=@string={0x19, 0x3, "abcd6decea7dadcfba62066b7684c51e81d539749b063d"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x425}}, {0xbd, &(0x7f0000000d40)=@string={0xbd, 0x3, "4089e5407e3111391347e8b208158d47943183b4414301a2b19c1dbe46a0bc9753c1a8b80e0501dcaa6921c359d17096ee24c4f7ee4819a17c7cb9ce57686afdb6a6a45fe9176b4b378d33339311a81b3268e360622b7b8eea9aa5bf9a9819e666fc0bcbaa23ab9943959a9b30c33676ce1b6635b400e63a945f2fb709a2c563131e0055dba3281ea73288f92cd7d8725c4e3a9120347bdcdb5862a430d3baecad5c6bc4d4c2bf66d671fec88b59130b69caa694d5906fa5165b2e"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x429}}, {0x47, &(0x7f0000000e40)=@string={0x47, 0x3, "8116663f715e4c51d731c05b3cf15d2567e64f3de1329b24acad0548baa91df1e5625b5270928a2f35fa45289e675f4c481dea1b9e20214dbe28cedf62593684239f1ab2bb"}}]}) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000f80)={0x20, 0x11, 0x71, {0x71, 0xa, "33aa4153ee16544c4ddb609cbcc174498331addef553d19d65d3a3240c24c2a2ad87cc87cd1121052e2ee17d890372e317e34ea4513bacbdb2e58f331151b14484b57df63de115baac50a5ef36fa98509561862c6fd584f82285b0dfc2e49c47dfa0926b8bc9f19c907e24269a3a9a"}}, &(0x7f0000001080)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "c12c58b49fee7f0f317298166387191870340b0ef90cf43cca10a7d716d94168cba3bb534b4ec42c21742dce15abdfeb5baef12b1bdc5e399a204b553d005920aa71d8a7d0d960e857a48d7ad7450ae979fc91f2e89f8516e1461ec6db787e90b1821fcdc69a3990ac47ab50bfa793a2393f9bf6de506f9fc3d3a421e7451ce54fccdaf57931f35afb302a9ebf2be386a05ae9defb51c6134992eba1144754fad326d1be8976862d09a8abf2f753ec10e460ca56628455795d81c0c9e0f6a91e26ca4ef8a31246333131f35ac769427be4"}}, &(0x7f0000001000)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x3, 0x9, 0x5, "d2185796", "80317d3c"}}, &(0x7f00000011c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x9, 0x9, 0x0, 0x4, 0xd, 0xf35c}}}, &(0x7f0000001700)={0x84, &(0x7f0000001240)={0x20, 0xb, 0xec, "cfc7ae86fe6ef95e6fb70ec9fed9e256b9761427e01cc398cdfa50025fe0c5bd33c8722e8374027e8f8a2c86a6af1e7c45c83622131d1b62f23aa9c3f7ae326b3d0eeee3a28959a0661e4573db18bb9f0b04e52fcb6ec014b61e027597d20212bc1ebda2778f9732cb597d7c75f1ec3fc391b80e45e1a104f57b2d104ec24d9db47c43c3a3ecd1d99e9b33db28f19814ae4bbf179e806f71177da20d8808c588808000d31c432df8efdb929669adc5ee181a98e928af07ea2aaeac6d0e8fed31dbe0bbb2a45c8c0e08151b9b894414137151cee310ab4c93b14dcfb3e76e39de3a7bb5bc176c5721ca15fa0b"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x90}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000013c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001400)={0x20, 0x0, 0x8, {0x100, 0x1, [0xf000]}}, &(0x7f0000001440)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000001480)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000014c0)={0x40, 0xb, 0x2, "9911"}, &(0x7f0000001500)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000001540)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001580)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000015c0)={0x40, 0x19, 0x2, "3401"}, &(0x7f0000001600)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001640)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001680)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000016c0)={0x40, 0x21, 0x1, 0x3d}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000080)) 19m29.75506051s ago: executing program 34 (id=3149): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_usb_connect(0x0, 0x8a2, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xec, 0x40, 0x97, 0x40, 0x6f8, 0x3002, 0xfa7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x890, 0x2, 0x4, 0xf, 0x0, 0x2, [{{0x9, 0x4, 0xbe, 0x9, 0x9, 0xc2, 0xae, 0xbf, 0x2, [@hid_hid={0x9, 0x21, 0x100, 0x4, 0x1, {0x22, 0x417}}], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0x4, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x5}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x7, 0x5, 0x2, [@generic={0xcc, 0x21, "5e5b6d83afef2f0e9c9121d7ebe16b8879d24db5c06de7353f5e88ff59705c5b2330e8126856ac431d3e021fd5a43bfa1b38779d1dbbda35cecd6f1b13a4373facfd1918a4cfce87f13646db387f76e84f812c6e4595e16ac151bbfb600e265b1b5293e35d9975ae4f6adb779d17e49dcfeace269b4b490c744676356cb9031b75baeb09533983d2e6e207c2c69535424c615c8ced2fa8c6011009020e6d7b4e62adbc19f1b3db4fc2b62cf747e702a590a696608bcb6d26b20ab6c624ba816ebfca38330c3e09b89441"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x61}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xb9, 0xf8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x81}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7, 0xb0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x6}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x0, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}, {{0x9, 0x5, 0x7, 0x10, 0x30, 0x0, 0x3, 0x7, [@generic={0x40, 0x23, "70fc08ec1a72c2ccb7c3d0a65bdd7f07596cbde1e0e52ba46a5209a415a739beab6c846421b9c1ab6b99f34cf4c2f85fff869fc18d852216d743f7643104"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xb5, 0xd, 0x7, [@generic={0xf0, 0x5, "47d0b20ac0ffb205b9ded4027e458d318593e3cb08d5193abba9531f86b9eefd33729ff352d12b26a0863a54e31ce25d5ba98d6a50026f6aee6ae50b7f27b13316449320b30489d281460a8e0e27eefffe27433e160ca5dbde0845a45d06b96be8bb2c46b8fb3a1a3f19d5968fa2714b597b4c058799f5a1692363eb5debfa50da9238dc5054c8bf3038c9a45177678868f63da97600665de0172c210827529c2426b6882763fae86229002362d55dcc1ff146a28c3de441ceefa1002d4241b8929afacfa525b13bcd19e7d2c7cf75db9d1e75430fabeef0a6e7894551341b82a2a3b11d173cbaaf386072865876"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x80, 0x3, 0x1, [@generic={0x4c, 0x10, "7cf70db7334a7cda55444d0587b8419967b678651dfda122bdc9d37a5f52e0b351222e888111a9c3eab27c0ea09041e95b2167adb547538e26ce1c47a4d85d887422aaa933b240de5b5a"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x9, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x2}]}}]}}, {{0x9, 0x4, 0x35, 0xf7, 0xa, 0xcc, 0x7e, 0xb4, 0x82, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "53268f7087b9"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffa, 0xfff7, 0x755c}, [@mbim={0xc, 0x24, 0x1b, 0x2000, 0x4, 0x4, 0x48, 0xd1cd, 0x1}]}], [{{0x9, 0x5, 0x8, 0x18, 0x400, 0x8, 0x8, 0x5, [@generic={0xe8, 0x2, "553ed3dba59a8885317c7eac79c0cf9ff12c87446ab8bc2aae0ca78ffec970e462779906f9b53be528f310918390716969dd1767c809130630426ef0195d8fb5b76e9ece5164d7108d2d007eabb2f8cd10e1ed09c93d98872c50feb5b58f75e6a0e9d12f23c79d925cfaf090ac82b3eec7a9d4351f7fc0c3868ae901f6a8e0010e58168fe6b9e266f5fde578f232e8983d0b6063a10618f30de8d3ac2fb6011d41d90d1a7cc9df8e41cf8a5d509b48ede0e28596a30f4346f5d7ab92bd5af7c860b2d047e07951a4282613a9baa0840ef542cae042bc0b3452ce06654d28ed1b63e21ca5a57e"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x6, 0x10, 0x2, [@generic={0xea, 0xc, "5d0db164e644f25d481fb4457775d86408f2caf5ea2193d0396181f577dae76c191656401d5bad7172f20e4ccbe3a07c05cbc45d1e12e80bee993d3a3010e7c7e2a7c00762efa0c64395de3654089be534c8278c4d115de775c10bd7ff3da5b61bb257b232af74633182047beeb48b8271a256459ea044b875c660691be4ed389e494a3706cf2a9fba67444256899fa6182b321144f2640995260ff9ad476f7edc682759b77cd10982e6e3ff39f8972729f45c0596188997b554f72ae0c411c3d44b0d35399a5d78d625be9dcd42968a376a65df924715a5baec90ee15ffb9596060b1fedf6d5118"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x2, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0xf6, 0xce}]}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0xed, 0x7, 0xeb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7ff}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x1, 0xd, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x7fff}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x4, 0x5, 0x6, [@generic={0xf6, 0x3, "faa04e002c4983755b33e828d3aba74acd40edbeb73514bab16aae13ba7c2b0e4392b1ec5e8f072492cb270e7d6952fd1d9ea87947c10583fcfdd266881761cf40b87a6c95f66888e79197989ffc9ace25cee6c8a4eb6e5575b9e195fc310fcd08a16d7ae85446d80a2e79728fd3efc1148084c8ce5f5f22fc016c1450acbcd5f595fdb657a539a000bdf6348d68086658e5d517873e1a6a75588d590b7ff34954d3e704c955edfed4e9dde42f62dbfe6e4ffd0b9b202395d93f358f3a29e982e8114ad104d323f5116d79fe4b0c264098c11bbb6d6b3288cd435ecae7c96031d29886a745bdb90a778124358512033bf08f3bb1"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0xfe, 0x7, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x2}, @generic={0xae, 0xa, "a34c5c04b432dd6d326c54a2d15eae32714039af7a96f081a73e9f56bab2cb6b7caeceb071194c11c2fc5278f6a2807fb8c08cfb0231e6ae669b1d9b164e1a877cb5e109664968651943a0a6f1141aa1b8b0dcf4b3820929253eb45e4e7421b65bcd7401aa9b4247ad2a3f504bfbad3b0c56876eadf4c68ae6b14296befca0789764701027e2e688dbc2f9fd37f4649dbd104fe38119b856daa15f88ca56fb8843b95ef5ba9c62fac271d908"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x81, 0xd, 0xd6, [@generic={0x87, 0x11, "9d3c60dbb30ca68fac32bd64e4b3c8b37f41d5eca9215e83ad1430cbba006a47fac832ba07ea6166401a6853ee03bc5ddee8a0c1a4bc79e05f7e388ef27cf5493505a3a64a66238c93f7a1e23851c40a5daf9cbcd1ef7a115feee1b01190b11aacbf6cb99b12ee46d6ee52d669a78c6b3446cf71d46d1dd13156c8b9c89a36320c18aadb19"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x4, 0x2, 0x5, [@generic={0xea, 0x30, "4321a8d8328c44d4ac52223cd2c3ad538a9db1eb34b5820e94957fdd30845403c4163fd64123dd104ce43fa595993c1fa900beaac758689c93661acab0315fb0191712a9200a8dcd249badc1d68f9646116c7e948276cb7325c5981a4f034fe5d3b970b77ecde3e3d338879cabafd9bea7c6b2410cfc9973edf19d0129e6367b2532a7a3259e45b84c766d3b60f4d6c358cc99c8e7acb1b8eb86bd10bb39484c01379a69f5b9b22702084d70f532e2fbf4f2e126540d4bf7393e61cfbf1bca271f58bb1ec3ac6572673d38bc7ddbbd1b941e0b4818398cc472b55c7b32e06a37f3356f61f5665d15"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7ff}]}}, {{0x9, 0x5, 0xb, 0x1, 0x9e9a68adad68d10b, 0xf, 0x23, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x101}]}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xa, 0x5, 0x4, 0x20, 0xd5}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x9, [{0x51, &(0x7f0000000240)=@string={0x51, 0x3, "df11ded1f1651b1c8bf332b7b9a054018a7a1e3091093c943f53d1e2ac3a6424a9a8542d51f43abd35775da7f317fd8f7e032782d8b70501c6f75dbc80ed789b43accfbae07e6ef45d88d4a045ae4c"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2874}}, {0x19, &(0x7f00000002c0)=@string={0x19, 0x3, "abcd6decea7dadcfba62066b7684c51e81d539749b063d"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x425}}, {0xbd, &(0x7f0000000d40)=@string={0xbd, 0x3, "4089e5407e3111391347e8b208158d47943183b4414301a2b19c1dbe46a0bc9753c1a8b80e0501dcaa6921c359d17096ee24c4f7ee4819a17c7cb9ce57686afdb6a6a45fe9176b4b378d33339311a81b3268e360622b7b8eea9aa5bf9a9819e666fc0bcbaa23ab9943959a9b30c33676ce1b6635b400e63a945f2fb709a2c563131e0055dba3281ea73288f92cd7d8725c4e3a9120347bdcdb5862a430d3baecad5c6bc4d4c2bf66d671fec88b59130b69caa694d5906fa5165b2e"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x429}}, {0x47, &(0x7f0000000e40)=@string={0x47, 0x3, "8116663f715e4c51d731c05b3cf15d2567e64f3de1329b24acad0548baa91df1e5625b5270928a2f35fa45289e675f4c481dea1b9e20214dbe28cedf62593684239f1ab2bb"}}]}) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000f80)={0x20, 0x11, 0x71, {0x71, 0xa, "33aa4153ee16544c4ddb609cbcc174498331addef553d19d65d3a3240c24c2a2ad87cc87cd1121052e2ee17d890372e317e34ea4513bacbdb2e58f331151b14484b57df63de115baac50a5ef36fa98509561862c6fd584f82285b0dfc2e49c47dfa0926b8bc9f19c907e24269a3a9a"}}, &(0x7f0000001080)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "c12c58b49fee7f0f317298166387191870340b0ef90cf43cca10a7d716d94168cba3bb534b4ec42c21742dce15abdfeb5baef12b1bdc5e399a204b553d005920aa71d8a7d0d960e857a48d7ad7450ae979fc91f2e89f8516e1461ec6db787e90b1821fcdc69a3990ac47ab50bfa793a2393f9bf6de506f9fc3d3a421e7451ce54fccdaf57931f35afb302a9ebf2be386a05ae9defb51c6134992eba1144754fad326d1be8976862d09a8abf2f753ec10e460ca56628455795d81c0c9e0f6a91e26ca4ef8a31246333131f35ac769427be4"}}, &(0x7f0000001000)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x3, 0x9, 0x5, "d2185796", "80317d3c"}}, &(0x7f00000011c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x9, 0x9, 0x0, 0x4, 0xd, 0xf35c}}}, &(0x7f0000001700)={0x84, &(0x7f0000001240)={0x20, 0xb, 0xec, "cfc7ae86fe6ef95e6fb70ec9fed9e256b9761427e01cc398cdfa50025fe0c5bd33c8722e8374027e8f8a2c86a6af1e7c45c83622131d1b62f23aa9c3f7ae326b3d0eeee3a28959a0661e4573db18bb9f0b04e52fcb6ec014b61e027597d20212bc1ebda2778f9732cb597d7c75f1ec3fc391b80e45e1a104f57b2d104ec24d9db47c43c3a3ecd1d99e9b33db28f19814ae4bbf179e806f71177da20d8808c588808000d31c432df8efdb929669adc5ee181a98e928af07ea2aaeac6d0e8fed31dbe0bbb2a45c8c0e08151b9b894414137151cee310ab4c93b14dcfb3e76e39de3a7bb5bc176c5721ca15fa0b"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x90}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000013c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001400)={0x20, 0x0, 0x8, {0x100, 0x1, [0xf000]}}, &(0x7f0000001440)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000001480)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000014c0)={0x40, 0xb, 0x2, "9911"}, &(0x7f0000001500)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000001540)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001580)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000015c0)={0x40, 0x19, 0x2, "3401"}, &(0x7f0000001600)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001640)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001680)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000016c0)={0x40, 0x21, 0x1, 0x3d}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000080)) 7m6.503801393s ago: executing program 1 (id=6973): mkdir(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x30000000}) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) 7m6.362228682s ago: executing program 1 (id=6974): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000008c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x1, 0x4, 0x0, 0x7, 0x4, 0x1}) io_uring_enter(r4, 0x627, 0xc1040e00, 0x43, 0x0, 0x0) 7m5.43651154s ago: executing program 1 (id=6978): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="000504000000abe763aad5f51a8f5632b54b215dd729f213b64ed5fe4ad7291d9095f5106dcb0c7d9e4b24de2624a6e7c3fd7a4f6b647e5360a850330cb05f8a254b8412d15cc66edb3789ee20fb00c7f52361939c112a30abc5c9e491197ee9333793967bdfe1a4a7338bbbd8289ffb58a9ce7c8394f7233ae902579e9af946a47c6890e5a81e8c47ddbe3648421fdf2fd768f923869021fda6ae0eabe048535dd7c315815f389d1c20552feb955c29e2d7d82cfed1f715c25c7f9068f11df3d9c6a97e1c40e5ce88f0f38df3934cb3e777bf0c855c5477fc2301fb777a85feb17151faf358aa1949327a7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x44, &(0x7f0000000a80)={0x0, 0x5, 0x4, "9d905a24"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000580)={0x70, 0xd, 0x4, "8d138d71"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000700)={0x0, 0x15, 0x4, "5c87dc7a"}, 0x0, 0x0}) 7m1.761813616s ago: executing program 1 (id=7000): socket$inet6_sctp(0xa, 0x1, 0x84) kexec_load(0x4, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10, 0xfffffffffffffffc}], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r0], 0x38}}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 7m0.449797824s ago: executing program 1 (id=7006): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r4 = add_key$user(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='Q', 0x1, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000002740)="9a82b41d28cc977db6423f7174abe35ec1f5e9ced1dbf2c674a12192b84c8ca15ac1f3deef05cbda4d3a926440b5c99a1c8d9ed23e213220c79c27767e1dc54f2cbf47ed78682d9fc4f517e6868cbe37fec1886d42ccc9dbec439a6ade9568add6a5682c2f944f5ed04fd2b39b10ff149bfe4facadc10aa6cdc05bc6b36aa04bb08825f1277d180b5add70a54b1f0dd1821ddab761088dabca0c57fac9029ab76471afe3d6aa1430655ee9272f67108f7aabec3edc43b0de489292545003bcae3d", 0xc1, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f0000003740)={r4, r5, r4}, &(0x7f0000003780)=""/194, 0xc2, &(0x7f00000038c0)={&(0x7f0000003880)={'sm3\x00'}}) 6m59.085548452s ago: executing program 1 (id=7012): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x8, 0x40, 0x5, 0xb129, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x66, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @empty}}}}) r3 = dup(r1) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x20ec, 0x1}}, 0x40) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$FBIOPAN_DISPLAY(r6, 0x4606, &(0x7f0000000080)={0x0, 0x480, 0x690, 0x960, 0x0, 0xf, 0x10, 0x2, {0x9, 0x40, 0x1}, {0x8, 0xfffffffe}, {0xb, 0xabd0, 0x1}, {0xcde2, 0x3, 0x1}, 0x1, 0x100, 0xb, 0x7, 0x1, 0x1, 0x4, 0xf, 0x6, 0x6, 0x5, 0x45, 0x20, 0x100, 0x3, 0x4}) 6m43.883899692s ago: executing program 35 (id=7012): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x8, 0x40, 0x5, 0xb129, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x66, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @empty}}}}) r3 = dup(r1) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x20ec, 0x1}}, 0x40) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$FBIOPAN_DISPLAY(r6, 0x4606, &(0x7f0000000080)={0x0, 0x480, 0x690, 0x960, 0x0, 0xf, 0x10, 0x2, {0x9, 0x40, 0x1}, {0x8, 0xfffffffe}, {0xb, 0xabd0, 0x1}, {0xcde2, 0x3, 0x1}, 0x1, 0x100, 0xb, 0x7, 0x1, 0x1, 0x4, 0xf, 0x6, 0x6, 0x5, 0x45, 0x20, 0x100, 0x3, 0x4}) 5m27.234667926s ago: executing program 4 (id=7554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e70007058a"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = epoll_create(0x2a) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x68, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0x90}}, 0x0) 5m24.668515615s ago: executing program 4 (id=7571): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) (fail_nth: 3) 5m24.3566647s ago: executing program 4 (id=7572): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf2504000000080004000000000005000a000100000008000100", @ANYRES32, @ANYBLOB="080001"], 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)={0x2c, r5, 0x105, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_SE_APDU={0x6, 0x19, "7d15"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x840) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x49062170}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x68, 0x0, 0x1, 0x3, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:semanage_read_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x68}, 0x2, 0x34005}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) read$msr(r11, &(0x7f0000000040)=""/244, 0xf4) 5m24.064678065s ago: executing program 4 (id=7573): setregid(0xee00, 0xee00) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x3, @value=0x140000000000}) keyctl$session_to_parent(0x12) 5m23.940913019s ago: executing program 4 (id=7574): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') socket$key(0xf, 0x3, 0x2) r2 = open(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r3) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) 5m23.043251831s ago: executing program 4 (id=7582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) 5m7.966634569s ago: executing program 36 (id=7582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) 1m58.159021097s ago: executing program 7 (id=8513): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0a85320, 0x0) ioctl$TIOCCBRK(r1, 0x5428) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r8, &(0x7f00000044c0), 0x4000000000001c0, 0x0) (fail_nth: 5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0xa0000001}) close_range(r2, 0xffffffffffffffff, 0x0) 1m57.81697171s ago: executing program 7 (id=8517): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) r3 = userfaultfd(0x801) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r4, 0x504) (async) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) setreuid(0x0, 0xee01) (async) fsmount(r4, 0x0, 0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) r5 = dup3(r3, r1, 0x0) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000002000/0x3000)=nil, 0x3000}}) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 1m57.356578767s ago: executing program 7 (id=8519): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x2, &(0x7f0000001840)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_ifreq(r2, 0x8937, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) modify_ldt$write2(0x11, &(0x7f0000000540)={0x1, 0x1000, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mount$pvfs2(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2f6465762f736e642f636f6e74726f6c4323002c723d30303030303030303030303030ae3e30303036342c6673636f6e746578743d726f6f742c0000000000000000"]) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0x1, &(0x7f0000000340)="f892b99b25780795cf40ee08e96e726618ea85daba18bdb32243aac33584e5adfe3a7ce613a406ffbc162e5721e1f3f92d49452bcff2967d80475807eb5073e3e24fa07c4d95e59a8018e6039415f5e71128aae7aefd00360e04f27603a194e98be34baa483e672c6c387a18dacb26623687c86a70c760554ff66c8010032576aab882", &(0x7f0000000080)=""/36}, 0x20) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x6aad64) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x586abc7b6f5091ec, 0xfa00, {0x0, 0x0, 0x13f}}, 0xfdbc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = timerfd_create(0x9, 0x800) timerfd_settime(r4, 0x3, &(0x7f00000006c0)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, &(0x7f0000000000)) 1m56.222884884s ago: executing program 7 (id=8523): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x3, 0x66e, 0x9, 0x4, 0x7}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xac, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1d, 0x2, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r4, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3}) 1m56.148839066s ago: executing program 6 (id=8524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d1000007b8af8ff00000000bfa200000000000007020000f8ffffffb703008008000000b704000000000000850000008200003854a950301b46b2b40018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000005f00000005000000010000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000789ef6e200", @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r4) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r6, 0x30b}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$PIO_CMAP(r7, 0x4b71, &(0x7f0000000000)={0x3, 0x7f, 0xa, 0x3, 0x0, 0x2}) 1m56.148577645s ago: executing program 6 (id=8525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000080)}, 0x20) 1m55.970646033s ago: executing program 6 (id=8527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000) (fail_nth: 8) 1m55.792958007s ago: executing program 6 (id=8528): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r0, 0x406, r0) accept$ax25(r2, &(0x7f00000000c0)={{}, [@bcast, @bcast, @bcast, @netrom, @default, @default, @null, @null]}, &(0x7f0000000040)=0xfffffffffffffe5a) fallocate(r1, 0x8, 0x7, 0x17) r3 = geteuid() quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000902, r3, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000300)={[0xfffffffffffffdec, 0x300000000000, 0x4, 0x7, 0x8000000000000000, 0xffffffffffffffff, 0x3b48, 0x10, 0x76, 0x1, 0x7fffffffffffffff, 0x500000000000000, 0x82b6, 0x8000000000000001, 0x371, 0x5], 0x5000, 0x20040}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m54.878331004s ago: executing program 7 (id=8532): mq_open(0x0, 0x42, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet(0xa, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000300)={0xc, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r4, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0xea60}, 0x1f, 0x7, 0x1000}], 0x18) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000380)=ANY=[@ANYBLOB="f7067a652f431077b2b400b68f2593d35ad98261a9c7860d6ec83ddff0ccb1374fb8af781fc14284778d368bd25523c35d91cda0d02997dbf88262b7a75ec714269bf757aa201fa160aa2b94bb24a7e9016777a31f1f9bb1de39030150be4ee897e6b8058fddd119af34c6bb963aaf6c4eaf8f542a7ce684df0800000000000000c2f9251aeefc881edb2aad9ae44ca9505ad161eb85253dc53622a1a356b96488d05c7b1d579a940aab2adcd90d30e2c093b64b"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000004000000000000000000000300000000000000000100000000000001000000000000000d00000000020000000100000f020000000400000000000000040000003923000000000000000f02000000921c0000610077f92917a02ab2c38e8be071c2577818b905d9357241f5fa246434a05d38768af2ee758ad3c782bc9b11ae741c195d9c01a0d17b7122a9fd1539638af23277fe"], &(0x7f00000006c0)=""/196, 0x68, 0xc4, 0x1, 0x0, 0x0, @void, @value}, 0x28) write$binfmt_register(0xffffffffffffffff, &(0x7f00000009c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x2, 0x3a, 'o\x00\xb2\xcd\xd5\xb85\xeax\xf4v#\xd7i\x90\xc6\x81$L\x16\xae\x1b\x96\xc1i0\xe0\x94\xa9r;v\x00g7\xae\xb8j\xee\x04\xfb\x9d\x81o1\xfb\xdcLNluNXd\x90J\xaf-jf.