last executing test programs: 8m22.824192991s ago: executing program 2 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x10, 0x1400, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x95) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xa, 0xf, &(0x7f0000000440)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x5, 0x0, 0x4}}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa000000, @void, @value}, 0x90) 8m22.713051833s ago: executing program 2 (id=19): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000580)='./file0\x00', r1, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fffd0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 8m19.911024019s ago: executing program 2 (id=34): sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="0201"], 0x10}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="0013f300000002"], 0x0, 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f40), 0x40, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x181cc0, 0x0) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)="7fd2269424206882ab", 0x9}, 0x1, 0x0, 0x0, 0x20000850}, 0x24008800) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x24b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xa0, 0xc9, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0x34}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x7, 0xc}}}}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="200d9e0c"]}]}) 8m16.846178476s ago: executing program 2 (id=46): r0 = socket$phonet(0x23, 0x2, 0x1) (async, rerun: 32) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000000000000000000000200000000000", @ANYRES32], 0x48) (async, rerun: 32) r1 = socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) (async) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)=0x8) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) (rerun: 64) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f0000000400)={0x5d, 0x1000, 0xd4b98e, 0x3, 0x100000000, 0x5f, 0x7fffffff, 0x9}, &(0x7f0000000440)={0x9d, 0x2, 0x4, 0x1000000, 0x3, 0x7, 0x2, 0x7}, &(0x7f0000000480)={0x2, 0x3, 0x6, 0x6, 0x0, 0xebc, 0x0, 0xd}, &(0x7f0000000500)={r3, r4+60000000}, &(0x7f0000000580)={&(0x7f0000000540)={[0x1]}, 0x8}) (async, rerun: 32) capset(&(0x7f0000000300)={0x20080522, r2}, &(0x7f0000000340)={0x2, 0x7, 0xa, 0x81, 0xe, 0x1c0000}) (async) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x40100) (async, rerun: 64) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000005c0), 0x54000, 0x0) (rerun: 64) openat$cgroup_ro(r6, &(0x7f0000000600)='memory.swap.current\x00', 0x0, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x8800) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000180)={r7, 0x3ff, {0x0, 0x0, 0x0, 0x7, 0xffffffffffffffc2, 0x0, 0x3, 0x15, 0x4, "8164af1252eec7c00c76a1d1f88c3f6d9db859c345dd878bbfca0877a5eccd799b1708abcd59d4efa0aaf76f9c2c30d79b36d373ef2012e651521894256e6bf5", "6f82fbd040c4a821307d138bd8ff2a2ff03085cb3567b9036d6c73bd2d502f28b5c75ec910f4d4680547a29efdffffeb179299f63cc1a3c562fd2c59411f78a2", "0b468e6eef5469cdcfe2d8e0daf41baed7a7f1dd9cf0f44dce20bdb991fbae9a", [0xb, 0x9]}}) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='i2c_slave\x00', r8}, 0x18) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r8, 0xc0606610, &(0x7f0000000040)=0x60) (rerun: 32) 8m16.335841536s ago: executing program 2 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xd8995bccd58b55d0}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x9c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc5f}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x9c}}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x10c) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000003000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 8m15.164701927s ago: executing program 2 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = memfd_secret(0x80000) getsockname$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) syz_usb_connect(0x1, 0x2d, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0x5, 0x92, 0x2, 0x8, 0x681, 0x5, 0x56c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0xfc, 0x8, 0x1, 0xa, 0xf4, 0x77, 0x5, [], [{{0x9, 0x5, 0xf, 0x1, 0x40, 0xe8, 0x6, 0x95}}]}}]}}]}}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000280)='gfs2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000), 0x4800) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x15b9, 0x0, 0x4, 0x372}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x10000000000000) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup3(r7, r8, 0x80000) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r10}, 0x10) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SNAPSHOT_FREE(r11, 0x3305) write$cgroup_freezer_state(r9, 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x6, 0x101, 0x5, {0x5, 0x7f, 0x6c2c, 0x1}}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000070605000000000000b180f9da000006080006400000000a0500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x480}, 0x8040) 7m59.740135882s ago: executing program 32 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = memfd_secret(0x80000) getsockname$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) syz_usb_connect(0x1, 0x2d, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0x5, 0x92, 0x2, 0x8, 0x681, 0x5, 0x56c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0xfc, 0x8, 0x1, 0xa, 0xf4, 0x77, 0x5, [], [{{0x9, 0x5, 0xf, 0x1, 0x40, 0xe8, 0x6, 0x95}}]}}]}}]}}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000280)='gfs2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000), 0x4800) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x15b9, 0x0, 0x4, 0x372}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x10000000000000) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup3(r7, r8, 0x80000) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r10}, 0x10) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SNAPSHOT_FREE(r11, 0x3305) write$cgroup_freezer_state(r9, 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x6, 0x101, 0x5, {0x5, 0x7f, 0x6c2c, 0x1}}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000070605000000000000b180f9da000006080006400000000a0500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x480}, 0x8040) 7m38.717055797s ago: executing program 3 (id=181): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800600180000003f0005001600020000c3040012"], 0x54}}, 0x8100) 7m38.144275793s ago: executing program 3 (id=186): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201410000000040ef0e0100000000f40001090224"], 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf18}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) acct(0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7m35.852071973s ago: executing program 3 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)=r1}, 0x1f) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x8, 0x0, &(0x7f0000000180)) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) 7m33.775830477s ago: executing program 3 (id=203): write$dsp(0xffffffffffffffff, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) membarrier(0x10, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000c0000000000000000950000000000009059a89f17cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000066c0)=ANY=[@ANYBLOB="200000002c00010026bd7000fcdbdf25040000000c001a"], 0x20}, 0x1, 0x0, 0x0, 0x2004000c}, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x88) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000300)={0x24, 0x2c, 0x1, 0x70bd26, 0x25dfdbfb, {0x4}, [@typed={0x10, 0x18, 0x0, 0x0, @binary="1770ecbcb8f2c4cb0255efda"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') 7m33.255038529s ago: executing program 3 (id=206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) 7m32.861033524s ago: executing program 3 (id=209): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x10, 0x200, &(0x7f00000005c0)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca46108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b6c200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123febe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88f6311a72ee77608f1416c80c55773f917020751ed51c1874c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c44cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d40429900ffffffffffffe036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc5a345d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0xb, {"a2e3ad214fc752f9182909097b65d30ed038e7ff7fc6e5539b324c078b089b32353b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d074c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a323a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000040)={0x800, r0}) 7m17.607096046s ago: executing program 33 (id=209): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x10, 0x200, &(0x7f00000005c0)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca46108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b6c200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123febe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88f6311a72ee77608f1416c80c55773f917020751ed51c1874c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c44cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d40429900ffffffffffffe036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc5a345d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000040)={0x800, r0}) 6m55.108043164s ago: executing program 4 (id=397): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[], 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioperm(0x7, 0x81, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="527d3f4dd9b938f9eaa40b5460adf65f", 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000015001001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB="08000a008f4202736d75dc8cc990feda07e369e879b862e6e393e8779502ea438b81950fbb813054a1aaf225ca9414aa284db2687757c40dd17e481943dec5fa183cd24f01925b10285228d11793cecbf4459482d69b80cd63a9c3f017a3dab3761619cc78007c71a8dc02ed891a1763f4be075211f2b4c895e525f94d51fefa652290e8a33e0656", @ANYRES32=r3, @ANYBLOB], 0x40}}, 0x2400c080) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000c0a01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x586abc7b6f5091ec, 0xfa00, {0x0, 0x0, 0x13f}}, 0xfdbc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) 6m51.763996817s ago: executing program 4 (id=408): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x44a002, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00') openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r4], 0x4}}, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}}, 0x24}}, 0x80) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$vsock_stream(r8, &(0x7f0000000240)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtclass={0x3c, 0x28, 0x310, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x8, 0x4}, {0x5, 0x6}, {0xffff, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x88, r5, 0xa, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5928}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x88}, 0x1, 0x0, 0x0, 0x14}, 0xc000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) getpid() 6m51.643893512s ago: executing program 4 (id=409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x10, 0x1400, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x95) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xa, 0xf, &(0x7f0000000440)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x5, 0x0, 0x4}}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xffffff85}, 0x90) 6m51.583976139s ago: executing program 4 (id=411): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x3, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x2, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x20002f, 0x9, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xfe, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x0, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x200, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x3, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0xa0, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa6, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x9, 0x5, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x3, 0x5, 0x80004003, 0x5, 0x4, 0xfffffffe, 0x9, 0xfffff000, 0x10000, 0x3, 0xed2b, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x1000005, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0xa0200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xfe29, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5d) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r6) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00100000", @ANYRES16=r7, @ANYBLOB="030226bd700001dcdf250900000008001400010000000500130003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000840) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) shmdt(0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 