last executing test programs: 9m50.243562308s ago: executing program 4 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) 9m49.202276094s ago: executing program 4 (id=1156): r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0xb0e, 0x4000) read$snddsp(r0, &(0x7f00000002c0)=""/134, 0x86) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x40, 0x8001, 0x4, 0x1000000000009, 0xd, 0xfffffe0000000001, 0x5, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) ftruncate(0xffffffffffffffff, 0x581) ftruncate(0xffffffffffffffff, 0x0) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, 0x0, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r6, 0x80) accept4$netrom(r6, 0x0, 0x0, 0x80000) 9m48.104324189s ago: executing program 4 (id=1160): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x4, 0x1a, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hopopts={{0x100, 0x29, 0x36, {0x5e, 0x1c, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x55, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab09"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x268}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9m47.712808991s ago: executing program 4 (id=1162): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c03, r3) dup2(r2, r0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) 9m47.376046898s ago: executing program 4 (id=1164): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v2={0x2000000, [{0x2, 0xeec}, {0xe8000000, 0xffff8000}]}, 0x14, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 9m46.827608289s ago: executing program 4 (id=1170): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x13a) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read(0xffffffffffffffff, 0x0, 0x0) tkill(0x0, 0x7) syz_open_procfs(0xffffffffffffffff, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 9m45.774276948s ago: executing program 32 (id=1170): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x13a) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read(0xffffffffffffffff, 0x0, 0x0) tkill(0x0, 0x7) syz_open_procfs(0xffffffffffffffff, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 20.994982634s ago: executing program 1 (id=2916): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x7ff, 0x2, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000200)={r6, r7, r8, 0x0, 0x4000, 0x80000003, 0x0, 0x0, 0x5, 0xe, 0xc, 0x31e}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 20.699345805s ago: executing program 1 (id=2919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x3, 0x2}, {0x3, 0xc0}]}]}, {0x0, [0x2e, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x39, 0xff9, 0x1}, 0x28) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) cachestat(r4, &(0x7f0000000040)={0x5, 0xefc4}, &(0x7f0000000080), 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 17.924907647s ago: executing program 1 (id=2928): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0xe503, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r5, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}}) syz_fuse_handle_req(r2, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001140)={&(0x7f0000000080)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x400, 0x400004, 0xf, 0x7, 0x7, 0x4, 0x0, 0x0, 0x40, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x1c, r6, 0x221, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 14.350711563s ago: executing program 1 (id=2938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000340)={{0x0, 0xe4e1, 0x8000000000000000, 0x3, 0x100000000, 0x9, 0x6d7, 0x2, 0x7, 0xfd, 0x7, 0x1, 0x40, 0x10000, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000efc80)={0x9, [{}, {}, {}, {}, {r6}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "d266c0370421e5"}) socket$unix(0x1, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd0102", 0x19}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000006000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000008ee"], 0x48) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000780)) ioctl$VHOST_GET_VRING_ENDIAN(r8, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000001980)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) 13.82931255s ago: executing program 5 (id=2939): mmap(&(0x7f0000706000/0xa000)=nil, 0xa000, 0x300000c, 0x11, 0xffffffffffffffff, 0x4b6e1000) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$user(0x0, 0x0, 0x0, 0x0, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0xba549f635ee52f0c, &(0x7f00000001c0)}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRESOCT=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES32=r2], 0x48) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r3}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000000000000000000000050000000000000001009579c31b2adb517cc863ca722dedc62ebe0caf0c0eea37e7c11a9f2494e8acef9e40e7211d75ec2330085c3e8122ec5e5464d2b04299ef12d6282472cef7f1995b8940c163c507930120e1088a7414bacce05f39715a737538dcdd95f57a223029702c9ee61c5654a7dbf11b4b980cc04ffea075eb51aad22bc2db0303e01c159d99b8d135431a22f5b2f874d6aa1132bf2d16b65e4a16450a5e111073"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2802042, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d76697274696f2c63616368653d7265616461686561642c756e616d653d73797a32002c63616368653d7265616461686561642c6e6f6f73652c6d6d61702c6163636573733d616e792c5d616368657461673d73636865645f737769746368002c61707072616973655f747970653d696d617369672c6f626a5f747970653d2827297b2c6f626a5f757365723d2cef8b9ee13e5d5787e43d01003531386465392d6238d90000003139342d386638332d35653733316239372c666f776e65723d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) 12.913102297s ago: executing program 1 (id=2943): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 12.722441837s ago: executing program 0 (id=2944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 12.487009334s ago: executing program 0 (id=2946): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xd8, 0x29, 0x4, {0x4, 0x17, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x4b, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x128, 0x29, 0x36, {0x5e, 0x21, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x966, 0x7, 0x1, 0x1]}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x6, [0x7fff, 0x1ff, 0x2133, 0x80, 0x9]}}, @generic={0x8, 0x55, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab09"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x298}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18", 0xf72}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.986154327s ago: executing program 5 (id=2947): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf1f046}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000480)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x1002, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x22e, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x7, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x2, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@getqdisc={0x2c, 0x26, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x7, 0xffff}, {0xf, 0x2}, {0x5, 0xffe0}}, [{0x4}, {0x4}]}, 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x5}}, './cgroup\x00'}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x71}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000480), &(0x7f00000003c0)="62f820116cbf3175cda25fa121ebb92c926aa8fbdaa272d0b8a797e3690a00000061c45fd5b531472c35f3e6ee6c05f61da566ccb1a0b14e986b28ab2ff14d24599ba303273c6495fc77349a9b0db81da60f78e490ff580395ac41df2b337379e05e660c17896ab3d677042d9a465f399c149906c5ac5908328a7ecd7bba4890bae0612d56bc5ecc001effaccf557ebecce6ef2a51b959a7802088666f"}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002480)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r7) eventfd(0x2) 10.534233152s ago: executing program 0 (id=2951): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ptrace$poke(0x5, 0x0, 0x0, 0x16ac) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) move_pages(r1, 0x7, &(0x7f0000000000)=[&(0x7f00008aa000/0x1000)=nil, &(0x7f000040b000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000d15000/0x2000)=nil, &(0x7f0000fc9000/0x2000)=nil, &(0x7f0000fec000/0x13000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, 0x0) 8.120800576s ago: executing program 0 (id=2955): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0xa) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) 8.006012654s ago: executing program 1 (id=2956): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mq_open(&(0x7f0000000140)='fd', 0x800, 0x20, &(0x7f00000001c0)={0x100, 0x100, 0x3, 0x7c8}) mq_timedsend(0xffffffffffffffff, 0x0, 0x57, 0x81, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00') unlinkat(r3, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c800}, 0x0) read$FUSE(r3, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x20) lseek(r4, 0x1, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000005c0)=0xd) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={'veth1\x00'}) writev(r4, &(0x7f0000000240)=[{0x0}, {&(0x7f00000003c0)}, {&(0x7f0000000500)}], 0x3) 7.943580426s ago: executing program 5 (id=2957): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xd8, 0x29, 0x4, {0x4, 0x17, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x4b, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x128, 0x29, 0x36, {0x5e, 0x21, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x966, 0x7, 0x1, 0x1]}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x6, [0x7fff, 0x1ff, 0x2133, 0x80, 0x9]}}, @generic={0x8, 0x55, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab09"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x298}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18", 0xf72}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.185589508s ago: executing program 2 (id=2961): socket$inet6(0xa, 0x80003, 0x101) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r5, &(0x7f0000000300)='ns/net\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_wake_idle_without_ipi\x00', r8}, 0x18) gettid() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={0x0, r9}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000340)={0x200003, 0x2200083, 0x801, 0x4, 0x37d, 0xfffffffe}) 5.388425089s ago: executing program 5 (id=2963): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000340)=0x4) r0 = socket$kcm(0x25, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socket(0x11, 0x3, 0x0) r3 = creat(&(0x7f0000000580)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x101000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100001b, 0x12, r2, 0x100000000) recvmsg$kcm(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x40010102) socket$nl_generic(0x10, 0x3, 0x10) 5.053856821s ago: executing program 2 (id=2965): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setparam(0x0, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)=0x42) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x0, 0x4001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x26281) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) eventfd(0x5f0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x24048845) prlimit64(0x0, 0xd, &(0x7f0000000380)={0xb, 0x9}, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x308000, 0x8}) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000280)={0x3, 0x0, 0x1d, 0x16, 0x1a1, &(0x7f0000000a80)}) getpid() mmap(&(0x7f0000551000/0x4000)=nil, 0x4000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 4.345707622s ago: executing program 5 (id=2966): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x4, 0x1, 0x2, 0x3}}, 0x2e) r2 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{}, {0x0, 0xea60}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1a8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x22) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@deltclass={0x58, 0x29, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x3, 0x7}, {0x7}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x80}}, @tclass_kind_options=@c_tbf={0x8}]}, 0x58}}, 0x24000000) 3.099101109s ago: executing program 3 (id=2968): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc0000000800110007000000", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.548718247s ago: executing program 0 (id=2969): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003d80)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000380)="604624d5db5008d21146b00a69227e7cb156a6d7fd6f861675db5d215463c5f7249f9aad6de37c71eed5ff7f3ad1e04d88c5d41f230fd6b7b7372bc296e4e2ddfca1ad19df55ef", 0x47}, {&(0x7f0000000400)="6a5e75c0847cabfd86b91a5633fcb9901a401a777279ff594ccd5c45052b3963c472a3bd9020a0c27022b87f23441350a261e7258204f85bdfa6bcf00840faf0224f7eb2a4541f40d1b90e46c80c11d0ce92687ddccd59d5aa60360017c3582262b3f1b7705c79d95893f610bd804938c2bde5e5ca051a4fdb2e8055d783707b6cb71e73a33ea9ec4cc31335f0a9ac08a2fe5d692455355607ef6d66c3c43bf1dccf6f7693fcdabfd38ae0d01e", 0xad}, {&(0x7f0000000600)="84af72f28cc99da46033d66dfdb10e8a26a6d9eee823a6e776fa02260d856a712ecc305b0a341687a1d843396206e8b85fc6240987811abb6df1c0c9f348fcad0154bc774975632839921d838c125a7bca6f4ffebb3dd83de3c1f4755c3a0e60e28ba172c36ef7a9e1aa7b62e0a1692994d56ec64542e581f8f32560b072723c90e92f9117da0f7159529c252b65b28b", 0x90}, {&(0x7f0000000540)="36bc407508be620a645a42beccdb2f14e35b2a3daa5746e9a5bdad005c73661b1416618ed1e07e861109afbea27fb36ba46a215f5cb69a29f0046723b5b024fab96d37e590e8cd7f91a9c1d792c0188563e3ea03185c466613274270b8edd06924df7b583a05aa4d41966fde1334ab9bad3bc78e330d0a6a4d022a89bed64b", 0x7f}, {&(0x7f0000000900)="86113c3cdf0940c8b86d7d4a9dd95b18edf89c6a08b1f617b261fc4bb8f70b116c0b58286083457a7a926b52f48ac57319e22eb8a6a35d9c8308443bc7afc498bdfe7aeb86cea45cc224d01fc4208f461c84fd12bf11fc476d80be6a4bae20ee75c49d80de190178567dc74be93834be6ae27f2f65d6a1d29e4871bccaba10dfa09fe4917d6273dce39dde4d97a96114b9e122229eb8f9d977f0292b50ef99600727c363729c1da1763d1b9d8ede8d8e16bbdb9f3dc48b3c421383152371", 0xbe}, {&(0x7f0000000280)="e4cf7e6e1a4c3517b8c617", 0xb}, {&(0x7f00000007c0)="bd6693c537a4bd87d2a4b2f9e13eca2ab7032bd4d16b8c2e2038133f4a564e45f23851029b3caa6405ef9241c625630c0ab5a0e7c7041a28cd4b634b7cbc314338d8d6ed6abc34e1c43834da3468117c9ac1da455f7e3ea1a0c3ba03fba9211c6146c3134896c7470ab66c6e3bc16a1ec24dd9b5b99977c15e84138c", 0x7c}, {&(0x7f0000000840)="3c8e36615faec2f4cb556b4d4a76f8b208b2ed04fbf815e61e82b2deaf8b9ba6b85505fd6676c4187b07610fdd8d6ff2c0b5d9254f71ef2fc9e9ce4c49c67842048642c9d977ae01ee85365f674e9c96659fecf6c5e317141433e8d8d2b4cdc3b30757b0086ddfd47dbe0ba0d2f00c5524d07398b3cec49d74fdae7fa36c44b589d5d47d3d211b9346b2e8a3b98b96cf07bc326f5227410918ca91708d29f6222554f5ad831bbb1149db209586a5666b64a7800a3280214db4", 0xb9}, {&(0x7f0000000c80)="12f432c9c62d692a5782f0f51f90f101137076759f7a1e69bebae94edda29ccbf5f2baccf5679dd9378b640765e3107ba7d465cd0098b981c8bd95d85eb7e8e9a01ad76fa6e55081e7bf24e679ece743ead86ce077c39f729d3eb803bc84c3e898e84f54caf6ab896e03a90cfdd0e4af2a6783a7b824605d25c7f909d3f699cc61d1173565da9808def5144dcc4cf1138812ef04835d099f5ed7fe6a0e2e17bed6c899d47c53a84f666d95dc06b6aa9063cf6679cc1868debd83378f4f4c5c6190f014722271faea834f8723da7dcf9942d343bd", 0xd4}], 0x9, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x80}}, {{&(0x7f0000002580)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000002600)="c8bcfda14bc597663206fb5e75b7da00365f0824a92eeff618a76e51aa98cb7cb8ecaae692e444c1631725ab019e0452f4ef9c5a4d85c591c8ac533f8946669be4c036dd78aaee5b911e7d1d3ad4d7136ffe71cb72c4d19129a58a422a05fb2935b9ae42657d4a357a0859fde1f91dcbed1600d9ab55dd274d73a2c75f1a1fc2d940bfcc69270b999b38a799df9f32f26cd87712f54817fddb53cbdd6115f9c05efaf981b15f", 0xa6}, {&(0x7f00000026c0)="53bd2e8d5fa5cc7dd00ec5200e9d7815a4e1dfb4e0c4320649883b388665aa98be67ffc0779bd48ec041ff", 0x2b}, {&(0x7f0000002700)="07801b75a740895a873936f8ffd3a7bd68c57c1011facf73cd90d13262bf09c0e8eb1f9f774e4e0a885ad03113ae51e38358b30dc44489a5a8431014f33e6d8e2f69513d64a4f2426888a7dd2c67c20f8f63085c70e82a859e1008db42843d07e8179898acb91017b795d649e9ecfb861298dda900824009e197d6c1c9a45e5f10fcef8bf2da9e169ca83ac08fb745689f", 0x91}, {&(0x7f00000027c0)="43c3b3c6bba4249dc4b42c319b3d0b2ffc1ba384fab32ce3cfa2519b", 0x1c}, {&(0x7f0000002800)="b4feb89222eaf38ad2275257cb583278f7860dc8572a4a5f6f06313ec3cdb87cbe6e9be3912e853f647631823bd1a3258ceefd755d51ea6f4e0ef4bd17ed3f6dcfd51160ae6c292bb9072796a49f7532ab640ba80432ad0d76adf23762c3d37fc2ce9abdddf18a545f3ac3906a22bbbeb1775fdd1f27bcf3d2e8de", 0x7b}, {&(0x7f0000002880)="c8af0a29e8100254f48b2c9b8c751c", 0xf}], 0x6, &(0x7f0000002980)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x8000}}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000002a40)="b5d9fc236de81b414a67ea48f963d1e56460e2352ff0312388ade8f8222f33303fd71ccc8b033e9a700b241f6bf60a343d169f5c24e3937e3beb84d6109ab33a967678ec3fd605aa9cf8cbb8f2f77b360fb3aa8ebe0aad42099e7dc76422f220b5d5bc36314cf10df192d281947c4a8b8e34cd4da92ba543fbc894cf0a9caa178d9709c37489e6cfff1cf6bf669532126aa944c73ae13ec5fdf813035374ed50d4766381cda8c83d2ae2b288b7791d6b2ee3535bf3f3eb", 0xb7}, {0x0}, {&(0x7f0000002c00)="e838d7060b9bceab5da141", 0xb}, {&(0x7f0000002c40)="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", 0xf00}], 0x4, &(0x7f0000003d00)=ANY=[@ANYBLOB="2c00001000000000010045e601db0000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="87ffffff"], 0x50, 0xc000}}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x40002f2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000ed07447900000000000000001800", @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x2, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r4, &(0x7f0000000000)="fa", 0xfffffdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x0, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x8, &(0x7f00000017c0)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x80000000, 0x0, 0x0, 0xc0f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0xfffffffffffffd3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000240)) 2.260465653s ago: executing program 2 (id=2970): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 2.218825973s ago: executing program 3 (id=2971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a11, 0x51240}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.582418491s ago: executing program 0 (id=2972): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xb) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)}, {0x0}], 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x2000c88c) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1f) 