\x90\x9a\x90\xa4x\xa3\x13\xd1\r\xe3\xe2\xf6_\x18\x05\xa3\x7f\xee\xfb1q\x16\xffH\x1a\x00\x00\x00', 0x3a, 'GPL\x00', 0x3a, './file0', 0x3a, [0x50, 0x4f]}, 0x86) syz_open_dev$tty1(0xc, 0x4, 0x1) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r6, r6, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 1m54.767778203s ago: executing program 6 (id=8533): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x5}) close_range(r6, 0xffffffffffffffff, 0x0) 1m54.568305295s ago: executing program 7 (id=8535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setfsuid(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x220}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) 1m54.119574409s ago: executing program 37 (id=8535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setfsuid(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x220}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) 1m54.115352502s ago: executing program 6 (id=8538): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0xe, 0xf6, {0xf6, 0xc, "96a3e4c6a9e73cf0c7d2c649824e4d5c1752100053a26b107e2d12cc580f75934f46895493450fa93681d921e270f47e55e62b359dbc8ce49609b75782c337df5af47a9a2ae2f500acbe6fc9beefe9d1897ee95669eacd959fdea38854b2b681103f67522ab3c37493f41f3dc04e7caa474e1a3347f03cd684ff7dc78bc088663a25d21d03b0968a344d7929a5ec3173d877f07ca755fb29339da2675a4cc48beb0e012e11b3aa0b54aad108fceaaa0369c3e4e6477006a2a7edc00c081c27a4bb5d2e89da479ccc3b06009bb2d5cfbe760bae4d7243186bac0808fc98ff73cc9c26cb1f69cc975d41294902ac30278519aac38e"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x30, 0xec, "76e2e8504ffda95224ab091e76e6c36c567309a9d2cbdd7da6803f7d866931a3f6853ebc9a90a76214cc8cb017135228f3b5735b5ba9d07b522d8e5f9969ba064879a2f3427e03164cc985b8d3634a7bebf6e52b7424e30443254af457b5fa8e98ae12668b003061ee2a2fbeb9c674ba318a48ee1b9359ebb0320d78f05463349aea2ece626a2b2a90100b8666679ae420ef9e59de4aa10bbfd869f4c02ea061fdb221521bf50747d2da2f94aa18be8ecc44663e78eb09bba5491dfa28ebb374d5363fc31a3621651154630b3e278a971f5dcda122239265715e5b311b62f91b2f1515513f7b1a45b4b01823"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x6, 0x3, 0x9, 0x1, 0x6, 0x101, 0x2, 0x8c, 0xfff, 0x401, 0x5}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0xd}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002780)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m53.399082514s ago: executing program 38 (id=8538): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0xe, 0xf6, {0xf6, 0xc, "96a3e4c6a9e73cf0c7d2c649824e4d5c1752100053a26b107e2d12cc580f75934f46895493450fa93681d921e270f47e55e62b359dbc8ce49609b75782c337df5af47a9a2ae2f500acbe6fc9beefe9d1897ee95669eacd959fdea38854b2b681103f67522ab3c37493f41f3dc04e7caa474e1a3347f03cd684ff7dc78bc088663a25d21d03b0968a344d7929a5ec3173d877f07ca755fb29339da2675a4cc48beb0e012e11b3aa0b54aad108fceaaa0369c3e4e6477006a2a7edc00c081c27a4bb5d2e89da479ccc3b06009bb2d5cfbe760bae4d7243186bac0808fc98ff73cc9c26cb1f69cc975d41294902ac30278519aac38e"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x30, 0xec, "76e2e8504ffda95224ab091e76e6c36c567309a9d2cbdd7da6803f7d866931a3f6853ebc9a90a76214cc8cb017135228f3b5735b5ba9d07b522d8e5f9969ba064879a2f3427e03164cc985b8d3634a7bebf6e52b7424e30443254af457b5fa8e98ae12668b003061ee2a2fbeb9c674ba318a48ee1b9359ebb0320d78f05463349aea2ece626a2b2a90100b8666679ae420ef9e59de4aa10bbfd869f4c02ea061fdb221521bf50747d2da2f94aa18be8ecc44663e78eb09bba5491dfa28ebb374d5363fc31a3621651154630b3e278a971f5dcda122239265715e5b311b62f91b2f1515513f7b1a45b4b01823"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x6, 0x3, 0x9, 0x1, 0x6, 0x101, 0x2, 0x8c, 0xfff, 0x401, 0x5}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0xd}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002780)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.768769772s ago: executing program 9 (id=8974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) close_range(r0, r0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0xa, 0x8, 0x0, 0x8, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_ident={0x2, 0xb, 0x4, 0x0, 0x7fffffffffffffff}, @sadb_x_sa2={0x2, 0x13, 0xb, 0x0, 0x0, 0x70bd2d}, @sadb_ident={0x2, 0xa, 0x4, 0x0, 0x800}]}, 0x40}}, 0x20040000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x75, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x15) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) userfaultfd(0x80000) ioctl$KVM_RUN(r2, 0xae80, 0x0) unshare(0x62040200) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x3, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x4a, {{0xa, 0x24, 0x6, 0x0, 0x0, "459690033b"}, {0x5, 0x24, 0x0, 0x77fd}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1000, 0x3ff}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x81, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x72, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x0, 0x3, 0x0, 0x20, 0x6}, 0x24, &(0x7f0000000240)={0x5, 0xf, 0x24, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xf, 0x40, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x8, 0xfd, 0x7, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x4}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x813}}, {0x18, &(0x7f0000000480)=@string={0x18, 0x3, "1cc98e8d9c590b4134a9ba30f27c9c560f30af722ff2"}}]}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwritev2(r5, 0x0, 0x0, 0x800be6b, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200, 0x0) write$binfmt_script(r7, &(0x7f0000000300)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '#'}, {0x20, '/\xb2#^[\\{-!+*($.'}, {0x20, '--%[&\xe9^'}, {0x20, '/dev/kvm\x00'}], 0xa, "dcb73b933180f040e379a81934f28298d0fd8fa6e3258e40f224271a907ba94e2b733479963275e6a319a5632cd2ba369a250302b587539e6dc388f696a8c14b85a5df583f7fee1cce66cf9f89f91756e2a2a1c0062486991553ff06d2e4297d6aabc32edf4775b61c2a227e33fd265aa1dfb5085837c5cbd0c979f6c3944135f846225c8ffa36d30b036bdcccf35bc6af458853b2d6ed1559"}, 0xdb) 9.377730598s ago: executing program 3 (id=8981): ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)={0x20, 0x11, 0x18}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="200306000000022e"], 0x0}, &(0x7f0000000480)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000039a000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x0, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000000002d9307780000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r1], 0x50) close(r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000191f3368449c00000000000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000040), 0x0, 0x2000000}, 0x20) process_vm_writev(r1, &(0x7f00000004c0), 0x0, &(0x7f0000000880), 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, 0x0, &(0x7f00000001c0)) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0xffffffffffffff83) sendto(r4, &(0x7f00000002c0)='%', 0x1, 0x8800, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 7.99051431s ago: executing program 0 (id=8986): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$phonet(0x23, 0x2, 0x1) modify_ldt$write2(0x11, &(0x7f0000000540)={0x1, 0x1000, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0x1, &(0x7f0000000340)="f892b99b25780795cf40ee08e96e726618ea85daba18bdb32243aac33584e5adfe3a7ce613a406ffbc162e5721e1f3f92d49452bcff2967d80475807eb5073e3e24fa07c4d95e59a8018e6039415f5e71128aae7aefd00360e04f27603a194e98be34baa483e672c6c387a18dacb26623687c86a70c760554ff66c8010032576aab882", &(0x7f0000000080)=""/36}, 0x20) r1 = timerfd_create(0x9, 0x800) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) timerfd_gettime(r1, &(0x7f0000000000)) 7.621545292s ago: executing program 9 (id=8989): ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000180)={0x0, 0x2, &(0x7f00000000c0)=[0x6, 0x7], &(0x7f0000000100)=[0x7, 0xa858, 0xfffa], &(0x7f0000000140)=[0x7318, 0x1]}) 7.173044633s ago: executing program 9 (id=8991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="a1adbd6ac6536d383616f5e301032cbd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) 7.172450363s ago: executing program 9 (id=8992): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = socket$nl_generic(0x10, 0x3, 0x10) accept$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{}, [@bcast, @bcast, @bcast, @netrom, @default, @default, @null, @null]}, &(0x7f0000000040)=0xfffffffffffffe5a) fallocate(r0, 0x8, 0x7, 0x17) r1 = geteuid() quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, r1, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0xfffffffffffffdec, 0x300000000000, 0x4, 0x7, 0x8000000000000000, 0xffffffffffffffff, 0x3b48, 0x10, 0x76, 0x1, 0x7fffffffffffffff, 0x500000000000000, 0x82b6, 0x8000000000000001, 0x371, 0x5], 0x5000, 0x20040}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 6.04441694s ago: executing program 9 (id=8994): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010d21f076000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x4, 0x7a, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xa8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x2, 0xc0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'Lf'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0x5}, {0x6, 0x24, 0x1a, 0x7fff, 0x1a}, [@country_functional={0xa, 0x24, 0x7, 0x40, 0x1, [0x9, 0x8]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x3, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x4, 0xfa}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x9, 0x5, 0x1, 0xff, 0xc}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3401}}, {0x89, &(0x7f0000000200)=@string={0x89, 0x3, "194d749d16da0720a5dbb31eff7a62ebdb8a569b27196bc3ebc22c4d32622c697a6e1a75a98ca1bff39518a70e4d20cebf763af539e8342af69023f422113c923cbd00ca6c39882a10930ef0a6f332537d2cbc3a12e840f11381be7274d071fe764c66c4a1fb014c685022c83fe4f91604cc68c1b44e9bab9c66b4e94a8292dbafab191af77afc"}}, {0xe2, &(0x7f00000002c0)=@string={0xe2, 0x3, "244c7dceadcbff2c5743c0c6379887b1101af3a14ef8d964b3c5d16658e071f21152153f9bac39a9527e9ec2671bb8ae34ccd7e835a5ecfa6e61470bd648eed8bd38a56dea20b254535d21b18aa7437b738809504004b047d357dfb45a86597978665578042c328abe911bcdeb27e7dc8c16949144ccb3c6da1ccfd63f3be4df058125b586154b8bb84a0f2409d7c680da25820efbc86e9e9f8673f98d819a718046c332fec112a5c0c54b6b15efd7377b008b444f43e8ded53d6774fd18a3f253aef4dbb023b04dcfb87bb9b8579ed57b60fe3488df77a7099d277f3367d432"}}]}) syz_usb_ep_write(r1, 0x8, 0x28, &(0x7f0000000440)="7884b88e7c6d7ff15030115f37967fd7049f3f840a45909595df91bec25e0f8032c0716a5eae698c") syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x23, {0x23, 0xc, "89d6a1115dc5dcd3c9696a671cf98b249eadfc0643a3524b4738f3938669cb80dc"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x25, 0xca, "991a5ccdbede7bf6b87d087aa62322387112a4e0f8d5569a071eeac33b42b017a252af2e4cc36e2f298bbde26e8668d37e106d9f0e5fe71d614d15cda16fbc8e2b6c58972fa98350ee98d77f4c317f5e57f3535f9e6add3e1837f27e66ac8050361fd03746329d8e21e67307d4b333bb3e7007ad1164329961375e84cba069907cf4beb74367a42bd2c257fdd6aa27e0598d98c2e2a045c491196e5d294f4528433cbbc8f38e47ab8435d7ee3830db7bf1d92754bd3b2bfe68cfeedcaf2bc7c3cd501f140cbf81cb8883"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x6, 0x6fef, 0xffffffff, 0x2, 0x27, 0x0, 0xa3b, 0x5, 0x7, 0xd, 0x7, 0x7fff}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x4, &(0x7f0000002500)={0x0, 0x3a, 0x0, @tid=r2}, &(0x7f0000002540)) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x20, 0x3, 0x5, {0x5, 0xa, "820213"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.01616242s ago: executing program 5 (id=8995): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x118, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r4, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000010000000100"], 0x18}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x57b6, 0x810003, 0x2, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece0195b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x4080) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) write$tun(r9, &(0x7f00000001c0)={@val={0x0, 0x1b61}, @void, @mpls={[{0x6}, {0x4}, {0x6}, {0x5, 0x0, 0x1}], @generic="1c4d224abe52c273e1875b809f7e80be56ec6aaa507d6535ada9a47fed6337f508531f082811b36c2dc6ee20c2"}}, 0x41) 5.788860756s ago: executing program 3 (id=8997): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1, 0x8000, 0x1000}, 0x20) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000007301f0ff00000000950000ff07000000e0b7e8b70f7551acd18f7650f6ca0e6ca1d60b8b046e4b02ba249d646cc3c7e34d6a62ad3f2db80a836bc3fb02403fbb80ac6334d478be3bb860755812405a3e1c044c30ca46639366546057a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-ce\x00'}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902a00003010068000904000000010100000a2401e70000020102132406010406010005000100090008000900010c2402020101020ba5867f030624050304c707240805030003090401000001020000090401010101020000090501092000ff080a072501027f08000904020000010200000904020101010208000e2402010703bd02881429c9a30607240100000300090582093e000005"], 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$nl80211(0x0, r3) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000880)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040002000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @broadcast, @empty}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) 5.040376863s ago: executing program 5 (id=8999): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x11, 0x80a, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0x40000000, {0x0, 0x0, 0x0, r2, 0x0, 0x10000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MAP={0x24, 0xe, {0x1ffc00000000, 0x80001, 0x0, 0x80, 0xe, 0x81}}]}, 0x58}, 0x1, 0x0, 0x0, 0xa69084ee073189e1}, 0x80) 4.316723661s ago: executing program 5 (id=9000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x1e8, 0x0, 0x95, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3df", 0x0, 0x0, 0xe8030000}, 0x50) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x6c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f00000002c0)=0x80000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r9) 3.593720747s ago: executing program 8 (id=9002): ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000180)={0x0, 0x2, &(0x7f00000000c0)=[0x6, 0x7], &(0x7f0000000100)=[0x7, 0xa858, 0xfffa], &(0x7f0000000140)=[0x7318, 0x1]}) 3.443050259s ago: executing program 8 (id=9003): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r2 = fcntl$dupfd(r0, 0x406, r0) dup(r2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f00000002c0)={0x0, 0xec0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffc}}, 0x14}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x0, r8, 0x4007) 3.341863308s ago: executing program 5 (id=9004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) accept$ax25(r1, &(0x7f00000000c0)={{}, [@bcast, @bcast, @bcast, @netrom, @default, @default, @null, @null]}, &(0x7f0000000040)=0xfffffffffffffe5a) fallocate(r0, 0x8, 0x7, 0x17) r2 = geteuid() quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, r2, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000300)={[0xfffffffffffffdec, 0x300000000000, 0x4, 0x7, 0x8000000000000000, 0xffffffffffffffff, 0x3b48, 0x10, 0x76, 0x1, 0x7fffffffffffffff, 0x500000000000000, 0x82b6, 0x8000000000000001, 0x371, 0x5], 0x5000, 0x20040}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 3.075053422s ago: executing program 0 (id=9005): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) timerfd_create(0x0, 0x800) 3.0237607s ago: executing program 8 (id=9006): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x2002, 0x10100, 0x1, 0x100033a}, &(0x7f0000000300), &(0x7f00000004c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0xf7ffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r4 = dup3(r0, r2, 0x80000) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) r5 = openat$cgroup_ro(r4, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x3, &(0x7f0000000200)=0x6) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x6d, 0x6000, @fd_index=0x6, 0x1, &(0x7f00000005c0)=""/200, 0xc8, 0xb3a7f8940a95e051, 0x0, {0x0, r7}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8034, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRES64=r3, @ANYRES64=r9, @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r11, 0x4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000)={r11, 0x9}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) 2.991662777s ago: executing program 9 (id=9007): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x67fd, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) write$binfmt_misc(r0, &(0x7f00000002c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x13) sched_setaffinity(0x0, 0x63, &(0x7f0000000080)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x1, 0x12001, 0x7) r3 = openat$cgroup_procs(r2, &(0x7f0000002a40)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000400)=""/86, 0x56, 0x3) 2.974843089s ago: executing program 5 (id=9008): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000000c0)={0xffff, 0x9, 0x4, 0x400, 0x6, {0x77359400}, {0x1, 0x8, 0xb, 0xa, 0x4}, 0x1}) (fail_nth: 4) 2.884812521s ago: executing program 0 (id=9009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007de0b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cd67b5b18065752a3ad500000000000000cb450063bc36005400000000000000ff7f00000001000000000000000000cb04fcbb0b5ba9918d37b056b9bbd11b6b9f260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb4845124ef2e487204000000aaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aadffcc75fe369258673b5d053bdec75dca377232a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db9af1b5d356d0f062137d866d11be4b1260b06cca9098a3f0151fdbbd4e97d62ecc6405003a60f1c6edc76683073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bdaeecc952a3fd2c46f3c1cde71a19d1a2982492abaa96765372831210e00d2bfea3b8df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f22542c133aadafdc96fdb49cc992dbdd5ac01ba51508951c7a7c5f5093bd6ca0916c3a12912715649c2b1c7193a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f000000000000000050572061dfb5248d3d4a1c37dcb92d9ef99e2f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19524cf30f810da3204f4c93f4f5d7321acfefc4d1c9139ca4b65b9990995000000000000000000000000000000c8a3988cca41217c950554bb043cf364d709c2bf3ec46b75f1bce43e726210b53d362072bc120c076b4647afc595d97c288f5017088ac2b02ed97fc883a102ae6000044542e3aa7ada6d13ff93ec634a0fa0b5f41ed317b48b8b8c03b243d6e14b7087e2c5d41f8a51408e27283b54d04212cbb0f5af76b70b1bdcec7c0abe6407e7fa204b9919490af8bffca6fbbd2174a84328af4acc9c7ec655729125fc15da558cb6edfcdd0c3fca7130863d13369f79f1d13ac166249e4bffa4a272a0116b591a63bfca11205d216b34000000000000000045b5ade570aeb7cf89e900004dc6c89355082bdcb0b08b810cf63fd19a17f4d440f1546e8e5f8addedb88c7f7990947505d2fcd8cb14"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x1e8, 