6m50.624288634s ago: executing program 4 (id=416): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f0000000540)={0x34, &(0x7f0000000140)={0x0, 0xd, 0x4, "5fe79a52"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000001800)={0x14, &(0x7f0000001780)={0x0, 0xd, 0x37, {0x37, 0x24, "3e37b7e1bb866a06e3a826fdef269f8d980595691a1e60746e60d1d5277b698e9f6383292df00ba9175a3bb682c999e7fcc0d42189"}}, &(0x7f00000017c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}}, &(0x7f0000001a40)={0x44, &(0x7f0000001840)={0x0, 0x14, 0xc, "87516ffe84ce6061a163a484"}, &(0x7f0000001880)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000018c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001900)={0x20, 0x81, 0x2, '_a'}, &(0x7f0000001940)={0x20, 0x82, 0x3, ' O/'}, &(0x7f0000001980)={0x20, 0x83, 0x1, '\r'}, &(0x7f00000019c0)={0x20, 0x84, 0x1, 'M'}, &(0x7f0000001a00)={0x20, 0x85, 0x3, "c2af8c"}}) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000a00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x8, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0xb9, 0x4, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x85, 0x1, {0x22, 0x9f3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x4, 0xf, 0x76}}]}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x0, 0x0, 0x0, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "cb8e7e34"}]}}, 0x0}, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001ac0), 0x212000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@local, 0x7, 0x1, 0x2, 0x6, 0x2, 0xffff}, 0x20) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b32, &(0x7f0000000040)) 6m50.268784022s ago: executing program 4 (id=421): prlimit64(0x0, 0x0, &(0x7f0000000000)={0x8, 0x7ffdffff}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xf6, 0x8}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x54, 0x4, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x7800, 0x80, 0xa783, 0x8}}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @private=0xa010101, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'rose0\x00', {}, {}, 0x8, 0x2, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="294ab6c07822", 0xa530, 0x3, [0x33, 0x1c, 0x32, 0x1f, 0x39, 0x32, 0x3, 0x2a, 0x2e, 0x15, 0x1d, 0x1d, 0x13, 0x9, 0x8, 0x10], 0x1, 0xc3d, 0xa9a}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x1, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r2 = socket$kcm(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000100)=""/156, &(0x7f0000000040)=0x9c) syz_clone(0xae120000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m49.980692018s ago: executing program 34 (id=421): prlimit64(0x0, 0x0, &(0x7f0000000000)={0x8, 0x7ffdffff}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xf6, 0x8}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x54, 0x4, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x7800, 0x80, 0xa783, 0x8}}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @private=0xa010101, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'rose0\x00', {}, {}, 0x8, 0x2, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="294ab6c07822", 0xa530, 0x3, [0x33, 0x1c, 0x32, 0x1f, 0x39, 0x32, 0x3, 0x2a, 0x2e, 0x15, 0x1d, 0x1d, 0x13, 0x9, 0x8, 0x10], 0x1, 0xc3d, 0xa9a}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x1, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r2 = socket$kcm(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000100)=""/156, &(0x7f0000000040)=0x9c) syz_clone(0xae120000, 0x0, 0x0, 0x0, 0x0, 0x0) 31.506753928s ago: executing program 6 (id=2652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x4c}}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) epoll_pwait(0xffffffffffffffff, 0xffffffffffffffff, 0x3e, 0x0, &(0x7f0000000000), 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x5e, 0x7, 0x1, 0x0, "9c187924a66214fcaedb1f3b1ba2d29c2544213d8091cfdbcdef34e64f84aa872706e082d92545b106ecc3315634eeebc49204d2ca3b40d8427e127a085cd681e75290ba51dc8de1ed77a5b56deedc73af23f8ecb47fa2000000"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/uts\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x1402, 0x300, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 31.443550953s ago: executing program 6 (id=2654): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r3) r7 = fcntl$dupfd(r4, 0x406, r5) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10111) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x0, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_io_uring_setup(0x3c2, &(0x7f0000000140)={0x0, 0xbb00, 0x82, 0x2, 0xa9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r11, 0x47f6, 0x0, 0x2, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 30.118354394s ago: executing program 6 (id=2661): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_clone(0x88000000, &(0x7f0000000540)="13b502db33b764252d3d7abbc558f76002d8239b882168cae495a9e8f239f53443c14f08096ec7ad39ae417c3dbe7fdd609fe55553c7fe7d9a4ea1d32c341ded4ac73eff21acb7f2bcf6760b20ce7a3797bc58a7176011ed17b811277eef26dd03927c002f28acc003d0", 0x6a, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000600)="da230fbdeb328911ac649bbdf5a322f8d3d810d9d6a7a3081c7a7d6d135079091463e755aac4fef13fbd6032e85779b8f79751dd289bd49414e8dc7b6567516745d60a3cff12705eb92142fda1fdc49067a40eb3c1a50d68deb580e98a1d10f9e7755fd0995dd9bf7e5d614cf82c72942f7ee1f95d325477ea0e14aea96fb3323118268bf54fa70101e15725f7fd69216b9114f06ed3a6b3ae6518391d6de89899f18e2b33ef3506aa5a967332778adc81a7806bdc7632561105aa1f3e88f5500b9019a191aaa05028a50796c9e73d8a743c517d386b15afc2dec4dd") prlimit64(r0, 0xe, &(0x7f0000000000)={0x2, 0x1000891}, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x8, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd}, [@country_functional={0x6, 0x24, 0x7, 0x7, 0xfd80}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x3a, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x0, 0x9}}}}}]}}]}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x100010, 0xffffffffffffffff, 0x0) r2 = socket(0x2b, 0x1, 0x0) (async) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000101010100000000000000000a000005300001802c00018014000300ff02000000000000000000000000000114000400fc0000000000000000000000000000010c00198008000100010000005c21930b5c209e0d9f269c80647f4838d161a0d1ebcaaf065fcb069e3909287966db48bb7265d0999dbf8f8bcea0fbe1b6f0e94ad0d404a8bc2a46dba4b39bd2ecc3d9732bf78fb448eecc44380c259e6d9689453481c8f242c3bc96fa419b8005a3ebb56f091a4e7217a81027c5ef3c3b2854d39524befdb16b330b4f3ffafb3b669ce906289bd6745e7f"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4d048) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x128) (async) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) (async) r5 = syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x6147, 0x4, 0x2, 0x92}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0200907800000000605b29ab00001100fc0102000000000000000000000000000000000000000000000000000000000000000000000000000521000000000000fb36eeca6fad50b375a22a584d16ca5528270491091a7ca020a0aa7def28bcd56505fd5e7c85ea7ce69642ec49c92cd1eaac434d8a6bb059c8d4e650a22fb12680b7"], 0x0) 29.512408545s ago: executing program 6 (id=2664): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/fscaps', 0x0, 0x14) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x5}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) syz_open_procfs(0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 29.378891036s ago: executing program 6 (id=2665): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xa03}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xa03}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0xb, 0x81, 0x46d, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) poll(&(0x7f00000000c0)=[{r1, 0x80d1}], 0x1, 0xffffffff) 12.724329927s ago: executing program 6 (id=2688): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x0, 0xb0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x306, 0x40, 0x4, 0xfc}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xcd8}}}}}}}]}}, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.057709159s ago: executing program 1 (id=2765): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0xfa, 0xff, 0xfffc, 0x1, "cccf6b3d79281e285e89024a2866ebaa10fe00c15dc352ec0f119204d2d2c0b8"}) mkdir(0x0, 0x20) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x1d, 0x0, @val=@netfilter={0x2, 0x0, 0x4}}, 0x20) write$FUSE_ENTRY(r1, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x900) recvmmsg(r5, &(0x7f0000000580)=[{{&(0x7f0000000300)=@alg, 0x80, &(0x7f0000000280)=[{&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/130, 0x82}, {&(0x7f0000000500)=""/78, 0x4e}], 0x3, &(0x7f0000000680)=""/176, 0xb0}, 0x6}], 0x1, 0x10002, &(0x7f0000000740)={0x77359400}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x6800, 0x8, 0x1}, 0x18) write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000140)={0xa, {0x9, 0x5}}, 0xa) mount$bpf(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000840), 0x128020, &(0x7f00000009c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESDEC=r6, @ANYBLOB=',mode=00000000000000000000003,gid=', @ANYRES64=r1, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESDEC=r6, @ANYRESHEX=r4, @ANYBLOB="f44e2850a73a0f4b4daab45005c0bec9fdeefe8b5035a6d9136922e461a0c43c525dc33789ea7f941d8441793481d15daf74ed66f65f11560c1ce98814eb62fc5719c40be5739cf160f8e95cb12071d6c8c656bd5cb1a330083021902e42ee5464bd393fa6d864e7463770c5c461721e181471c98a1bfc3e4587fc357b6be2fb71195b8f75", @ANYBLOB="2c636f6e746578743d757369633d3078303030301bf5000000000000a33030312c00"/44]) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x6) r11 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet_int(r11, 0x0, 0x32, 0x0, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, &(0x7f0000000900)="646566f0808508005f64643ef20f5d4c062ef30faef5670f01c30f96c3660f38819c620036660f38814400d8be0300de03baf80c66b84073448e66efbafc0cb8df00ef", 0x43}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000780)=[@textreal={0x8, &(0x7f0000000880)="f2dce40fc7aad8240f01c50f784b000f21fc66b99400004066b8c71a000066ba000000000f3066b9800000c00f326635001000000f30f083b1b90087ba2100ed0f01cb", 0x43}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) prlimit64(0x0, 0xc, 0x0, &(0x7f00000002c0)) 8.53777359s ago: executing program 1 (id=2768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r3, @ANYRES16=r3], 0x1000f) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105511, &(0x7f0000000c00)={{0x7, 0x0, 0x400000, 0xffff, 'syz1\x00', 0x1}, 0x0, [0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80004, 0x0, 0xfffffffc, 0x204, 0x7ff, 0x2, 0x0, 0x40, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x20000, 0xfffffffffffff4cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe9e, 0x20, 0x0, 0x6, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x6]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x5}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 7.616365123s ago: executing program 1 (id=2772): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x81, 0x40, 0x8, 0xff, 0x1, 0xe5, 0x81, 0x31, 0x2, 0x12, 0xb1, 0x3, 0x0, 0x5}, 0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000400)=@multiplanar_fd={0xffffffff, 0xa, 0x4, 0x10000, 0x6, {0x77359400}, {0x5, 0x8, 0x4, 0x3, 0xa0, 0x7, "244e8008"}, 0x5, 0x4, {&(0x7f00000002c0)=[{0x7, 0x7, {}, 0x791}, {0x94, 0xe59, {}, 0xd57}]}, 0x10}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_pts(0xffffffffffffffff, 0x400) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}, {0x61}, {}, {}, {0x6}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x400}) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x59, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf9, 0x28, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0x75, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x6a}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xfe, 0x5, 0x0, 0xff}, 0x53, &(0x7f0000000240)={0x5, 0xf, 0x53, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0xc, 0x2, 0x80000, 0x0, 0x4, [0xff3fcf, 0xffc000]}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "639156fbf581ab0fac1998f7ab0781e1"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "a3bab977a85c870da47a5bd220155c5c"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x53, 0x40, 0x9, 0x887, 