1.570221383s ago: executing program 2 (id=2973): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x19, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0xf8, 0x29, 0x36, {0x5e, 0x1b, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x6, [0x7fff, 0x1ff, 0x2133, 0x80, 0x9]}}, @generic={0x8, 0x55, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab09"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x278}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.43092811s ago: executing program 3 (id=2974): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0xf8, 0x720d, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x84, 0x3, 0x11}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x20, 0x2]}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4, 0x2, 0x1], 0x6, 0x3}}}}, {{@ip={@broadcast, @local, 0xff000000, 0xffffffff, 'caif0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x8}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0xfffffff2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@getlink={0xac, 0x12, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2a20, 0x500}, [@IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6erspan0\x00'}, {0x14, 0x35, 'wlan0\x00'}, {0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'xfrm0\x00'}, {0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'dummy0\x00'}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xd}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400d30000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000001000)={0x1c0, r6, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x30, 0x3, "7a0acc9e42ade3ed3dabed86d7f4e24a5349f75d47999b4b95cfb01f59968b6110692edd57faef437e9a52d6"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0xf6, 0x3, "af789861e92a80ce4cd3ee741f955d611bd82b6871a8d6a7ca75d8313ebdd9f419fd25e76974600333aaeb6fe15dd6d9d0540b57d262692af2734e60d0d2fe1702b331f8ac03d59de12847a7f27aed909262acbf00eb8183d798a4f2af72d75ede6bd7ab405a84e8f6d0180376efbb50de96c742e6d35c4f924ff966588c983ae54933ff3819107aa8284ce283e43f6f540645760dbecdb0089251b1c43816532a7df3d4d12ef8f053c2e6db14265963a1aeabc39cf73f29b416a179c8b306f0ed3fa1d9b143e89ce4bad1f54f0ce50392a34a76623903266bfb9b99af28b59f6d4bf82995da83f6eb20a00741ddc3c2d90a"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "efb00544af10c0f0083f3667d54f387011092b25c66c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x40}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x40}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x1c0}}, 0x40004) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000280)='wg1\x00', 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private0, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f96551", 0xe931, 0x2f, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [@fragment={0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}]}}}}}}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 1.31018943s ago: executing program 3 (id=2975): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xd8, 0x29, 0x4, {0x4, 0x17, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x4b, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x128, 0x29, 0x36, {0x5e, 0x21, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x966, 0x7, 0x1, 0x1]}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x6, [0x7fff, 0x1ff, 0x2133, 0x80, 0x9]}}, @generic={0x8, 0x55, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab09"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x298}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf82}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.072901701s ago: executing program 2 (id=2976): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x20040000) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x20020000) 1.035954302s ago: executing program 3 (id=2977): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hoplimit={{0x14}}, @hopopts={{0x100, 0x29, 0x36, {0x5e, 0x1c, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x55, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab09"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x1a8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 907.173131ms ago: executing program 2 (id=2978): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) socket$tipc(0x1e, 0x5, 0x0) close(0xffffffffffffffff) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(r1, &(0x7f0000000080), 0x8, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x8000000000000001, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r3, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read$char_usb(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fchdir(0xffffffffffffffff) syz_clone3(&(0x7f00000005c0)={0x80000000, 0x0, &(0x7f0000000380), &(0x7f00000003c0), {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r2}}, 0x58) mount_setattr(r0, 0x0, 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) 533.202473ms ago: executing program 3 (id=2979): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe043c660}, 0x94) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000340)={0x80002, 0xffffffffffffffff, 0x5}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x1000ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) socket(0x2c, 0x2, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth1_to_bridge\x00'}) socket(0x2, 0x3, 0xff) syslog(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x7101, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 0s ago: executing program 5 (id=2980): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0x10013, r1, 0x0) r2 = socket(0x22, 0x2, 0x24) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_bridge\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0xffffff1f, 0x4, 0x25dfdbfa, {0x0, 0x0, 0x6558, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_PHYS_PORT_ID={0x1b, 0x22, "ef68c98ba9deb8a836e813aa4d5b4b23baf61aa14efc76"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4050}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000231000/0x4000)=nil, &(0x7f00001d3000/0x4000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00002a7000/0x3000)=nil, &(0x7f0000e9c000/0x1000)=nil, &(0x7f0000183000/0x2000)=nil, &(0x7f000018d000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000cf3000/0x3000)=nil, &(0x7f00003b4000/0x2000)=nil, &(0x7f0000261000/0x2000)=nil, &(0x7f0000000000)="f4a15ef6cae93c478b6b613e37a6ab1abe7e901453a0f9bd0769a6e7d6f8f3355b6be151cb8a0debd6b629e94eb2", 0x2e}, 0x68) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800140600fe8800000000000000000001fe8000000000000000000000000000aa4e234e2300000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000490780000"], 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0x3) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582bd7a9d6d", 0x9) r6 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r6, 0x80045105, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, r8, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="fa1a6ed00226e20f895f804e451d5657581ab3d8e839e871ef49f3840701d9cc236705eba97f4fcfe7ab172fe88b94283495642bd6411f95af9ca164d25ed16cfd7da8fa4969c648f88f531c0c565a7959a4d3fd114feeb4a08834984ed5f97118ffa106c35d83189f363225d812698e28eed02a39a9dd67d76cd54c15f53049062a1bfe1cde9c27ad4adf812bd7a638baa6ea93cf50d0521e72a72e", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf2506000000080003003c000000080003000c00000008000100", @ANYRES32=0x0, @ANYBLOB="08000e000800000008000d002c00000008000d0034000000080003000a00000008000100", @ANYRES32=r8, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x24000010}, 0x24040000) kernel console output (not intermixed with test programs): d, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 747.754388][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.820175][ T24] usb 4-1: Product: syz [ 747.824484][ T24] usb 4-1: Manufacturer: syz [ 747.829142][ T24] usb 4-1: SerialNumber: syz [ 748.005744][ T24] usb 4-1: config 0 descriptor?? [ 748.022429][ T24] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 748.035534][ T24] usb 4-1: Detected SIO [ 748.039785][ T24] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 4 [ 748.066734][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 748.458779][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2234'. [ 748.476741][T14263] veth0_macvtap: left promiscuous mode [ 749.745110][T14316] netlink: 'syz.1.2246': attribute type 25 has an invalid length. [ 749.758399][T14320] fuse: Bad value for 'fd' [ 751.245011][ T6289] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 751.405093][ T6289] usb 6-1: Using ep0 maxpacket: 8 [ 751.439013][ T6289] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.454318][ T6289] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 751.545526][ T6289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.572241][ T6289] usb 6-1: config 0 descriptor?? [ 751.607398][ T6289] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 752.234746][ T6289] gspca_vc032x: reg_w err -71 [ 752.255069][ T6289] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 752.301800][ T6289] usb 6-1: USB disconnect, device number 14 [ 752.333842][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5540 ms [ 752.341884][ C1] lec:lec_tx_timeout: lec0 [ 753.738184][T14362] ptrace attach of "./syz-executor exec"[14363] was attempted by "./syz-executor exec"[14362] [ 754.122240][T14360] syz.2.2257 (14360): drop_caches: 2 [ 754.182345][T14365] netlink: 'syz.5.2261': attribute type 25 has an invalid length. [ 755.620900][T14374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.788791][T14374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.468941][T14380] fuse: Bad value for 'fd' [ 756.633936][ T5886] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 756.814603][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 756.930301][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.975898][ T5886] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 757.028968][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.362524][ T5886] usb 6-1: config 0 descriptor?? [ 757.448028][ T5886] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 758.183276][ T5886] gspca_vc032x: reg_r err -110 [ 758.209293][ T5886] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 759.667933][ T5886] usb 6-1: USB disconnect, device number 15 [ 760.888950][T14418] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2265'. [ 762.906149][T14437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 762.937239][T14437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.947109][T14437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.277283][T14436] netlink: 'syz.0.2279': attribute type 1 has an invalid length. [ 763.287421][T14436] netlink: 'syz.0.2279': attribute type 2 has an invalid length. [ 763.295323][T14436] netlink: 'syz.0.2279': attribute type 2 has an invalid length. [ 763.362676][T14436] netlink: 'syz.0.2279': attribute type 1 has an invalid length. [ 768.015030][T14461] fuse: Bad value for 'fd' [ 769.390784][T14473] syz.3.2285 (14473): drop_caches: 2 [ 769.913106][T14485] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2292'. [ 771.299474][T14495] ptrace attach of ""[14496] was attempted by "./syz-executor exec"[14495] [ 771.997555][T14502] syz.2.2297 (14502): drop_caches: 2 [ 772.016591][T14488] syz.1.2286 (14488): drop_caches: 2 [ 772.837479][T14518] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2301'. [ 773.351310][T14525] netlink: 'syz.3.2302': attribute type 1 has an invalid length. [ 773.361362][T14525] netlink: 'syz.3.2302': attribute type 2 has an invalid length. [ 773.369885][T14525] netlink: 'syz.3.2302': attribute type 2 has an invalid length. [ 773.377878][T14525] netlink: 'syz.3.2302': attribute type 1 has an invalid length. [ 775.867193][T14544] xt_CT: You must specify a L4 protocol and not use inversions on it [ 775.884320][T14544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.894021][T14544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.792200][T14548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 777.084195][ T5886] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 777.296114][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 777.316628][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.334057][ T5886] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 777.351248][ T5886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 777.360177][ T5886] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 777.522230][T14556] syz.5.2311 (14556): drop_caches: 2 [ 777.542311][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.564369][ T5886] usb 1-1: config 0 descriptor?? [ 777.657009][T14558] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2310'. [ 779.290945][T14576] netlink: 'syz.1.2315': attribute type 25 has an invalid length. [ 779.591686][ T5886] usbhid 1-1:0.0: can't add hid device: -71 [ 779.603935][ T5886] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 779.617571][ T5886] usb 1-1: USB disconnect, device number 15 [ 779.685120][T14583] fuse: Bad value for 'group_id' [ 779.690082][T14583] fuse: Bad value for 'group_id' [ 779.874690][T14588] netlink: 'syz.1.2317': attribute type 1 has an invalid length. [ 779.882930][T14588] netlink: 'syz.1.2317': attribute type 2 has an invalid length. [ 779.898923][T14588] netlink: 'syz.1.2317': attribute type 2 has an invalid length. [ 779.929682][T14588] netlink: 'syz.1.2317': attribute type 1 has an invalid length. [ 782.046754][T14600] syzkaller1: entered promiscuous mode [ 782.052272][T14600] syzkaller1: entered allmulticast mode [ 782.994751][T13767] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 783.339101][T13767] usb 1-1: config 0 has no interfaces? [ 783.353504][T13767] usb 1-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 783.362968][T13767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.371191][T13767] usb 1-1: Product: syz [ 783.379184][T13767] usb 1-1: Manufacturer: syz [ 783.384034][T13767] usb 1-1: SerialNumber: syz [ 783.398213][T13767] usb 1-1: config 0 descriptor?? [ 783.655405][T14600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2322'. [ 784.879438][ T5887] usb 1-1: USB disconnect, device number 16 [ 789.965414][ T6778] lec:lec_start_xmit: lec0:No lecd attached [ 790.916510][T14696] syzkaller1: entered promiscuous mode [ 790.922589][T14696] syzkaller1: entered allmulticast mode [ 791.061880][T12133] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 791.283978][T12133] usb 6-1: Using ep0 maxpacket: 32 [ 791.308717][T12133] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 791.337767][T12133] usb 6-1: config 0 has no interface number 0 [ 791.374514][T12133] usb 6-1: config 0 interface 89 has no altsetting 0 [ 791.425311][T12133] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 791.466794][T12133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.506405][T12133] usb 6-1: Product: syz [ 791.514012][T13767] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 791.531381][T12133] usb 6-1: Manufacturer: syz [ 791.551002][T12133] usb 6-1: SerialNumber: syz [ 791.574999][T12133] usb 6-1: config 0 descriptor?? [ 791.592088][T12133] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 791.621923][T12133] em28xx 6-1:0.89: Video interface 89 found: bulk [ 791.779224][T13767] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.842181][T13767] usb 1-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 791.856633][T13767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.878598][T13767] usb 1-1: Product: syz [ 791.884032][T13767] usb 1-1: Manufacturer: syz [ 791.895914][T13767] usb 1-1: SerialNumber: syz [ 791.976001][T13767] usb 1-1: config 0 descriptor?? [ 791.984423][T13767] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 791.993517][T13767] usb 1-1: Detected SIO [ 792.031613][T13767] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB2 [ 792.232534][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2344'. [ 792.679588][T14720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.689735][T14720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.021720][T12133] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 793.111633][T12133] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 793.146243][T12133] em28xx 6-1:0.89: board has no eeprom [ 793.227248][T12133] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 793.302494][T12133] em28xx 6-1:0.89: analog set to bulk mode. [ 793.328628][T12674] em28xx 6-1:0.89: Registering V4L2 extension [ 793.349352][T12133] usb 6-1: USB disconnect, device number 16 [ 793.369922][T12133] em28xx 6-1:0.89: Disconnecting em28xx [ 793.557616][T12674] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 793.593716][T12674] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 793.612559][T12674] em28xx 6-1:0.89: No AC97 audio processor [ 793.633548][T12674] usb 6-1: Decoder not found [ 793.644519][T12674] em28xx 6-1:0.89: failed to create media graph [ 793.680562][T12674] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 793.692518][T12674] em28xx 6-1:0.89: Registering snapshot button... [ 793.710884][T12674] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input28 [ 793.734902][T12674] em28xx 6-1:0.89: Remote control support is not available for this card. [ 793.748735][T12133] em28xx 6-1:0.89: Closing input extension [ 793.757046][T12133] em28xx 6-1:0.89: Deregistering snapshot button [ 793.778168][T12133] em28xx 6-1:0.89: Freeing device [ 794.049741][T14736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.059927][T14736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.089653][T14745] syz.1.2352 (14745): drop_caches: 2 [ 795.374076][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5410 ms [ 795.382128][ C1] lec:lec_tx_timeout: lec0 [ 795.969027][T14757] fuse: Unknown parameter '00000000000000000000' [ 796.495521][T14769] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2360'. [ 798.104295][T14796] fuse: Unknown parameter '00000000000000000000' [ 799.743822][T14810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.752523][T14810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.313922][ T9718] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 805.562847][T14881] ptrace attach of "./syz-executor exec"[14882] was attempted by "./syz-executor exec"[14881] [ 806.252706][T14893] netlink: 'syz.3.2392': attribute type 1 has an invalid length. [ 806.267765][T14893] netlink: 'syz.3.2392': attribute