0x0, 0x95, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3df", 0x0, 0x0, 0xe8030000}, 0x50) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x6c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000002c0)=0x80000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r7) 2.586268434s ago: executing program 5 (id=9010): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000c8060000060000000500ff0080000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000200"/28], 0x50) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000080)=0x17) syz_open_procfs(0x0, &(0x7f0000000380)='coredump_filter\x00') openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x16002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006000364bc24eab556a705251e618294ffd4938037e786a690001000000e4509c5bbcd72c6c953", 0x55}, {&(0x7f0000001e40)="dcedfe02a62da3", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e700070122b30409050c0200020103400905df02"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) 2.585369759s ago: executing program 8 (id=9011): keyctl$set_reqkey_keyring(0xe, 0x2) syz_emit_ethernet(0x304, &(0x7f0000000000)={@empty, @empty, @void, {@mpls_mc={0x8848, {[{0x4}, {0x8, 0x0, 0x1}, {0x9}, {0xfff01}, {0x106e, 0x0, 0x1}, {0xa}, {0x8001, 0x0, 0x1}, {0x1}, {0x8}, {0x3}], @ipv6=@icmpv6={0x8, 0x6, "ff2006", 0x2a6, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0xb2}, @private2, {[@routing={0x2c, 0x12, 0x0, 0xd, 0x0, [@mcast1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @rand_addr=' \x01\x00', @remote, @dev={0xfe, 0x80, '\x00', 0x34}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @hopopts={0x11, 0x7, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @local}]}, @srh={0x2b, 0x8, 0x4, 0x4, 0x7, 0x30, 0x7fff, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, @local]}, @srh={0x33, 0x12, 0x4, 0x9, 0xb2, 0x0, 0x6, [@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, @empty, @private1, @private1, @private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x1d}, @private2]}], @echo_request={0x80, 0x0, 0x0, 0x6, 0xfff5, "b5129cba835aac11834586ec4a4f4e5f8ec7a43ce77e1e7eb94fdc47b0bc7a65a5390fb94811ef9847f7278902f4c5da5cb085b30606b5894534393bc82acba7e5a9bcd36a1b2bee04428ee2be774f31b814807b4d837090b7fdaae03da09d3b21a6cafc7842a4deaec34dc68c7ef07cbd48a2d0e958804513e68e38082c5f87177e6e23f10568062e866928d529bf791df298a3de86cfb957af9f74e65f7baf3e454edc84ff5f4c28fc65ce75bd7f760265886257bd11d46bd00c6a5fc2ec1a7befcaf5334dc723ce8b242d5bdb109078be814adb64163a5ef0c3ba4062"}}}}}}}, &(0x7f0000000340)={0x1, 0x4, [0xc4d, 0xe3a, 0xc5f, 0x820]}) r0 = request_key(&(0x7f0000000380)='cifs.idmap\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='&)/\x00', 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x18}, 0x18) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)=' \x01\x00') keyctl$unlink(0x9, r0, r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x200040, 0x0) keyctl$link(0x8, 0x0, r0) syz_emit_ethernet(0x18c, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="496a10ec8094", @val={@void, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0xb, 0x6, "78bd4b", 0x152, 0x3a, 0x0, @remote, @mcast2, {[@routing={0x3a, 0x2, 0x0, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x88, 0x6, 0x4, 0x3, 0xd, 0x50, 0x7f, [@private1, @private1, @private0={0xfc, 0x0, '\x00', 0x1}]}], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x40, 0xfa15, 0x8, 0x4, [{0x2, 0x12, "9e8c7dc9f66cbecacf669104859e49f24852133d69baf906af9b58d716a066e0cee6830c9f82c6b7976d2bf41736a14a0e619d10bc04df2236aa22e580a950c4053a3f2eb39c441a3eea314ca92dea7b205131b8a963e955d19419908f2fd01a6bd9116fcb83334fb6426a4f209931b5cdaa454381957c116ecc7148653d1efe0f6591307e058b14bae7f53a9206b8220659faeb34"}, {0x3, 0xb, "3bd9eeac18eb122dd5865b8bf3240d755ad7fb01eae98a8389bbee390e4b55ae012bc024466645281724ebbaa6668ec85ca1f0ea8722592d09435c060641e76f9d3534b04913995f4183f840a6e697902a6b5f45d67bc7ecfd"}]}}}}}}, &(0x7f0000000740)={0x1, 0x3, [0xd6, 0x4b4, 0xeca, 0xe90]}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x5) keyctl$set_reqkey_keyring(0xe, 0x3) r2 = socket(0x27, 0xa, 0x3) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000ac0)={'ip_vti0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x80, 0x20, 0x679, 0x7, {{0x19, 0x4, 0x2, 0x19, 0x64, 0x64, 0x0, 0x6, 0x2f, 0x0, @empty, @empty, {[@generic={0x94, 0x12, "c2bd981f780c5d19ad46c0069d350eff"}, @timestamp_addr={0x44, 0x24, 0x83, 0x1, 0x4, [{@broadcast, 0x6}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x8}]}, @lsrr={0x83, 0xf, 0x8d, [@dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010100, @multicast1]}, @ssrr={0x89, 0x7, 0xec, [@loopback]}, @noop]}}}}}) sendto$packet(r1, &(0x7f0000000900)="a0395e8872a46bbe4bc2a30287f82f50514c9ceb43f0c4fd33fc276718d6ac258c1a576d778546578f6f67023f7120239f3214788ffd1be841a8191f75fcea2525254e1eb03e5dc74d62446ef0825967feace63a1c7f9b8ad2fcea6b2f3e0e2f797d32e9ee46196eba9751d822531f8670bbbcbb05218730ccd6632fe06608ae7e382b7e02e3d643d1393703207aa851f96e99dec1b0fdf4556e5bf62f8f7fb613134da05df5a5cfba74927428433f21320867b9e0395d952a35e2d0f13d99222427778d90161c401b263a68e92521bf75", 0xd1, 0x0, &(0x7f0000000b00)={0x11, 0x5, r4, 0x1, 0x8}, 0x14) accept4(r2, &(0x7f0000000b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000bc0)=0x80, 0x80000) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000c00)={'veth1_virt_wifi\x00', {0x2, 0x0, @dev}}) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) fadvise64(r2, 0x100, 0x6, 0x1) write$binfmt_aout(r6, &(0x7f0000000c80)={{0xcc, 0x2, 0x2, 0xd8, 0x15f, 0x5, 0xee, 0x2d}, "1cd98089a8406244dc6d24b929576e94854759d7ff2268f4be6919b451360ae407a08ed5d9f6a7da3fd97937c6a2af99677fe8c50190d88d56433789756417cf56922f39f3a144ca2527eeeddc26b37a0b022d8a1dd18ac0a661468301e28aa834a068d919235490539088312a77e8a2037733396b21230e6282e766ccd55b3d7572881782b7a927d437f945e2013e8fe39924e4370f82f60f5ed291a54783deae51f0d183d6ed089b913e469a6b1e8e4a5b07a73e35aa6877a081f1cc26f20695a8fe1a64df1cca0d9228e8fed396ee32a5ca0a6915f50c6534c21f7ca732422cadc31bdb39", ['\x00']}, 0x206) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0x8c, r7, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7fff, 0x3}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xe0}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0xcc810) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0xb, 0x1, 0x7, 0x400, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r6, 0x5, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = socket$caif_stream(0x25, 0x1, 0x5) fcntl$addseals(r9, 0x409, 0x11) open(&(0x7f0000001140)='./file0\x00', 0x200, 0x25) 1.650838611s ago: executing program 0 (id=9012): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9"}, 0x3c) 1.374463875s ago: executing program 8 (id=9013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d1000007b8af8ff00000000bfa200000000000007020000f8ffffffb703008008000000b704000000000000850000008200003854a950301b46b2b40018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000005f00000005000000010000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000789ef6e200", @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r3) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x30b}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800b00028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a300000000009140000001100010000000000000000000200000a"], 0x8c}}, 0x14b6deac033214c2) r6 = syz_open_procfs(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f0000000000)={0x3, 0x7f, 0xa, 0x3, 0x0, 0x2}) 1.372351508s ago: executing program 3 (id=9014): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x3, 0x1000000, {0x0, 0x0, 0x12, r5, {0x0, 0x300}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffffff57, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xfe], 0x0, [0x6, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}]}]}]}}]}, 0xb4}, 0x1, 0x7a00}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r7 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r7, &(0x7f0000006100), 0x49f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES16=r2], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000a1f000/0x1000)=nil, 0x1000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.231578688s ago: executing program 8 (id=9015): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$phonet(0x23, 0x2, 0x1) modify_ldt$write2(0x11, &(0x7f0000000540)={0x1, 0x1000, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0x1, &(0x7f0000000340)="f892b99b25780795cf40ee08e96e726618ea85daba18bdb32243aac33584e5adfe3a7ce613a406ffbc162e5721e1f3f92d49452bcff2967d80475807eb5073e3e24fa07c4d95e59a8018e6039415f5e71128aae7aefd00360e04f27603a194e98be34baa483e672c6c387a18dacb26623687c86a70c760554ff66c8010032576aab882", &(0x7f0000000080)=""/36}, 0x20) r1 = timerfd_create(0x9, 0x800) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) timerfd_gettime(r1, &(0x7f0000000000)) 1.204184838s ago: executing program 0 (id=9016): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_clone3(&(0x7f0000000500)={0x2000000, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x0, {0x27}, &(0x7f00000003c0)=""/7, 0x7, 0x0, &(0x7f00000004c0)=[r1, r1, r1], 0x3}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000002080), 0x0) syz_clone3(&(0x7f0000000140)={0x20000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r4, r5, r4], 0x3}, 0x58) syz_init_net_socket$ax25(0x3, 0x5, 0xce) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24000040) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000480)='xprtrdma_frwr_dereg\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0800000004000000040000000000010000000000", @ANYRES32, @ANYBLOB="0f080000004246b0da6ea49df2e803fe1d9d00003a5ddd083f6e51f4b7cedbbfed6dc04a08de0fff12c6c812ae7308dcbd4e32294432db825ed95def6b180edb9da3018e3ef884288db926f01ab60837e9c01de04ce89045e19502c20e170f469b493e623c3c0ee9d3a608fe64326a98f39cc791c873f666758cc76461f3763b37675dc9499a2dbe86a059abcb6e7f152526439717", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) 397.082216ms ago: executing program 3 (id=9017): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000180)={0x0, 0x2, &(0x7f00000000c0)=[0x6, 0x7], &(0x7f0000000100)=[0x7, 0xa858, 0xfffa], &(0x7f0000000140)=[0x7318, 0x1]}) 392.104528ms ago: executing program 3 (id=9018): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x67fd, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x88400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003040), 0x0, 0xc044) write$binfmt_misc(r1, &(0x7f00000002c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x63, &(0x7f0000000080)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x1, 0x12001, 0x7) r4 = openat$cgroup_procs(r3, &(0x7f0000002a40)='cgroup.procs\x00', 0x2, 0x0) pread64(r4, &(0x7f0000000400)=""/86, 0x56, 0x3) 174.150812ms ago: executing program 0 (id=9019): socket$isdn(0x22, 0x2, 0x22) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r0, &(0x7f0000000500)=[{}, {&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/104, 0x68}, {&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000440)=""/132, 0x84}], 0x7, 0x1, 0x200, 0x11) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xffffffbb}) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000180)={0x274e, 0x6, 0x3, 0x8, 0x5, "09e7af8bc600", 0x5, 0x5}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xd) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 0s ago: executing program 3 (id=9020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000480)="1ffcc4bb1c6c547af25f3fa665cba2c93435b150592c6bbcec230ea3848e225950805e62a67eb8885bfbf12678bc58501ac94ba3a1098a5e423bad8520bd47b03bef7dcbeb198343c231105aaf7c5dfa4c98148b173c6c8226e1aa09d33352622ef068e52410222bb0ab7b47d902e95fdf17828fca97957c4c60bbda94aa7c2917221176131ddf011ae13be78fefa7e4f6f79ef1fc3d575f5bcc12f11c89e8fc5248b45026e86abda7f9f9c9607b224a0e", 0xb1, 0x8, 0x0, 0x1}]) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54000000190001002dbd7000000000001d0100000800050001f8fa0017000300"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20004880) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) syz_open_dev$media(0x0, 0x2c29, 0x28004) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) kernel console output (not intermixed with test programs): etdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.392578][ T30] audit: type=1400 audit(1742919715.510:12968): avc: denied { listen } for pid=2173 comm="syz.9.8439" lport=58144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1846.425821][ T30] audit: type=1400 audit(1742919715.510:12969): avc: denied { accept } for pid=2173 comm="syz.9.8439" lport=58144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1846.488392][ T30] audit: type=1400 audit(1742919715.610:12970): avc: denied { unmount } for pid=28254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1846.633004][ T2175] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1846.663716][ T2175] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.755959][ T2175] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1846.770514][ T2175] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.823967][ T2175] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1846.834488][ T2175] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.924994][ T2175] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1846.935266][ T2175] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.984272][ T2175] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1846.992665][ T2175] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.038187][ T2175] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1847.046383][ T2175] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.086375][ T2175] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1847.097769][ T2175] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.444209][ T2227] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1850.009305][ T2229] netlink: 'syz.6.8461': attribute type 2 has an invalid length. [ 1850.622100][ T2239] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1851.354096][ T2259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8472'. [ 1851.580442][ T2259] geneve2: entered promiscuous mode [ 1851.766821][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1851.766835][ T30] audit: type=1400 audit(1742919720.890:12988): avc: denied { unmount } for pid=30139 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1852.132833][ T30] audit: type=1400 audit(1742919721.260:12989): avc: denied { create } for pid=2247 comm="syz.0.8469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1852.154515][ T2275] 9pnet_fd: Insufficient options for proto=fd [ 1852.156177][ T30] audit: type=1400 audit(1742919721.260:12990): avc: denied { getopt } for pid=2247 comm="syz.0.8469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1852.163427][ T2274] overlayfs: overlapping lowerdir path [ 1852.181655][ T30] audit: type=1400 audit(1742919721.260:12991): avc: denied { setopt } for pid=2247 comm="syz.0.8469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1852.291491][ T30] audit: type=1400 audit(1742919721.420:12992): avc: denied { read } for pid=2278 comm="syz.9.8477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1852.336707][ T30] audit: type=1400 audit(1742919721.420:12993): avc: denied { write } for pid=2278 comm="syz.9.8477" path="socket:[136750]" dev="sockfs" ino=136750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1852.426736][ T30] audit: type=1400 audit(1742919721.550:12994): avc: denied { read } for pid=2281 comm="syz.0.8478" path="socket:[137732]" dev="sockfs" ino=137732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1852.890024][ T2290] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8480'. [ 1852.908428][ T2290] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8480'. [ 1853.015059][ T30] audit: type=1400 audit(1742919722.140:12995): avc: denied { connect } for pid=2293 comm="syz.0.8482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1853.171802][ T2296] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8482'. [ 1853.644393][ T30] audit: type=1400 audit(1742919722.770:12996): avc: denied { write } for pid=2295 comm="syz.7.8483" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1854.618692][T15152] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1854.627963][ T30] audit: type=1400 audit(1742919723.360:12997): avc: denied { write } for pid=2304 comm="syz.0.8485" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1854.665767][ T2308] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8486'. [ 1854.674737][ T2308] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8486'. [ 1854.683937][T32480] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1855.338316][T32480] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.397984][T32480] usb 10-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1855.409809][ T2322] FAULT_INJECTION: forcing a failure. [ 1855.409809][ T2322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1855.417290][T32480] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.426090][ T2322] CPU: 1 UID: 0 PID: 2322 Comm: syz.7.8491 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 1855.426111][ T2322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1855.426120][ T2322] Call Trace: [ 1855.426125][ T2322] [ 1855.426131][ T2322] dump_stack_lvl+0x16c/0x1f0 [ 1855.426159][ T2322] should_fail_ex+0x50a/0x650 [ 1855.426190][ T2322] _copy_from_iter+0x2a1/0x1560 [ 1855.426208][ T2322] ? find_held_lock+0x2b/0x80 [ 1855.426230][ T2322] ? __pfx__copy_from_iter+0x10/0x10 [ 1855.426249][ T2322] ? __virt_addr_valid+0x5e/0x590 [ 1855.426264][ T2322] ? __phys_addr_symbol+0x30/0x80 [ 1855.426279][ T2322] ? __check_object_size+0x4c7/0x710 [ 1855.426304][ T2322] netlink_sendmsg+0x828/0xd70 [ 1855.426333][ T2322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1855.426353][ T2322] ? __import_iovec+0x1cd/0x660 [ 1855.426375][ T2322] ____sys_sendmsg+0xa87/0xc70 [ 1855.426394][ T2322] ? copy_msghdr_from_user+0x10b/0x160 [ 1855.426416][ T2322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1855.426440][ T2322] ___sys_sendmsg+0x135/0x1e0 [ 1855.426463][ T2322] ? __pfx____sys_sendmsg+0x10/0x10 [ 1855.426484][ T2322] ? __lock_acquire+0x5b6/0x1b80 [ 1855.426512][ T2322] ? __fget_files+0x20e/0x3b0 [ 1855.426535][ T2322] __sys_sendmsg+0x16e/0x220 [ 1855.426549][ T2322] ? __pfx___sys_sendmsg+0x10/0x10 [ 1855.426568][ T2322] ? rcu_is_watching+0x12/0xc0 [ 1855.426590][ T2322] do_syscall_64+0xcd/0x250 [ 1855.426606][ T2322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.426626][ T2322] RIP: 0033:0x7f472cb8d169 [ 1855.426638][ T2322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1855.426652][ T2322] RSP: 002b:00007f472a9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1855.426666][ T2322] RAX: ffffffffffffffda RBX: 00007f472cda5fa0 RCX: 00007f472cb8d169 [ 1855.426676][ T2322] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 1855.426685][ T2322] RBP: 00007f472a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1855.426694][ T2322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1855.426703][ T2322] R13: 0000000000000000 R14: 00007f472cda5fa0 R15: 00007fffaa505918 [ 1855.426720][ T2322] [ 1855.705911][T32480] usb 10-1: config 0 descriptor?? [ 1855.958948][ T2340] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8497'. [ 1856.308431][ T2340] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8497'. [ 1857.418625][T32480] usbhid 10-1:0.0: can't add hid device: -71 [ 1857.424761][T32480] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1857.435240][T32480] usb 10-1: USB disconnect, device number 24 [ 1857.944697][ T2368] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1857.976161][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1857.976184][ T30] audit: type=1400 audit(1742919727.070:13005): avc: denied { accept } for pid=2365 comm="syz.6.8502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1858.054543][ T30] audit: type=1400 audit(1742919727.070:13006): avc: denied { mount } for pid=2365 comm="syz.6.8502" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1859.357397][ T2389] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8509'. [ 1859.367151][ T2389] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8509'. [ 1859.724440][ T30] audit: type=1400 audit(1742919728.850:13007): avc: denied { create } for pid=2393 comm="syz.0.8511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1859.744441][ T2396] delete_channel: no stack [ 1859.977996][ T30] audit: type=1400 audit(1742919729.050:13008): avc: denied { ioctl } for pid=2397 comm="syz.9.8512" path="socket:[138047]" dev="sockfs" ino=138047 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1860.544998][ T30] audit: type=1400 audit(1742919729.290:13009): avc: denied { bind } for pid=2413 comm="syz.6.8516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1861.668132][ T30] audit: type=1400 audit(1742919730.720:13010): avc: denied { create } for pid=2442 comm="syz.6.8522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1862.283803][ T30] audit: type=1400 audit(1742919731.410:13011): avc: denied { mount } for pid=2470 comm="syz.9.8529" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1862.459091][ T30] audit: type=1400 audit(1742919731.590:13012): avc: denied { unmount } for pid=32045 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1862.558908][ T2475] netlink: 'syz.8.8530': attribute type 4 has an invalid length. [ 1862.566743][ T2475] netlink: 17 bytes leftover after parsing attributes in process `syz.8.8530'. [ 1863.265868][ T30] audit: type=1400 audit(1742919732.390:13013): avc: denied { mount } for pid=2476 comm="syz.9.8531" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1863.296479][ T2480] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1863.641245][ T8508] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.666109][ T8508] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1863.814329][ T8508] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.859972][ T8508] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1864.513344][ T8508] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.527047][ T8508] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1864.568586][ T2497] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8539'. [ 1864.579040][ T2497] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8539'. [ 1864.621008][ T8508] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.649907][ T8508] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1864.787027][ T30] audit: type=1400 audit(1742919733.910:13014): avc: denied { create } for pid=2500 comm="syz.0.8542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1864.858469][ T30] audit: type=1400 audit(1742919733.990:13015): avc: denied { ioctl } for pid=2506 comm="syz-executor" path="socket:[137107]" dev="sockfs" ino=137107 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1864.863571][ T2277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1864.903970][ T2277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1864.914556][ T2277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1864.936359][ T30] audit: type=1400 audit(1742919734.060:13016): avc: denied { setopt } for pid=2500 comm="syz.0.8542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1864.936387][ T2277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1864.982264][ T2277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1864.992028][ T2277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1865.006188][T15152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1865.028210][T15152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1865.041799][T15152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1865.061186][T15152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1865.075838][ T2277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1865.086723][ T30] audit: type=1400 audit(1742919734.150:13017): avc: denied { write } for pid=2500 comm="syz.0.8542" path="socket:[137106]" dev="sockfs" ino=137106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1865.088939][T27349] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1865.117627][T27349] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1865.118418][ T30] audit: type=1400 audit(1742919734.180:13018): avc: denied { getopt } for pid=2500 comm="syz.0.8542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1865.128915][T27349] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1865.144990][ T2513] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1865.170901][T27349] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1865.180339][T27349] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1865.180423][ T8508] bridge_slave_1: left allmulticast mode [ 1865.190517][ T30] audit: type=1400 audit(1742919734.180:13019): avc: denied { name_bind } for pid=2509 comm="syz.8.8543" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1865.214427][ T8508] bridge_slave_1: left promiscuous mode [ 1865.214538][T27349] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1865.223594][ T30] audit: type=1400 audit(1742919734.280:13020): avc: denied { mounton } for pid=2506 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1865.248139][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.278334][ T8508] bridge_slave_0: left allmulticast mode [ 1865.283980][ T8508] bridge_slave_0: left promiscuous mode [ 1865.289839][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.451854][ T8508] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1865.604482][ T8508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1865.619045][ T8508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1865.634684][ T8508] bond0 (unregistering): Released all slaves [ 1865.788167][ T30] audit: type=1400 audit(1742919734.910:13021): avc: denied { unmount } for pid=32045 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1865.800151][ T2523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8547'. [ 1865.809117][ T8508] bond1 (unregistering): Released all slaves [ 1865.854995][ T30] audit: type=1400 audit(1742919734.980:13022): avc: denied { listen } for pid=2522 comm="syz.0.8547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1866.005083][ T8508] bond2 (unregistering): Released all slaves [ 1866.048373][ T2506] lo speed is unknown, defaulting to 1000 [ 1866.096835][ T2511] lo speed is unknown, defaulting to 1000 [ 1866.409316][T16358] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1866.628640][T25809] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1866.708125][T32480] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1866.817978][T16358] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1866.904146][ T2506] chnl_net:caif_netlink_parms(): no params data found [ 1867.048221][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1867.057362][ T8508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1867.066146][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1867.084156][ T8508] veth1_macvtap: left promiscuous mode [ 1867.089775][ T8508] veth0_macvtap: left promiscuous mode [ 1867.095306][ T8508] veth1_vlan: left promiscuous mode [ 1867.100908][T16358] usb 10-1: new low-speed USB device number 25 using dummy_hcd [ 1867.108681][ T8508] veth0_vlan: left promiscuous mode [ 1867.190678][T27349] Bluetooth: hci0: command tx timeout [ 1867.270583][T27349] Bluetooth: hci1: command tx timeout [ 1867.286828][T16358] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 1867.307905][T16358] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1867.317780][T16358] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 1867.341291][T16358] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1867.371981][T16358] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1867.396279][T16358] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.437284][ T8508] team0 (unregistering): Port device hsr_slave_0 removed [ 1867.475477][ T2559] blktrace: Concurrent blktraces are not allowed on loop17 [ 1867.529847][T16358] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1867.568838][ T8508] team0 (unregistering): Port device team_slave_1 removed [ 1867.616994][ T8508] team0 (unregistering): Port device team_slave_0 removed [ 1867.632143][T16358] usb 10-1: USB disconnect, device number 25 [ 1867.695202][ T2564] FAULT_INJECTION: forcing a failure. [ 1867.695202][ T2564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1867.713060][ T2564] CPU: 0 UID: 0 PID: 2564 Comm: syz.8.8556 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 1867.713084][ T2564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1867.713094][ T2564] Call Trace: [ 1867.713099][ T2564] [ 1867.713106][ T2564] dump_stack_lvl+0x16c/0x1f0 [ 1867.713135][ T2564] should_fail_ex+0x50a/0x650 [ 1867.713154][ T2564] _copy_from_user+0x2e/0xd0 [ 1867.713172][ T2564] copy_msghdr_from_user+0x99/0x160 [ 1867.713197][ T2564] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1867.713230][ T2564] ___sys_sendmsg+0xff/0x1e0 [ 1867.713254][ T2564] ? __pfx____sys_sendmsg+0x10/0x10 [ 1867.713277][ T2564] ? __lock_acquire+0x5b6/0x1b80 [ 1867.713308][ T2564] ? __fget_files+0x20e/0x3b0 [ 1867.713333][ T2564] __sys_sendmsg+0x16e/0x220 [ 1867.713348][ T2564] ? __pfx___sys_sendmsg+0x10/0x10 [ 1867.713369][ T2564] ? rcu_is_watching+0x12/0xc0 [ 1867.713393][ T2564] do_syscall_64+0xcd/0x250 [ 1867.713410][ T2564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.713432][ T2564] RIP: 0033:0x7f139878d169 [ 1867.713446][ T2564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1867.713461][ T2564] RSP: 002b:00007f139969d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1867.713478][ T2564] RAX: ffffffffffffffda RBX: 00007f13989a5fa0 RCX: 00007f139878d169 [ 1867.713489][ T2564] RDX: 000000000004804f RSI: 0000200000000300 RDI: 0000000000000003 [ 1867.713500][ T2564] RBP: 00007f139969d090 R08: 0000000000000000 R09: 0000000000000000 [ 1867.713510][ T2564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1867.713519][ T2564] R13: 0000000000000000 R14: 00007f13989a5fa0 R15: 00007ffd6762b968 [ 1867.713538][ T2564] [ 1867.971960][ T2569] openvswitch: netlink: IP tunnel dst address not specified [ 1868.515935][ T2506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1868.525435][ T2506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.550009][ T2506] bridge_slave_0: entered allmulticast mode [ 1868.779822][ T2506] bridge_slave_0: entered promiscuous mode [ 1868.789141][ T2506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1868.816056][ T2506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.829605][ T2506] bridge_slave_1: entered allmulticast mode [ 1868.836342][ T2506] bridge_slave_1: entered promiscuous mode [ 1868.915486][ T2506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1868.935636][ T2506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1869.004838][ T2506] team0: Port device team_slave_0 added [ 1869.036256][ T2506] team0: Port device team_slave_1 added [ 1869.096819][ T2506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1869.105836][ T2506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1869.187110][ T2506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1869.231613][ T2506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1869.245628][ T2506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1869.277031][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1869.277044][ T30] audit: type=1400 audit(1742919738.400:13030): avc: denied { read } for pid=2603 comm="syz.0.8564" lport=41588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1869.292885][ T2506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1869.303830][T27349] Bluetooth: hci0: command tx timeout [ 1869.333249][ T2511] chnl_net:caif_netlink_parms(): no params data found [ 1869.350475][T27349] Bluetooth: hci1: command tx timeout [ 1869.480566][ T2506] hsr_slave_0: entered promiscuous mode [ 1869.486503][ T2506] hsr_slave_1: entered promiscuous mode [ 1869.503134][ T2511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.510451][ T2511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1869.517508][ T2511] bridge_slave_0: entered allmulticast mode [ 1869.527560][ T2511] bridge_slave_0: entered promiscuous mode [ 1869.552245][ T2511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.561456][ T2511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1869.568992][ T2511] bridge_slave_1: entered allmulticast mode [ 1869.579708][ T2511] bridge_slave_1: entered promiscuous mode [ 1869.612487][ T57] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.647471][ T2511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1869.671868][ T2511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1869.708032][T16358] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1869.717489][ T57] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.742602][ T2511] team0: Port device team_slave_0 added [ 1869.756462][ T2511] team0: Port device team_slave_1 added [ 1869.787335][ T57] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.840898][ T2511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1869.849160][ T2511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1869.875783][ T2511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1869.881464][T16358] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1869.903563][T16358] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1869.917840][ T57] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.918581][T16358] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1869.928977][T16358] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.948599][T16358] usb 10-1: Product: syz [ 1869.952924][T16358] usb 10-1: Manufacturer: syz [ 1869.957594][T16358] usb 10-1: SerialNumber: syz [ 1869.971041][ T2511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1869.978238][ T2511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1870.006617][ T2511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1870.088430][ T2511] hsr_slave_0: entered promiscuous mode [ 1870.091499][ T30] audit: type=1400 audit(1742919739.220:13031): avc: denied { connect } for pid=2620 comm="syz.8.8568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1870.096869][ T2511] hsr_slave_1: entered promiscuous mode [ 1870.120255][ T2511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1870.127797][ T2511] Cannot create hsr debugfs directory [ 1870.173606][ T2613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.185820][ T2613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.363614][ T57] dvmrp1 (unregistering): left allmulticast mode [ 1870.448228][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1870.458444][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1870.469721][ T57] bond0 (unregistering): (slave team0): Releasing backup interface [ 1870.480597][ T57] bond0 (unregistering): Released all slaves [ 1870.550506][ T57] tipc: Disabling bearer [ 1870.562460][ T57] tipc: Disabling bearer [ 1870.568532][ T57] tipc: Left network mode [ 1870.587496][ T57] IPVS: stopping backup sync thread 521 ... [ 1870.642128][ T2506] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1870.650964][ T2506] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1870.684957][ T2506] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1870.693297][ T2506] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1870.765871][ T2506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1870.786013][ T2506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1870.795151][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.802231][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1870.816636][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.823681][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1870.962836][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1870.971188][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1870.982416][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1870.991898][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1871.009813][ T57] veth1_macvtap: left promiscuous mode [ 1871.015381][ T57] veth0_macvtap: left promiscuous mode [ 1871.021036][ T57] veth1_vlan: left promiscuous mode [ 1871.026297][ T57] veth0_vlan: left promiscuous mode [ 1871.329142][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1871.349160][T27349] Bluetooth: hci0: command tx timeout [ 1871.370416][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1871.378148][ T1323] smc: removing ib device syz1 [ 1871.431864][T27349] Bluetooth: hci1: command tx timeout [ 1871.712745][T17342] lo speed is unknown, defaulting to 1000 [ 1871.721392][T17342] infiniband syn2: ib_query_port failed (-19) [ 1871.782722][ T2506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1871.805901][ T2511] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1871.816560][ T2511] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1871.841882][ T2511] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1871.857119][ T2511] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1871.946489][ T2506] veth0_vlan: entered promiscuous mode [ 1871.982654][ T2506] veth1_vlan: entered promiscuous mode [ 1872.031992][ T2506] veth0_macvtap: entered promiscuous mode [ 1872.045130][ T2506] veth1_macvtap: entered promiscuous mode [ 1872.079197][ T2506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1872.090620][ T2506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.100948][ T2506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1872.111616][ T2506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.121482][ T2506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1872.132829][ T2506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.142704][ T2506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1872.153592][ T2506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.164300][ T2506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1872.173646][ T2511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1872.188089][ T2506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1872.199405][ T2506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.210095][ T2506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1872.220654][ T2506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.232101][ T2506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1872.243195][ T2506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.253940][ T2506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1872.263134][ T2506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.272916][ T2506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.281710][ T2506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.290983][ T2506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.326024][ T2511] 8021q: adding VLAN 0 to HW filter on device team0 [ 1872.363309][ T57] IPVS: stop unused estimator thread 0... [ 1872.368247][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.376075][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1872.392385][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.399440][ T6646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1872.518091][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.525948][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.544911][T16358] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 1872.571952][T16358] usb 10-1: USB disconnect, device number 26 [ 1872.585155][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.597373][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.615500][ T30] audit: type=1400 audit(1742919741.740:13032): avc: denied { mounton } for pid=2506 comm="syz-executor" path="/root/syzkaller.mNkxo5/syz-tmp" dev="sda1" ino=1981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1872.673083][ T30] audit: type=1400 audit(1742919741.740:13033): avc: denied { mount } for pid=2506 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1872.778116][ T2640] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1872.886201][ T30] audit: type=1400 audit(1742919741.770:13034): avc: denied { mounton } for pid=2506 comm="syz-executor" path="/root/syzkaller.mNkxo5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1872.986721][ T30] audit: type=1400 audit(1742919741.770:13035): avc: denied { mounton } for pid=2506 comm="syz-executor" path="/root/syzkaller.mNkxo5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=139999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1873.029822][ T2511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1873.101114][ T30] audit: type=1400 audit(1742919741.780:13036): avc: denied { mounton } for pid=2506 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1873.141483][ T2651] overlayfs: missing 'lowerdir' [ 1873.254251][ T30] audit: type=1400 audit(1742919741.780:13037): avc: denied { mount } for pid=2506 comm="syz-executor" name="/" dev="gadgetfs" ino=7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1873.277830][ T30] audit: type=1400 audit(1742919741.830:13038): avc: denied { mounton } for pid=2506 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1873.455602][T27349] Bluetooth: hci0: command tx timeout [ 1873.508613][T27349] Bluetooth: hci1: command tx timeout [ 1873.564615][T25809] libceph: connect (1)[c::]:6789 error -101 [ 1873.610545][T25809] libceph: mon0 (1)[c::]:6789 connect error [ 1873.664462][ T30] audit: type=1400 audit(1742919742.190:13039): avc: denied { map } for pid=2641 comm="syz.3.8536" path="socket:[140026]" dev="sockfs" ino=140026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1873.943248][ T2665] ceph: No mds server is up or the cluster is laggy [ 1874.136526][ T2511] veth0_vlan: entered promiscuous mode [ 1874.208696][ T2683] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1874.441086][ T2511] veth1_vlan: entered promiscuous mode [ 1874.546081][ T2511] veth0_macvtap: entered promiscuous mode [ 1874.557870][ T2511] veth1_macvtap: entered promiscuous mode [ 1874.578151][ T2511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1874.604973][ T2511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1874.617504][ T2511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1874.628464][ T2511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1874.700559][ T2692] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1874.797138][ T2511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1874.808541][ T2511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1874.826648][ T2511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1874.847395][ T2511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1874.867975][ T2511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1874.889638][ T2511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1874.967557][ T2511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1874.988357][ T2511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.001508][ T2511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.042142][ T2511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.054225][ T2511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.064329][ T2511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.066566][ T2698] SELinux: Context Z;Ñ is not valid (left unmapped). [ 1875.074887][ T2511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.092641][ T2511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.103776][ T2511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.156029][ T2511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1875.172259][ T2511] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.183502][ T2511] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.195665][ T2511] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.207984][ T2511] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.291384][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1875.291397][ T30] audit: type=1400 audit(1742919744.420:13041): avc: denied { ioctl } for pid=2702 comm="syz.3.8582" path="socket:[140116]" dev="sockfs" ino=140116 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1875.338704][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1875.346709][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1875.383632][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1875.403115][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1875.460125][ T30] audit: type=1400 audit(1742919744.570:13042): avc: denied { connect } for pid=2714 comm="syz.3.8585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1875.521351][ T30] audit: type=1400 audit(1742919744.570:13043): avc: denied { setopt } for pid=2714 comm="syz.3.8585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1875.579911][ T30] audit: type=1400 audit(1742919744.570:13044): avc: denied { bind } for pid=2714 comm="syz.3.8585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1875.733127][ T30] audit: type=1400 audit(1742919744.570:13045): avc: denied { write } for pid=2714 comm="syz.3.8585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1875.855395][ T30] audit: type=1400 audit(1742919744.980:13046): avc: denied { execute } for pid=2721 comm="syz.5.8540" path="/dev/nullb0" dev="devtmpfs" ino=3681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1876.041829][ T2731] team0: No ports can be present during mode change [ 1876.127989][ T9] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1876.288104][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1876.299651][ T9] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1876.388795][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.396926][ T9] usb 10-1: Product: syz [ 1876.420568][ T9] usb 10-1: Manufacturer: syz [ 1876.432833][ T9] usb 10-1: SerialNumber: syz [ 1877.020180][ T9] usb 10-1: config 0 descriptor?? [ 1877.036613][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1878.306026][T23846] IPVS: starting estimator thread 0... [ 1878.408230][ T2773] IPVS: using max 47 ests per chain, 112800 per kthread [ 1879.573639][ T968] usb 10-1: USB disconnect, device number 27 [ 1879.598112][ T30] audit: type=1400 audit(1742919748.720:13047): avc: denied { read } for pid=2790 comm="syz.9.8603" name="nbd9" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1879.624318][ T30] audit: type=1400 audit(1742919748.730:13048): avc: denied { open } for pid=2790 comm="syz.9.8603" path="/dev/nbd9" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1880.213338][ T30] audit: type=1400 audit(1742919749.340:13049): avc: denied { setopt } for pid=2801 comm="syz.3.8607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1880.356546][ T30] audit: type=1400 audit(1742919749.480:13050): avc: denied { setopt } for pid=2798 comm="syz.9.8606" lport=57472 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1880.566288][ T2817] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1880.791501][ T968] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1880.887745][T17342] IPVS: starting estimator thread 0... [ 1880.962262][ T968] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1881.019059][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.051489][ T2824] IPVS: using max 35 ests per chain, 84000 per kthread [ 1881.118218][ T968] usb 4-1: config 0 descriptor?? [ 1881.132905][ T968] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1881.144233][ T968] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1881.155457][ T30] audit: type=1400 audit(1742919750.280:13051): avc: denied { bind } for pid=2825 comm="syz.9.8612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1881.278718][ T30] audit: type=1400 audit(1742919750.410:13052): avc: denied { read } for pid=2825 comm="syz.9.8612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1881.360751][ T30] audit: type=1400 audit(1742919750.490:13053): avc: denied { read } for pid=2815 comm="syz.3.8609" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1881.460575][ T2829] program syz.3.8609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1881.469936][ T30] audit: type=1400 audit(1742919750.590:13054): avc: denied { ioctl } for pid=2815 comm="syz.3.8609" path="/dev/sg0" dev="devtmpfs" ino=718 ioctlcmd=0x4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1881.689778][ T5873] usb 4-1: USB disconnect, device number 14 [ 1881.696226][ T5873] ftdi_sio 4-1:0.0: device disconnected [ 1882.311422][ T30] audit: type=1400 audit(1742919751.440:13055): avc: denied { create } for pid=2849 comm="syz.3.8616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1882.331436][ T30] audit: type=1400 audit(1742919751.440:13056): avc: denied { write } for pid=2849 comm="syz.3.8616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1883.578157][ T30] audit: type=1400 audit(1742919752.660:13057): avc: denied { create } for pid=2872 comm="syz.5.8620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1884.017765][ T30] audit: type=1400 audit(1742919752.670:13058): avc: denied { ioctl } for pid=2872 comm="syz.5.8620" path="socket:[141459]" dev="sockfs" ino=141459 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1884.042937][ C1] vkms_vblank_simulate: vblank timer overrun [ 1884.253097][ T30] audit: type=1400 audit(1742919753.380:13059): avc: denied { read } for pid=5175 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1888.226830][ T2932] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8639'. [ 1888.362857][ T2938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8638'. [ 1888.372055][ T2938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8638'. [ 1889.106507][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1889.106521][ T30] audit: type=1400 audit(1742919758.230:13065): avc: denied { block_suspend } for pid=2945 comm="syz.8.8643" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1889.221544][ T30] audit: type=1400 audit(1742919758.350:13066): avc: denied { listen } for pid=2948 comm="syz.9.8644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1889.242139][ T30] audit: type=1400 audit(1742919758.370:13067): avc: denied { accept } for pid=2948 comm="syz.9.8644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1889.306093][ T30] audit: type=1400 audit(1742919758.430:13068): avc: denied { ioctl } for pid=2948 comm="syz.9.8644" path="socket:[140730]" dev="sockfs" ino=140730 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1889.354005][ T30] audit: type=1400 audit(1742919758.470:13069): avc: denied { map } for pid=2953 comm="syz.3.8646" path="socket:[141599]" dev="sockfs" ino=141599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1889.377785][ T30] audit: type=1400 audit(1742919758.480:13070): avc: denied { ioctl } for pid=2948 comm="syz.9.8644" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1889.403998][ T30] audit: type=1400 audit(1742919758.480:13071): avc: denied { mounton } for pid=2948 comm="syz.9.8644" path="/syzcgroup/unified/syz9" dev="cgroup2" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1889.538255][ T2947] 9pnet_fd: Insufficient options for proto=fd [ 1890.055331][ T2952] orangefs_mount: mount request failed with -4 [ 1890.813227][ T30] audit: type=1400 audit(1742919759.940:13072): avc: denied { setattr } for pid=2969 comm="syz.5.8651" name="/" dev="configfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1890.861092][T17342] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1890.902002][ T30] audit: type=1400 audit(1742919760.010:13073): avc: denied { unmount } for pid=2511 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1891.139173][T17342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1891.151899][T17342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1891.458651][ T30] audit: type=1400 audit(1742919760.580:13074): avc: denied { getopt } for pid=2975 comm="syz.5.8652" lport=59370 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1891.574318][T17342] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1891.596291][T17342] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1891.623069][T17342] usb 4-1: Manufacturer: syz [ 1891.632071][T17342] usb 4-1: config 0 descriptor?? [ 1892.194615][T17342] cougar 0003:060B:700A.003B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1892.305283][ T2985] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8653'. [ 1892.314512][ T2985] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8653'. [ 1892.453686][T25809] usb 4-1: USB disconnect, device number 15 [ 1893.570408][ T3005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8660'. [ 1893.585297][ T3003] netlink: 34 bytes leftover after parsing attributes in process `syz.3.8659'. [ 1893.611145][ T3005] macsec1: entered allmulticast mode [ 1893.622152][ T3007] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 1893.631605][ T3007] xt_limit: Overflow, try lower: 0/0 [ 1893.636979][ T3005] mac80211_hwsim hwsim49 wlan0: entered allmulticast mode [ 1893.700135][ T3005] mac80211_hwsim hwsim49 wlan0: left allmulticast mode [ 1893.901707][ T3003] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8659'. [ 1894.108165][ T3014] netlink: 'syz.9.8664': attribute type 1 has an invalid length. [ 1894.188751][ T3014] netlink: 224 bytes leftover after parsing attributes in process `syz.9.8664'. [ 1895.078950][ T3038] xt_hashlimit: max too large, truncated to 1048576 [ 1895.085894][ T3038] xt_hashlimit: overflow, try lower: 0/0 [ 1895.518647][T17342] IPVS: starting estimator thread 0... [ 1895.667914][T27349] Bluetooth: hci3: command tx timeout [ 1895.708066][ T3042] IPVS: using max 76 ests per chain, 182400 per kthread [ 1895.878449][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1895.878464][ T30] audit: type=1400 audit(1742919765.010:13085): avc: denied { sqpoll } for pid=3049 comm="syz.9.8674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1896.043678][ T3056] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1896.558005][T32480] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1896.707955][T32480] usb 10-1: Using ep0 maxpacket: 16 [ 1896.733213][T32480] usb 10-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 32 [ 1896.751383][ T3067] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8679'. [ 1896.760366][T32480] usb 10-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 16 [ 1896.760393][T32480] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1896.782635][ T30] audit: type=1400 audit(1742919765.910:13086): avc: denied { getopt } for pid=3066 comm="syz.5.8679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1896.813195][T32480] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1896.825777][T32480] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.835091][T32480] usb 10-1: Product: 蛼踋䤛窫蓑ꥇ㕃뜊젼沑困䧄跧è¦ì‡šé²²ãž—ï¶‘ï†«ã¬‘ëŠŒïˆœê´›í†±í€¢ä «ï“¼æºæ½šïµªã½¶洧䨩裦Íⷫ⎄핽ã•䮕赩漪픉틪ꢓ⒉踑ﳶäšçŒíŸ¬ê½¢á·ëª„呅毻秇鉄뭺ု籼衵 [ 1896.861122][T32480] usb 10-1: SerialNumber: 猸⒈寶í®ê‹•庲դ雗ã€íŽ´áƒ¤ïª‰â‚¯é•ﴇ彘ᅊꕎ⢧â³ã–žìŒê“倵⢀耱諞ᯫ壬윘ꆴ鴽潜샮빕軶伕⋼噻╨ê§ç—’蟄픿ꋅအ㧅å©ê€¬ì£­ëŒá¤°ã†½ëž–ᒒ陵䣾 [ 1896.887534][ T3060] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1896.894896][ T3060] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1897.697401][ T3080] xt_l2tp: wrong L2TP version: 0 [ 1898.390508][ T30] audit: type=1400 audit(1742919767.410:13087): avc: denied { connect } for pid=3083 comm="syz.5.8684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1899.402223][T32480] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 1899.447434][T32480] usb 10-1: USB disconnect, device number 28 [ 1900.234295][ T3098] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1900.301843][ T3100] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1900.821136][ T3111] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1900.907556][ T3114] usb usb1: usbfs: process 3114 (syz.5.8692) did not claim interface 0 before use [ 1900.916949][ T30] audit: type=1400 audit(1742919770.030:13088): avc: denied { append } for pid=3110 comm="syz.5.8692" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1901.027141][ T3112] ip6erspan0: entered promiscuous mode [ 1902.192295][ T30] audit: type=1400 audit(1742919771.320:13089): avc: denied { bind } for pid=3132 comm="syz.5.8699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1902.212109][ T30] audit: type=1400 audit(1742919771.320:13090): avc: denied { listen } for pid=3132 comm="syz.5.8699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1902.231705][ C1] vkms_vblank_simulate: vblank timer overrun [ 1902.237908][ T30] audit: type=1400 audit(1742919771.320:13091): avc: denied { connect } for pid=3132 comm="syz.5.8699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1902.257890][ T30] audit: type=1400 audit(1742919771.320:13092): avc: denied { read } for pid=3132 comm="syz.5.8699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1902.277681][ T30] audit: type=1400 audit(1742919771.320:13093): avc: denied { shutdown } for pid=3132 comm="syz.5.8699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1902.297495][ C1] vkms_vblank_simulate: vblank timer overrun [ 1902.335225][ T30] audit: type=1400 audit(1742919771.320:13094): avc: denied { ioctl } for pid=3132 comm="syz.5.8699" path="socket:[142028]" dev="sockfs" ino=142028 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1902.444417][ T3139] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1904.395688][ T57] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.862453][ T3177] tmpfs: Bad value for 'mpol' [ 1905.087812][ T57] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.220761][T15152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1906.239707][T15152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1906.248483][T15152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1906.301371][T15152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1906.309694][T15152] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1906.316849][T15152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1906.375584][ T57] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.418051][ T30] audit: type=1400 audit(1742919775.520:13095): avc: denied { read write } for pid=3188 comm="syz.3.8714" name="usbmon2" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1906.705652][ T3197] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(15) [ 1906.712276][ T3197] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1906.719923][ T3197] vhci_hcd vhci_hcd.0: Device attached [ 1906.745474][ T3196] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(18) [ 1906.752080][ T3196] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1906.759790][ T3196] vhci_hcd vhci_hcd.0: Device attached [ 1906.765933][ T3204] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(21) [ 1906.772524][ T3204] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1906.780094][ T3204] vhci_hcd vhci_hcd.0: Device attached [ 1906.786334][ T3197] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(17) [ 1906.792930][ T3197] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1906.800514][ T30] audit: type=1400 audit(1742919775.520:13096): avc: denied { open } for pid=3188 comm="syz.3.8714" path="/dev/usbmon2" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1906.800621][ T3197] vhci_hcd vhci_hcd.0: Device attached [ 1906.865536][ T57] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.908866][T32480] vhci_hcd: vhci_device speed not set [ 1906.978181][ T30] audit: type=1400 audit(1742919775.530:13097): avc: denied { ioctl } for pid=3188 comm="syz.3.8714" path="socket:[142180]" dev="sockfs" ino=142180 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1907.003074][ C1] vkms_vblank_simulate: vblank timer overrun [ 1907.038011][T32480] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 1907.073126][ T3209] vhci_hcd: connection closed [ 1907.078641][ T3200] vhci_hcd: connection closed [ 1907.091920][ T81] vhci_hcd: stop threads [ 1907.096633][ T3201] vhci_hcd: connection closed [ 1907.097191][ T3205] vhci_hcd: connection closed [ 1907.161111][ T81] vhci_hcd: release socket [ 1907.188430][ T3206] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1907.214746][ T30] audit: type=1400 audit(1742919775.680:13098): avc: denied { bind } for pid=3194 comm="syz.5.8716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1907.234220][ C1] vkms_vblank_simulate: vblank timer overrun [ 1907.271803][ T81] vhci_hcd: disconnect device [ 1907.290347][ T81] vhci_hcd: stop threads [ 1907.296848][ T81] vhci_hcd: release socket [ 1907.328769][ T81] vhci_hcd: disconnect device [ 1907.336609][ T3195] IPVS: Scheduler module ip_vs_sip not found [ 1907.349030][ T81] vhci_hcd: stop threads [ 1907.366730][ T30] audit: type=1400 audit(1742919775.740:13099): avc: denied { listen } for pid=3194 comm="syz.5.8716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1907.392087][ T81] vhci_hcd: release socket [ 1907.408345][ T81] vhci_hcd: disconnect device [ 1907.568056][ T81] vhci_hcd: stop threads [ 1907.810215][ T81] vhci_hcd: release socket [ 1907.917402][ T81] vhci_hcd: disconnect device [ 1908.099203][ T3227] netlink: 'syz.9.8721': attribute type 1 has an invalid length. [ 1908.151511][ T3227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1908.160094][ T57] bridge_slave_1: left allmulticast mode [ 1908.165778][ T57] bridge_slave_1: left promiscuous mode [ 1908.174745][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1908.191975][ T57] bridge_slave_0: left allmulticast mode [ 1908.204161][ T57] bridge_slave_0: left promiscuous mode [ 1908.216286][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1908.387992][T27349] Bluetooth: hci3: command tx timeout [ 1908.471454][ T30] audit: type=1400 audit(1742919777.600:13100): avc: denied { listen } for pid=3240 comm="syz.9.8724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1909.155686][ T57]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1909.170962][ T57]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1909.180671][ T57]  (unregistering): Released all slaves [ 1909.238569][ T3244] team0: No ports can be present during mode change [ 1909.247507][ T3183] chnl_net:caif_netlink_parms(): no params data found [ 1909.430508][ T57] tipc: Disabling bearer [ 1909.457993][ T57] tipc: Left network mode [ 1909.742261][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1909.767460][ T3183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.779930][ T30] audit: type=1400 audit(1742919778.900:13101): avc: denied { watch watch_reads } for pid=3263 comm="syz.5.8729" path="/28/file0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1909.820278][ T3183] bridge_slave_0: entered allmulticast mode [ 1909.836183][ T3183] bridge_slave_0: entered promiscuous mode [ 1909.865628][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1909.880585][ T3183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1909.892272][ T3269] FAULT_INJECTION: forcing a failure. [ 1909.892272][ T3269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1909.892880][ T3183] bridge_slave_1: entered allmulticast mode [ 1909.905366][ T3269] CPU: 1 UID: 0 PID: 3269 Comm: syz.9.8731 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 1909.905386][ T3269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1909.905396][ T3269] Call Trace: [ 1909.905401][ T3269] [ 1909.905406][ T3269] dump_stack_lvl+0x16c/0x1f0 [ 1909.905433][ T3269] should_fail_ex+0x50a/0x650 [ 1909.905451][ T3269] _copy_from_user+0x2e/0xd0 [ 1909.905468][ T3269] get_user_ifreq+0xf1/0x250 [ 1909.905485][ T3269] sock_do_ioctl+0x16c/0x280 [ 1909.905503][ T3269] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1909.905523][ T3269] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 1909.905540][ T3269] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 1909.905557][ T3269] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1909.905575][ T3269] sock_ioctl+0x228/0x6c0 [ 1909.905594][ T3269] ? __pfx_sock_ioctl+0x10/0x10 [ 1909.905615][ T3269] ? selinux_file_ioctl+0x180/0x270 [ 1909.905630][ T3269] ? selinux_file_ioctl+0xb4/0x270 [ 1909.905650][ T3269] ? __pfx_sock_ioctl+0x10/0x10 [ 1909.905669][ T3269] __x64_sys_ioctl+0x190/0x200 [ 1909.905687][ T3269] do_syscall_64+0xcd/0x250 [ 1909.905703][ T3269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.905723][ T3269] RIP: 0033:0x7fd66d38d169 [ 1909.905734][ T3269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1909.905748][ T3269] RSP: 002b:00007fd66e123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1909.905763][ T3269] RAX: ffffffffffffffda RBX: 00007fd66d5a5fa0 RCX: 00007fd66d38d169 [ 1909.905773][ T3269] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 1909.905782][ T3269] RBP: 00007fd66e123090 R08: 0000000000000000 R09: 0000000000000000 [ 1909.905791][ T3269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1909.905799][ T3269] R13: 0000000000000000 R14: 00007fd66d5a5fa0 R15: 00007ffcbc823f38 [ 1909.905816][ T3269] [ 1910.104211][ T3183] bridge_slave_1: entered promiscuous mode [ 1910.195602][ T3273] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8733'. [ 1910.214194][ T3183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1910.232075][T23846] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1910.241362][ T3183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1910.478033][T27349] Bluetooth: hci3: command tx timeout [ 1910.489169][T23846] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1910.500186][T23846] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 1910.582847][ T3183] team0: Port device team_slave_0 added [ 1910.597912][T23846] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1910.618118][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1910.629598][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1910.629599][T23846] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1910.629623][T23846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.663058][T23846] usb 4-1: Product: syz [ 1910.666534][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1910.667211][T23846] usb 4-1: Manufacturer: syz [ 1910.679375][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1910.692456][T23846] usb 4-1: SerialNumber: syz [ 1910.709151][ T57] veth1_macvtap: left promiscuous mode [ 1910.714719][ T57] veth0_macvtap: left promiscuous mode [ 1910.720430][ T57] veth1_vlan: left promiscuous mode [ 1910.725722][ T57] veth0_vlan: left promiscuous mode [ 1910.902895][ T30] audit: type=1400 audit(1742919780.030:13102): avc: denied { setopt } for pid=3261 comm="syz.3.8728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1911.027295][ T3285] netlink: 'syz.3.8728': attribute type 4 has an invalid length. [ 1911.085980][ T3286] netlink: 'syz.3.8728': attribute type 4 has an invalid length. [ 1911.134090][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1911.172986][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1911.192677][T17342] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1911.359557][T17342] usb 10-1: Using ep0 maxpacket: 16 [ 1911.380084][T17342] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 1911.396083][T17342] usb 10-1: config 0 has no interface number 0 [ 1911.408930][T17342] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1911.420539][T17342] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1911.434076][T17342] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1911.446940][T17342] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1911.455163][T17342] usb 10-1: Product: syz [ 1911.459469][T17342] usb 10-1: SerialNumber: syz [ 1911.465543][T17342] usb 10-1: config 0 descriptor?? [ 1911.473564][T17342] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 1911.482641][T17342] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input125 [ 1911.494544][ T30] audit: type=1400 audit(1742919780.620:13103): avc: denied { read } for pid=5178 comm="acpid" name="event4" dev="devtmpfs" ino=3756 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1911.523213][ T30] audit: type=1400 audit(1742919780.620:13104): avc: denied { open } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3756 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1911.547170][ T30] audit: type=1400 audit(1742919780.620:13105): avc: denied { ioctl } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3756 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1911.654711][ T3183] team0: Port device team_slave_1 added [ 1911.685612][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1911.691705][ T3183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1911.692868][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1911.699749][ T3183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1911.707927][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1911.732416][ C1] vkms_vblank_simulate: vblank timer overrun [ 1911.740083][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1911.753113][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1911.756624][ T968] usb 10-1: USB disconnect, device number 29 [ 1911.760134][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1911.777432][ T968] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1911.788434][ T3183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1911.811090][ T3183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1911.828680][ T3183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1911.854562][ C1] vkms_vblank_simulate: vblank timer overrun [ 1911.861817][ T3183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1911.886884][ T3183] hsr_slave_0: entered promiscuous mode [ 1911.894042][ T3183] hsr_slave_1: entered promiscuous mode [ 1911.900090][ T3183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1911.907637][ T3183] Cannot create hsr debugfs directory [ 1912.102668][ T57] IPVS: stop unused estimator thread 0... [ 1912.186501][ T3183] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1912.203395][ T3183] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1912.211823][ T3183] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1912.220444][ T3183] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1912.260887][ T3183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1912.276164][ T3183] 8021q: adding VLAN 0 to HW filter on device team0 [ 1912.285631][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.292701][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1912.300530][T32480] vhci_hcd: vhci_device speed not set [ 1912.311248][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.318313][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1912.492673][ T3300] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1912.548666][T27349] Bluetooth: hci3: command tx timeout [ 1912.603947][ T3183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1912.756505][ T30] audit: type=1400 audit(1742919781.880:13106): avc: denied { write } for pid=3304 comm="syz.9.8739" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1912.789471][T25809] kernel write not supported for file /646/attr/exec (pid: 25809 comm: kworker/1:0) [ 1912.923749][ T3183] veth0_vlan: entered promiscuous mode [ 1912.926224][T23846] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1912.951440][T23846] usb 4-1: USB disconnect, device number 16 [ 1912.969016][ T3183] veth1_vlan: entered promiscuous mode [ 1912.987686][ T3183] veth0_macvtap: entered promiscuous mode [ 1912.992626][ T3313] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8741'. [ 1912.996040][ T3183] veth1_macvtap: entered promiscuous mode [ 1913.038377][ T3183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1913.049235][ T3183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.059086][ T3183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1913.085683][ T3183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.096175][ T3183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1913.106881][ T3183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.117710][ T3183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1913.132278][ T3183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.146874][ T3183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1913.157799][ T3183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.171635][ T3183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1913.277991][T23846] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1913.307473][ T3183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.321805][ T3183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.331862][ T3183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.347689][ T3183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.359449][ T3183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.370352][ T3183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.380184][ T3183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.390677][ T3183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.401112][ T3183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1913.413835][ T3183] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.423295][ T3183] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.432712][ T3183] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.441612][ T3183] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.451641][T23846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1913.466205][T23846] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1913.494648][T23846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.513726][T23846] usb 4-1: config 0 descriptor?? [ 1913.533995][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.547239][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.563958][ T3322] overlayfs: failed to resolve './file1': -2 [ 1913.571303][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.583020][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.957743][T23846] usbhid 4-1:0.0: can't add hid device: -71 [ 1913.981355][T23846] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1914.203252][ T3337] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8746'. [ 1914.412022][T23846] usb 4-1: USB disconnect, device number 17 [ 1914.515881][ T3344] FAULT_INJECTION: forcing a failure. [ 1914.515881][ T3344] name failslab, interval 1, probability 0, space 0, times 0 [ 1914.530916][ T3344] CPU: 0 UID: 0 PID: 3344 Comm: syz.0.8748 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 1914.530940][ T3344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1914.530950][ T3344] Call Trace: [ 1914.530955][ T3344] [ 1914.530962][ T3344] dump_stack_lvl+0x16c/0x1f0 [ 1914.530992][ T3344] should_fail_ex+0x50a/0x650 [ 1914.531009][ T3344] ? fs_reclaim_acquire+0xae/0x150 [ 1914.531029][ T3344] ? tomoyo_encode2+0x100/0x3e0 [ 1914.531044][ T3344] should_failslab+0xc2/0x120 [ 1914.531069][ T3344] __kmalloc_noprof+0xcb/0x510 [ 1914.531091][ T3344] ? d_absolute_path+0x137/0x1b0 [ 1914.531108][ T3344] ? rcu_is_watching+0x12/0xc0 [ 1914.531133][ T3344] tomoyo_encode2+0x100/0x3e0 [ 1914.531150][ T3344] tomoyo_encode+0x29/0x50 [ 1914.531165][ T3344] tomoyo_realpath_from_path+0x19d/0x720 [ 1914.531186][ T3344] tomoyo_path_number_perm+0x248/0x590 [ 1914.531208][ T3344] ? tomoyo_path_number_perm+0x235/0x590 [ 1914.531241][ T3344] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1914.531265][ T3344] ? find_held_lock+0x2b/0x80 [ 1914.531304][ T3344] ? find_held_lock+0x2b/0x80 [ 1914.531327][ T3344] ? __fget_files+0x204/0x3b0 [ 1914.531352][ T3344] ? __fget_files+0x20e/0x3b0 [ 1914.531376][ T3344] security_file_ioctl+0x9b/0x240 [ 1914.531402][ T3344] __x64_sys_ioctl+0xb7/0x200 [ 1914.531422][ T3344] do_syscall_64+0xcd/0x250 [ 1914.531439][ T3344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.531463][ T3344] RIP: 0033:0x7f3c9338d169 [ 1914.531476][ T3344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1914.531492][ T3344] RSP: 002b:00007f3c931f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1914.531509][ T3344] RAX: ffffffffffffffda RBX: 00007f3c935a5fa0 RCX: 00007f3c9338d169 [ 1914.531520][ T3344] RDX: 0000200000000380 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1914.531530][ T3344] RBP: 00007f3c931f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1914.531540][ T3344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1914.531550][ T3344] R13: 0000000000000000 R14: 00007f3c935a5fa0 R15: 00007fff786540e8 [ 1914.531569][ T3344] [ 1914.531582][ T3344] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1914.637922][T27349] Bluetooth: hci3: command tx timeout [ 1914.906696][ T30] audit: type=1400 audit(1742919784.030:13107): avc: denied { append } for pid=3353 comm="syz.3.8753" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1915.562797][ T3364] FAULT_INJECTION: forcing a failure. [ 1915.562797][ T3364] name failslab, interval 1, probability 0, space 0, times 0 [ 1915.575653][ T3364] CPU: 0 UID: 0 PID: 3364 Comm: syz.3.8755 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 1915.575676][ T3364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1915.575687][ T3364] Call Trace: [ 1915.575692][ T3364] [ 1915.575699][ T3364] dump_stack_lvl+0x16c/0x1f0 [ 1915.575731][ T3364] should_fail_ex+0x50a/0x650 [ 1915.575749][ T3364] ? __kmalloc_node_noprof+0xbe/0x510 [ 1915.575777][ T3364] should_failslab+0xc2/0x120 [ 1915.575803][ T3364] __kmalloc_node_noprof+0xd1/0x510 [ 1915.575827][ T3364] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 1915.575852][ T3364] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 1915.575875][ T3364] ? find_held_lock+0x2b/0x80 [ 1915.575902][ T3364] ? sel_write_load+0x2b3/0x1c80 [ 1915.575929][ T3364] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1915.575951][ T3364] ? avc_has_perm+0x11b/0x1c0 [ 1915.575975][ T3364] ? sel_write_load+0x2b3/0x1c80 [ 1915.575998][ T3364] vmalloc_noprof+0x6b/0x90 [ 1915.576019][ T3364] ? sel_write_load+0x2b3/0x1c80 [ 1915.576040][ T3364] sel_write_load+0x2b3/0x1c80 [ 1915.576069][ T3364] ? __lock_acquire+0xa92/0x1b80 [ 1915.576088][ T3364] ? __pfx_sel_write_load+0x10/0x10 [ 1915.576123][ T3364] ? __pfx_sel_write_load+0x10/0x10 [ 1915.576144][ T3364] vfs_write+0x24c/0x1150 [ 1915.576167][ T3364] ? __pfx___mutex_lock+0x10/0x10 [ 1915.576185][ T3364] ? __pfx_vfs_write+0x10/0x10 [ 1915.576212][ T3364] ? __fget_files+0x20e/0x3b0 [ 1915.576239][ T3364] ksys_write+0x12b/0x250 [ 1915.576260][ T3364] ? __pfx_ksys_write+0x10/0x10 [ 1915.576282][ T3364] ? rcu_is_watching+0x12/0xc0 [ 1915.576309][ T3364] do_syscall_64+0xcd/0x250 [ 1915.576327][ T3364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1915.576349][ T3364] RIP: 0033:0x7fadfc38d169 [ 1915.576363][ T3364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1915.576379][ T3364] RSP: 002b:00007fadfa1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1915.576396][ T3364] RAX: ffffffffffffffda RBX: 00007fadfc5a5fa0 RCX: 00007fadfc38d169 [ 1915.576407][ T3364] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1915.576417][ T3364] RBP: 00007fadfa1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1915.576427][ T3364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1915.576437][ T3364] R13: 0000000000000000 R14: 00007fadfc5a5fa0 R15: 00007ffc627b40a8 [ 1915.576456][ T3364] [ 1915.576691][ T3364] syz.3.8755: vmalloc error: size 8192, failed to allocated page array size 16, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null) [ 1915.715286][ T3356] --map-set only usable from mangle table [ 1915.838209][ T30] audit: type=1400 audit(1742919784.840:13108): avc: denied { accept } for pid=3352 comm="syz.9.8752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1915.857915][ T3364] ,cpuset=syz3,mems_allowed=0-1 [ 1915.862976][ T3364] CPU: 1 UID: 0 PID: 3364 Comm: syz.3.8755 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 1915.862990][ T3364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1915.862996][ T3364] Call Trace: [ 1915.863000][ T3364] [ 1915.863004][ T3364] dump_stack_lvl+0x16c/0x1f0 [ 1915.863025][ T3364] warn_alloc+0x24d/0x3a0 [ 1915.863040][ T3364] ? __pfx_warn_alloc+0x10/0x10 [ 1915.863054][ T3364] ? dump_stack_lvl+0x185/0x1f0 [ 1915.863070][ T3364] ? lockdep_hardirqs_on+0x7c/0x110 [ 1915.863089][ T3364] ? rcu_is_watching+0x12/0xc0 [ 1915.863104][ T3364] ? trace_kmalloc+0x2d/0xd0 [ 1915.863113][ T3364] ? __kmalloc_node_noprof+0x23d/0x510 [ 1915.863130][ T3364] __vmalloc_node_range_noprof+0x1102/0x1530 [ 1915.863145][ T3364] ? find_held_lock+0x2b/0x80 [ 1915.863162][ T3364] ? sel_write_load+0x2b3/0x1c80 [ 1915.863178][ T3364] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1915.863191][ T3364] ? avc_has_perm+0x11b/0x1c0 [ 1915.863205][ T3364] ? sel_write_load+0x2b3/0x1c80 [ 1915.863219][ T3364] vmalloc_noprof+0x6b/0x90 [ 1915.863231][ T3364] ? sel_write_load+0x2b3/0x1c80 [ 1915.863245][ T3364] sel_write_load+0x2b3/0x1c80 [ 1915.863261][ T3364] ? __lock_acquire+0xa92/0x1b80 [ 1915.863273][ T3364] ? __pfx_sel_write_load+0x10/0x10 [ 1915.863293][ T3364] ? __pfx_sel_write_load+0x10/0x10 [ 1915.863306][ T3364] vfs_write+0x24c/0x1150 [ 1915.863321][ T3364] ? __pfx___mutex_lock+0x10/0x10 [ 1915.863335][ T3364] ? __pfx_vfs_write+0x10/0x10 [ 1915.863351][ T3364] ? __fget_files+0x20e/0x3b0 [ 1915.863367][ T3364] ksys_write+0x12b/0x250 [ 1915.863380][ T3364] ? __pfx_ksys_write+0x10/0x10 [ 1915.863393][ T3364] ? rcu_is_watching+0x12/0xc0 [ 1915.863410][ T3364] do_syscall_64+0xcd/0x250 [ 1915.863420][ T3364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1915.863436][ T3364] RIP: 0033:0x7fadfc38d169 [ 1915.863444][ T3364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1915.863454][ T3364] RSP: 002b:00007fadfa1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1915.863464][ T3364] RAX: ffffffffffffffda RBX: 00007fadfc5a5fa0 RCX: 00007fadfc38d169 [ 1915.863470][ T3364] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1915.863477][ T3364] RBP: 00007fadfa1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1915.863483][ T3364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1915.863489][ T3364] R13: 0000000000000000 R14: 00007fadfc5a5fa0 R15: 00007ffc627b40a8 [ 1915.863500][ T3364] [ 1915.863504][ T3364] Mem-Info: [ 1915.911844][ T3369] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8756'. [ 1916.148083][ T3364] active_anon:8884 inactive_anon:1 isolated_anon:0 [ 1916.148083][ T3364] active_file:11520 inactive_file:50870 isolated_file:0 [ 1916.148083][ T3364] unevictable:776 dirty:369 writeback:0 [ 1916.148083][ T3364] slab_reclaimable:9846 slab_unreclaimable:124239 [ 1916.148083][ T3364] mapped:39893 shmem:4326 pagetables:926 [ 1916.148083][ T3364] sec_pagetables:0 bounce:0 [ 1916.148083][ T3364] kernel_misc_reclaimable:0 [ 1916.148083][ T3364] free:1264702 free_pcp:5448 free_cma:0 [ 1916.193154][ C0] vkms_vblank_simulate: vblank timer overrun [ 1916.217967][ T30] audit: type=1400 audit(1742919785.340:13109): avc: denied { create } for pid=3370 comm="syz.8.8757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1916.237514][ C0] vkms_vblank_simulate: vblank timer overrun [ 1916.257142][ T3364] Node 0 active_anon:35532kB inactive_anon:4kB active_file:46080kB inactive_file:203376kB unevictable:1568kB isolated(anon):0kB isolated(file):0kB mapped:148048kB dirty:1476kB writeback:0kB shmem:15764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11492kB pagetables:3804kB sec_pagetables:0kB all_unreclaimable? no [ 1916.311141][ T3373] tmpfs: Unknown parameter 'func' [ 1916.554221][ T30] audit: type=1400 audit(1742919785.650:13110): avc: denied { ioctl } for pid=3372 comm="syz.8.8758" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x7b0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1916.582478][ T3364] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1916.612673][ C0] vkms_vblank_simulate: vblank timer overrun [ 1916.818307][ T3364] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1916.893663][ T3364] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1916.922900][ T3364] Node 0 DMA32 free:1163924kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:24160kB inactive_anon:4kB active_file:46080kB inactive_file:203284kB unevictable:1568kB writepending:1496kB present:3129332kB managed:2547304kB mlocked:0kB bounce:0kB free_pcp:2728kB local_pcp:2504kB free_cma:0kB [ 1916.958006][ T3364] lowmem_reserve[]: 0 0 0 0 0 [ 1916.962709][ T3364] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1916.989281][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.001220][ T3364] lowmem_reserve[]: 0 0 0 0 0 [ 1917.019770][ T3364] Node 1 Normal free:3905660kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:104kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:5296kB local_pcp:0kB free_cma:0kB [ 1917.048759][ C0] vkms_vblank_simulate: vblank timer overrun [ 1917.216374][ T3364] lowmem_reserve[]: 0 0 0 0 0 [ 1917.303692][ T3364] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1917.366780][ T3364] Node 0 DMA32: 1822*4kB (UM) 2035*8kB (UME) 892*16kB (UM) 1235*32kB (UME) 1057*64kB (UME) 396*128kB (UME) 130*256kB (UME) 348*512kB (UME) 257*1024kB (UM) 20*2048kB (UM) 111*4096kB (UM) = 1165936kB [ 1917.419521][ T3364] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1917.432607][ T3364] Node 1 Normal: 203*4kB (U) 66*8kB (UE) 64*16kB (UME) 208*32kB (UME) 95*64kB (UME) 21*128kB (UE) 11*256kB (UE) 6*512kB (UM) 5*1024kB (UME) 3*2048kB (UME) 945*4096kB (M) = 3905660kB [ 1917.451766][ T3364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1917.463135][ T3364] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1917.631342][ T3364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1917.703805][ T3364] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1917.777213][ T3364] 63835 total pagecache pages [ 1917.785516][ T3364] 1 pages in swap cache [ 1917.893678][ T3364] Free swap = 124760kB [ 1917.898863][ T3364] Total swap = 124996kB [ 1917.903070][ T3364] 2097051 pages RAM [ 1917.907032][ T3364] 0 pages HighMem/MovableOnly [ 1917.913061][ T3364] 428567 pages reserved [ 1917.919417][ T3364] 0 pages cma reserved [ 1919.109761][ T3421] netlink: 'syz.0.8769': attribute type 2 has an invalid length. [ 1919.138851][ T3421] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8769'. [ 1919.544417][ T3425] fuse: Unknown parameter '/dev/kvm' [ 1920.544798][ T3431] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1920.847588][ T3437] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1921.543015][ T30] audit: type=1400 audit(1742919790.670:13111): avc: denied { read } for pid=3442 comm="syz.3.8776" lport=46684 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1921.614397][ T3449] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8778'. [ 1922.391984][ T30] audit: type=1400 audit(1742919791.510:13112): avc: denied { getopt } for pid=3450 comm="syz.9.8779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1922.414106][ T3451] PKCS7: Unknown OID: [4] 0.38.11253.7578(bad) [ 1922.436985][ T3451] PKCS7: Only support pkcs7_signedData type [ 1923.349097][ T30] audit: type=1400 audit(1742920305.475:13113): avc: denied { mount } for pid=3466 comm="syz.3.8784" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1923.649032][ T3478] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1923.824183][ T3480] netlink: 48 bytes leftover after parsing attributes in process `syz.9.8787'. [ 1923.887717][ T3482] tmpfs: Bad value for 'mpol' [ 1923.906394][ T30] audit: type=1400 audit(1742920306.025:13114): avc: denied { write } for pid=3483 comm="syz.9.8789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1924.018539][ T30] audit: type=1400 audit(1742920306.134:13115): avc: denied { read } for pid=3483 comm="syz.9.8789" path="socket:[144462]" dev="sockfs" ino=144462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1924.222330][ T3486] syzkaller0: entered promiscuous mode [ 1924.240358][ T3486] syzkaller0: entered allmulticast mode [ 1924.268876][ T30] audit: type=1400 audit(1742920306.382:13116): avc: denied { mount } for pid=3488 comm="syz.3.8790" name="/" dev="hugetlbfs" ino=144475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1925.790805][ T3493] Invalid ELF header magic: != ELF [ 1925.796204][ T30] audit: type=1400 audit(1742920307.900:13117): avc: denied { module_load } for pid=3492 comm="syz.5.8792" path="/39/bus" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1926.081175][ T3520] libceph: resolve '0' (ret=-3): failed [ 1926.276669][T32480] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1926.452740][ T3523] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1926.461656][T32480] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1926.484997][T32480] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 1926.504918][T32480] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1926.518792][T32480] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1926.539869][T32480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.590198][T32480] usb 4-1: Product: syz [ 1926.594645][T32480] usb 4-1: Manufacturer: syz [ 1926.629129][T32480] usb 4-1: SerialNumber: syz [ 1926.971030][ T3527] netlink: 'syz.3.8797': attribute type 4 has an invalid length. [ 1927.030743][ T3528] netlink: 'syz.3.8797': attribute type 4 has an invalid length. [ 1927.194836][ T3530] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1929.391911][T15461] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1929.486855][T32480] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1929.505300][T32480] usb 4-1: USB disconnect, device number 18 [ 1930.123314][T15461] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1930.135719][T15461] usb 10-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1930.145145][T15461] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.154398][T15461] usb 10-1: config 0 descriptor?? [ 1930.412675][T15461] usbhid 10-1:0.0: can't add hid device: -71 [ 1930.419410][T15461] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1930.428856][T15461] usb 10-1: USB disconnect, device number 30 [ 1930.491474][ T3575] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1930.500218][ T3575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1930.534977][ T3577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3577 comm=syz.3.8815 [ 1931.467594][ T3579] [U] .úíøà [ 1933.499873][ T30] audit: type=1400 audit(1742920315.554:13118): avc: denied { write } for pid=3610 comm="syz.3.8826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1933.570618][ T30] audit: type=1400 audit(1742920315.624:13119): avc: denied { read write } for pid=3610 comm="syz.3.8826" dev="sockfs" ino=145528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1933.592517][ C1] vkms_vblank_simulate: vblank timer overrun [ 1933.818665][T17342] IPVS: starting estimator thread 0... [ 1933.931252][ T3624] IPVS: using max 75 ests per chain, 180000 per kthread [ 1934.748985][ T3640] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8833'. [ 1934.897927][ T3643] netlink: 'syz.8.8836': attribute type 1 has an invalid length. [ 1937.555204][ T30] audit: type=1400 audit(1742920319.538:13120): avc: denied { create } for pid=3659 comm="syz.0.8843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1937.799973][ T3665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8842'. [ 1937.845263][ T3665] vxcan1: Master is either lo or non-ether device [ 1938.350082][ T30] audit: type=1400 audit(1742920320.134:13121): avc: denied { create } for pid=3673 comm="syz.8.8846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1939.354447][ T30] audit: type=1400 audit(1742920320.144:13122): avc: denied { bind } for pid=3673 comm="syz.8.8846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1939.373996][ T30] audit: type=1400 audit(1742920320.144:13123): avc: denied { write } for pid=3673 comm="syz.8.8846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1939.393685][ T30] audit: type=1326 audit(1742920321.068:13124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.5.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3fd8d169 code=0x7fc00000 [ 1940.100436][ T30] audit: type=1326 audit(1742920322.102:13125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.5.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d3fd84127 code=0x7fc00000 [ 1941.730786][T17342] IPVS: starting estimator thread 0... [ 1942.520127][ T3713] IPVS: using max 77 ests per chain, 184800 per kthread [ 1943.048562][ T30] audit: type=1400 audit(1742920325.034:13126): avc: denied { write } for pid=3732 comm="syz.3.8863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1943.070863][ T30] audit: type=1400 audit(1742920325.034:13127): avc: denied { read } for pid=3732 comm="syz.3.8863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1943.502298][ T3744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1943.575455][ T30] audit: type=1400 audit(1742920325.571:13128): avc: denied { ioctl } for pid=3742 comm="syz.5.8865" path="socket:[145068]" dev="sockfs" ino=145068 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1944.601054][ T30] audit: type=1400 audit(1742920326.546:13129): avc: denied { setattr } for pid=3756 comm="syz.0.8870" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1944.871414][ T3776] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8875'. [ 1944.880620][ T3776] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8875'. [ 1944.979709][T25809] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1945.062496][ T3777] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8873'. [ 1945.224022][T25809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1945.250636][T25809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1945.261782][ T6646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1945.278952][ T6646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1945.293281][T25809] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1945.317504][T25809] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1945.338579][T25809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1945.354932][T25809] usb 4-1: config 0 descriptor?? [ 1945.363139][ T3783] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8878'. [ 1945.378579][ T3785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8877'. [ 1945.434654][ T3787] FAULT_INJECTION: forcing a failure. [ 1945.434654][ T3787] name failslab, interval 1, probability 0, space 0, times 0 [ 1945.435963][ T3785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1945.504702][ T3787] CPU: 0 UID: 0 PID: 3787 Comm: syz.0.8877 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 1945.504727][ T3787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1945.504736][ T3787] Call Trace: [ 1945.504742][ T3787] [ 1945.504748][ T3787] dump_stack_lvl+0x16c/0x1f0 [ 1945.504773][ T3787] should_fail_ex+0x50a/0x650 [ 1945.504784][ T3787] ? __kmalloc_cache_noprof+0x55/0x410 [ 1945.504805][ T3787] ? rtnl_newlink+0x109/0x1d60 [ 1945.504830][ T3787] should_failslab+0xc2/0x120 [ 1945.504854][ T3787] __kmalloc_cache_noprof+0x68/0x410 [ 1945.504876][ T3787] rtnl_newlink+0x109/0x1d60 [ 1945.504896][ T3787] ? find_held_lock+0x2b/0x80 [ 1945.504913][ T3787] ? avc_has_perm_noaudit+0x119/0x3a0 [ 1945.504925][ T3787] ? __pfx_rtnl_newlink+0x10/0x10 [ 1945.504943][ T3787] ? avc_has_perm_noaudit+0x143/0x3a0 [ 1945.504965][ T3787] ? __lock_acquire+0x5b6/0x1b80 [ 1945.504990][ T3787] ? find_held_lock+0x2b/0x80 [ 1945.505011][ T3787] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 1945.505037][ T3787] ? __pfx_rtnl_newlink+0x10/0x10 [ 1945.505053][ T3787] rtnetlink_rcv_msg+0x95b/0xea0 [ 1945.505070][ T3787] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1945.505086][ T3787] ? __pfx_avc_has_perm+0x10/0x10 [ 1945.505110][ T3787] netlink_rcv_skb+0x16b/0x440 [ 1945.505133][ T3787] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1945.505157][ T3787] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1945.505185][ T3787] ? netlink_deliver_tap+0x1ae/0xd30 [ 1945.505202][ T3787] netlink_unicast+0x53c/0x7f0 [ 1945.505218][ T3787] ? __pfx_netlink_unicast+0x10/0x10 [ 1945.505241][ T3787] netlink_sendmsg+0x8cb/0xd70 [ 1945.505267][ T3787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1945.505288][ T3787] ? __import_iovec+0x1cd/0x660 [ 1945.505312][ T3787] ____sys_sendmsg+0xa87/0xc70 [ 1945.505327][ T3787] ? copy_msghdr_from_user+0x10b/0x160 [ 1945.505344][ T3787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1945.505361][ T3787] ___sys_sendmsg+0x135/0x1e0 [ 1945.505378][ T3787] ? __pfx____sys_sendmsg+0x10/0x10 [ 1945.505401][ T3787] ? __lock_acquire+0x5b6/0x1b80 [ 1945.505431][ T3787] ? __fget_files+0x20e/0x3b0 [ 1945.505456][ T3787] __sys_sendmsg+0x16e/0x220 [ 1945.505468][ T3787] ? __pfx___sys_sendmsg+0x10/0x10 [ 1945.505481][ T3787] ? rcu_is_watching+0x12/0xc0 [ 1945.505497][ T3787] do_syscall_64+0xcd/0x250 [ 1945.505509][ T3787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1945.505525][ T3787] RIP: 0033:0x7f3c9338d169 [ 1945.505539][ T3787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1945.505554][ T3787] RSP: 002b:00007f3c931d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1945.505568][ T3787] RAX: ffffffffffffffda RBX: 00007f3c935a6080 RCX: 00007f3c9338d169 [ 1945.505579][ T3787] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1945.505588][ T3787] RBP: 00007f3c931d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1945.505597][ T3787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1945.505606][ T3787] R13: 0000000000000001 R14: 00007f3c935a6080 R15: 00007fff786540e8 [ 1945.505617][ T3787] [ 1946.084481][ T30] audit: type=1400 audit(1742920328.057:13130): avc: denied { map } for pid=3791 comm="syz.0.8882" path="/dev/swradio0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1946.115254][ T30] audit: type=1400 audit(1742920328.057:13131): avc: denied { execute } for pid=3791 comm="syz.0.8882" path="/dev/swradio0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1946.118691][T25809] plantronics 0003:047F:FFFF.003C: No inputs registered, leaving [ 1946.974040][ T30] audit: type=1400 audit(1742920328.942:13132): avc: denied { execute_no_trans } for pid=3791 comm="syz.0.8882" path="/414/file0" dev="tmpfs" ino=2237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1947.037981][T25809] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1947.065750][ T3807] netlink: 'syz.5.8884': attribute type 29 has an invalid length. [ 1947.074563][ T30] audit: type=1400 audit(1742920329.051:13133): avc: denied { read } for pid=3805 comm="syz.9.8883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1947.079739][T25809] usb 4-1: USB disconnect, device number 19 [ 1947.100772][ T3807] netlink: 'syz.5.8884': attribute type 29 has an invalid length. [ 1947.124287][ T3807] netlink: 508 bytes leftover after parsing attributes in process `syz.5.8884'. [ 1947.422811][ T3816] netlink: 88 bytes leftover after parsing attributes in process `syz.8.8886'. [ 1947.469289][ T3816] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8886'. [ 1947.478563][ T3816] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8886'. [ 1947.488408][ T3820] veth0_to_bond: entered promiscuous mode [ 1947.501870][ T3820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8888'. [ 1947.561340][ T3827] x_tables: duplicate underflow at hook 2 [ 1947.628610][ T3820] veth0_to_bond (unregistering): left promiscuous mode [ 1948.377592][ T3820] bond0: (slave bond_slave_0): Releasing backup interface [ 1948.519655][T25809] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1948.664237][ T30] audit: type=1400 audit(1742920330.623:13134): avc: denied { write } for pid=3848 comm="syz.9.8896" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1948.698522][ T30] audit: type=1400 audit(1742920330.623:13135): avc: denied { open } for pid=3848 comm="syz.9.8896" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1948.721960][ C1] vkms_vblank_simulate: vblank timer overrun [ 1948.734011][ T30] audit: type=1400 audit(1742920330.643:13136): avc: denied { ioctl } for pid=3848 comm="syz.9.8896" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1948.758935][ C1] vkms_vblank_simulate: vblank timer overrun [ 1948.765888][ T30] audit: type=1400 audit(1742920330.643:13137): avc: denied { setattr } for pid=3848 comm="syz.9.8896" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1948.767141][T25809] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 1948.789175][ C1] vkms_vblank_simulate: vblank timer overrun [ 1948.803851][T25809] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1948.814139][T25809] usb 4-1: config 171 has no interface number 0 [ 1948.821364][T25809] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1948.842585][T25809] usb 4-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1948.858372][T25809] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1948.868199][T25809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.878832][T25809] usb 4-1: Product: syz [ 1948.883937][T25809] usb 4-1: Manufacturer: syz [ 1948.888516][T25809] usb 4-1: SerialNumber: syz [ 1948.895253][ T3827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1950.054593][ T3877] ptrace attach of "./syz-executor exec"[28386] was attempted by "./syz-executor exec"[3877] [ 1950.064619][T25809] ath6kl: Failed to submit usb control message: -110 [ 1950.071804][T25809] ath6kl: unable to send the bmi data to the device: -110 [ 1950.079404][T25809] ath6kl: Unable to send get target info: -110 [ 1950.089270][T25809] ath6kl: Failed to init ath6kl core: -110 [ 1950.107842][T25809] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 1950.436756][ T30] audit: type=1400 audit(1742920332.384:13138): avc: denied { bind } for pid=3879 comm="syz.9.8905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1950.456376][ T30] audit: type=1400 audit(1742920332.384:13139): avc: denied { name_bind } for pid=3879 comm="syz.9.8905" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1950.477730][ T30] audit: type=1400 audit(1742920332.384:13140): avc: denied { node_bind } for pid=3879 comm="syz.9.8905" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1950.515627][T32480] usb 4-1: USB disconnect, device number 20 [ 1953.508517][ T3918] xt_TCPMSS: Only works on TCP SYN packets [ 1953.512045][ T3920] netlink: 104 bytes leftover after parsing attributes in process `syz.9.8918'. [ 1953.523811][ T30] audit: type=1400 audit(1742920335.448:13141): avc: denied { nlmsg_read } for pid=3919 comm="syz.9.8918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1955.001992][T15461] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 1955.911685][T15461] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1955.922002][T15461] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 1955.977798][T15461] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1956.364186][T15461] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1956.376184][T15461] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.513477][ T3958] netlink: 'syz.3.8927': attribute type 39 has an invalid length. [ 1956.577394][T15461] usb 10-1: Product: syz [ 1956.581780][T15461] usb 10-1: Manufacturer: syz [ 1956.586547][T15461] usb 10-1: SerialNumber: syz [ 1956.619915][ T3959] FAULT_INJECTION: forcing a failure. [ 1956.619915][ T3959] name failslab, interval 1, probability 0, space 0, times 0 [ 1956.680796][ T3959] CPU: 1 UID: 0 PID: 3959 Comm: syz.0.8928 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 1956.680819][ T3959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1956.680829][ T3959] Call Trace: [ 1956.680834][ T3959] [ 1956.680841][ T3959] dump_stack_lvl+0x16c/0x1f0 [ 1956.680870][ T3959] should_fail_ex+0x50a/0x650 [ 1956.680886][ T3959] ? fs_reclaim_acquire+0xae/0x150 [ 1956.680907][ T3959] ? tomoyo_encode2+0x100/0x3e0 [ 1956.680921][ T3959] should_failslab+0xc2/0x120 [ 1956.680945][ T3959] __kmalloc_noprof+0xcb/0x510 [ 1956.680966][ T3959] ? d_absolute_path+0x137/0x1b0 [ 1956.680987][ T3959] tomoyo_encode2+0x100/0x3e0 [ 1956.681004][ T3959] tomoyo_encode+0x29/0x50 [ 1956.681018][ T3959] tomoyo_realpath_from_path+0x19d/0x720 [ 1956.681038][ T3959] tomoyo_path_number_perm+0x248/0x590 [ 1956.681059][ T3959] ? tomoyo_path_number_perm+0x235/0x590 [ 1956.681083][ T3959] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1956.681106][ T3959] ? __pfx__kstrtoull+0x10/0x10 [ 1956.681155][ T3959] ? from_kgid+0x90/0xd0 [ 1956.681177][ T3959] ? __pfx_from_kgid+0x10/0x10 [ 1956.681200][ T3959] tomoyo_path_chown+0x14d/0x1b0 [ 1956.681217][ T3959] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 1956.681236][ T3959] ? from_vfsuid+0xeb/0x150 [ 1956.681252][ T3959] ? __pfx_from_vfsuid+0x10/0x10 [ 1956.681271][ T3959] security_path_chown+0x12a/0x2e0 [ 1956.681295][ T3959] chown_common+0x3bc/0x670 [ 1956.681323][ T3959] ? __pfx_chown_common+0x10/0x10 [ 1956.681360][ T3959] ksys_fchown+0x11f/0x170 [ 1956.681385][ T3959] __x64_sys_fchown+0x72/0xb0 [ 1956.681408][ T3959] ? lockdep_hardirqs_on+0x7c/0x110 [ 1956.681435][ T3959] do_syscall_64+0xcd/0x250 [ 1956.681451][ T3959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.681474][ T3959] RIP: 0033:0x7f3c9338d169 [ 1956.681488][ T3959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1956.681504][ T3959] RSP: 002b:00007f3c931f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 1956.681521][ T3959] RAX: ffffffffffffffda RBX: 00007f3c935a5fa0 RCX: 00007f3c9338d169 [ 1956.681532][ T3959] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000003 [ 1956.681541][ T3959] RBP: 00007f3c931f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1956.681551][ T3959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1956.681561][ T3959] R13: 0000000000000000 R14: 00007f3c935a5fa0 R15: 00007fff786540e8 [ 1956.681580][ T3959] [ 1956.681668][ T3959] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1957.053296][ T3934] netlink: 'syz.9.8920': attribute type 4 has an invalid length. [ 1957.077526][ T3934] netlink: 'syz.9.8920': attribute type 4 has an invalid length. [ 1957.143630][ T30] audit: type=1400 audit(1742920339.070:13142): avc: denied { getopt } for pid=3964 comm="syz.0.8930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1957.958641][ T3985] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 1958.096223][ T3988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8937'. [ 