0x47}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x4, 0x6, 0xb800}]}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x3f1, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) 5.820885282s ago: executing program 7 (id=2779): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "0b06a2a4f18274ada4f99c2c898849506b77c3fe60278ae0d2b1bc70c8354b376f2816d2bf4d565ff0f55dc180dfd7892486561ebde902c342071f29d2d93933891167cc1f328d825dc3f9cd03f228b7c482cc269a9269a8335723612fb47703563a877011a9ca582bd008c0d96b082515fae5cdfac38ae496e4823e5c23a032e6be3475aec037d4d8"}}}, &(0x7f0000000a40)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="20910100000003571bf9f7fd53db833fed040dae3b452c8056588089caf7212f7f815c35896940107563265bb47b5bf1287f14d0aa430c39d01832f57ae404015d1f88f2c93b60c2e3ab6f57347d7d57084ad6ed67333669dc70b6a3634e3c57fd66aa31406669d5c24f669d48aa75b9967830835d8d117a8fd0e2406a33"], &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010004b0400000000", @ANYRES32=0x0], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) dup(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xea, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab") read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0xfffffeef) 5.026516629s ago: executing program 7 (id=2784): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000002100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xc2, 0x42, 0x7a, 0x20, 0x46d, 0x960, 0xa5af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x35, 0x1f}}]}}]}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000000)={0x9, 0x5, 0x7, 0x1, '\x00', 0x9}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000000)) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000005a00)) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000005880)=[{{&(0x7f0000002180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002200)=""/215, 0xd7}, {&(0x7f0000002300)=""/216, 0xd8}, {&(0x7f0000002400)=""/34, 0x22}, {&(0x7f0000002440)=""/40, 0x28}, {&(0x7f0000002480)=""/126, 0x7e}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/221, 0xdd}, 0x5}, {{&(0x7f0000003680)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003700)=""/179, 0xb3}, {&(0x7f00000037c0)=""/149, 0x95}, {&(0x7f0000003880)=""/36, 0x24}, {&(0x7f00000038c0)=""/158, 0x9e}, {&(0x7f0000003980)=""/98, 0x62}, {&(0x7f0000003a00)=""/54, 0x36}, {&(0x7f0000003a40)=""/176, 0xb0}, {&(0x7f0000003b00)=""/21, 0x15}], 0x8, &(0x7f0000003bc0)=""/95, 0x5f}, 0x1}, {{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/54, 0x36}], 0x2, &(0x7f0000004cc0)=""/46, 0x2e}, 0xda}, {{0x0, 0x0, &(0x7f0000005200)=[{&(0x7f0000004d00)=""/237, 0xed}, {&(0x7f0000004e00)=""/42, 0x2a}, {&(0x7f0000004e40)=""/83, 0x53}, {&(0x7f0000004ec0)=""/145, 0x91}, {&(0x7f0000004f80)=""/169, 0xa9}, {&(0x7f0000005040)=""/177, 0xb1}, {&(0x7f0000005100)=""/228, 0xe4}], 0x7, &(0x7f0000005280)=""/210, 0xd2}, 0xc56}, {{&(0x7f0000005380)=@qipcrtr, 0x80, &(0x7f0000005800)=[{&(0x7f0000005400)=""/5, 0x5}, {&(0x7f0000005440)=""/57, 0x39}, {&(0x7f0000005480)=""/76, 0x4c}, {&(0x7f0000005500)=""/125, 0x7d}, {&(0x7f0000005580)=""/85, 0x55}, {&(0x7f0000005600)=""/235, 0xeb}, {&(0x7f0000005700)=""/244, 0xf4}], 0x7}, 0x4}], 0x5, 0x0, &(0x7f00000059c0)={0x0, 0x989680}) connect$inet6(r6, &(0x7f0000002140)={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8001}, 0x1c) write$FUSE_STATFS(r0, &(0x7f0000002080)={0x60, 0xfffffffffffffff5, r5, {{0x5, 0x80000001, 0xfffffffffffffff8, 0x5, 0x0, 0x8, 0x2d0000, 0x4}}}, 0x60) dup2(r0, r0) 4.4522629s ago: executing program 1 (id=2786): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x0, 0x8}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r4 = fcntl$dupfd(r3, 0x0, r3) write$binfmt_script(r4, &(0x7f0000001b00), 0xfffffd9d) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x5}, @union={0x8, 0x4, 0x0, 0x5, 0x0, 0x4, [{0x0, 0x0, 0x2}, {0x7, 0x0, 0x7}, {0x4, 0x3, 0x84a}, {0x10, 0x4, 0x8}]}, @restrict={0x7, 0x0, 0x0, 0xb, 0xffff}, @enum={0x4, 0x6, 0x0, 0x6, 0x4, [{0xa, 0xfffffff8}, {0xe, 0x885}, {0x4, 0x3}, {0x5, 0x7}, {0x5, 0x4}, {0xd, 0xe3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0xc}}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x30, 0x5f, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000100)=""/22, 0xd4, 0x16, 0x0, 0x4, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x5, 0x80000000, 0x5008, r4, 0x5, '\x00', r5, r7, 0x0, 0x3, 0x5, 0x7, @void, @value, @void, @value}, 0x50) copy_file_range(r4, &(0x7f0000000240)=0x1, r1, &(0x7f0000000440)=0x80, 0x18, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 4.4350516s ago: executing program 0 (id=2787): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$P9_RSTATu(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="080200000200000005f8000000000000000000000000000000000000000000000000000000000100000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500002b595fcb14034354b9fd9ef196a51cd5157adc8103b494e11d00d299988014986ce982cfc26dd7c500f04cd85f2a70f5e9930e97a59a645500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e"], 0x239) open$dir(0x0, 0xc300, 0x0) 3.836400584s ago: executing program 0 (id=2788): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x3c, 0x0, "06479c586ad71b5dc2214ce6ad1b7f6f39191252296186080565af392e3775343df390d0abe96b1b451f5d0f92a9a27a4139cab336a336954a7becc5ff56e8979712c57a5892d72ea83c3dfad7a5233d"}, 0xd8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x8000) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.614863114s ago: executing program 0 (id=2789): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa, 0xb0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x240, 0x1, 0x1, {0x22, 0xd96}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x8, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x4, 0x2c, 0x4}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xab, 0x3, 0x6, 0x40, 0x4}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x0, 0x3}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1807}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x419}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) timerfd_gettime(0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000280)) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async, rerun: 32) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x6, 0xd0, 0x6, 0x2, 0x0, 0x2, 0x6, 0x0, 0x8], 0x2000, 0x98302}) add_key(&(0x7f0000000740)='logon\x00', &(0x7f0000000780)={'syz', 0x3}, &(0x7f00000007c0), 0x0, 0xfffffffffffffff8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bca) (async, rerun: 32) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x109041) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_SET_CAPACITY(r7, 0x4c06) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000040)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x3}}, [0x1, 0x74f8, 0x16e4, 0x8, 0x7, 0x4, 0x7, 0x3ff, 0x2, 0x6, 0x62f7, 0xffffffffffffffff, 0x100, 0x9, 0x8000]}, &(0x7f0000000300)=0x100) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f0000000700)={0x0, 0x118000}) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, &(0x7f0000000200)={0x20, 0x23, 0xbf, {0xbf, 0xb, "3764ad2819c7cc4dc5c68bb809d1f73e61034db4771d478e7289aa174ca9a766d7558fdaccb44667c8ad5878df5c06ab0184553dfdaeeb9498a97791119034381fa1bb1bae86ff6437e005306f9dc135a5f232ecd9b3c4e4a70d0cda73b1b4a14635eb6fe6ec2df2ead7d45113a78118124559cd171eb794206e013d16ea156306d696177cbfe32234bb58437fdef48315f5e3acbfabd89ef5a01f043d26375d3c9c019e72f07541bc378975860e90b84098a2a0ba8d492338e1ff9e8e"}}, &(0x7f0000000300)={0x0, 0x3, 0xc, @string={0xc, 0x3, "f9716c86ff6f2c0a40f0"}}, &(0x7f00000007c0)={0x0, 0x22, 0x16, {[@main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x8, "5e1c9bd9"}, @global=@item_012={0x2, 0x1, 0xb, "ed5f"}, @global=@item_012={0x2, 0x1, 0x8, "03ec"}, @local=@item_4={0x3, 0x2, 0x5, "d3cfd77a"}, @global=@item_012={0x2, 0x1, 0xa, "cf39"}, @local=@item_012={0x0, 0x2, 0xa}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xe, 0x1, {0x22, 0xae7}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000400)={0x0, 0x17, 0x25, "5314fad89682ed27e072878308931fc03bf4838b69e3c38dae0173abf13f05c8109195f926"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000500)={0x20, 0x1, 0xed, "c1748e8d2e324f5495b526eb5035e3d2894375c592b488aeea4d96f07561974376d38cbe1c6e957e5b0c94c95a75e1091ee802199ed0ee611bbbe7cc65bd5bd39af04d9f4d4ec7bab69185d269595c1eb6695eb7ee14fce6bd0a105344b06fc469405ec28be61d2a6d7150adb6f5f9d23359651c36d08d3661adceb7158ece15a354b20fb1c73c3f2d37cc9716a4189c2d716a0e3cb09fc3e47c1267d48373107216956cea46a4b2054e964026848a50bd3b71f5fef45edceb81776e8a1fe1967df197aa522cac027e653aa596b8bebda02db4df2a0f031fe8e496830428a764f83f2ea8aaeb3131ade68d88b9"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x6}}) (async, rerun: 64) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) (async, rerun: 64) io_setup(0x7ff, &(0x7f0000000680)=0x0) io_submit(r10, 0x1, &(0x7f0000000640)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x0, 0xffff, r9, 0x0, 0x0, 0x0, 0x0, 0x0, r9}]) 3.015860906s ago: executing program 5 (id=2791): listen(0xffffffffffffffff, 0xf45a) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x3b0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) (async) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0xfb}) (async) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) (async) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) (async, rerun: 32) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (rerun: 64) acct(&(0x7f00000001c0)='./file0\x00') (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x2) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f000038b000/0x3000)=nil, 0x3000, 0x4) 2.649987449s ago: executing program 5 (id=2792): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffff11000001000000000086dd6057000200482f00fe8000000000000000000000000000bbfe80000000000000000000000b0000aa042065580000000000"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) io_submit(0x0, 0x2, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, r2, &(0x7f0000000340)="b73bccc4d8f91634df3f4818c364a2db90c41a5c37d234ecb539abb2e4fd886fe3060691bbca0fb0b4e56d88db4a11425759f132faa4ef6e0522e3ae386e96f81ebef167a9899245cafe3b3f879ace41e7dc6e2e37ceca39efee4abef61496fd2c16b224b9423ebd9bcf1ac953109330295d7f457de6f4f9e7eac6620725e5c0f2b34dbaef67237cc22ae9d366373ec066446b607ac8728f7cc3248528f3f881b70f24dbdecb5b1aeb47005c4fdca7aa60a9f92afc9da52572ee8b030a000017f65a22125b1e145199ab1844893dff919e1893c665d9e9c0f55327606e9eaf1c96109351", 0xe4, 0x9, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000480)="1ffcc4bb1c6c547af25f3fa665cba2c93435b150592c6bbcec230ea3848e225950805e62a67eb8885bfbf12678bc58501ac94ba3a1098a5e423bad8520bd47b03bef7dcbeb198343c231105aaf7c5dfa4c98148b173c6c8226e1aa09d33352622ef068e52410222bb0ab7b47d902e95fdf17828fca97957c4c60bbda94aa7c2917221176131ddf011ae13be78fefa7e4f6f79ef1fc3d575f5bcc12f11c89e8fc5248b45026e86a", 0xa7, 0x8, 0x0, 0x1}]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x0, 0x800002, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) 2.476378889s ago: executing program 5 (id=2793): syz_open_dev$usbmon(0x0, 0x7, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) (async) close(r4) r5 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x2, &(0x7f0000000040)='source', &(0x7f0000000080)='./bus\x00', r5) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000080)={0x6, 0xfffffffd, 0x4ff, 0x1, 0x0, "3e874800", 0x0, 0x9}) (async) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000080)={0x6, 0xfffffffd, 0x4ff, 0x1, 0x0, "3e874800", 0x0, 0x9}) syz_open_dev$media(&(0x7f00000005c0), 0x6, 0x80000) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0x541b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) (async) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r9, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000380)={r9, 0x0, 0x20000000, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r9, 0x0, 0x20000000}, 0x20) listen(r8, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', r5, 0x4000, r9}, 0x18) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000140), 0x4) (async) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000140), 0x4) 2.20815153s ago: executing program 1 (id=2794): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000580)='./file0\x00', r1, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000007000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 1.833973026s ago: executing program 1 (id=2795): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "0b06a2a4f18274ada4f99c2c898849506b77c3fe60278ae0d2b1bc70c8354b376f2816d2bf4d565ff0f55dc180dfd7892486561ebde902c342071f29d2d93933891167cc1f328d825dc3f9cd03f228b7c482cc269a9269a8335723612fb47703563a877011a9ca582bd008c0d96b082515fae5cdfac38ae496e4823e5c23a032e6be3475aec037d4d8"}}}, &(0x7f0000000a40)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="20910100000003571bf9f7fd53db833fed040dae3b452c8056588089caf7212f7f815c35896940107563265bb47b5bf1287f14d0aa430c39d01832f57ae404015d1f88f2c93b60c2e3ab6f57347d7d57084ad6ed67333669dc70b6a3634e3c57fd66aa31406669d5c24f669d48aa75b9967830835d8d117a8fd0e2406a33"], &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010004b0400000000", @ANYRES32=0x0], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) dup(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xea, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab") read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0xfffffeef) 1.699101761s ago: executing program 7 (id=2796): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f00000000c0)=0x1, 0x54) sched_setscheduler(0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f00000001c0)) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000240)) io_uring_enter(r1, 0x7f5f, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="d45bf7fee26a8afa61032d690332e35155259a4e3175", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@cgroup=r3, r3, 0x2f, 0x10, 0x4, @void, @value=r3}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.574847302s ago: executing program 0 (id=2797): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000080)) socket(0x28, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='btrfs_qgroup_account_extent\x00'}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x80000000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) symlinkat(0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'hsr0\x00'}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c0000001b006bcd9e3fe3dc4e48aa31086b8703140000001f08000000000000040014000d60bc1e6182949a7009273659f60a84c9d547ca8837e786a6d0bdd7fcf50e4509c5bb5a00b69853000000000000000000", 0x55}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f3, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0xffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 1.574483619s ago: executing program 5 (id=2798): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000240)=""/30) (async) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085507, &(0x7f0000000300)=0x40005) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) getcwd(&(0x7f00000010c0)=""/4096, 0x1000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xa1a) 1.568138925s ago: executing program 7 (id=2799): ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000040)=0x103d8) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000500), 0x0, 0x1000000}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000801d0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x1c, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0xda23, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={[{@verity_on}, {@uuid_on}]}) (async, rerun: 64) sendto$inet(r5, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 64) sendto$inet(r5, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 64) shutdown(r5, 0x1) (rerun: 64) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 32) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x1, 0x100, 0x1}, 0x10) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) read$FUSE(r1, &(0x7f0000002200)={0x2020}, 0x2020) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000b40)={{0x0, 0x0, 0x80}}) (async) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)='\n', 0xfdef}], 0x1) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000060"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288ca6d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 1.391969386s ago: executing program 7 (id=2800): socket$nl_route(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x80) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000140)={{0x2, 0x3, 0x4, 0x2, 0xe00}, 0x800, 0x6, 0x80000001}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000480), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000004c0)={0x0, 0x3, 0x2, 0x0, 0x2d}) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000004280)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r6, 0x4606, &(0x7f0000000600)={0x280, 0x80, 0x2000, 0x240, 0x4, 0x3, 0x18, 0x0, {0x8000, 0x5, 0x1}, {0x8, 0x7, 0x1}, {0x53b, 0x6}, {0x2, 0x1000, 0x1}, 0x2, 0x28f86a899bc0b1be, 0x10000, 0xfffffff9, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x400, 0x9, 0x8, 0x200, 0x2, 0x6}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000080)={0x28, 0x3, r5, r8, 0x0, 0x0, 0x0, 0xd7, &(0x7f00000003c0)="1ab6971ecd824486c26c4b1d2b4b8182e164ddc48dcd1a9646c65da8abf822bd1928adc9568463441371445f467f5d214f46dbf757a605951a6ef9a6400453c4c8d64baa66c8d35dd635ce80bfab33e9ff24cb001b4b9c6289f378f08ebf113d0922e9f15335b85762a92335d9f1d125a91b2edce0322dbeba39afdfe74f93bc29ff42b9baefe0402ba17dfe2245cdc96af910499f361025e3fab267017a23e37c92e647981cbc4c567fd5d35cd0887efcc0103648fc1084a97dec8adb344ddd7fb534cbdd9c45df75df872d89d075b26accd3bdcf74ac"}) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0xa, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 1.1023982s ago: executing program 5 (id=2801): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRES64=r1, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000040)={0xfa, 0xff, 0xfffc, 0x1, "cccf6b3d79281e285e89024a2866ebaa10fe00c15dc352ec0f119204d2d2c0b8"}) mkdir(0x0, 0x20) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x128020, &(0x7f0000002380)=ANY=[@ANYRES64=r4, @ANYRES32=r0, @ANYRESHEX=r3]) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) recvmsg(r6, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) shutdown(r6, 0x1) recvfrom$inet(r6, 0x0, 0x0, 0x40000122, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_ENTRY(r5, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r2], 0x2e, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000280), 0x0, 0xfffffffffffffffb) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="3e59f00fb0740064f0fe8c984d66b9800000c00f326635000400000f300f79aec6960f01c4ea4c006c00ba4300b0ceee2626f087bafaff36660f388008", 0x3d}], 0x27, 0x51, 0x0, 0x0) 1.016829641s ago: executing program 7 (id=2802): fspick(0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x2}, {0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xaa6d}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x6, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 509.389206ms ago: executing program 0 (id=2803): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffff11000001000000000086dd6057000200482f00fe8000000000000000000000000000bbfe80000000000000000000001f0000aa042065580000000000"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) io_submit(0x0, 0x2, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, r2, &(0x7f0000000340)="b73bccc4d8f91634df3f4818c364a2db90c41a5c37d234ecb539abb2e4fd886fe3060691bbca0fb0b4e56d88db4a11425759f132faa4ef6e0522e3ae386e96f81ebef167a9899245cafe3b3f879ace41e7dc6e2e37ceca39efee4abef61496fd2c16b224b9423ebd9bcf1ac953109330295d7f457de6f4f9e7eac6620725e5c0f2b34dbaef67237cc22ae9d366373ec066446b607ac8728f7cc3248528f3f881b70f24dbdecb5b1aeb47005c4fdca7aa60a9f92afc9da52572ee8b030a000017f65a22125b1e145199ab1844893dff919e1893c665d9e9c0f55327606e9eaf1c96109351", 0xe4, 0x9, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000480)="1ffcc4bb1c6c547af25f3fa665cba2c93435b150592c6bbcec230ea3848e225950805e62a67eb8885bfbf12678bc58501ac94ba3a1098a5e423bad8520bd47b03bef7dcbeb198343c231105aaf7c5dfa4c98148b173c6c8226e1aa09d33352622ef068e52410222bb0ab7b47d902e95fdf17828fca97957c4c60bbda94aa7c2917221176131ddf011ae13be78fefa7e4f6f79ef1fc3d575f5bcc12f11c89e8fc5248b45026e86a", 0xa7, 0x8, 0x0, 0x1}]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x0, 0x800002, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) 402.295965ms ago: executing program 0 (id=2804): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f00000000c0)=0x1, 0x54) sched_setscheduler(0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f00000001c0)) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000240)) io_uring_enter(r1, 0x7f5f, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="d45bf7fee26a8afa61032d690332e35155259a4e3175", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@cgroup=r3, r3, 0x2f, 0x10, 0x4, @void, @value=r3}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 5 (id=2805): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000580)='./file0\x00', r1, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000007100000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) kernel console output (not intermixed with test programs): r" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 448.182899][ T118] usb 2-1: USB disconnect, device number 53 [ 448.667654][T13560] netlink: 'syz.6.2109': attribute type 1 has an invalid length. [ 449.830738][T13562] bond5: (slave ip6gretap4): Enslaving as a backup interface with an up link [ 450.515587][ T30] audit: type=1400 audit(1742470098.692:4336): avc: denied { read } for pid=13567 comm="syz.1.2112" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 450.577166][ T30] audit: type=1400 audit(1742470098.692:4337): avc: denied { open } for pid=13567 comm="syz.1.2112" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 450.632041][T13579] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2115'. [ 450.693595][ T30] audit: type=1400 audit(1742470098.692:4338): avc: denied { ioctl } for pid=13567 comm="syz.1.2112" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 450.917118][ T30] audit: type=1400 audit(1742470098.792:4339): avc: denied { read } for pid=13572 comm="syz.5.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 450.937824][ T30] audit: type=1400 audit(1742470098.992:4340): avc: denied { write } for pid=13588 comm="syz.0.2118" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 451.394494][T13604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.030014][T13604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.349500][T13603] delete_channel: no stack [ 452.378997][T13615] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13615 comm=syz.5.2126 [ 452.575993][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2129'. [ 452.625538][T13622] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2129'. [ 452.969752][ T9] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 453.131174][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 453.146350][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 453.153216][ T9] usb 6-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 453.167529][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.182760][ T9] usb 6-1: config 0 descriptor?? [ 453.188704][T13627] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 453.289171][T13642] netlink: 'syz.0.2135': attribute type 1 has an invalid length. [ 453.851936][T13644] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 453.862830][ T9] hid (null): unknown global tag 0xe [ 453.875437][ T9] hid (null): invalid report_size 27768 [ 453.887618][ T9] hid (null): invalid report_size 25453 [ 453.945180][ T9] uclogic 0003:28BD:0078.0016: interface is invalid, ignoring [ 454.131884][ T26] usb 6-1: USB disconnect, device number 67 [ 454.981918][T13672] 9pnet_fd: Insufficient options for proto=fd [ 454.996818][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 454.996833][ T30] audit: type=1400 audit(1742470103.172:4343): avc: denied { write } for pid=13669 comm="syz.1.2145" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 455.029073][T13675] fuse: Bad value for 'fd' [ 455.395935][T13687] netlink: 'syz.1.2147': attribute type 1 has an invalid length. [ 456.707497][T13713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.719915][T13713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.769893][ T118] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 456.920825][T13722] netlink: 'syz.5.2160': attribute type 1 has an invalid length. [ 456.932938][ T118] usb 2-1: Using ep0 maxpacket: 32 [ 456.940941][ T118] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 456.953910][ T118] usb 2-1: config 0 interface 0 has no altsetting 1 [ 456.961771][ T118] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 456.975199][ T118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 456.983458][ T118] usb 2-1: SerialNumber: syz [ 456.988948][ T118] usb 2-1: config 0 descriptor?? [ 456.995739][ T118] usb-storage 2-1:0.0: USB Mass Storage device detected [ 