type 2 has an invalid length. [ 806.283881][ T9718] usb 6-1: Using ep0 maxpacket: 32 [ 806.291756][ T9718] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 806.303858][ T9718] usb 6-1: config 0 has no interface number 0 [ 806.333019][T14899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.341403][ T9718] usb 6-1: config 0 interface 89 has no altsetting 0 [ 806.350944][ T9718] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 806.367380][T14893] netlink: 'syz.3.2392': attribute type 2 has an invalid length. [ 806.416785][T14893] netlink: 'syz.3.2392': attribute type 1 has an invalid length. [ 806.425915][ T9718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.443510][ T9718] usb 6-1: Product: syz [ 806.449207][ T9718] usb 6-1: Manufacturer: syz [ 806.457340][T14899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.473825][ T9718] usb 6-1: SerialNumber: syz [ 806.492374][ T9718] usb 6-1: config 0 descriptor?? [ 806.526127][ T9718] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 806.559185][ T9718] em28xx 6-1:0.89: Video interface 89 found: bulk [ 806.746255][T14884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2391'. [ 808.059381][ T9718] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 808.179009][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 808.890277][ T9718] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 808.907343][ T9718] em28xx 6-1:0.89: board has no eeprom [ 809.223963][ T9718] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 809.262134][ T9718] em28xx 6-1:0.89: analog set to bulk mode. [ 809.292621][T13767] em28xx 6-1:0.89: Registering V4L2 extension [ 809.325962][ T9718] usb 6-1: USB disconnect, device number 17 [ 809.332850][ T9718] em28xx 6-1:0.89: Disconnecting em28xx [ 809.398436][T13767] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 809.414225][T13767] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 809.432851][T13767] em28xx 6-1:0.89: No AC97 audio processor [ 809.447381][T13767] usb 6-1: Decoder not found [ 809.462123][T13767] em28xx 6-1:0.89: failed to create media graph [ 809.495199][T13767] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 809.525815][T13767] em28xx 6-1:0.89: Registering snapshot button... [ 809.533282][T13767] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input29 [ 809.646288][T13767] em28xx 6-1:0.89: Remote control support is not available for this card. [ 809.661510][ T9718] em28xx 6-1:0.89: Closing input extension [ 809.667584][ T9718] em28xx 6-1:0.89: Deregistering snapshot button [ 809.756906][T14936] ptrace attach of "./syz-executor exec"[14938] was attempted by "./syz-executor exec"[14936] [ 810.480226][T14933] random: crng reseeded on system resumption [ 810.515018][ T9718] em28xx 6-1:0.89: Freeing device [ 812.590822][T14963] netlink: 'syz.5.2404': attribute type 25 has an invalid length. [ 813.373824][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 813.381859][ C1] lec:lec_tx_timeout: lec0 [ 814.698894][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2415'. [ 814.737300][T14983] team_slave_0: entered promiscuous mode [ 814.743141][T14983] team_slave_1: entered promiscuous mode [ 814.803986][T14983] macsec1: entered promiscuous mode [ 814.809208][T14983] team0: entered promiscuous mode [ 814.866058][T14983] macsec1: entered allmulticast mode [ 814.914812][T14983] team0: entered allmulticast mode [ 814.943870][T14983] team_slave_0: entered allmulticast mode [ 814.954055][T14983] team_slave_1: entered allmulticast mode [ 814.980437][T14983] team0: left allmulticast mode [ 815.010647][T14983] team_slave_0: left allmulticast mode [ 815.023952][T14983] team_slave_1: left allmulticast mode [ 815.042042][T14983] team0: left promiscuous mode [ 815.540099][T14983] team_slave_0: left promiscuous mode [ 815.545575][T14983] team_slave_1: left promiscuous mode [ 815.968686][T14992] random: crng reseeded on system resumption [ 816.092450][T14998] ptrace attach of "./syz-executor exec"[15000] was attempted by "./syz-executor exec"[14998] [ 818.110044][T15008] syz.0.2420 (15008): drop_caches: 2 [ 818.136078][ T30] audit: type=1400 audit(1766282860.761:421): avc: denied { read } for pid=15021 comm="syz.1.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 818.239703][T15025] netlink: 'syz.2.2427': attribute type 1 has an invalid length. [ 818.248681][T15025] netlink: 'syz.2.2427': attribute type 2 has an invalid length. [ 818.267363][T15025] netlink: 'syz.2.2427': attribute type 2 has an invalid length. [ 818.284942][ T30] audit: type=1400 audit(1766282860.901:422): avc: denied { watch watch_reads } for pid=15021 comm="syz.1.2425" path="/495" dev="tmpfs" ino=2654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 818.359363][T15025] netlink: 'syz.2.2427': attribute type 1 has an invalid length. [ 818.698643][T15032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.730464][T15032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.912933][ T30] audit: type=1400 audit(1766282861.531:423): avc: denied { append } for pid=15031 comm="syz.3.2429" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 820.963474][T15068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.051652][T15068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.121235][T15068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.234483][T15068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.291025][T15068] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 821.297798][T15068] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 821.454875][T15068] vhci_hcd vhci_hcd.0: Device attached [ 821.548953][T15068] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(19) [ 821.555570][T15068] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 821.586198][T15068] vhci_hcd vhci_hcd.0: Device attached [ 821.725748][T15087] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(21) [ 821.732340][T15087] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 821.803970][T15087] vhci_hcd vhci_hcd.0: Device attached [ 821.817034][T15068] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(23) [ 821.823626][T15068] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 821.835995][T15068] vhci_hcd vhci_hcd.0: Device attached [ 821.940335][ T9718] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 822.061850][T15087] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(26) [ 822.068459][T15087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 822.098224][T15087] vhci_hcd vhci_hcd.0: Device attached [ 822.108956][T15068] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(25) [ 822.113744][T15087] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 822.115557][T15068] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 822.134511][T15068] vhci_hcd vhci_hcd.0: Device attached [ 822.135443][T15087] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 822.225072][T15088] vhci_hcd: connection closed [ 822.225158][T15082] vhci_hcd: connection closed [ 822.230698][T15075] vhci_hcd: connection reset by peer [ 822.231397][T15095] vhci_hcd: connection closed [ 822.242432][T15097] vhci_hcd: connection closed [ 822.247248][T15091] vhci_hcd: connection closed [ 822.306358][ T288] vhci_hcd vhci_hcd.0: stop threads [ 822.312432][ T30] audit: type=1400 audit(1766282864.931:424): avc: denied { write } for pid=15099 comm="syz.1.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 822.378470][ T288] vhci_hcd vhci_hcd.0: release socket [ 822.402098][ T288] vhci_hcd vhci_hcd.0: disconnect device [ 822.415384][ T288] vhci_hcd vhci_hcd.0: stop threads [ 822.424714][ T288] vhci_hcd vhci_hcd.0: release socket [ 822.453842][ T288] vhci_hcd vhci_hcd.0: disconnect device [ 822.461811][ T288] vhci_hcd vhci_hcd.0: stop threads [ 822.481855][ T288] vhci_hcd vhci_hcd.0: release socket [ 822.492051][ T288] vhci_hcd vhci_hcd.0: disconnect device [ 822.695417][ T288] vhci_hcd vhci_hcd.0: stop threads [ 822.700654][ T288] vhci_hcd vhci_hcd.0: release socket [ 822.744520][ T288] vhci_hcd vhci_hcd.0: disconnect device [ 822.764117][ T288] vhci_hcd vhci_hcd.0: stop threads [ 822.769346][ T288] vhci_hcd vhci_hcd.0: release socket [ 823.003898][ T30] audit: type=1400 audit(1766282865.611:425): avc: denied { read append } for pid=15111 comm="syz.5.2445" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 823.006577][ T288] vhci_hcd vhci_hcd.0: disconnect device [ 823.093977][ T30] audit: type=1400 audit(1766282865.621:426): avc: denied { open } for pid=15111 comm="syz.5.2445" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 823.199733][ T30] audit: type=1400 audit(1766282865.621:427): avc: denied { ioctl } for pid=15111 comm="syz.5.2445" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 823.325410][ T288] vhci_hcd vhci_hcd.0: stop threads [ 823.336654][ T288] vhci_hcd vhci_hcd.0: release socket [ 823.347720][T15122] syzkaller1: entered promiscuous mode [ 823.353190][T15122] syzkaller1: entered allmulticast mode [ 823.359356][ T288] vhci_hcd vhci_hcd.0: disconnect device [ 824.003870][ T6469] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 824.155094][ T6469] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.182473][ T6469] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 824.205658][ T6469] usb 2-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 824.219896][ T6469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.230267][ T6469] usb 2-1: Product: syz [ 824.234608][ T6469] usb 2-1: Manufacturer: syz [ 824.239665][ T6469] usb 2-1: SerialNumber: syz [ 824.280182][ T6469] usb 2-1: config 0 descriptor?? [ 824.292086][T15145] netlink: 'syz.5.2453': attribute type 1 has an invalid length. [ 824.294201][ T6469] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 824.307436][T15145] netlink: 'syz.5.2453': attribute type 2 has an invalid length. [ 824.315570][T15145] netlink: 'syz.5.2453': attribute type 2 has an invalid length. [ 824.323406][T15145] netlink: 'syz.5.2453': attribute type 1 has an invalid length. [ 824.356766][ T6469] usb 2-1: Detected SIO [ 824.365813][ T6469] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB3 [ 824.529727][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2449'. [ 824.863194][T15154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.877212][T15154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.214748][ T30] audit: type=1400 audit(1766282867.841:428): avc: denied { append } for pid=15162 comm="syz.1.2460" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 825.215865][T15163] 9p: Bad value for 'rfdno' [ 825.262552][ T30] audit: type=1400 audit(1766282867.881:429): avc: denied { bind } for pid=15160 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 825.262942][T15165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.284139][ T30] audit: type=1400 audit(1766282867.881:430): avc: denied { listen } for pid=15160 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 825.293266][T15165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.315748][ T30] audit: type=1400 audit(1766282867.881:431): avc: denied { connect } for pid=15160 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 825.348765][ T30] audit: type=1400 audit(1766282867.881:432): avc: denied { read } for pid=15160 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 825.567539][ T30] audit: type=1400 audit(1766282868.194:433): avc: denied { module_load } for pid=15164 comm="syz.0.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 826.498222][T15181] random: crng reseeded on system resumption [ 827.213969][ T9718] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 827.261300][ T30] audit: type=1400 audit(1766282869.874:434): avc: denied { setopt } for pid=15190 comm="syz.0.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 828.627307][T15210] netlink: 'syz.0.2468': attribute type 28 has an invalid length. [ 828.800431][T15217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.846692][T15217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.950101][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2471'. [ 829.828176][T15223] syz.0.2473 (15223): drop_caches: 2 [ 830.549388][T15231] ptrace attach of "./syz-executor exec"[15232] was attempted by "./syz-executor exec"[15231] [ 831.353148][T15235] random: crng reseeded on system resumption [ 831.608700][ T30] audit: type=1400 audit(1766282874.224:435): avc: denied { mount } for pid=15240 comm="syz.0.2475" name="/" dev="ramfs" ino=58866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 831.968693][T15252] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 832.901203][T15250] syz.1.2482 (15250): drop_caches: 2 [ 832.924042][ T30] audit: type=1400 audit(1766282875.544:436): avc: denied { write } for pid=15255 comm="syz.5.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 834.898036][T15282] random: crng reseeded on system resumption [ 835.090682][T15272] syz.5.2486 (15272): drop_caches: 2 [ 836.768563][ T30] audit: type=1400 audit(1766282879.364:437): avc: denied { mounton } for pid=15294 comm="syz.2.2495" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 837.188382][ T30] audit: type=1400 audit(1766282879.644:438): avc: denied { connect } for pid=15294 comm="syz.2.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 837.643724][ T30] audit: type=1400 audit(1766282880.254:439): avc: denied { create } for pid=15308 comm="syz.5.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 837.670845][T15312] SELinux: unknown common  [ 837.677999][T15312] SELinux: failed to load policy [ 837.744405][ T30] audit: type=1400 audit(1766282880.284:440): avc: denied { ioctl } for pid=15308 comm="syz.5.2499" path="socket:[58163]" dev="sockfs" ino=58163 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 837.886521][T15318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.896611][T15318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.151651][ T30] audit: type=1400 audit(1766282880.284:441): avc: denied { load_policy } for pid=15308 comm="syz.5.2499" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 838.184333][ T30] audit: type=1400 audit(1766282880.474:442): avc: denied { open } for pid=15313 comm="syz.3.2501" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 838.213606][ T30] audit: type=1400 audit(1766282880.484:443): avc: denied { ioctl } for pid=15313 comm="syz.3.2501" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 838.428693][T15323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.452347][T15323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.473903][ T792] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 838.718584][ T792] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 838.892092][ T792] usb 6-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 838.910493][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.930407][ T792] usb 6-1: config 0 descriptor?? [ 839.089331][ T30] audit: type=1400 audit(1766282881.704:444): avc: denied { getopt } for pid=15321 comm="syz.2.2502" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 839.442440][ T792] waltop 0003:172F:0037.0001: collection stack underflow [ 839.451299][ T792] waltop 0003:172F:0037.0001: item 0 1 0 12 parsing failed [ 839.469259][ T792] waltop 0003:172F:0037.0001: probe with driver waltop failed with error -22 [ 839.855844][ T5887] usb 6-1: USB disconnect, device number 18 [ 840.770189][ T30] audit: type=1400 audit(1766282883.384:445): avc: denied { write } for pid=15344 comm="syz.1.2508" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 841.798935][T15363] sctp: [Deprecated]: syz.5.2511 (pid 15363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 841.798935][T15363] Use struct sctp_sack_info instead [ 841.839400][ T30] audit: type=1400 audit(1766282884.454:446): avc: denied { ioctl } for pid=15354 comm="syz.5.2511" path="socket:[58230]" dev="sockfs" ino=58230 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 841.953091][ T30] audit: type=1400 audit(1766282884.564:447): avc: denied { getopt } for pid=15357 comm="syz.3.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 842.019420][T15364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.116214][T15364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.708365][T15370] syz.2.2510 (15370): drop_caches: 2 [ 843.161981][ T30] audit: type=1400 audit(1766282885.774:448): avc: denied { ioctl } for pid=15378 comm="syz.3.2517" path="socket:[59352]" dev="sockfs" ino=59352 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 843.354963][ T30] audit: type=1400 audit(1766282885.974:449): avc: denied { setopt } for pid=15387 comm="syz.5.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 843.886967][ T30] audit: type=1804 audit(1766282886.494:450): pid=15391 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2519" name="/newroot/261/bus/bus" dev="overlay" ino=1400 res=1 errno=0 [ 844.027877][T15397] xt_cluster: node mask cannot exceed total number of nodes [ 844.179731][T15400] SELinux: policydb version -759146342 does not match my version range 15-35 [ 844.188890][T15400] SELinux: failed to load policy [ 844.256523][ T5887] IPVS: starting estimator thread 0... [ 844.354706][T15395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.366854][ T30] audit: type=1400 audit(1766282886.964:451): avc: denied { associate } for pid=15403 comm="syz.1.2522" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 844.409310][T15395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.464021][T15401] IPVS: using max 73 ests per chain, 175200 per kthread [ 844.578953][ T30] audit: type=1400 audit(1766282887.194:452): avc: denied { execmod } for pid=15404 comm="syz.3.2524" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=60484 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 845.065203][ T30] audit: type=1400 audit(1766282887.194:453): avc: denied { execute } for pid=15404 comm="syz.3.2524" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=60484 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 845.163907][ T30] audit: type=1400 audit(1766282887.304:454): avc: denied { write } for pid=15404 comm="syz.3.