1958.462863][T15461] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1958.504135][ T3995] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1958.510659][ T3995] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1958.526073][T15461] usb 10-1: USB disconnect, device number 31 [ 1958.529109][ T3995] vhci_hcd vhci_hcd.0: Device attached [ 1958.554147][ T4001] vhci_hcd vhci_hcd.0: port 0 already used [ 1958.581236][ T3995] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3995 comm=syz.3.8940 [ 1958.739337][ T30] audit: type=1400 audit(1742920340.643:13143): avc: denied { ioctl } for pid=3994 comm="syz.3.8940" path="socket:[146635]" dev="sockfs" ino=146635 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1958.768779][ T4005] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4005 comm=syz.3.8940 [ 1958.829943][T16358] usb 40-1: SetAddress Request (2) to port 0 [ 1958.836029][T16358] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1958.940490][T15461] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1959.351541][ T3997] vhci_hcd: connection reset by peer [ 1959.366152][ T8508] vhci_hcd: stop threads [ 1959.377681][ T8508] vhci_hcd: release socket [ 1959.392057][ T8508] vhci_hcd: disconnect device [ 1959.503002][T15461] usb 10-1: Using ep0 maxpacket: 8 [ 1959.511820][T15461] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1959.532775][T15461] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.541041][T15461] usb 10-1: Product: syz [ 1959.547228][T15461] usb 10-1: Manufacturer: syz [ 1959.552054][T15461] usb 10-1: SerialNumber: syz [ 1959.557735][T15461] usb 10-1: config 0 descriptor?? [ 1959.814334][T15461] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1960.009047][ T4016] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1961.938272][ T30] audit: type=1400 audit(1742920343.839:13144): avc: denied { connect } for pid=4038 comm="syz.0.8952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1961.978284][ T4039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8951'. [ 1962.921452][ T30] audit: type=1400 audit(1742920344.128:13145): avc: denied { read } for pid=4041 comm="syz.5.8953" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1963.033586][T15461] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1963.044651][T15461] usb 10-1: USB disconnect, device number 32 [ 1963.073186][ T30] audit: type=1326 audit(1742920344.964:13146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3fd8d169 code=0x7ffc0000 [ 1963.213735][ T30] audit: type=1326 audit(1742920344.964:13147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3fd8d169 code=0x7ffc0000 [ 1963.229570][ T4033] team0: No ports can be present during mode change [ 1963.237285][ T30] audit: type=1326 audit(1742920344.964:13148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f0d3fd8d169 code=0x7ffc0000 [ 1963.267790][ T30] audit: type=1326 audit(1742920344.964:13149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3fd8d169 code=0x7ffc0000 [ 1963.377671][ T30] audit: type=1326 audit(1742920344.964:13150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3fd8d169 code=0x7ffc0000 [ 1963.851905][ T30] audit: type=1326 audit(1742920344.964:13151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0d3fd8d169 code=0x7ffc0000 [ 1963.942308][T16358] usb 40-1: device descriptor read/8, error -110 [ 1964.113050][ T30] audit: type=1326 audit(1742920344.964:13152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3fd8d169 code=0x7ffc0000 [ 1964.149450][ T30] audit: type=1326 audit(1742920344.964:13153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0d3fd8d169 code=0x7ffc0000 [ 1964.177075][ T30] audit: type=1326 audit(1742920344.964:13154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3fd8d169 code=0x7ffc0000 [ 1964.384324][T15461] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1964.794636][T16358] usb usb40-port1: attempt power cycle [ 1964.986654][T15461] usb 4-1: Using ep0 maxpacket: 8 [ 1965.234812][T15461] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1965.243108][T15461] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.253349][T15461] usb 4-1: config 0 has no interface number 0 [ 1965.259466][T15461] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1965.270536][T15461] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1965.283987][T15461] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1965.291704][T15461] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1965.300847][T15461] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1965.308991][T15461] usb 4-1: Manufacturer: syz [ 1965.314821][T15461] usb 4-1: config 0 descriptor?? [ 1965.554861][T15461] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input126 [ 1965.678519][T16358] usb usb40-port1: unable to enumerate USB device [ 1965.763492][T27349] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1965.774886][ T968] usb 4-1: USB disconnect, device number 21 [ 1965.774916][ C0] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1965.914291][ T4094] overlayfs: missing 'lowerdir' [ 1967.436814][T15461] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1967.503248][ T4122] team0: No ports can be present during mode change [ 1967.587230][T15461] usb 10-1: device descriptor read/64, error -71 [ 1967.828126][T15461] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1967.958952][T15461] usb 10-1: device descriptor read/64, error -71 [ 1968.080405][T15461] usb usb10-port1: attempt power cycle [ 1968.812002][T15461] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1968.827982][ T968] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1968.841108][T15461] usb 10-1: device descriptor read/8, error -71 [ 1969.908412][ T968] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1969.916896][ T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1969.926627][T15461] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1969.934636][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1969.934648][ T30] audit: type=1400 audit(1742920351.786:13171): avc: denied { bind } for pid=4149 comm="syz.5.8985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1969.946845][T15461] usb 10-1: device descriptor read/8, error -71 [ 1970.097917][T15461] usb usb10-port1: unable to enumerate USB device [ 1970.264612][ T968] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1970.273835][ T30] audit: type=1400 audit(1742920351.786:13172): avc: denied { name_bind } for pid=4149 comm="syz.5.8985" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1970.295152][ T968] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1970.303654][ T968] usb 4-1: Manufacturer: syz [ 1970.332956][ T968] usb 4-1: config 0 descriptor?? [ 1970.703001][ T968] rc_core: IR keymap rc-hauppauge not found [ 1970.792835][ T968] Registered IR keymap rc-empty [ 1970.899567][ T968] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1970.945781][ T968] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input127 [ 1971.602588][ T968] usb 4-1: USB disconnect, device number 22 [ 1972.541705][T15461] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1972.707399][T15461] usb 10-1: Using ep0 maxpacket: 16 [ 1972.719227][T15461] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1972.732440][T15461] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1972.743532][T15461] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1972.753659][T15461] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.765864][T15461] usb 10-1: config 0 descriptor?? [ 1973.105688][ T968] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1973.351547][ T968] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1973.441944][ T968] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 1973.453204][ T968] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1973.456596][ T4201] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1973.466328][ T968] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1973.489055][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.497229][ T968] usb 4-1: Product: syz [ 1973.501628][ T968] usb 4-1: Manufacturer: syz [ 1973.506325][ T968] usb 4-1: SerialNumber: syz [ 1973.646938][T15461] hid-multitouch 0003:1FD2:6007.003D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.9-1/input0 [ 1973.742449][ T4194] netlink: 'syz.3.8997': attribute type 4 has an invalid length. [ 1974.310686][ T4194] netlink: 'syz.3.8997': attribute type 4 has an invalid length. [ 1974.363360][ T5873] usb 10-1: USB disconnect, device number 37 [ 1974.462652][ T30] audit: type=1400 audit(1742920356.310:13173): avc: denied { connect } for pid=4214 comm="syz.8.9003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1974.487542][ T30] audit: type=1400 audit(1742920356.339:13174): avc: denied { write } for pid=4214 comm="syz.8.9003" path="socket:[148245]" dev="sockfs" ino=148245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1974.991108][ T4228] FAULT_INJECTION: forcing a failure. [ 1974.991108][ T4228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1975.006378][ T4228] CPU: 0 UID: 0 PID: 4228 Comm: syz.5.9008 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 1975.006402][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1975.006413][ T4228] Call Trace: [ 1975.006418][ T4228] [ 1975.006425][ T4228] dump_stack_lvl+0x16c/0x1f0 [ 1975.006454][ T4228] should_fail_ex+0x50a/0x650 [ 1975.006476][ T4228] _copy_to_user+0x32/0xd0 [ 1975.006496][ T4228] simple_read_from_buffer+0xe0/0x170 [ 1975.006518][ T4228] proc_fail_nth_read+0x198/0x270 [ 1975.006539][ T4228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1975.006560][ T4228] ? rw_verify_area+0xcf/0x680 [ 1975.006578][ T4228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1975.006597][ T4228] vfs_read+0x1df/0xbf0 [ 1975.006619][ T4228] ? __pfx___mutex_lock+0x10/0x10 [ 1975.006635][ T4228] ? __pfx_vfs_read+0x10/0x10 [ 1975.006660][ T4228] ? __fget_files+0x20e/0x3b0 [ 1975.006686][ T4228] ksys_read+0x12b/0x250 [ 1975.006713][ T4228] ? __pfx_ksys_read+0x10/0x10 [ 1975.006734][ T4228] ? rcu_is_watching+0x12/0xc0 [ 1975.006760][ T4228] do_syscall_64+0xcd/0x250 [ 1975.006778][ T4228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.006801][ T4228] RIP: 0033:0x7f0d3fd8bb7c [ 1975.006815][ T4228] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1975.006830][ T4228] RSP: 002b:00007f0d40bed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1975.006847][ T4228] RAX: ffffffffffffffda RBX: 00007f0d3ffa5fa0 RCX: 00007f0d3fd8bb7c [ 1975.006857][ T4228] RDX: 000000000000000f RSI: 00007f0d40bed0a0 RDI: 0000000000000004 [ 1975.006866][ T4228] RBP: 00007f0d40bed090 R08: 0000000000000000 R09: 0000000000000000 [ 1975.006876][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1975.006886][ T4228] R13: 0000000000000000 R14: 00007f0d3ffa5fa0 R15: 00007fff484d0188 [ 1975.006905][ T4228] [ 1975.211551][ T4230] overlayfs: lower data-only dirs require metacopy support. [ 1975.954341][ T30] audit: type=1400 audit(1742920357.794:13175): avc: denied { ioctl } for pid=4237 comm="syz.8.9011" path="socket:[148303]" dev="sockfs" ino=148303 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1976.557887][ T968] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1976.608543][ T968] usb 4-1: USB disconnect, device number 23 [ 1976.817976][ T4248] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9014'. [ 1978.161759][ T4269] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9020'. [ 1981.958287][T17342] sched: DL replenish lagged too much [ 2083.185889][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2083.192857][ C0] rcu: 1-...!: (0 ticks this GP) idle=8174/1/0x4000000000000000 softirq=188577/188577 fqs=1 [ 2083.204119][ C0] rcu: (detected by 0, t=10502 jiffies, g=172653, q=120 ncpus=2) [ 2083.211916][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2083.211939][ C1] NMI backtrace for cpu 1 [ 2083.211951][ C1] CPU: 1 UID: 0 PID: 8508 Comm: kworker/u8:10 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 2083.211967][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2083.211977][ C1] Workqueue: bat_events batadv_nc_worker [ 2083.211997][ C1] RIP: 0010:preempt_count_add+0x2d/0x150 [ 2083.212016][ C1] Code: fa 48 c7 c0 60 34 8c 9a 55 48 ba 00 00 00 00 00 fc ff df 48 89 c1 53 83 e0 07 89 fb 48 c1 e9 03 83 c0 03 65 01 3d ab 05 7b 7e <0f> b6 14 11 38 d0 7c 08 84 d2 0f 85 dd 00 00 00 8b 15 2d 9f 03 19 [ 2083.212028][ C1] RSP: 0018:ffffc90000a08cd0 EFLAGS: 00000082 [ 2083.212038][ C1] RAX: 0000000000000003 RBX: 0000000000000001 RCX: 1ffffffff351868c [ 2083.212047][ C1] RDX: dffffc0000000000 RSI: ffffffff8b6fdf00 RDI: 0000000000000001 [ 2083.212055][ C1] RBP: 0000000000000006 R08: 0000000000000001 R09: ffffc90000a08d20 [ 2083.212063][ C1] R10: 0000000000000000 R11: 0000000000000003 R12: dffffc0000000000 [ 2083.212071][ C1] R13: ffff888061b50340 R14: 1ffff920001411a4 R15: ffffffff9aade598 [ 2083.212080][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2083.212094][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2083.212102][ C1] CR2: 0000001b31d1fffc CR3: 000000003089a000 CR4: 00000000003526f0 [ 2083.212111][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000400 [ 2083.212119][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2083.212127][ C1] Call Trace: [ 2083.212133][ C1] [ 2083.212138][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2083.212156][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2083.212172][ C1] ? nmi_handle+0x1ac/0x5d0 [ 2083.212191][ C1] ? preempt_count_add+0x2d/0x150 [ 2083.212206][ C1] ? default_do_nmi+0x6a/0x160 [ 2083.212222][ C1] ? exc_nmi+0x170/0x1e0 [ 2083.212236][ C1] ? end_repeat_nmi+0xf/0x53 [ 2083.212256][ C1] ? preempt_count_add+0x2d/0x150 [ 2083.212272][ C1] ? preempt_count_add+0x2d/0x150 [ 2083.212288][ C1] ? preempt_count_add+0x2d/0x150 [ 2083.212303][ C1] [ 2083.212308][ C1] [ 2083.212312][ C1] _raw_spin_lock_irqsave+0x1e/0x60 [ 2083.212330][ C1] debug_object_activate+0x149/0x4a0 [ 2083.212349][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 2083.212367][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 2083.212383][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2083.212399][ C1] ? __pfx_advance_sched+0x10/0x10 [ 2083.212414][ C1] enqueue_hrtimer+0x25/0x3c0 [ 2083.212431][ C1] __hrtimer_run_queues+0x903/0xae0 [ 2083.212449][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2083.212464][ C1] ? read_tsc+0x9/0x20 [ 2083.212480][ C1] hrtimer_interrupt+0x392/0x8e0 [ 2083.212500][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 2083.212520][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 2083.212538][ C1] [ 2083.212542][ C1] [ 2083.212547][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2083.212570][ C1] RIP: 0010:lock_acquire+0x67/0x360 [ 2083.212584][ C1] Code: 41 8b 02 83 f8 07 0f 87 d5 02 00 00 89 c0 48 0f a3 05 fd f9 ca 0e 0f 82 8d 02 00 00 8b 35 35 2d cb 0e 85 f6 0f 85 9d 00 00 00 <48> 8b 44 24 30 65 48 2b 04 25 28 00 00 00 0f 85 df 02 00 00 48 83 [ 2083.212595][ C1] RSP: 0018:ffffc90003b77ab0 EFLAGS: 00000206 [ 2083.212606][ C1] RAX: 0000000000000046 RBX: ffffffff8e1be500 RCX: 0000000091daa58e [ 2083.212614][ C1] RDX: 0000000000000000 RSI: ffffffff8d988768 RDI: ffffffff8bd36fe0 [ 2083.212622][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2083.212630][ C1] R10: ffffffff8e1be500 R11: 0000000000000002 R12: 0000000000000000 [ 2083.212638][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2083.212651][ C1] ? batadv_nc_worker+0x887/0x1060 [ 2083.212665][ C1] batadv_nc_worker+0x16a/0x1060 [ 2083.212678][ C1] ? batadv_nc_worker+0x164/0x1060 [ 2083.212693][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 2083.212708][ C1] ? rcu_is_watching+0x12/0xc0 [ 2083.212727][ C1] process_one_work+0x9c5/0x1ba0 [ 2083.212747][ C1] ? __pfx_process_one_work+0x10/0x10 [ 2083.212766][ C1] ? assign_work+0x1a0/0x250 [ 2083.212782][ C1] worker_thread+0x6c8/0xf00 [ 2083.212801][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2083.212818][ C1] kthread+0x3af/0x750 [ 2083.212834][ C1] ? __pfx_kthread+0x10/0x10 [ 2083.212849][ C1] ? rcu_is_watching+0x12/0xc0 [ 2083.212866][ C1] ? __pfx_kthread+0x10/0x10 [ 2083.212881][ C1] ret_from_fork+0x45/0x80 [ 2083.212897][ C1] ? __pfx_kthread+0x10/0x10 [ 2083.212912][ C1] ret_from_fork_asm+0x1a/0x30 [ 2083.212930][ C1] [ 2083.213934][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g172653 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2083.666843][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2083.676800][ C0] rcu: RCU grace-period kthread stack dump: [ 2083.682676][ C0] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 2083.696154][ C0] Call Trace: [ 2083.699421][ C0] [ 2083.702345][ C0] __schedule+0x112e/0x5b80 [ 2083.706852][ C0] ? __lock_acquire+0x5b6/0x1b80 [ 2083.711784][ C0] ? __pfx___schedule+0x10/0x10 [ 2083.716639][ C0] ? schedule+0x2d7/0x3a0 [ 2083.720966][ C0] schedule+0xe7/0x3a0 [ 2083.725031][ C0] schedule_timeout+0x124/0x280 [ 2083.729879][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2083.735244][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2083.740543][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2083.746353][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 2083.751811][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 2083.756582][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2083.761867][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2083.767063][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2083.772870][ C0] rcu_gp_kthread+0x271/0x380 [ 2083.777551][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2083.782748][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2083.787944][ C0] ? __kthread_parkme+0x148/0x220 [ 2083.792961][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2083.798157][ C0] kthread+0x3af/0x750 [ 2083.802221][ C0] ? __pfx_kthread+0x10/0x10 [ 2083.806806][ C0] ? rcu_is_watching+0x12/0xc0 [ 2083.811571][ C0] ? __pfx_kthread+0x10/0x10 [ 2083.816157][ C0] ret_from_fork+0x45/0x80 [ 2083.820569][ C0] ? __pfx_kthread+0x10/0x10 [ 2083.825155][ C0] ret_from_fork_asm+0x1a/0x30 [ 2083.829919][ C0] [ 2083.832928][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2083.839243][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 2083.850519][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2083.860566][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 2083.865849][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 f8 f7 aa 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 68 20 86 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2083.885460][ C0] RSP: 0018:ffffffff8de07d70 EFLAGS: 00000246 [ 2083.891524][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b588639 [ 2083.899488][ C0] RDX: 0000000000000001 RSI: ffff8881446b8800 RDI: ffff8881446b8864 [ 2083.907450][ C0] RBP: ffff8881446b8864 R08: 0000000000000001 R09: ffffed10170c67b5 [ 2083.915413][ C0] R10: ffff8880b8633dab R11: 0000000000000000 R12: ffff888021f20000 [ 2083.923376][ C0] R13: ffffffff8ee2dc60 R14: 0000000000000000 R15: 0000000000000000 [ 2083.931337][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2083.940258][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2083.946838][ C0] CR2: 000000110c32923f CR3: 0000000033da6000 CR4: 00000000003526f0 [ 2083.954809][ C0] Call Trace: [ 2083.958080][ C0] [ 2083.960916][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 2083.967254][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 2083.972457][ C0] ? rcu_sched_clock_irq+0x2472/0x3300 [ 2083.977920][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 2083.983563][ C0] ? find_held_lock+0x2b/0x80 [ 2083.988244][ C0] ? timekeeping_advance+0x72e/0xa90 [ 2083.993536][ C0] ? rcu_is_watching+0x12/0xc0 [ 2083.998302][ C0] ? update_process_times+0x178/0x2d0 [ 2084.003668][ C0] ? __pfx_update_process_times+0x10/0x10 [ 2084.009378][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2084.014839][ C0] ? update_wall_time+0x1c/0x40 [ 2084.019680][ C0] ? tick_nohz_handler+0x376/0x530 [ 2084.024789][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2084.030241][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 2084.035611][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2084.041326][ C0] ? read_tsc+0x9/0x20 [ 2084.045393][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 2084.050509][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 2084.056665][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 2084.062469][ C0] [ 2084.065390][ C0] [ 2084.068310][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2084.074467][ C0] ? ct_kernel_exit+0x139/0x190 [ 2084.079310][ C0] ? acpi_safe_halt+0x1a/0x20 [ 2084.083979][ C0] acpi_idle_enter+0xc5/0x160 [ 2084.088653][ C0] cpuidle_enter_state+0xaa/0x4f0 [ 2084.093669][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 2084.099474][ C0] cpuidle_enter+0x4e/0xa0 [ 2084.103888][ C0] do_idle+0x310/0x3f0 [ 2084.107956][ C0] ? __pfx_do_idle+0x10/0x10 [ 2084.112546][ C0] cpu_startup_entry+0x4f/0x60 [ 2084.117316][ C0] rest_init+0x16b/0x2b0 [ 2084.121558][ C0] ? acpi_subsystem_init+0x133/0x180 [ 2084.126846][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2084.132399][ C0] start_kernel+0x3e9/0x4d0 [ 2084.136904][ C0] x86_64_start_reservations+0x18/0x30 [ 2084.142362][ C0] x86_64_start_kernel+0xb2/0xc0 [ 2084.147294][ C0] common_startup_64+0x13e/0x148 [ 2084.152237][ C0]