457.006170][ T118] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 457.206264][ T5908] usb 2-1: USB disconnect, device number 54 [ 457.212365][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 457.541957][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 457.567077][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.617829][ T9] usb 6-1: config 0 descriptor?? [ 457.647479][ T9] cp210x 6-1:0.0: cp210x converter detected [ 457.851443][ T9] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 457.858948][ T9] cp210x 6-1:0.0: querying part number failed [ 457.883056][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 457.919256][ T9] usb 6-1: USB disconnect, device number 68 [ 457.947075][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 457.993532][ T9] cp210x 6-1:0.0: device disconnected [ 458.011368][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'. [ 458.185883][ T30] audit: type=1326 audit(1742470106.282:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 458.569718][ T30] audit: type=1326 audit(1742470106.282:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 458.630944][ T30] audit: type=1326 audit(1742470106.282:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 458.654676][ T30] audit: type=1326 audit(1742470106.282:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 458.678604][ T30] audit: type=1326 audit(1742470106.282:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 459.046698][T13775] 9pnet_fd: Insufficient options for proto=fd [ 459.339777][ T9] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 459.444430][T13790] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2183'. [ 459.464657][ T30] audit: type=1326 audit(1742470107.652:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13789 comm="syz.0.2183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88ce58d169 code=0x0 [ 459.512740][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.525444][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 459.549155][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 459.568514][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 459.619661][ T9] usb 2-1: Manufacturer: syz [ 459.637289][ T9] usb 2-1: config 0 descriptor?? [ 459.649200][T13775] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 460.411770][ T30] audit: type=1326 audit(1742470108.082:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.5.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 460.424696][ T5908] usb 2-1: USB disconnect, device number 55 [ 460.435496][ T30] audit: type=1326 audit(1742470108.082:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.5.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 460.435533][ T30] audit: type=1326 audit(1742470108.082:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.5.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 460.435564][ T30] audit: type=1326 audit(1742470108.082:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.5.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 460.435593][ T30] audit: type=1326 audit(1742470108.082:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.5.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 461.730886][T13831] Failed to initialize the IGMP autojoin socket (err -2) [ 461.822497][T13832] Failed to initialize the IGMP autojoin socket (err -2) [ 462.207771][T13851] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13851 comm=syz.5.2201 [ 462.832146][ T30] audit: type=1326 audit(1742470110.502:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 462.949713][ T30] audit: type=1326 audit(1742470110.502:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 462.973284][ T30] audit: type=1326 audit(1742470110.502:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 463.014762][ T30] audit: type=1326 audit(1742470110.502:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 463.038638][ T30] audit: type=1326 audit(1742470110.502:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 463.123603][T13866] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 463.151410][T13871] overlayfs: failed to clone upperpath [ 463.420785][T13882] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 463.463995][T13886] netlink: 268 bytes leftover after parsing attributes in process `syz.6.2212'. [ 463.499022][T13889] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2204'. [ 463.587516][T13893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2211'. [ 466.247164][T13925] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2225'. [ 466.288383][T13927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.300242][T13927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.357598][T13927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2224'. [ 466.366788][T13927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2224'. [ 466.553223][T13933] fuse: Bad value for 'user_id' [ 466.558147][T13933] fuse: Bad value for 'user_id' [ 466.564582][ T118] Process accounting resumed [ 466.680362][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 466.680394][ T30] audit: type=1326 audit(1742470114.862:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.5.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 467.319645][ T30] audit: type=1326 audit(1742470114.862:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.5.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 467.345061][ T30] audit: type=1326 audit(1742470114.862:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.5.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 467.504544][ T30] audit: type=1326 audit(1742470114.862:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.5.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 467.622600][ T30] audit: type=1326 audit(1742470114.862:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.5.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 467.761308][T13944] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2232'. [ 467.799383][ T30] audit: type=1400 audit(1742470115.982:4372): avc: denied { listen } for pid=13946 comm="syz.0.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 467.830476][ T30] audit: type=1400 audit(1742470115.982:4373): avc: denied { read } for pid=13946 comm="syz.0.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 468.191643][T13964] fuse: Bad value for 'user_id' [ 468.197333][T13964] fuse: Bad value for 'user_id' [ 468.205051][ T9] Process accounting resumed [ 468.412322][T13973] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 468.424881][T13973] syzkaller1: linktype set to 780 [ 469.005123][ T30] audit: type=1326 audit(1742470117.022:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13975 comm="syz.0.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 470.058946][ T30] audit: type=1326 audit(1742470117.022:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13975 comm="syz.0.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 470.111434][ T30] audit: type=1326 audit(1742470117.022:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13975 comm="syz.0.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 470.645517][T13999] sch_tbf: peakrate 4294901761 is lower than or equals to rate 5830806149046838872 ! [ 470.668440][T14003] fuse: Bad value for 'user_id' [ 470.675911][T14003] fuse: Bad value for 'user_id' [ 470.693079][ T5898] Process accounting resumed [ 470.808135][T14008] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2253'. [ 473.348073][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 473.348090][ T30] audit: type=1400 audit(1742470121.522:4380): avc: denied { read write } for pid=14072 comm="syz.1.2270" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 473.400198][ T30] audit: type=1400 audit(1742470121.522:4381): avc: denied { open } for pid=14072 comm="syz.1.2270" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 475.259713][ T5870] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 475.342156][T14118] geneve2: entered promiscuous mode [ 475.347542][T14118] geneve2: entered allmulticast mode [ 475.450080][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 475.456533][ T5870] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 475.459405][T14114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2282'. [ 475.471906][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.478265][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'. [ 475.487182][ T5870] usb 6-1: config 0 descriptor?? [ 475.708831][ T5870] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 475.726475][T14114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.730728][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 475.747992][T14114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.770360][ T5870] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 475.781655][ T5870] usb 6-1: media controller created [ 475.790247][ T5898] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 475.797626][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 475.829102][T14134] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 475.955573][ T5898] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 475.964900][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.988267][ T5898] usb 2-1: config 0 descriptor?? [ 475.995911][ T5898] cp210x 2-1:0.0: cp210x converter detected [ 476.137156][T14145] fuse: Bad value for 'fd' [ 476.145713][ T26] Process accounting resumed [ 476.187340][T14147] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2294'. [ 476.196686][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2294'. [ 476.207310][ T5898] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 476.215759][ T5898] cp210x 2-1:0.0: querying part number failed [ 476.223196][ T5898] usb 2-1: cp210x converter now attached to ttyUSB0 [ 476.424303][ T30] audit: type=1400 audit(1742470124.612:4382): avc: denied { map } for pid=14148 comm="syz.0.2295" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 476.486716][ T5898] usb 2-1: USB disconnect, device number 56 [ 476.503315][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 476.535571][T14157] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2296'. [ 476.665930][ T5898] cp210x 2-1:0.0: device disconnected [ 476.666314][T14163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.688478][ T5870] stb0899_attach: Driver disabled by Kconfig [ 476.695099][ T5870] az6027: no front-end attached [ 476.695099][ T5870] [ 476.707101][ T5870] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 476.710133][T14163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.716559][ T5870] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input52 [ 476.792638][T14165] netlink: 'syz.6.2297': attribute type 1 has an invalid length. [ 477.356159][ T5870] dvb-usb: schedule remote query interval to 400 msecs. [ 477.365922][T14166] bond6: (slave ip6gretap5): Enslaving as a backup interface with an up link [ 477.527811][ T5870] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 477.717263][T14163] overlay: Bad value for 'upperdir' [ 477.770971][ T30] audit: type=1400 audit(1742470125.962:4383): avc: denied { append } for pid=14162 comm="syz.0.2300" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 477.802226][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2301'. [ 477.830871][T14171] 9pnet_fd: Insufficient options for proto=fd [ 477.865398][ T30] audit: type=1400 audit(1742470126.052:4384): avc: denied { write } for pid=14172 comm="syz.1.2303" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 478.424081][T14188] fuse: Bad value for 'fd' [ 478.430467][ T5870] Process accounting resumed [ 478.448133][ T26] usb 6-1: USB disconnect, device number 69 [ 478.514065][ T26] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 478.600391][T14200] vlan0: entered allmulticast mode [ 478.787576][ T5870] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 478.950986][ T5870] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 478.961118][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.975032][ T5870] usb 2-1: config 0 descriptor?? [ 478.985020][ T5870] cp210x 2-1:0.0: cp210x converter detected [ 479.191513][ T5870] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 479.210813][ T5870] cp210x 2-1:0.0: querying part number failed [ 479.230940][ T5870] usb 2-1: cp210x converter now attached to ttyUSB0 [ 479.253447][T14230] fuse: Bad value for 'fd' [ 479.261444][ T26] Process accounting resumed [ 479.465473][ T26] usb 2-1: USB disconnect, device number 57 [ 479.473860][ T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 479.492691][ T26] cp210x 2-1:0.0: device disconnected [ 479.706696][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 479.725044][T14253] ceph: No mds server is up or the cluster is laggy [ 479.732140][ T118] libceph: mon0 (1)[c::]:6789 connect error [ 479.808265][ T30] audit: type=1326 audit(1742470383.999:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.7.