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 845.203234][ T30] audit: type=1400 audit(1766282887.304:455): avc: denied { map } for pid=15404 comm="syz.3.2524" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 847.197231][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 847.197244][ T30] audit: type=1400 audit(1766282889.814:458): avc: denied { read } for pid=15436 comm="syz.0.2534" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 847.384223][ T30] audit: type=1400 audit(1766282889.814:459): avc: denied { open } for pid=15436 comm="syz.0.2534" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 847.463907][ T6289] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 847.656604][T15442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2537'. [ 847.684993][ T30] audit: type=1400 audit(1766282890.304:460): avc: denied { read write } for pid=15441 comm="syz.3.2537" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 847.744218][ T6289] usb 6-1: Using ep0 maxpacket: 8 [ 847.759058][ T30] audit: type=1400 audit(1766282890.334:461): avc: denied { open } for pid=15441 comm="syz.3.2537" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 847.805710][T15446] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 847.880505][ T792] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 847.900117][ T30] audit: type=1400 audit(1766282890.474:462): avc: denied { name_connect } for pid=15441 comm="syz.3.2537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 847.928753][ T792] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 847.945121][ T6289] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.063924][ T6289] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 848.207008][ T6289] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 848.219345][ T6289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.281024][ T6289] usb 6-1: config 0 descriptor?? [ 848.862104][ T30] audit: type=1400 audit(1766282891.474:463): avc: denied { listen } for pid=15457 comm="syz.3.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 849.680904][ T30] audit: type=1400 audit(1766282892.294:464): avc: denied { append } for pid=15479 comm="syz.3.2544" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 850.178677][T15487] random: crng reseeded on system resumption [ 850.240241][T13767] usb 6-1: USB disconnect, device number 19 [ 850.445550][ T30] audit: type=1326 audit(1766282893.064:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15476 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ddf8f749 code=0x7fc00000 [ 852.059588][T15510] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2552'. [ 853.056947][ T30] audit: type=1400 audit(1766282895.664:466): avc: denied { create } for pid=15523 comm="syz.3.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 853.234030][ T30] audit: type=1400 audit(1766282895.674:467): avc: denied { bind } for pid=15523 comm="syz.3.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 853.862368][ T6778] lec:lec_start_xmit: lec0:No lecd attached [ 855.376875][T15541] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2558'. [ 855.524464][T15543] ptrace attach of "./syz-executor exec"[15544] was attempted by "./syz-executor exec"[15543] [ 856.581184][ T30] audit: type=1400 audit(1766282899.194:468): avc: denied { bind } for pid=15546 comm="syz.5.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 856.717747][ T30] audit: type=1400 audit(1766282899.214:469): avc: denied { name_bind } for pid=15546 comm="syz.5.2562" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 856.778010][ T30] audit: type=1400 audit(1766282899.214:470): avc: denied { node_bind } for pid=15546 comm="syz.5.2562" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 856.886460][ T30] audit: type=1400 audit(1766282899.494:471): avc: denied { setopt } for pid=15554 comm="syz.1.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 857.400475][T15561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2565'. [ 857.411180][ T30] audit: type=1400 audit(1766282899.564:472): avc: denied { append } for pid=15552 comm="syz.5.2563" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 857.662079][T15568] syz.5.2567 uses obsolete (PF_INET,SOCK_PACKET) [ 858.815802][ T6289] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 858.973538][T15581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.993930][ T6289] usb 6-1: Using ep0 maxpacket: 8 [ 859.000685][ T6289] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 859.008179][T15581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.011657][ T6289] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 859.262676][ T6289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 859.285617][ T6289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 859.374001][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 859.382008][ C1] lec:lec_tx_timeout: lec0 [ 859.466969][ T6289] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 859.521324][T15585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.550369][ T6289] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 859.573699][T15585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.582418][ T6289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 859.734712][ T6289] usb 6-1: Product: syz [ 859.738936][ T6289] usb 6-1: Manufacturer: syz [ 859.743640][ T6289] usb 6-1: SerialNumber: syz [ 859.784960][ T6289] usb 6-1: config 0 descriptor?? [ 859.879869][T15572] raw-gadget.6 gadget.5: fail, usb_ep_enable returned -22 [ 860.301400][ T6289] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 860.310228][ T6289] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 860.326690][ T6289] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 860.339099][ T6289] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 860.354409][ T6289] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 860.407898][T15593] netlink: 'syz.2.2573': attribute type 11 has an invalid length. [ 860.424978][T15593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2573'. [ 860.874104][ T6289] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 860.906525][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 860.913150][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 860.919773][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 860.926856][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 860.933408][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 860.939966][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 860.946538][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 860.953080][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 860.959690][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 860.966365][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 860.972931][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 860.979545][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 860.986112][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 860.992661][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 860.999209][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.005771][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.012311][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.018867][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.026553][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.033105][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.039691][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.046286][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.052849][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.059404][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.065955][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.072496][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.079041][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.085612][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.092161][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.098779][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.105346][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.111895][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.118465][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.125017][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.132285][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.138848][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.145393][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.151935][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.158486][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.165038][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.171515][ T6289] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 861.179863][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.186387][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.192857][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.199314][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.205823][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.212274][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.218768][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.225309][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.231765][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.238428][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.245957][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.252517][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.259232][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.265845][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.272418][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.278996][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.285583][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.292158][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.298739][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.305347][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.311923][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.318482][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.325166][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.332819][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.339443][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.346042][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.352628][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.359226][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.365823][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.372416][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.379020][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.385610][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.392193][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.398796][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.405387][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.411964][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.418541][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.425122][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.431697][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.439450][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.446059][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.452645][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.459342][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.465945][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.472513][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.479089][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.485773][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.492336][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.498897][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.505469][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.512040][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.518618][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.525194][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.531754][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.538757][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.545411][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.551999][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.558566][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.565259][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.571854][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.578466][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.585075][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.591655][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.598608][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.605203][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.611777][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.618641][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.625310][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.631895][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.644120][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.650701][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.657332][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.664024][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.670610][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.677199][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.683778][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.690366][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.697083][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.703673][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.710288][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.716874][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.723473][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.730069][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.736654][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.743359][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.749948][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.756549][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.763135][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.769757][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.776357][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.782938][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.789525][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.796106][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.802699][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.809306][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.815901][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.822482][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.829117][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.835668][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.842223][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.853962][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.860517][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.867090][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.873671][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.880243][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.886805][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.893357][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.899922][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.906493][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.913075][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.919675][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.926277][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.932866][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.939767][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.953930][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.960491][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.967099][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.973679][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.980276][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.986860][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 861.993438][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.000012][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.006598][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.013168][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.019749][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.026335][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.032911][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.039492][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.046077][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.052783][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.059365][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.065947][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.072518][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.079097][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.085689][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.092261][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.098880][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.105471][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.112046][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.118618][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.125212][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.131784][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.138387][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.144991][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.151708][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.158304][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.164893][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.171470][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.178090][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.184687][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.191263][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.197861][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.204472][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.211044][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.217594][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.224155][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.230735][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.237287][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.243840][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.250415][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.257198][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.263801][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.270397][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.277025][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.283606][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.290157][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.296736][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.303296][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.309870][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.316458][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.323016][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.329614][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.336168][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.342731][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.349300][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.356186][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.362752][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.369305][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.375860][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.382426][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.389088][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.395678][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.402238][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.408815][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.415384][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.421930][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.429297][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.435865][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.442470][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.449060][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.455636][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.462402][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.468963][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.475537][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.482107][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.488658][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.495271][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.501841][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.508402][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.514972][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.521527][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.528087][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.534641][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.541188][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.547738][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.555132][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.561699][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.568239][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.574823][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.581386][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.588015][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.594591][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.601132][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.607703][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.614290][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.620876][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.627457][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.634035][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.640579][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.647134][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.653678][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.660251][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.666878][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.673440][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.680023][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.686586][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.693133][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.699708][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.706256][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.712809][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.719361][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.725913][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.732458][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.739013][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.745561][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.752118][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.758712][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.765365][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.771914][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.778490][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.785035][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.791580][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.798137][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.804674][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.811214][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.817754][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.824291][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.830834][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.837389][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.843948][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.850494][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.857038][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.863594][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.870180][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.876718][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 862.888097][ T6289] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 863.426035][T15612] netlink: 'syz.5.2578': attribute type 1 has an invalid length. [ 863.461874][ T6289] usb 6-1: USB disconnect, device number 20 [ 863.483906][T15612] netlink: 'syz.5.2578': attribute type 2 has an invalid length. [ 863.725157][T15623] JFS: discard option not supported on device [ 863.733747][T15623] Mount JFS Failure: -22 [ 863.738163][T15623] jfs_mount failed w/return code = -22 [ 864.075840][ T30] audit: type=1400 audit(1766282906.694:473): avc: denied { bind } for pid=15620 comm="syz.1.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 864.137365][T15612] netlink: 'syz.5.2578': attribute type 2 has an invalid length. [ 864.176244][T15612] netlink: 'syz.5.2578': attribute type 1 has an invalid length. [ 865.477014][ T30] audit: type=1326 audit(1766282908.094:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15631 comm="syz.0.2584" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0055b8f749 code=0x0 [ 865.625310][T15632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2583'. [ 866.065291][ T30] audit: type=1400 audit(1766282908.124:475): avc: denied { ioctl } for pid=15634 comm="syz.5.2585" path="socket:[60906]" dev="sockfs" ino=60906 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 866.264981][T15648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2586'. [ 866.461094][T15653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.533010][T15653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.551335][T15656] ntfs3(nullb0): Primary boot signature is not NTFS. [ 866.589977][T15656] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 866.632859][T15653] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 867.319667][ T5886] IPVS: starting estimator thread 0... [ 867.450159][T15671] Driver unsupported XDP return value 0 on prog (id 568) dev N/A, expect packet loss! [ 869.626388][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 870.016032][T15668] IPVS: using max 77 ests per chain, 184800 per kthread [ 870.154259][T15675] ubi31: detaching mtd0 [ 870.310411][T15675] ubi31: mtd0 is detached [ 871.089907][T15687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.214537][T15687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.403885][ T30] audit: type=1400 audit(1766282914.014:476): avc: denied { setcheckreqprot } for pid=15690 comm="syz.1.2600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 872.058133][T15704] netlink: 'syz.1.2602': attribute type 1 has an invalid length. [ 872.066314][T15704] netlink: 'syz.1.2602': attribute type 2 has an invalid length. [ 872.091615][T15704] netlink: 'syz.1.2602': attribute type 2 has an invalid length. [ 872.111255][T15704] netlink: 'syz.1.2602': attribute type 1 has an invalid length. [ 872.129095][ T5886] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 872.293945][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 872.303072][ T5886] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 872.328254][ T5886] usb 6-1: config 0 has no interface number 0 [ 872.363564][ T5886] usb 6-1: config 0 interface 89 has no altsetting 0 [ 872.388415][ T5886] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 872.427930][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.467198][ T5886] usb 6-1: Product: syz [ 872.479738][ T5886] usb 6-1: Manufacturer: syz [ 872.497017][ T5886] usb 6-1: SerialNumber: syz [ 872.518043][ T5886] usb 6-1: config 0 descriptor?? [ 872.536847][ T5886] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 872.553017][ T5886] em28xx 6-1:0.89: Video interface 89 found: bulk [ 873.676457][ T5886] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 873.767401][ T5886] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 873.793057][ T5886] em28xx 6-1:0.89: board has no eeprom [ 873.921915][ T5886] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 873.931200][ T5886] em28xx 6-1:0.89: analog set to bulk mode. [ 873.938586][ T5984] em28xx 6-1:0.89: Registering V4L2 extension [ 873.986102][ T5984] em28xx 6-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 873.995354][ T5984] em28xx 6-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 874.009547][ T5984] em28xx 6-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 874.019754][ T5984] em28xx 6-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 874.031455][ T5984] em28xx 6-1:0.89: Config register raw data: 0xfffffffb [ 874.139733][ T5984] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 874.280549][ T5984] em28xx 6-1:0.89: No AC97 audio processor [ 874.510753][ T5984] usb 6-1: Decoder not found [ 874.527196][ T5984] em28xx 6-1:0.89: failed to create media graph [ 874.534985][ T6289] usb 6-1: USB disconnect, device number 21 [ 874.542095][ T6289] em28xx 6-1:0.89: Disconnecting em28xx [ 874.562217][ T5984] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 874.615894][ T5984] em28xx 6-1:0.89: Registering snapshot button... [ 874.631050][ T30] audit: type=1400 audit(1766282917.244:477): avc: denied { ioctl } for pid=15728 comm="syz.5.2608" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 874.639064][ T5984] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input31 [ 874.708652][ T5984] em28xx 6-1:0.89: Remote control support is not available for this card. [ 874.759612][ T6289] em28xx 6-1:0.89: Closing input extension [ 874.774002][ T6289] em28xx 6-1:0.89: Deregistering snapshot button [ 874.817511][ T6289] em28xx 6-1:0.89: Freeing device [ 875.373814][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 875.381826][ C1] lec:lec_tx_timeout: lec0 [ 875.496041][T15733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 876.211785][ T30] audit: type=1400 audit(1766282918.824:478): avc: denied { write } for pid=15758 comm="syz.1.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 876.762035][ T30] audit: type=1400 audit(1766282919.354:479): avc: denied { setopt } for pid=15756 comm="syz.2.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 877.053968][ T5984] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 877.901822][ T5984] usb 6-1: Using ep0 maxpacket: 8 [ 879.286984][T15790] ubi31: attaching mtd0 [ 879.296745][T15790] ubi31: scanning is finished [ 879.727473][T11780] Bluetooth: hci4: command 0x0406 tx timeout [ 879.951768][ T5984] usb 6-1: unable to read config index 0 descriptor/all [ 879.959082][ T5984] usb 6-1: can't read configurations, error -71 [ 879.987106][T15790] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 881.440797][T15807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.474147][T15807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.508094][ T30] audit: type=1400 audit(1766282924.114:480): avc: denied { create } for pid=15806 comm="syz.3.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 881.574331][ T30] audit: type=1400 audit(1766282924.114:481): avc: denied { lock } for pid=15806 comm="syz.3.2624" path="socket:[60302]" dev="sockfs" ino=60302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 881.649712][ T30] audit: type=1400 audit(1766282924.154:482): avc: denied { mount } for pid=15811 comm="syz.1.2628" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 881.703826][ T30] audit: type=1400 audit(1766282924.294:483): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 881.734697][T15819] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2629'. [ 881.777657][T15819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.786591][T15819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.797722][T15819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.626866][T15843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.778637][T15843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.810672][T15843] fuse: Bad value for 'user_id' [ 882.822070][T15843] fuse: Bad value for 'user_id' [ 883.378221][T15856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.398904][T15856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.457110][ T5984] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 883.537234][T15843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.616410][T15843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.684973][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.705707][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.734017][ T5984] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 883.775615][T15862] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 883.775896][T15861] IPVS: stopping backup sync thread 15862 ... [ 883.793046][ T5984] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice=97.a4 [ 883.918032][ T5984] usb 6-1: New USB device strings: Mfr=120, Product=225, SerialNumber=0 [ 883.963009][ T30] audit: type=1400 audit(1766282931.578:484): avc: denied { write } for pid=15860 comm="syz.3.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 884.004150][ T5984] usb 6-1: Product: syz [ 884.008420][ T5984] usb 6-1: Manufacturer: syz [ 884.022076][ T5984] usb 6-1: config 0 descriptor?? [ 884.469580][T15867] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=100 sclass=netlink_tcpdiag_socket pid=15867 comm=syz.3.2640 [ 885.434891][T15867] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2640'. [ 885.622186][ T5984] letsketch 0003:6161:4D15.0003: Device info: ࡃ [ 885.871062][ T5984] letsketch 0003:6161:4D15.0003: Device info: 㡵 [ 886.126508][T15848] netlink: 296 bytes leftover after parsing attributes in process `syz.5.2635'. [ 886.631950][ T5984] letsketch 0003:6161:4D15.0003: Device info: 繋 [ 886.645512][ T30] audit: type=1400 audit(1766282934.268:485): avc: denied { recv } for pid=5819 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.239 dest=44048 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 886.689299][T15877] process 'syz.3.2643' launched './file2' with NULL argv: empty string added [ 886.824919][ T30] audit: type=1400 audit(1766282934.338:486): avc: denied { execute_no_trans } for pid=15874 comm="syz.3.2643" path="/518/file2" dev="tmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 887.772267][ T5984] usb 6-1: Max retries (5) exceeded reading string descriptor 2 [ 887.828738][ T5984] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -71 [ 887.847919][ T30] audit: type=1400 audit(1766282935.468:487): avc: denied { append } for pid=15893 comm="syz.1.2647" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 887.926097][ T5984] usb 6-1: USB disconnect, device number 24 [ 888.227189][ T30] audit: type=1400 audit(1766282935.668:488): avc: denied { ioctl } for pid=15897 comm="syz.2.2649" path="socket:[61916]" dev="sockfs" ino=61916 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 889.424348][ T30] audit: type=1400 audit(1766282937.038:489): avc: denied { create } for pid=15926 comm="syz.1.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 889.511483][ T30] audit: type=1400 audit(1766282937.048:490): avc: denied { ioctl } for pid=15926 comm="syz.1.2654" path="socket:[62662]" dev="sockfs" ino=62662 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 890.158799][T15940] vivid-000: ================= START STATUS ================= [ 890.200677][T15940] vivid-000: Enable Output Cropping: true grabbed [ 890.295034][T15940] vivid-000: Enable Output Composing: true grabbed [ 890.443976][T15940] vivid-000: Enable Output Scaler: true grabbed [ 890.492859][ T30] audit: type=1400 audit(1766282938.038:491): avc: denied { bind } for pid=15939 comm="syz.2.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 890.603400][T15940] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 890.705255][T15940] vivid-000: Transmit Mode: HDMI grabbed [ 890.772291][T15940] vivid-000: Hotplug Present: 0x00000000 [ 890.778296][T15940] vivid-000: RxSense Present: 0x00000000 [ 890.785281][T15940] vivid-000: EDID Present: 0x00000000 [ 890.796675][T15940] vivid-000: ================== END STATUS ================== [ 890.796750][ T30] audit: type=1400 audit(1766282938.378:492): avc: denied { mount } for pid=15920 comm="syz.0.2652" name="/" dev="rpc_pipefs" ino=61988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 891.136534][ T30] audit: type=1400 audit(1766282938.628:493): avc: denied { ioctl } for pid=15951 comm="syz.1.2658" path="socket:[62009]" dev="sockfs" ino=62009 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 891.905351][ T30] audit: type=1400 audit(1766282939.528:494): avc: denied { name_bind } for pid=15971 comm="syz.1.2664" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 892.026885][T15979] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 892.035869][T15979] ALSA: mixer_oss: invalid index 1374389 [ 892.051693][T15979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.062009][T15979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.159205][T15981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.169956][T15981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.962399][T15993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.971169][T15993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.370051][ T30] audit: type=1400 audit(1766282941.988:495): avc: denied { read } for pid=16011 comm="syz.2.