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 479.832466][ T30] audit: type=1326 audit(1742470383.999:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.7.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 479.858753][T14264] fuse: Bad value for 'fd' [ 479.893907][ T5870] Process accounting resumed [ 479.931904][ T30] audit: type=1326 audit(1742470383.999:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.7.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 479.979933][ T26] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 480.000105][T14267] 9pnet_fd: Insufficient options for proto=fd [ 480.089973][ T30] audit: type=1326 audit(1742470383.999:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.7.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 480.119959][ T30] audit: type=1326 audit(1742470383.999:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.7.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 480.164370][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.268672][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2333'. [ 480.288320][ T26] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 480.383250][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.407575][T14272] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2333'. [ 480.427452][ T26] usb 6-1: config 0 descriptor?? [ 480.458763][T14272] netlink: zone id is out of range [ 480.472645][T14272] netlink: get zone limit has 8 unknown bytes [ 480.583129][ T30] audit: type=1400 audit(1742470384.779:4390): avc: denied { getopt } for pid=14276 comm="syz.0.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 480.852797][T14287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.864508][T14287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.875676][T14286] dlm: Unknown command passed to DLM device : 32 [ 480.875676][T14286] [ 480.958112][ T26] usbhid 6-1:0.0: can't add hid device: -71 [ 480.964587][ T26] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 480.988499][ T26] usb 6-1: USB disconnect, device number 70 [ 481.580610][T14303] fuse: Bad value for 'fd' [ 481.585919][ T30] audit: type=1326 audit(1742470385.769:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.7.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 481.614540][ T30] audit: type=1326 audit(1742470385.769:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.7.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 481.648373][ T30] audit: type=1326 audit(1742470385.769:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.7.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 481.680728][ T5870] Process accounting resumed [ 481.749135][T14309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.779993][T14309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.949722][ T30] audit: type=1326 audit(1742470385.769:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.7.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 482.134839][T14314] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2347'. [ 482.209760][ T118] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 482.349640][ T118] usb 2-1: device descriptor read/64, error -71 [ 482.589841][ T118] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 482.691422][T14329] Invalid ELF header magic: != ELF [ 482.731183][ T118] usb 2-1: device descriptor read/64, error -71 [ 483.362250][ T118] usb usb2-port1: attempt power cycle [ 483.531778][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2354'. [ 483.540686][T14340] team0: left allmulticast mode [ 483.545511][T14340] team_slave_0: left allmulticast mode [ 483.551011][T14340] team_slave_1: left allmulticast mode [ 483.556527][T14340] bridge0: port 3(team0) entered disabled state [ 483.572887][T14340] bridge_slave_1: left allmulticast mode [ 483.578536][T14340] bridge_slave_1: left promiscuous mode [ 483.584169][T14340] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.613052][T14340] bridge_slave_0: left allmulticast mode [ 483.618697][T14340] bridge_slave_0: left promiscuous mode [ 483.624524][T14340] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.728730][ T118] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 483.782257][ T118] usb 2-1: device descriptor read/8, error -71 [ 483.981298][T14346] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2356'. [ 483.998336][T14346] Failed to initialize the IGMP autojoin socket (err -2) [ 484.130236][ T118] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 484.191858][ T118] usb 2-1: device descriptor read/8, error -71 [ 484.196174][T14354] fuse: Bad value for 'fd' [ 484.300746][ T118] usb usb2-port1: unable to enumerate USB device [ 484.943275][T14375] random: crng reseeded on system resumption [ 484.992171][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 484.992207][ T30] audit: type=1400 audit(1742470389.189:4425): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 485.269934][T14378] IPVS: Error during creation of socket; terminating [ 486.275458][ T5870] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 486.446061][ T30] audit: type=1400 audit(1742470390.609:4426): avc: denied { create } for pid=14399 comm="syz.7.2375" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 487.017073][ T5870] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 487.042751][T14405] 9pnet: Could not find request transport: virtiren<ćńmLß~Ŷ”Ć4 [ 487.093670][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.102254][ T30] audit: type=1400 audit(1742470390.619:4427): avc: denied { read write } for pid=14399 comm="syz.7.2375" name="file0" dev="tmpfs" ino=2653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 487.125999][ T5870] usb 2-1: Product: syz [ 487.131796][ T5870] usb 2-1: Manufacturer: syz [ 487.140888][ T5870] usb 2-1: SerialNumber: syz [ 487.150140][ T30] audit: type=1400 audit(1742470390.619:4428): avc: denied { open } for pid=14399 comm="syz.7.2375" path="/500/file0" dev="tmpfs" ino=2653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 487.173537][ T5870] usb 2-1: config 0 descriptor?? [ 487.185426][ T5824] Bluetooth: hci6: urb ffff888143b7f500 submission failed (2) [ 487.197486][ T30] audit: type=1400 audit(1742470390.639:4429): avc: denied { mounton } for pid=14399 comm="syz.7.2375" path="/500/file0" dev="tmpfs" ino=2653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 487.220891][ T30] audit: type=1400 audit(1742470391.289:4430): avc: denied { unlink } for pid=7679 comm="syz-executor" name="file0" dev="tmpfs" ino=2653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 487.377474][T14419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2379'. [ 487.389677][T14419] nbd: must specify at least one socket [ 487.633198][ T5870] usb 2-1: USB disconnect, device number 62 [ 487.662295][ T30] audit: type=1400 audit(1742470391.859:4431): avc: denied { getopt } for pid=14424 comm="syz.0.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 487.760438][T14427] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 488.753513][T14438] lo: entered allmulticast mode [ 488.779317][T14438] tunl0: entered allmulticast mode [ 488.787749][T14438] gre0: entered allmulticast mode [ 488.807241][ T30] audit: type=1400 audit(1742470392.999:4432): avc: denied { accept } for pid=14437 comm="syz.0.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 488.828603][T14438] gretap0: entered allmulticast mode [ 488.839307][T14438] erspan0: entered allmulticast mode [ 488.846207][T14438] ip_vti0: entered allmulticast mode [ 488.854756][T14438] ip6_vti0: entered allmulticast mode [ 488.862508][T14438] sit0: entered allmulticast mode [ 488.868126][T14438] ip6tnl0: entered allmulticast mode [ 488.876809][T14438] ip6gre0: entered allmulticast mode [ 488.892683][T14438] syz_tun: entered allmulticast mode [ 488.905300][T14438] ip6gretap0: entered allmulticast mode [ 488.914890][T14438] vcan0: entered allmulticast mode [ 488.927621][T14438] bond0: entered allmulticast mode [ 488.932818][T14438] bond_slave_0: entered allmulticast mode [ 488.938633][T14438] bond_slave_1: entered allmulticast mode [ 488.946079][T14438] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 488.957793][T14438] team0: entered allmulticast mode [ 488.963902][T14438] team_slave_0: entered allmulticast mode [ 488.973210][T14438] team_slave_1: entered allmulticast mode [ 488.981010][T14438] dummy0: entered allmulticast mode [ 488.988801][T14438] nlmon0: entered allmulticast mode [ 489.010809][T14438] caif0: entered allmulticast mode [ 489.017816][T14438] batadv0: entered allmulticast mode [ 489.028308][T14438] vxcan0: entered allmulticast mode [ 489.034867][T14438] vxcan1: entered allmulticast mode [ 489.041623][T14438] veth0: entered allmulticast mode [ 489.057133][T14438] veth1: entered allmulticast mode [ 489.080647][T14438] wg0: entered allmulticast mode [ 489.150979][T14438] wg1: entered allmulticast mode [ 489.167613][T14438] wg2: entered allmulticast mode [ 489.178797][T14438] veth0_to_bridge: entered allmulticast mode [ 489.192895][T14438] bridge_slave_0: entered allmulticast mode [ 489.206431][T14438] veth1_to_bridge: entered allmulticast mode [ 489.216289][T14438] bridge_slave_1: entered allmulticast mode [ 489.223356][T14438] veth0_to_bond: entered allmulticast mode [ 489.232642][T14438] veth1_to_bond: entered allmulticast mode [ 489.241812][T14438] veth0_to_team: entered allmulticast mode [ 489.250002][T14438] veth1_to_team: entered allmulticast mode [ 489.259281][T14438] veth0_to_batadv: entered allmulticast mode [ 489.267344][T14438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.275619][T14438] batadv_slave_0: entered allmulticast mode [ 489.284860][T14438] veth1_to_batadv: entered allmulticast mode [ 489.292770][T14438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.301516][T14438] batadv_slave_1: entered allmulticast mode [ 489.309366][T14438] xfrm0: entered allmulticast mode [ 489.321996][T14438] veth0_to_hsr: entered allmulticast mode [ 489.331563][T14438] hsr_slave_0: entered allmulticast mode [ 489.338817][T14438] veth1_to_hsr: entered allmulticast mode [ 489.362820][T14438] hsr_slave_1: entered allmulticast mode [ 489.381198][T14438] hsr0: entered allmulticast mode [ 489.397659][T14438] veth1_virt_wifi: entered allmulticast mode [ 489.413451][T14438] veth0_virt_wifi: entered allmulticast mode [ 489.423612][T14438] net veth1_virt_wifi ’’’’’’: entered allmulticast mode [ 489.432645][T14438] veth1_vlan: entered allmulticast mode [ 489.442083][T14438] veth0_vlan: entered allmulticast mode [ 489.447857][T14438] vlan0: entered allmulticast mode [ 489.453445][ T1767] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 489.462064][T14438] vlan1: entered allmulticast mode [ 489.467729][T14438] macvlan0: entered allmulticast mode [ 489.477514][T14438] macvlan1: entered allmulticast mode [ 489.485012][T14438] ipvlan0: entered allmulticast mode [ 489.490766][T14438] ipvlan1: entered allmulticast mode [ 489.496972][T14438] veth1_macvtap: entered allmulticast mode [ 489.505133][T14438] veth0_macvtap: entered allmulticast mode [ 489.515094][T14438] macvtap0: entered allmulticast mode [ 489.526206][T14438] macsec0: entered allmulticast mode [ 489.535194][T14438] geneve0: entered allmulticast mode [ 489.543390][T14438] geneve1: entered allmulticast mode [ 489.558932][T14438] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 489.577964][T14438] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 489.587917][T14438] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 489.602073][T14438] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 489.613305][ T1767] usb 2-1: unable to get BOS descriptor or descriptor too short [ 489.620287][T14438] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 489.625286][ T1767] usb 2-1: config 2 has an invalid interface number: 175 but max is 1 [ 489.628236][T14438] bridge1: entered allmulticast mode [ 489.647374][T14438] bond1: entered allmulticast mode [ 489.652790][T14438] bridge2: entered allmulticast mode [ 489.658189][T14438] bond2: entered allmulticast mode [ 489.668757][T14438] bond3: entered allmulticast mode [ 489.674011][T14438] bond4: entered allmulticast mode [ 489.679338][T14438] ip6gretap1: entered allmulticast mode [ 