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 894.511568][T16021] FAULT_INJECTION: forcing a failure. [ 894.511568][T16021] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 894.525057][T16021] CPU: 1 UID: 0 PID: 16021 Comm: syz.3.2680 Not tainted syzkaller #0 PREEMPT(full) [ 894.525072][T16021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 894.525077][T16021] Call Trace: [ 894.525081][T16021] [ 894.525085][T16021] dump_stack_lvl+0x16c/0x1f0 [ 894.525102][T16021] should_fail_ex+0x512/0x640 [ 894.525120][T16021] should_fail_alloc_page+0xe7/0x130 [ 894.525135][T16021] prepare_alloc_pages+0x401/0x670 [ 894.525152][T16021] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 894.525165][T16021] ? lock_acquire+0x179/0x330 [ 894.525177][T16021] ? find_held_lock+0x2b/0x80 [ 894.525194][T16021] ? mark_held_locks+0x49/0x80 [ 894.525206][T16021] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 894.525216][T16021] ? finish_task_switch.isra.0+0x2e0/0xbd0 [ 894.525234][T16021] ? rcu_is_watching+0x12/0xc0 [ 894.525245][T16021] ? trace_sched_exit_tp+0xd1/0x110 [ 894.525257][T16021] ? __lock_acquire+0x436/0x2890 [ 894.525270][T16021] ? __lock_acquire+0x436/0x2890 [ 894.525281][T16021] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 894.525293][T16021] ? policy_nodemask+0xea/0x4e0 [ 894.525308][T16021] alloc_pages_mpol+0x1fb/0x550 [ 894.525323][T16021] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 894.525340][T16021] alloc_pages_noprof+0x131/0x390 [ 894.525354][T16021] pte_alloc_one+0x1e/0x3d0 [ 894.525370][T16021] __pte_alloc+0x6d/0x3f0 [ 894.525382][T16021] ? __pfx___pte_alloc+0x10/0x10 [ 894.525398][T16021] do_anonymous_page+0x1092/0x2190 [ 894.525419][T16021] __handle_mm_fault+0x1ecf/0x2bb0 [ 894.525439][T16021] ? __pfx___handle_mm_fault+0x10/0x10 [ 894.525454][T16021] ? folio_mark_accessed+0xc1/0xbf0 [ 894.525466][T16021] ? __pfx_folio_mark_accessed+0x10/0x10 [ 894.525477][T16021] ? find_held_lock+0x2b/0x80 [ 894.525501][T16021] handle_mm_fault+0x3fe/0xad0 [ 894.525519][T16021] __get_user_pages+0x54e/0x3590 [ 894.525536][T16021] ? down_read_killable+0x313/0x4c0 [ 894.525550][T16021] ? __lock_acquire+0x436/0x2890 [ 894.525562][T16021] ? __pfx___get_user_pages+0x10/0x10 [ 894.525579][T16021] __gup_longterm_locked+0xa92/0x17e0 [ 894.525596][T16021] ? __pfx___gup_longterm_locked+0x10/0x10 [ 894.525612][T16021] ? find_held_lock+0x2b/0x80 [ 894.525627][T16021] ? sanity_check_pinned_pages+0x23/0x11d0 [ 894.525643][T16021] gup_fast_fallback+0xf5f/0x2350 [ 894.525666][T16021] ? __pfx_gup_fast_fallback+0x10/0x10 [ 894.525680][T16021] ? finish_task_switch.isra.0+0x207/0xbd0 [ 894.525696][T16021] ? finish_task_switch.isra.0+0x2e0/0xbd0 [ 894.525713][T16021] ? rcu_is_watching+0x12/0xc0 [ 894.525722][T16021] ? trace_sched_exit_tp+0xd1/0x110 [ 894.525734][T16021] pin_user_pages_fast+0xa7/0xf0 [ 894.525748][T16021] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 894.525762][T16021] ? irqentry_exit+0x1dd/0x8c0 [ 894.525777][T16021] iov_iter_extract_pages+0x3a2/0x1ed0 [ 894.525794][T16021] ? __pfx_nhpoly1305_units+0x10/0x10 [ 894.525812][T16021] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 894.525831][T16021] ? __local_bh_enable_ip+0xa4/0x120 [ 894.525846][T16021] ? lockdep_hardirqs_on+0x7c/0x110 [ 894.525862][T16021] ? kernel_fpu_end+0x59/0x70 [ 894.525879][T16021] ? __local_bh_enable_ip+0xa4/0x120 [ 894.525900][T16021] ? kernel_fpu_end+0x5e/0x70 [ 894.525917][T16021] ? nhpoly1305_sse2_update+0x8d/0xc0 [ 894.525932][T16021] extract_iter_to_sg+0xf6e/0x20c0 [ 894.525947][T16021] ? crypto_hash_walk_done+0x63/0x400 [ 894.525966][T16021] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 894.525980][T16021] ? __pfx_unpin_user_page+0x10/0x10 [ 894.526004][T16021] hash_sendmsg+0x435/0xfa0 [ 894.526022][T16021] ____sys_sendmsg+0xa5d/0xc30 [ 894.526036][T16021] ? copy_msghdr_from_user+0x10a/0x160 [ 894.526046][T16021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 894.526062][T16021] ? __pfx__kstrtoull+0x10/0x10 [ 894.526076][T16021] ___sys_sendmsg+0x134/0x1d0 [ 894.526087][T16021] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.526104][T16021] ? find_held_lock+0x2b/0x80 [ 894.526128][T16021] __sys_sendmmsg+0x200/0x420 [ 894.526140][T16021] ? __pfx___sys_sendmmsg+0x10/0x10 [ 894.526155][T16021] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 894.526175][T16021] ? fput+0x70/0xf0 [ 894.526184][T16021] ? ksys_write+0x1ac/0x250 [ 894.526196][T16021] ? __pfx_ksys_write+0x10/0x10 [ 894.526211][T16021] __x64_sys_sendmmsg+0x9c/0x100 [ 894.526221][T16021] ? lockdep_hardirqs_on+0x7c/0x110 [ 894.526234][T16021] do_syscall_64+0xcd/0xf80 [ 894.526249][T16021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.526259][T16021] RIP: 0033:0x7f4fb398f749 [ 894.526268][T16021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.526278][T16021] RSP: 002b:00007f4fb4791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 894.526287][T16021] RAX: ffffffffffffffda RBX: 00007f4fb3be5fa0 RCX: 00007f4fb398f749 [ 894.526293][T16021] RDX: 0000000000000001 RSI: 0000200000004140 RDI: 0000000000000008 [ 894.526299][T16021] RBP: 00007f4fb4791090 R08: 0000000000000000 R09: 0000000000000000 [ 894.526305][T16021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.526310][T16021] R13: 00007f4fb3be6038 R14: 00007f4fb3be5fa0 R15: 00007ffe12a8eb18 [ 894.526324][T16021] [ 895.732398][ T30] audit: type=1400 audit(1766282943.348:496): avc: denied { write } for pid=16011 comm="syz.2.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 895.941072][T16022] netlink: 'syz.2.2676': attribute type 1 has an invalid length. [ 896.278927][T16042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.418423][T16042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.550878][T16022] 8021q: adding VLAN 0 to HW filter on device bond2 [ 896.620771][T16052] batadv_slave_1: entered promiscuous mode [ 896.635775][T16050] batadv_slave_1: left promiscuous mode [ 896.783824][ T792] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 896.850488][ T30] audit: type=1400 audit(1766282944.468:497): avc: denied { write } for pid=16055 comm="syz.1.2687" name="file1" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 896.852080][T16056] FAULT_INJECTION: forcing a failure. [ 896.852080][T16056] name failslab, interval 1, probability 0, space 0, times 1 [ 896.958018][T16056] CPU: 0 UID: 0 PID: 16056 Comm: syz.1.2687 Not tainted syzkaller #0 PREEMPT(full) [ 896.958034][T16056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 896.958040][T16056] Call Trace: [ 896.958044][T16056] [ 896.958048][T16056] dump_stack_lvl+0x16c/0x1f0 [ 896.958065][T16056] should_fail_ex+0x512/0x640 [ 896.958080][T16056] ? __kmalloc_noprof+0xca/0x910 [ 896.958098][T16056] should_failslab+0xc2/0x120 [ 896.958112][T16056] __kmalloc_noprof+0xeb/0x910 [ 896.958128][T16056] ? do_sys_poll+0x24a/0xdf0 [ 896.958143][T16056] ? do_sys_poll+0x24a/0xdf0 [ 896.958155][T16056] do_sys_poll+0x24a/0xdf0 [ 896.958168][T16056] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 896.958181][T16056] ? is_bpf_text_address+0x94/0x1a0 [ 896.958194][T16056] ? __kernel_text_address+0xd/0x40 [ 896.958207][T16056] ? unwind_get_return_address+0x59/0xa0 [ 896.958223][T16056] ? __pfx_do_sys_poll+0x10/0x10 [ 896.958249][T16056] ? find_held_lock+0x2b/0x80 [ 896.958288][T16056] ? __mutex_unlock_slowpath+0x161/0x790 [ 896.958304][T16056] ? set_user_sigmask+0x21b/0x2b0 [ 896.958317][T16056] ? __pfx_set_user_sigmask+0x10/0x10 [ 896.958331][T16056] ? __fget_files+0x20e/0x3c0 [ 896.958347][T16056] __x64_sys_ppoll+0x254/0x2d0 [ 896.958362][T16056] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 896.958375][T16056] ? ksys_write+0x1ac/0x250 [ 896.958388][T16056] ? __pfx_ksys_write+0x10/0x10 [ 896.958404][T16056] do_syscall_64+0xcd/0xf80 [ 896.958418][T16056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.958429][T16056] RIP: 0033:0x7f19ddf8f749 [ 896.958437][T16056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.958446][T16056] RSP: 002b:00007f19dee41038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 896.958456][T16056] RAX: ffffffffffffffda RBX: 00007f19de1e5fa0 RCX: 00007f19ddf8f749 [ 896.958462][T16056] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 896.958468][T16056] RBP: 00007f19dee41090 R08: 0000000000000000 R09: 0000000000000000 [ 896.958474][T16056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.958479][T16056] R13: 00007f19de1e6038 R14: 00007f19de1e5fa0 R15: 00007ffc433ed708 [ 896.958492][T16056] [ 896.972898][ T30] audit: type=1400 audit(1766282944.468:498): avc: denied { open } for pid=16055 comm="syz.1.2687" path="/558/file0/file1" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 897.158910][ T792] usb 6-1: Using ep0 maxpacket: 16 [ 897.327327][ T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.339050][ T792] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 897.348174][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.998210][ T792] usb 6-1: config 0 descriptor?? [ 898.372874][T16076] fuse: Bad value for 'user_id' [ 898.377865][T16076] fuse: Bad value for 'user_id' [ 898.384173][T16076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2692'. [ 898.458060][ T792] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 898.563842][ T30] audit: type=1400 audit(1766282946.088:499): avc: denied { listen } for pid=16075 comm="syz.1.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 899.550999][ T30] audit: type=1400 audit(1766282947.168:500): avc: denied { read write } for pid=16086 comm="syz.3.2695" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 899.914628][ T30] audit: type=1400 audit(1766282947.168:501): avc: denied { open } for pid=16086 comm="syz.3.2695" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 899.966854][ T792] usb 6-1: USB disconnect, device number 25 [ 900.010373][T16091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.034527][T16093] comedi comedi1: pcmda12: I/O port conflict (0xfb,16) [ 900.034611][T16091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.241543][T16098] netlink: 'syz.2.2696': attribute type 4 has an invalid length. [ 900.284134][T16098] netlink: 'syz.2.2696': attribute type 4 has an invalid length. [ 902.453832][ T30] audit: type=1400 audit(1766282950.048:502): avc: denied { setopt } for pid=16131 comm="syz.0.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 903.407539][T16139] FAULT_INJECTION: forcing a failure. [ 903.407539][T16139] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 903.467443][T16139] CPU: 0 UID: 0 PID: 16139 Comm: syz.3.2709 Not tainted syzkaller #0 PREEMPT(full) [ 903.467457][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 903.467463][T16139] Call Trace: [ 903.467467][T16139] [ 903.467471][T16139] dump_stack_lvl+0x16c/0x1f0 [ 903.467489][T16139] should_fail_ex+0x512/0x640 [ 903.467508][T16139] _copy_to_iter+0x463/0x1710 [ 903.467526][T16139] ? __pfx__copy_to_iter+0x10/0x10 [ 903.467541][T16139] ? userfaultfd_show_fdinfo+0x17d/0x1d0 [ 903.467557][T16139] ? fput+0x70/0xf0 [ 903.467565][T16139] ? __pfx_userfaultfd_show_fdinfo+0x10/0x10 [ 903.467579][T16139] ? seq_show+0x574/0x880 [ 903.467591][T16139] seq_read_iter+0xd02/0x12d0 [ 903.467611][T16139] seq_read+0x3a3/0x570 [ 903.467625][T16139] ? __pfx_seq_read+0x10/0x10 [ 903.467638][T16139] ? lock_acquire+0x179/0x330 [ 903.467652][T16139] ? __pfx___might_resched+0x10/0x10 [ 903.467661][T16139] ? avc_policy_seqno+0x9/0x20 [ 903.467681][T16139] ? rw_verify_area+0xcf/0x6c0 [ 903.467692][T16139] ? __pfx_seq_read+0x10/0x10 [ 903.467706][T16139] vfs_read+0x1e4/0xcf0 [ 903.467719][T16139] ? __pfx___mutex_lock+0x10/0x10 [ 903.467735][T16139] ? __pfx_vfs_read+0x10/0x10 [ 903.467751][T16139] ? __fget_files+0x20e/0x3c0 [ 903.467770][T16139] ksys_read+0x12a/0x250 [ 903.467782][T16139] ? __pfx_ksys_read+0x10/0x10 [ 903.467799][T16139] do_syscall_64+0xcd/0xf80 [ 903.467813][T16139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.467823][T16139] RIP: 0033:0x7f4fb398f749 [ 903.467831][T16139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 903.467841][T16139] RSP: 002b:00007f4fb4791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 903.467851][T16139] RAX: ffffffffffffffda RBX: 00007f4fb3be5fa0 RCX: 00007f4fb398f749 [ 903.467857][T16139] RDX: 0000000000002020 RSI: 0000200000000040 RDI: 0000000000000004 [ 903.467863][T16139] RBP: 00007f4fb4791090 R08: 0000000000000000 R09: 0000000000000000 [ 903.467868][T16139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.467874][T16139] R13: 00007f4fb3be6038 R14: 00007f4fb3be5fa0 R15: 00007ffe12a8eb18 [ 903.467888][T16139] [ 904.230964][T16161] FAULT_INJECTION: forcing a failure. [ 904.230964][T16161] name failslab, interval 1, probability 0, space 0, times 0 [ 904.243854][T16161] CPU: 0 UID: 0 PID: 16161 Comm: syz.2.2717 Not tainted syzkaller #0 PREEMPT(full) [ 904.243876][T16161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 904.243886][T16161] Call Trace: [ 904.243891][T16161] [ 904.243897][T16161] dump_stack_lvl+0x16c/0x1f0 [ 904.243922][T16161] should_fail_ex+0x512/0x640 [ 904.243948][T16161] ? fs_reclaim_acquire+0xae/0x150 [ 904.243963][T16161] should_failslab+0xc2/0x120 [ 904.243978][T16161] __kmalloc_noprof+0xeb/0x910 [ 904.243994][T16161] ? tomoyo_encode2+0x100/0x3e0 [ 904.244011][T16161] ? tomoyo_encode2+0x100/0x3e0 [ 904.244024][T16161] tomoyo_encode2+0x100/0x3e0 [ 904.244039][T16161] tomoyo_encode+0x29/0x50 [ 904.244052][T16161] tomoyo_realpath_from_path+0x18f/0x6e0 [ 904.244070][T16161] tomoyo_path_number_perm+0x245/0x580 [ 904.244081][T16161] ? tomoyo_path_number_perm+0x237/0x580 [ 904.244094][T16161] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 904.244107][T16161] ? find_held_lock+0x2b/0x80 [ 904.244134][T16161] ? find_held_lock+0x2b/0x80 [ 904.244149][T16161] ? hook_file_ioctl_common+0x144/0x410 [ 904.244168][T16161] ? __fget_files+0x20e/0x3c0 [ 904.244185][T16161] security_file_ioctl+0x9b/0x240 [ 904.244199][T16161] __x64_sys_ioctl+0xb7/0x210 [ 904.244212][T16161] do_syscall_64+0xcd/0xf80 [ 904.244230][T16161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.244240][T16161] RIP: 0033:0x7f294598f749 [ 904.244249][T16161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.244259][T16161] RSP: 002b:00007f2943bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 904.244269][T16161] RAX: ffffffffffffffda RBX: 00007f2945be5fa0 RCX: 00007f294598f749 [ 904.244275][T16161] RDX: 0000000000000000 RSI: 000000004008af20 RDI: 0000000000000004 [ 904.244281][T16161] RBP: 00007f2943bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 904.244286][T16161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.244292][T16161] R13: 00007f2945be6038 R14: 00007f2945be5fa0 R15: 00007ffd706b4ed8 [ 904.244305][T16161] [ 904.244314][T16161] ERROR: Out of memory at tomoyo_realpath_from_path. [ 904.472381][T16159] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2715'. [ 904.524559][T16164] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2715'. [ 905.459221][T16175] random: crng reseeded on system resumption [ 905.722658][T16177] binder: 16166:16177 ioctl c0306201 0 returned -14 [ 905.722875][ T30] audit: type=1400 audit(1766282953.338:503): avc: denied { read } for pid=16166 comm="syz.2.2719" path="socket:[63907]" dev="sockfs" ino=63907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 906.658054][T16185] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 907.326043][ T30] audit: type=1400 audit(1766282954.948:504): avc: denied { getattr } for pid=16180 comm="syz.2.2722" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 907.327168][T16195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.408427][T16195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.446943][ T30] audit: type=1400 audit(1766282955.038:505): avc: denied { write } for pid=16180 comm="syz.2.2722" name="kcm" dev="proc" ino=4026533268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 907.474177][T16201] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2728'. [ 907.510076][T16195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.514119][T16201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16201 comm=syz.1.2728 [ 907.521024][T16195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.581840][T16201] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2728'. [ 908.026174][ T30] audit: type=1400 audit(1766282955.648:506): avc: denied { create } for pid=16210 comm="syz.0.2732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 908.063844][ T30] audit: type=1400 audit(1766282955.678:507): avc: denied { read } for pid=16210 comm="syz.0.2732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 908.106569][T16216] kAFS: unparsable volume name [ 908.112697][ T30] audit: type=1400 audit(1766282955.728:508): avc: denied { map } for pid=16210 comm="syz.0.2732" path="socket:[64582]" dev="sockfs" ino=64582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 908.165331][T16218] cgroup: Unknown subsys name 'hash' [ 908.173242][ T30] audit: type=1400 audit(1766282955.788:509): avc: denied { read } for pid=16214 comm="syz.5.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 908.347078][T16223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 908.377186][T16223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.386985][T16223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.174031][ T30] audit: type=1400 audit(1766282956.798:510): avc: denied { setopt } for pid=16230 comm="syz.5.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 910.844417][ T792] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 911.157751][ T792] usb 6-1: Using ep0 maxpacket: 32 [ 911.301103][ T792] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 911.746979][ T792] usb 6-1: config 0 has no interface number 0 [ 911.756038][ T792] usb 6-1: config 0 interface 89 has no altsetting 0 [ 911.764715][ T792] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 911.778059][ T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.790822][ T792] usb 6-1: Product: syz [ 911.795500][ T792] usb 6-1: Manufacturer: syz [ 911.800096][ T792] usb 6-1: SerialNumber: syz [ 911.810934][ T792] usb 6-1: config 0 descriptor?? [ 911.820968][ T792] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 911.831515][ T792] em28xx 6-1:0.89: Video interface 89 found: bulk [ 911.857486][T16252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.887091][T16252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.902953][T16258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.918565][T16258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.956338][ T30] audit: type=1400 audit(1766282960.578:511): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 913.115451][T16271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.202297][ T792] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 913.238874][T16271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.441121][ T792] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 913.453248][ T792] em28xx 6-1:0.89: board has no eeprom [ 913.512922][T16279] random: crng reseeded on system resumption [ 913.530476][ T792] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 913.550633][ T792] em28xx 6-1:0.89: analog set to bulk mode. [ 913.578100][ T5984] em28xx 6-1:0.89: Registering V4L2 extension [ 913.628431][ T792] usb 6-1: USB disconnect, device number 26 [ 913.653416][ T792] em28xx 6-1:0.89: Disconnecting em28xx [ 913.665525][ T5984] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 913.673613][ T5984] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 913.682654][ T5984] em28xx 6-1:0.89: No AC97 audio processor [ 913.722781][ T5984] usb 6-1: Decoder not found [ 913.735739][ T5984] em28xx 6-1:0.89: failed to create media graph [ 913.755399][ T5984] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 913.777431][ T5984] em28xx 6-1:0.89: Registering snapshot button... [ 913.802330][ T5984] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input32 [ 913.838984][ T5984] em28xx 6-1:0.89: Remote control support is not available for this card. [ 913.864917][ T792] em28xx 6-1:0.89: Closing input extension [ 913.876357][ T792] em28xx 6-1:0.89: Deregistering snapshot button [ 913.914385][ T792] em28xx 6-1:0.89: Freeing device [ 915.324527][T16302] loop6: detected capacity change from 0 to 524287487 [ 915.332318][T16302] Buffer I/O error on dev loop6, logical block 0, async page read [ 915.340278][ T30] audit: type=1400 audit(1766282962.938:512): avc: denied { append } for pid=16294 comm="syz.0.2752" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 915.352111][T16302] Buffer I/O error on dev loop6, logical block 0, async page read [ 915.471459][T16302] Buffer I/O error on dev loop6, logical block 0, async page read [ 915.505647][T16302] Buffer I/O error on dev loop6, logical block 0, async page read [ 916.329070][T16302] Buffer I/O error on dev loop6, logical block 0, async page read [ 916.359384][T16302] Buffer I/O error on dev loop6, logical block 0, async page read [ 916.384017][T16302] Buffer I/O error on dev loop6, logical block 0, async page read [ 916.391947][T16302] Buffer I/O error on dev loop6, logical block 0, async page read [ 916.401351][T16302] ldm_validate_partition_table(): Disk read failed. [ 916.408117][T16302] Buffer I/O error on dev loop6, logical block 0, async page read [ 916.456205][T16302] Buffer I/O error on dev loop6, logical block 0, async page read [ 916.495590][T16302] Dev loop6: unable to read RDB block 0 [ 916.502797][T16302] loop6: unable to read partition table [ 916.508789][T16302] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 916.671987][ T5189] ldm_validate_partition_table(): Disk read failed. [ 916.717993][ T5189] Dev loop6: unable to read RDB block 0 [ 916.868000][ T5189] loop6: unable to read partition table [ 917.674329][ T6778] lec:lec_start_xmit: lec0:No lecd attached [ 918.710131][T16340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 919.209332][T16352] syzkaller0: entered promiscuous mode [ 919.231783][T16352] syzkaller0: entered allmulticast mode [ 919.268383][T16352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.287528][T16352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.662015][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2769'. [ 921.502131][T16371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.615186][T16371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.660083][ T30] audit: type=1400 audit(1766282969.268:513): avc: denied { accept } for pid=16386 comm="syz.0.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 921.689611][ T30] audit: type=1400 audit(1766282969.268:514): avc: denied { bind } for pid=16386 comm="syz.0.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 921.913621][T16395] netlink: 'syz.3.2777': attribute type 1 has an invalid length. [ 921.924930][T16395] netlink: 'syz.3.2777': attribute type 2 has an invalid length. [ 921.933979][T16395] netlink: 'syz.3.2777': attribute type 2 has an invalid length. [ 922.406369][T16395] netlink: 'syz.3.2777': attribute type 1 has an invalid length. [ 923.373836][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5700 ms [ 923.381857][ C1] lec:lec_tx_timeout: lec0 [ 927.762116][ T30] audit: type=1400 audit(1766282975.378:515): avc: denied { getopt } for pid=16459 comm="syz.5.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 929.091970][T16485] Bluetooth: MGMT ver 1.23 [ 929.153309][ T30] audit: type=1400 audit(1766282976.718:516): avc: denied { read } for pid=16480 comm="syz.0.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 931.056622][ T30] audit: type=1400 audit(1766282978.678:517): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 931.128983][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 932.110020][ T30] audit: type=1400 audit(1766282978.678:518): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 933.275716][ T30] audit: type=1400 audit(1766282980.888:519): avc: denied { nlmsg_write } for pid=16529 comm="syz.2.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 933.670929][T16537] IPVS: Error connecting to the multicast addr [ 933.879210][T16541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.912501][T16541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.278562][T16565] random: crng reseeded on system resumption [ 936.333776][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5200 ms [ 936.341799][ C1] lec:lec_tx_timeout: lec0 [ 936.889829][T16569] 8021q: VLANs not supported on ip6gre0 [ 937.304772][T16576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.324173][T16576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.186818][T16587] usb 1-1: USB disconnect, device number 17 [ 938.201566][ T30] audit: type=1400 audit(1766282985.798:520): avc: denied { write } for pid=16584 comm="syz.2.2824" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 938.854348][T16587] ftdi_sio ttyUSB2: FTDI USB Serial Device converter now disconnected from ttyUSB2 [ 938.888340][T16587] ftdi_sio 1-1:0.0: device disconnected [ 939.138413][ T30] audit: type=1400 audit(1766282986.758:521): avc: denied { remount } for pid=16600 comm="syz.0.2827" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 939.165437][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 939.417476][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 939.544148][ T24] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 939.551944][ T30] audit: type=1400 audit(1766282987.168:522): avc: denied { write } for pid=16610 comm="syz.3.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 939.632093][T16611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2831'. [ 939.650670][ T24] usb 6-1: config 0 has no interface number 0 [ 939.675492][T16610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.697357][ T24] usb 6-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 939.712114][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.733919][ T24] usb 6-1: Product: syz [ 939.738852][ T24] usb 6-1: Manufacturer: syz [ 939.745378][ T24] usb 6-1: SerialNumber: syz [ 939.795313][ T24] usb 6-1: config 0 descriptor?? [ 939.838844][ T24] ums-alauda 6-1:0.188: USB Mass Storage device detected [ 940.025136][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2826'. [ 940.046014][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2826'. [ 940.077165][ T24] usb 6-1: USB disconnect, device number 27 [ 941.386277][T16628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.421394][T16628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.313545][T16637] syz.2.2839 (16637): drop_caches: 2 [ 942.784224][T12413] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 942.947176][T12413] usb 6-1: not running at top speed; connect to a high speed hub [ 942.996895][T12413] usb 6-1: config 51 has an invalid interface number: 105 but max is 0 [ 943.296335][T12413] usb 6-1: config 51 has no interface number 0 [ 943.308810][T12413] usb 6-1: config 51 interface 105 has no altsetting 0 [ 943.409711][T12413] usb 6-1: New USB device found, idVendor=157e, idProduct=3006, bcdDevice=c0.7a [ 943.420486][T12413] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.429073][T12413] usb 6-1: Product: syz [ 943.433989][T12413] usb 6-1: Manufacturer: syz [ 943.438587][T12413] usb 6-1: SerialNumber: syz [ 943.529450][T16659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2846'. [ 943.906349][T12413] usb 6-1: Could not find all expected endpoints [ 943.920256][T12413] usb 6-1: USB disconnect, device number 28 [ 945.929510][T16679] binder: 16678:16679 ioctl 400c620e 200000000100 returned -22 [ 949.753802][ T30] audit: type=1400 audit(1766282997.318:523): avc: denied { create } for pid=16693 comm="syz.0.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 950.154283][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2860'. [ 951.111407][T16715] syzkaller1: left promiscuous mode [ 951.126753][T16713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2862'. [ 951.147565][T16715] syzkaller1: left allmulticast mode [ 951.158760][T16713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2862'. [ 951.186763][T16715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.204136][T16715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.266753][T16724] syzkaller0: entered promiscuous mode [ 951.424733][T16724] syzkaller0: entered allmulticast mode [ 951.455183][T16724] tipc: Started in network mode [ 951.460072][T16724] tipc: Node identity eedbbfce5f95, cluster identity 4711 [ 952.101805][T16726] xt_CT: You must specify a L4 protocol and not use inversions on it [ 952.162886][T16732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.171601][T16732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.306576][T16724] tipc: Enabled bearer , priority 0 [ 953.305114][T12133] tipc: Node number set to 2974728142 [ 953.494415][ T30] audit: type=1400 audit(1766283001.108:524): avc: denied { execstack } for pid=16718 comm="syz.1.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 955.890323][T16762] netlink: 'syz.0.2873': attribute type 12 has an invalid length. [ 955.910060][T12133] Process accounting resumed [ 955.938639][T16763] tmpfs: User quota block hardlimit too large. [ 956.147920][ T30] audit: type=1400 audit(1766283003.768:525): avc: denied { connect } for pid=16768 comm="syz.0.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 956.156101][T16769] syzkaller0: entered promiscuous mode [ 956.208034][T16769] syzkaller0: entered allmulticast mode [ 956.222086][T16771] openvswitch: netlink: IPv4 tun info is not correct [ 956.303815][T16771] binder: BINDER_SET_CONTEXT_MGR already set [ 956.328052][T16771] binder: 16770:16771 ioctl 4018620d 200000004a80 returned -16 [ 956.429424][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2879'. [ 956.704092][T16784] netlink: 'syz.0.2880': attribute type 1 has an invalid length. [ 956.717150][T16783] random: crng reseeded on system resumption [ 957.072332][T16784] netlink: 'syz.0.2880': attribute type 2 has an invalid length. [ 957.170000][T16784] netlink: 'syz.0.2880': attribute type 2 has an invalid length. [ 957.192543][T16784] netlink: 'syz.0.2880': attribute type 1 has an invalid length. [ 957.559258][ T30] audit: type=1400 audit(1766283004.998:526): avc: denied { recv } for pid=16781 comm="syz.3.2881" saddr=10.128.0.169 src=43410 daddr=10.128.0.239 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 959.113185][T16812] FAULT_INJECTION: forcing a failure. [ 959.113185][T16812] name failslab, interval 1, probability 0, space 0, times 0 [ 959.201732][T16812] CPU: 1 UID: 0 PID: 16812 Comm: syz.3.2885 Not tainted syzkaller #0 PREEMPT(full) [ 959.201754][T16812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 959.201764][T16812] Call Trace: [ 959.201769][T16812] [ 959.201775][T16812] dump_stack_lvl+0x16c/0x1f0 [ 959.201800][T16812] should_fail_ex+0x512/0x640 [ 959.201822][T16812] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 959.201843][T16812] should_failslab+0xc2/0x120 [ 959.201863][T16812] kmem_cache_alloc_node_noprof+0x86/0x800 [ 959.201879][T16812] ? __alloc_skb+0x156/0x410 [ 959.201908][T16812] ? __alloc_skb+0x156/0x410 [ 959.201928][T16812] __alloc_skb+0x156/0x410 [ 959.201949][T16812] ? __alloc_skb+0x35d/0x410 [ 959.201970][T16812] ? __pfx___alloc_skb+0x10/0x10 [ 959.201993][T16812] ? netlink_autobind.isra.0+0x158/0x370 [ 959.202021][T16812] netlink_alloc_large_skb+0x69/0x140 [ 959.202042][T16812] netlink_sendmsg+0x698/0xdd0 [ 959.202067][T16812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 959.202096][T16812] ____sys_sendmsg+0xa5d/0xc30 [ 959.202118][T16812] ? copy_msghdr_from_user+0x10a/0x160 [ 959.202135][T16812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 959.202168][T16812] ___sys_sendmsg+0x134/0x1d0 [ 959.202186][T16812] ? __pfx____sys_sendmsg+0x10/0x10 [ 959.202232][T16812] __sys_sendmsg+0x16d/0x220 [ 959.202250][T16812] ? __pfx___sys_sendmsg+0x10/0x10 [ 959.202283][T16812] do_syscall_64+0xcd/0xf80 [ 959.202306][T16812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.202322][T16812] RIP: 0033:0x7f4fb398f749 [ 959.202335][T16812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.202350][T16812] RSP: 002b:00007f4fb4770038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 959.202366][T16812] RAX: ffffffffffffffda RBX: 00007f4fb3be6090 RCX: 00007f4fb398f749 [ 959.202377][T16812] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 959.202386][T16812] RBP: 00007f4fb4770090 R08: 0000000000000000 R09: 0000000000000000 [ 959.202395][T16812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.202404][T16812] R13: 00007f4fb3be6128 R14: 00007f4fb3be6090 R15: 00007ffe12a8eb18 [ 959.202429][T16812] [ 959.630918][T16821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.740413][T16821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.685512][ T30] audit: type=1400 audit(1766283009.038:527): avc: denied { bind } for pid=16831 comm="syz.0.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 961.747716][T16833] could not allocate digest TFM handle tgr192-generic [ 961.967919][ T30] audit: type=1400 audit(1766283009.588:528): avc: denied { sys_module } for pid=16813 comm="syz.5.2887" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 964.548888][ T30] audit: type=1400 audit(1766283012.168:529): avc: denied { execute } for pid=16856 comm="syz.5.2901" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 964.557588][T16858] loop6: detected capacity change from 0 to 2640 [ 964.602722][T15338] buffer_io_error: 23 callbacks suppressed [ 964.602735][T15338] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.617202][T15338] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.625750][T15338] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.633672][T15338] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.642059][T15338] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.675234][T15338] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.697790][T15338] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.719146][ T30] audit: type=1400 audit(1766283012.338:530): avc: denied { read } for pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 964.767333][T15338] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.785605][T15338] ldm_validate_partition_table(): Disk read failed. [ 964.798939][T15338] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.819084][T15338] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.843165][T15338] Dev loop6: unable to read RDB block 0 [ 964.848925][T15338] loop6: unable to read partition table [ 964.856269][T16863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.894643][T16858] ldm_validate_partition_table(): Disk read failed. [ 964.911661][T16863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.921055][T16858] Dev loop6: unable to read RDB block 0 [ 964.936456][T16858] loop6: unable to read partition table [ 964.968528][T16858] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 972.147666][T16966] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=16966 comm=syz.3.2917 [ 973.627764][ T30] audit: type=1400 audit(1766283021.068:531): avc: denied { connect } for pid=16979 comm="syz.5.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 973.666315][ T30] audit: type=1400 audit(1766283021.078:532): avc: denied { write } for pid=16979 comm="syz.5.