489.691377][T14438] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.705653][T14438] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.716019][T14438] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.729306][T14438] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.739471][T14438] geneve2: entered allmulticast mode [ 489.751230][T14438] bridge3: entered allmulticast mode [ 489.757741][T14438] vlan1.2: entered allmulticast mode [ 489.767510][T14438] bond5: entered allmulticast mode [ 489.774937][ T1767] usb 2-1: config 2 has an invalid interface number: 95 but max is 1 [ 489.781282][T14438] gretap1: entered allmulticast mode [ 489.783420][ T1767] usb 2-1: config 2 has no interface number 0 [ 489.788636][T14438] bridge0: entered allmulticast mode [ 489.794557][ T1767] usb 2-1: config 2 has no interface number 1 [ 489.794594][ T1767] usb 2-1: config 2 interface 175 has no altsetting 0 [ 489.794613][ T1767] usb 2-1: config 2 interface 95 has no altsetting 0 [ 489.798101][ T1767] usb 2-1: language id specifier not provided by device, defaulting to English [ 489.804651][T14438] bond6: entered allmulticast mode [ 489.807497][ T1767] usb 2-1: New USB device found, idVendor=166a, idProduct=0304, bcdDevice=a8.40 [ 489.815704][T14438] ip6gretap2: entered allmulticast mode [ 489.820114][ T1767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.860767][ T1767] usb 2-1: Product: syz [ 489.864945][ T1767] usb 2-1: Manufacturer: syz [ 489.872078][ T1767] usb 2-1: SerialNumber: syz [ 489.890462][ T1767] usb 2-1: Interface #175 referenced by multiple IADs [ 490.350107][T14452] netlink: 'syz.1.2390': attribute type 11 has an invalid length. [ 490.350129][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2390'. [ 490.363587][ T1767] cp210x 2-1:2.175: cp210x converter detected [ 490.363898][ T1767] cp210x 2-1:2.175: failed to get vendor val 0x370b size 1: -71 [ 490.363920][ T1767] cp210x 2-1:2.175: querying part number failed [ 490.365030][ T1767] usb 2-1: cp210x converter now attached to ttyUSB0 [ 490.366537][ T1767] cp210x 2-1:2.95: cp210x converter detected [ 490.366821][ T1767] cp210x 2-1:2.95: failed to get vendor val 0x370b size 1: -71 [ 490.366841][ T1767] cp210x 2-1:2.95: querying part number failed [ 490.367821][ T1767] usb 2-1: cp210x converter now attached to ttyUSB1 [ 490.374345][ T1767] usb 2-1: USB disconnect, device number 63 [ 490.376318][ T1767] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 490.376496][ T1767] cp210x 2-1:2.175: device disconnected [ 490.378804][ T1767] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 490.378984][ T1767] cp210x 2-1:2.95: device disconnected [ 490.518485][T14467] random: crng reseeded on system resumption [ 491.353671][ T30] audit: type=1326 audit(1742470394.819:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14470 comm="syz.6.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 491.353714][ T30] audit: type=1326 audit(1742470394.819:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14470 comm="syz.6.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 491.353744][ T30] audit: type=1326 audit(1742470394.829:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14470 comm="syz.6.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 491.353775][ T30] audit: type=1326 audit(1742470394.829:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14470 comm="syz.6.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 491.353805][ T30] audit: type=1326 audit(1742470394.829:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14470 comm="syz.6.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 491.370581][ T30] audit: type=1400 audit(1742470395.569:4438): avc: denied { lock } for pid=14478 comm="syz.6.2400" path="socket:[40246]" dev="sockfs" ino=40246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 492.176732][ T30] audit: type=1326 audit(1742470396.369:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.5.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 492.216532][ T30] audit: type=1326 audit(1742470396.369:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.5.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 492.245882][ T30] audit: type=1326 audit(1742470396.369:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.5.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 492.279222][ T30] audit: type=1326 audit(1742470396.369:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.5.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 492.311044][T14496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14496 comm=syz.6.2405 [ 492.343434][T14496] batadv1: entered allmulticast mode [ 492.433804][T14504] netlink: 'syz.6.2405': attribute type 3 has an invalid length. [ 492.449758][ T5870] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 492.622115][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 492.731196][ T5870] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 492.739616][ T5870] usb 2-1: config 0 has no interface number 0 [ 492.935682][ T5870] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 492.944930][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.955251][ T5870] usb 2-1: Product: syz [ 492.963971][ T5870] usb 2-1: Manufacturer: syz [ 492.968849][ T5870] usb 2-1: SerialNumber: syz [ 492.978870][ T5870] usb 2-1: config 0 descriptor?? [ 493.076951][T14524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.094468][ T5870] msi2500 2-1:0.246: Registered as swradio24 [ 493.102178][ T5870] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 493.118778][T14524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.194554][T14494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.219853][T14494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.864892][T14525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2413'. [ 493.874083][T14525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2413'. [ 494.087011][ T9] usb 2-1: USB disconnect, device number 64 [ 494.109927][T14535] netlink: 268 bytes leftover after parsing attributes in process `syz.6.2415'. [ 495.261368][T14559] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 495.261368][T14559] The task syz.5.2421 (14559) triggered the difference, watch for misbehavior. [ 496.152838][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 496.316240][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 496.327154][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.349502][ T9] usb 2-1: config 0 descriptor?? [ 496.360299][ T9] cp210x 2-1:0.0: cp210x converter detected [ 496.459839][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 496.459854][ T30] audit: type=1326 audit(1742470400.649:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.7.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 496.528470][ T30] audit: type=1326 audit(1742470400.659:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.7.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 496.551967][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.589035][ T30] audit: type=1326 audit(1742470400.689:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.7.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 496.677689][ T26] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 496.941075][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.055529][ T30] audit: type=1326 audit(1742470400.689:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.7.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 497.060300][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 497.093663][ T26] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 497.096649][ T30] audit: type=1326 audit(1742470400.689:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.7.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 497.130514][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.141049][ T9] usb 2-1: USB disconnect, device number 65 [ 497.142730][ T26] usb 6-1: config 0 descriptor?? [ 497.162634][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 497.179314][ T9] cp210x 2-1:0.0: device disconnected [ 497.531386][T14602] netlink: 'syz.6.2437': attribute type 1 has an invalid length. [ 497.540656][T14602] netlink: 'syz.6.2437': attribute type 4 has an invalid length. [ 497.552131][T14602] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2437'. [ 497.734232][ T26] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 497.755984][ T26] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0017/input/input53 [ 498.616485][ T26] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 498.778950][ T30] audit: type=1326 audit(1742470402.969:4456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.6.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 498.826557][ T30] audit: type=1326 audit(1742470402.969:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.6.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 498.856229][ T30] audit: type=1326 audit(1742470402.999:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.6.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 498.881171][ T30] audit: type=1326 audit(1742470402.999:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.6.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 498.904688][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.911530][ T30] audit: type=1326 audit(1742470402.999:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.6.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 498.935004][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.131938][ T5870] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 499.389476][ T9] usb 6-1: USB disconnect, device number 71 [ 499.449841][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 499.474279][ T5870] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 499.499054][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.579600][ T5870] usb 2-1: Product: syz [ 499.591877][ T5870] usb 2-1: Manufacturer: syz [ 499.599622][ T5870] usb 2-1: SerialNumber: syz [ 499.831274][ T5870] usb 2-1: config 0 descriptor?? [ 499.894973][ T5870] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 499.944265][ T5870] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 499.995239][T14641] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=33040 sclass=netlink_xfrm_socket pid=14641 comm=syz.0.2450 [ 500.007857][T14642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.020419][T14642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.109351][ T5870] usb 2-1: USB disconnect, device number 66 [ 500.277551][T14652] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2453'. [ 500.762826][ T118] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 500.965251][T14662] Invalid ELF header magic: != ELF [ 501.212584][ T118] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.223676][ T118] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 501.232948][ T118] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.242596][ T118] usb 6-1: config 0 descriptor?? [ 501.260311][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.325353][T14672] netlink: 'syz.0.2458': attribute type 1 has an invalid length. [ 501.636400][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.763870][T14673] bond7: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 501.876670][ T26] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 502.090211][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.103423][ T118] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 502.111974][ T26] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 502.123560][ T118] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0018/input/input54 [ 502.135931][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.145988][ T26] usb 2-1: config 0 descriptor?? [ 502.224747][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 502.224763][ T30] audit: type=1400 audit(1742470406.399:4468): avc: denied { read } for pid=14686 comm="syz.0.2464" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 502.260212][ T118] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 502.324632][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2466'. [ 502.334703][T14693] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2466'. [ 502.344151][T14693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.364249][T14687] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 502.371584][T14693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.378938][T14687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 502.379688][T14693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.394312][T14687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 