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 975.079110][T16999] comedi comedi3: pcl818: I/O port conflict (0xcf7,16) [ 975.570412][T17005] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 975.681978][T17021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 975.853135][T17022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.863310][T17022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.472991][T17028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 977.480385][T17028] IPv6: NLM_F_CREATE should be set when creating new route [ 977.487832][T17028] IPv6: NLM_F_CREATE should be set when creating new route [ 978.300372][T17034] mkiss: ax0: crc mode is auto. [ 979.909736][T17056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.926426][T17056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.596389][T17070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 980.603637][T17070] IPv6: NLM_F_CREATE should be set when creating new route [ 980.610882][T17070] IPv6: NLM_F_CREATE should be set when creating new route [ 981.065540][ T6778] lec:lec_start_xmit: lec0:No lecd attached [ 981.402867][T17078] random: crng reseeded on system resumption [ 985.866304][ T6195] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 985.917207][ T6195] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 986.333788][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 986.341808][ C1] lec:lec_tx_timeout: lec0 [ 986.489422][T17124] input: syz1 as /devices/virtual/input/input33 [ 986.541563][T17124] syzkaller0: entered promiscuous mode [ 986.557804][T17124] syzkaller0: entered allmulticast mode [ 986.816889][T11780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 986.838750][T11780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 986.847116][T11780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 986.856968][T11780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 986.864433][T11780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 987.180033][T17136] fuse: Bad value for 'group_id' [ 987.185154][T17136] fuse: Bad value for 'group_id' [ 987.773087][T17126] chnl_net:caif_netlink_parms(): no params data found [ 988.847494][T17126] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.894839][ T5833] Bluetooth: hci5: command tx timeout [ 988.995141][T17126] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.022662][T17126] bridge_slave_0: entered allmulticast mode [ 989.050340][T17126] bridge_slave_0: entered promiscuous mode [ 989.055655][ T6195] usb 2-1: USB disconnect, device number 27 [ 989.109140][ T6195] ftdi_sio ttyUSB3: FTDI USB Serial Device converter now disconnected from ttyUSB3 [ 989.143965][T17126] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.162389][T17126] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.182294][T17126] bridge_slave_1: entered allmulticast mode [ 989.216267][T17126] bridge_slave_1: entered promiscuous mode [ 989.233499][ T6195] ftdi_sio 2-1:0.0: device disconnected [ 989.330587][T17126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.370023][T17158] FAULT_INJECTION: forcing a failure. [ 989.370023][T17158] name failslab, interval 1, probability 0, space 0, times 0 [ 989.371653][ T7905] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.438161][T17158] CPU: 1 UID: 0 PID: 17158 Comm: syz.3.2967 Not tainted syzkaller #0 PREEMPT(full) [ 989.438184][T17158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 989.438193][T17158] Call Trace: [ 989.438199][T17158] [ 989.438205][T17158] dump_stack_lvl+0x16c/0x1f0 [ 989.438232][T17158] should_fail_ex+0x512/0x640 [ 989.438256][T17158] ? fs_reclaim_acquire+0xae/0x150 [ 989.438281][T17158] should_failslab+0xc2/0x120 [ 989.438302][T17158] __kmalloc_noprof+0xeb/0x910 [ 989.438327][T17158] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 989.438356][T17158] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 989.438377][T17158] tomoyo_realpath_from_path+0xc2/0x6e0 [ 989.438401][T17158] ? tomoyo_profile+0x47/0x60 [ 989.438428][T17158] tomoyo_path_number_perm+0x245/0x580 [ 989.438446][T17158] ? tomoyo_path_number_perm+0x237/0x580 [ 989.438467][T17158] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 989.438494][T17158] ? find_held_lock+0x2b/0x80 [ 989.438541][T17158] ? find_held_lock+0x2b/0x80 [ 989.438564][T17158] ? hook_file_ioctl_common+0x144/0x410 [ 989.438594][T17158] ? __fget_files+0x20e/0x3c0 [ 989.438621][T17158] security_file_ioctl+0x9b/0x240 [ 989.438644][T17158] __x64_sys_ioctl+0xb7/0x210 [ 989.438665][T17158] do_syscall_64+0xcd/0xf80 [ 989.438688][T17158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.438704][T17158] RIP: 0033:0x7f4fb398f749 [ 989.438718][T17158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 989.438733][T17158] RSP: 002b:00007f4fb4791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 989.438748][T17158] RAX: ffffffffffffffda RBX: 00007f4fb3be5fa0 RCX: 00007f4fb398f749 [ 989.438758][T17158] RDX: 0000200000000540 RSI: 000000000000890b RDI: 0000000000000003 [ 989.438767][T17158] RBP: 00007f4fb4791090 R08: 0000000000000000 R09: 0000000000000000 [ 989.438776][T17158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.438785][T17158] R13: 00007f4fb3be6038 R14: 00007f4fb3be5fa0 R15: 00007ffe12a8eb18 [ 989.438809][T17158] [ 989.438870][T17158] ERROR: Out of memory at tomoyo_realpath_from_path. [ 989.655157][T17126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.813213][T17161] syz.5.2966 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 989.856031][T17161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 990.458972][T17126] team0: Port device team_slave_0 added [ 990.513932][T17163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2968'. [ 990.616716][ T7905] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.743214][T17126] team0: Port device team_slave_1 added [ 990.774636][T17168] random: crng reseeded on system resumption [ 990.815736][ T7905] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.023996][ T5833] Bluetooth: hci5: command tx timeout [ 991.496741][T17173] bond2: entered allmulticast mode [ 991.567290][ T7905] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.614181][T17126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.632744][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.660331][T17126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.673101][T17182] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 991.815697][T17126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.855322][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.885592][T17126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.099761][T17126] hsr_slave_0: entered promiscuous mode [ 992.108587][T17126] hsr_slave_1: entered promiscuous mode [ 992.118936][T17126] debugfs: 'hsr0' already exists in 'hsr' [ 992.137349][T17126] Cannot create hsr debugfs directory [ 992.225772][ T30] audit: type=1400 audit(1766283039.848:533): avc: denied { read } for pid=17193 comm="syz.2.2978" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 992.507362][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 992.981147][ T30] audit: type=1400 audit(1766283040.598:534): avc: denied { read write } for pid=5814 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 993.036231][ T7905] bridge_slave_1: left allmulticast mode [ 993.052169][ T7905] bridge_slave_1: left promiscuous mode [ 993.058686][ T5833] Bluetooth: hci5: command tx timeout [ 993.067839][ T30] audit: type=1400 audit(1766283040.598:535): avc: denied { open } for pid=5814 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 993.078564][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.117327][ T7905] bridge_slave_0: left allmulticast mode [ 993.123949][ T7905] bridge_slave_0: left promiscuous mode [ 993.130551][ T30] audit: type=1400 audit(1766283040.598:536): avc: denied { ioctl } for pid=5814 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 993.130589][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.187336][ C1] ------------[ cut here ]------------ [ 993.192944][ C1] ODEBUG: free active (active state 0) object: ffff888023332278 object type: timer_list hint: br_ip6_multicast_port_query_expired+0x0/0x20 [ 993.207117][ C1] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#1: syz.0.2972/17174 [ 993.217259][ C1] Modules linked in: [ 993.221262][ C1] CPU: 1 UID: 0 PID: 17174 Comm: syz.0.2972 Not tainted syzkaller #0 PREEMPT(full) [ 993.230622][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 993.240683][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 993.246483][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 32 4a dd 0b 41 56 48 8b 14 dd e0 c4 f2 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 3c fc d3 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 993.266091][ C1] RSP: 0018:ffffc90000a08bb8 EFLAGS: 00010246 [ 993.272130][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 993.280085][ C1] RDX: ffffffff8bf2c420 RSI: ffffffff8bf2c000 RDI: ffffffff90923260 [ 993.288058][ C1] RBP: 0000000000000001 R08: ffff888023332278 R09: ffffffff8b906bc0 [ 993.296037][ C1] R10: ffffffff9088b3d7 R11: ffff8880747b54b0 R12: ffffffff8bf2c000 [ 993.303997][ C1] R13: ffffffff8b906c00 R14: ffffffff8a4a8100 R15: ffffc90000a08cb8 [ 993.311941][ C1] FS: 0000555578603500(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 993.320853][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 993.327422][ C1] CR2: 0000200000002000 CR3: 000000001e6fe000 CR4: 00000000003526f0 [ 993.335379][ C1] Call Trace: [ 993.338636][ C1] [ 993.341465][ C1] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 993.348504][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 993.354303][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 993.359825][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 993.365877][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 993.371224][ C1] ? destroy_nbp_rcu+0x9d/0x110 [ 993.376058][ C1] ? rcu_core+0x79c/0x15f0 [ 993.380452][ C1] kfree+0x2d1/0x6e0 [ 993.384330][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 993.389932][ C1] ? kobject_put+0x1ef/0x6f0 [ 993.394527][ C1] ? kobject_put+0x1ef/0x6f0 [ 993.399116][ C1] ? release_nbp+0xd/0x20 [ 993.403433][ C1] kobject_put+0x1ef/0x6f0 [ 993.407842][ C1] ? rcu_core+0x797/0x15f0 [ 993.412236][ C1] rcu_core+0x79c/0x15f0 [ 993.416469][ C1] ? __pfx_rcu_core+0x10/0x10 [ 993.421119][ C1] ? read_tsc+0x9/0x20 [ 993.425187][ C1] handle_softirqs+0x219/0x950 [ 993.429929][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 993.435203][ C1] __irq_exit_rcu+0x109/0x170 [ 993.439856][ C1] irq_exit_rcu+0x9/0x30 [ 993.444084][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 993.449698][ C1] [ 993.452623][ C1] [ 993.455546][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 993.461510][ C1] RIP: 0010:preempt_schedule_irq+0x4c/0x90 [ 993.467302][ C1] Code: df 55 65 48 8b 2d 0c 6a 39 08 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 8f 72 11 f6 e8 da c2 4d f6 fb bf 01 00 00 00 3f 96 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 3d 04 11 [ 993.486894][ C1] RSP: 0018:ffffc9000d54fdf8 EFLAGS: 00000206 [ 993.492933][ C1] RAX: 0000000000006417 RBX: ffffed100e8f6930 RCX: ffffffff81c7080f [ 993.500897][ C1] RDX: 0000000000000000 RSI: ffffffff8dacda6c RDI: 0000000000000001 [ 993.508876][ C1] RBP: ffff8880747b4980 R08: 0000000000000001 R09: 0000000000000001 [ 993.516828][ C1] R10: ffffffff9088b3d7 R11: ffff8880747b54b0 R12: 0000000000000000 [ 993.524781][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 993.532734][ C1] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 993.538707][ C1] ? preempt_schedule_irq+0x46/0x90 [ 993.543891][ C1] irqentry_exit+0x1d8/0x8c0 [ 993.548458][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 993.554424][ C1] RIP: 0010:irqentry_exit+0x365/0x8c0 [ 993.559770][ C1] Code: 58 fa f6 c4 02 0f 85 62 01 00 00 e8 d5 11 00 00 49 8b 2c 24 f7 c5 37 03 00 00 0f 84 88 00 00 00 e8 80 fb 4e f6 fb 40 f6 c5 30 <74> c0 e8 44 30 01 00 f7 c5 00 01 00 00 74 bb 48 89 df e8 a4 b6 7d [ 993.579358][ C1] RSP: 0000:ffffc9000d54ff00 EFLAGS: 00000202 [ 993.585405][ C1] RAX: 00000000000063b3 RBX: ffffc9000d54ff48 RCX: ffffffff81c7080f [ 993.593347][ C1] RDX: 0000000000000000 RSI: ffffffff8dacda6c RDI: ffffffff8bf2b380 [ 993.601300][ C1] RBP: 0000000000000010 R08: 0000000000000001 R09: 0000000000000001 [ 993.609262][ C1] R10: ffffffff9088b3d7 R11: 0000000000000000 R12: ffff8880747b4980 [ 993.617214][ C1] R13: ffff8880747b4980 R14: 0000000000000000 R15: 0000000000000000 [ 993.625172][ C1] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 993.631128][ C1] ? rcu_is_watching+0x12/0xc0 [ 993.635883][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 993.641313][ C1] RIP: 0033:0x7f0055a68326 [ 993.645724][ C1] Code: 77 f8 48 89 f8 48 89 eb eb 12 66 2e 0f 1f 84 00 00 00 00 00 48 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 <66> 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 [ 993.665313][ C1] RSP: 002b:00007ffc78c3e490 EFLAGS: 00000283 [ 993.671350][ C1] RAX: 00007f00554abf08 RBX: 00007f0055428380 RCX: ffffffff89430eb5 [ 993.679302][ C1] RDX: ffffffff894266ad RSI: ffffffff89430eb5 RDI: 00007f00554b8dd0 [ 993.687255][ C1] RBP: 00007f0055425bb8 R08: 00007f005546f4c0 R09: 00007f0055dd2000 [ 993.695210][ C1] R10: 00007f00551f5008 R11: 0000000000000007 R12: 00007f0055425bb0 [ 993.703152][ C1] R13: 000000000000001d R14: ffffffffffffffff R15: 00007f00551f5008 [ 993.711109][ C1] ? __scm_recv_common.constprop.0+0x325/0x520 [ 993.717251][ C1] ? skb_copy_datagram_iter+0x4d/0x220 [ 993.722692][ C1] ? __scm_recv_common.constprop.0+0x325/0x520 [ 993.728839][ C1] [ 993.731833][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 993.739084][ C1] CPU: 1 UID: 0 PID: 17174 Comm: syz.0.2972 Not tainted syzkaller #0 PREEMPT(full) [ 993.748421][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 993.758446][ C1] Call Trace: [ 993.761703][ C1] [ 993.764521][ C1] dump_stack_lvl+0x3d/0x1f0 [ 993.769099][ C1] vpanic+0x640/0x6f0 [ 993.773052][ C1] ? debug_print_object+0x18e/0x2a0 [ 993.778232][ C1] panic+0xca/0xd0 [ 993.781926][ C1] ? __pfx_panic+0x10/0x10 [ 993.786315][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 993.791401][ C1] check_panic_on_warn+0xab/0xb0 [ 993.796311][ C1] __warn+0x108/0x3c0 [ 993.800264][ C1] __report_bug+0x2a0/0x520 [ 993.804737][ C1] ? debug_print_object+0x18e/0x2a0 [ 993.809907][ C1] ? __pfx___report_bug+0x10/0x10 [ 993.814916][ C1] ? lock_acquire+0x179/0x330 [ 993.819568][ C1] report_bug_entry+0xe1/0x290 [ 993.824304][ C1] ? debug_print_object+0x19b/0x2a0 [ 993.829472][ C1] handle_bug+0x18a/0x260 [ 993.833776][ C1] exc_invalid_op+0x17/0x50 [ 993.838254][ C1] asm_exc_invalid_op+0x1a/0x20 [ 993.843082][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 993.848857][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 32 4a dd 0b 41 56 48 8b 14 dd e0 c4 f2 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 3c fc d3 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 993.868435][ C1] RSP: 0018:ffffc90000a08bb8 EFLAGS: 00010246 [ 993.874472][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 993.883119][ C1] RDX: ffffffff8bf2c420 RSI: ffffffff8bf2c000 RDI: ffffffff90923260 [ 993.891089][ C1] RBP: 0000000000000001 R08: ffff888023332278 R09: ffffffff8b906bc0 [ 993.899041][ C1] R10: ffffffff9088b3d7 R11: ffff8880747b54b0 R12: ffffffff8bf2c000 [ 993.906993][ C1] R13: ffffffff8b906c00 R14: ffffffff8a4a8100 R15: ffffc90000a08cb8 [ 993.914946][ C1] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 993.921972][ C1] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 993.928972][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 993.934766][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 993.940291][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 993.946335][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 993.951683][ C1] ? destroy_nbp_rcu+0x9d/0x110 [ 993.956505][ C1] ? rcu_core+0x79c/0x15f0 [ 993.960899][ C1] kfree+0x2d1/0x6e0 [ 993.964764][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 993.970367][ C1] ? kobject_put+0x1ef/0x6f0 [ 993.974933][ C1] ? kobject_put+0x1ef/0x6f0 [ 993.979496][ C1] ? release_nbp+0xd/0x20 [ 993.983795][ C1] kobject_put+0x1ef/0x6f0 [ 993.988186][ C1] ? rcu_core+0x797/0x15f0 [ 993.992575][ C1] rcu_core+0x79c/0x15f0 [ 993.996794][ C1] ? __pfx_rcu_core+0x10/0x10 [ 994.001441][ C1] ? read_tsc+0x9/0x20 [ 994.005504][ C1] handle_softirqs+0x219/0x950 [ 994.010245][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 994.015506][ C1] __irq_exit_rcu+0x109/0x170 [ 994.020156][ C1] irq_exit_rcu+0x9/0x30 [ 994.024371][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 994.029976][ C1] [ 994.032887][ C1] [ 994.035793][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 994.041755][ C1] RIP: 0010:preempt_schedule_irq+0x4c/0x90 [ 994.047533][ C1] Code: df 55 65 48 8b 2d 0c 6a 39 08 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 8f 72 11 f6 e8 da c2 4d f6 fb bf 01 00 00 00 3f 96 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 3d 04 11 [ 994.067117][ C1] RSP: 0018:ffffc9000d54fdf8 EFLAGS: 00000206 [ 994.073163][ C1] RAX: 0000000000006417 RBX: ffffed100e8f6930 RCX: ffffffff81c7080f [ 994.081131][ C1] RDX: 0000000000000000 RSI: ffffffff8dacda6c RDI: 0000000000000001 [ 994.089085][ C1] RBP: ffff8880747b4980 R08: 0000000000000001 R09: 0000000000000001 [ 994.097031][ C1] R10: ffffffff9088b3d7 R11: ffff8880747b54b0 R12: 0000000000000000 [ 994.104980][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 994.112927][ C1] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 994.118889][ C1] ? preempt_schedule_irq+0x46/0x90 [ 994.124063][ C1] irqentry_exit+0x1d8/0x8c0 [ 994.128630][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 994.134581][ C1] RIP: 0010:irqentry_exit+0x365/0x8c0 [ 994.139926][ C1] Code: 58 fa f6 c4 02 0f 85 62 01 00 00 e8 d5 11 00 00 49 8b 2c 24 f7 c5 37 03 00 00 0f 84 88 00 00 00 e8 80 fb 4e f6 fb 40 f6 c5 30 <74> c0 e8 44 30 01 00 f7 c5 00 01 00 00 74 bb 48 89 df e8 a4 b6 7d [ 994.159503][ C1] RSP: 0000:ffffc9000d54ff00 EFLAGS: 00000202 [ 994.165546][ C1] RAX: 00000000000063b3 RBX: ffffc9000d54ff48 RCX: ffffffff81c7080f [ 994.173488][ C1] RDX: 0000000000000000 RSI: ffffffff8dacda6c RDI: ffffffff8bf2b380 [ 994.181435][ C1] RBP: 0000000000000010 R08: 0000000000000001 R09: 0000000000000001 [ 994.189988][ C1] R10: ffffffff9088b3d7 R11: 0000000000000000 R12: ffff8880747b4980 [ 994.197930][ C1] R13: ffff8880747b4980 R14: 0000000000000000 R15: 0000000000000000 [ 994.205877][ C1] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 994.211834][ C1] ? rcu_is_watching+0x12/0xc0 [ 994.216574][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 994.222004][ C1] RIP: 0033:0x7f0055a68326 [ 994.226389][ C1] Code: 77 f8 48 89 f8 48 89 eb eb 12 66 2e 0f 1f 84 00 00 00 00 00 48 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 <66> 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 [ 994.245965][ C1] RSP: 002b:00007ffc78c3e490 EFLAGS: 00000283 [ 994.252002][ C1] RAX: 00007f00554abf08 RBX: 00007f0055428380 RCX: ffffffff89430eb5 [ 994.259945][ C1] RDX: ffffffff894266ad RSI: ffffffff89430eb5 RDI: 00007f00554b8dd0 [ 994.267888][ C1] RBP: 00007f0055425bb8 R08: 00007f005546f4c0 R09: 00007f0055dd2000 [ 994.275830][ C1] R10: 00007f00551f5008 R11: 0000000000000007 R12: 00007f0055425bb0 [ 994.283776][ C1] R13: 000000000000001d R14: ffffffffffffffff R15: 00007f00551f5008 [ 994.291723][ C1] ? __scm_recv_common.constprop.0+0x325/0x520 [ 994.297851][ C1] ? skb_copy_datagram_iter+0x4d/0x220 [ 994.303282][ C1] ? __scm_recv_common.constprop.0+0x325/0x520 [ 994.309412][ C1] [ 994.312684][ C1] Kernel Offset: disabled [ 994.316983][ C1] Rebooting in 86400 seconds..