502.401106][T14687] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 502.408264][T14693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.409427][T14687] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 502.423988][T14693] batman_adv: batadv0: Removing interface: ipvlan2 [ 502.431249][T14690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.446102][T14690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.579858][ T26] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 502.641410][ T26] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0019/input/input55 [ 502.813934][ T26] keytouch 0003:0926:3333.0019: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 503.595452][ T5908] usb 2-1: USB disconnect, device number 67 [ 503.948693][ T5908] usb 6-1: USB disconnect, device number 72 [ 504.119299][T14728] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2475'. [ 504.135422][T14728] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2475'. [ 504.439793][ T5824] Bluetooth: hci5: command 0x040f tx timeout [ 504.445892][T12083] Bluetooth: hci4: command 0x0c1a tx timeout [ 504.452118][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout [ 504.458201][T12083] Bluetooth: hci1: command 0x0c1a tx timeout [ 504.711820][T14736] IPVS: Error during creation of socket; terminating [ 504.724488][ T30] audit: type=1400 audit(1742470408.909:4469): avc: denied { setattr } for pid=14735 comm="syz.7.2479" name="NETLINK" dev="sockfs" ino=40658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 504.893239][T14753] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2482'. [ 505.252162][T14764] Failed to initialize the IGMP autojoin socket (err -2) [ 505.328477][ T30] audit: type=1326 audit(1742470409.519:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14767 comm="syz.7.2485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x0 [ 505.416915][T14764] Failed to initialize the IGMP autojoin socket (err -2) [ 505.492689][ T30] audit: type=1326 audit(1742470409.519:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14767 comm="syz.7.2485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x0 [ 505.855874][T14784] netlink: 'syz.5.2488': attribute type 1 has an invalid length. [ 506.149494][T14786] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 506.817279][T14789] Failed to initialize the IGMP autojoin socket (err -2) [ 507.164026][T14805] netlink: 268 bytes leftover after parsing attributes in process `syz.7.2495'. [ 507.303729][ T30] audit: type=1400 audit(1742470411.499:4472): avc: denied { load_policy } for pid=14804 comm="syz.5.2496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 507.334431][T14806] SELinux: failed to load policy [ 507.377129][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2498'. [ 507.880479][ T30] audit: type=1326 audit(1742470412.069:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.7.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 508.426269][ T30] audit: type=1326 audit(1742470412.069:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.7.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 508.450616][ T30] audit: type=1326 audit(1742470412.069:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.7.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 508.475950][ T30] audit: type=1326 audit(1742470412.069:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.7.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 508.506520][ T30] audit: type=1326 audit(1742470412.069:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14823 comm="syz.7.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 508.791491][T14855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2510'. [ 508.889934][T14857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.927124][T14857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.429649][ T118] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 509.644129][ T118] usb 6-1: Using ep0 maxpacket: 8 [ 509.654445][ T118] usb 6-1: unable to get BOS descriptor or descriptor too short [ 509.831914][ T118] usb 6-1: config 8 has an invalid interface number: 246 but max is 0 [ 509.843037][ T118] usb 6-1: config 8 has an invalid descriptor of length 9, skipping remainder of the config [ 509.853726][ T118] usb 6-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 509.863245][ T118] usb 6-1: config 8 has no interface number 1 [ 510.011528][T14870] bond0: entered promiscuous mode [ 510.016665][T14870] bond_slave_0: entered promiscuous mode [ 510.022938][T14870] bond_slave_1: entered promiscuous mode [ 510.029082][T14870] syz_tun: entered promiscuous mode [ 510.045584][ T30] audit: type=1400 audit(1742470414.189:4478): avc: denied { write } for pid=14862 comm="syz.6.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 510.214420][T14870] bond0: left promiscuous mode [ 510.219488][T14870] bond_slave_0: left promiscuous mode [ 510.225726][T14870] bond_slave_1: left promiscuous mode [ 510.231688][T14870] syz_tun: left promiscuous mode [ 510.564002][ T118] usb 6-1: config 8 interface 246 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 510.578419][ T118] usb 6-1: config 8 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 510.591986][ T118] usb 6-1: config 8 interface 246 has no altsetting 0 [ 510.598784][ T118] usb 6-1: config 8 interface 0 has no altsetting 0 [ 510.607495][ T118] usb 6-1: New USB device found, idVendor=04cb, idProduct=012f, bcdDevice= 1.4a [ 510.616986][ T118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.625200][ T118] usb 6-1: Product: syz [ 510.629487][ T118] usb 6-1: Manufacturer: syz [ 510.634303][ T118] usb 6-1: SerialNumber: syz [ 510.853217][T14861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.865402][T14861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.948986][ T118] gspca_main: finepix-2.14.0 probing 04cb:012f [ 511.479750][ T30] audit: type=1326 audit(1742470415.349:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.0.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 511.530451][ T30] audit: type=1326 audit(1742470415.349:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.0.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 511.587051][ T30] audit: type=1326 audit(1742470415.369:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.0.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 511.745650][ T118] usb 6-1: USB disconnect, device number 73 [ 511.816438][T14900] overlayfs: failed to clone upperpath [ 512.228979][T14902] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 512.326790][T14913] 9pnet_fd: Insufficient options for proto=fd [ 512.409263][T14920] input: syz0 as /devices/virtual/input/input56 [ 512.450138][T14923] overlayfs: failed to clone upperpath [ 512.937498][T14926] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2532'. [ 513.079697][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 513.079731][ T30] audit: type=1326 audit(1742470417.249:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14928 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 513.609206][ T30] audit: type=1326 audit(1742470417.249:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14928 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 513.759863][ T30] audit: type=1326 audit(1742470417.259:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14928 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 513.789822][ T5870] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 513.802113][ T30] audit: type=1326 audit(1742470417.259:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14928 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 513.858290][ T30] audit: type=1326 audit(1742470417.259:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14928 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 513.887608][ T30] audit: type=1326 audit(1742470417.829:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.7.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 513.912748][ T30] audit: type=1326 audit(1742470417.829:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.7.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 513.938900][ T30] audit: type=1326 audit(1742470417.829:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.7.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 514.006121][ T30] audit: type=1326 audit(1742470417.829:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.7.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 514.040324][ T30] audit: type=1326 audit(1742470417.829:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.7.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 514.067688][ T5870] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 514.079731][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.102426][ T5870] usb 2-1: config 0 descriptor?? [ 514.155507][T14950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.165101][T14950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.312362][ T5870] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 514.322352][ T5870] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 515.944771][T14933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.205861][ T5870] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 516.232949][ T5870] [drm] Initialized udl on minor 2 [ 516.233959][T14976] loop2: detected capacity change from 0 to 7 [ 516.242953][T14933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.254928][T14976] Dev loop2: unable to read RDB block 7 [ 516.280237][ T5870] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 516.301619][ T5870] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 516.311574][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 516.326805][ T5870] usb 2-1: USB disconnect, device number 68 [ 516.346848][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 516.355764][T14976] loop2: AHDI p1 p2 p3 p4 [ 516.389289][T14976] loop2: partition table partially beyond EOD, truncated [ 516.419957][T14976] loop2: p1 start 1601398130 is beyond EOD, truncated [ 516.423845][T14987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.427013][T14976] loop2: p2 start 1702059890 is beyond EOD, truncated [ 516.443538][T14976] loop2: p3 size 150995200 extends beyond EOD, truncated [ 516.457792][T14987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.534391][T14999] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2558'. [ 516.610214][ T5908] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 516.785946][T15003] netlink: 'syz.6.2559': attribute type 1 has an invalid length. [ 516.897636][T15003] bond7: (slave ip6gretap6): Enslaving as a backup interface with an up link [ 517.271418][ T5908] usb 6-1: config 0 has an invalid interface number: 95 but max is 0 [ 517.279819][ T5908] usb 6-1: config 0 has no interface number 0 [ 517.286747][ T5908] usb 6-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 517.305887][ T5908] usb 6-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 517.342227][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.402107][ T5908] usb 6-1: Product: syz [ 517.467184][ T5908] usb 6-1: Manufacturer: syz [ 517.467343][T15011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.515915][ T5908] usb 6-1: SerialNumber: syz [ 517.809293][T15011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.866562][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2563'. [ 517.877363][ T5908] usb 6-1: config 0 descriptor?? [ 517.897877][T15015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.914295][T15017] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2563'. [ 517.951792][T15017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2563'. [ 517.952103][T14979] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 517.961438][T15019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.048822][T15011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.191621][T15011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.214811][ T5908] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 518.235975][ T5908] usb 6-1: MIDIStreaming interface descriptor not found [ 518.246853][T15011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.289473][ T5908] usb 6-1: USB disconnect, device number 74 [ 518.312560][ T9] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 518.325149][T15023] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 518.331672][T15023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 518.344568][ T9] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 518.351139][T15026] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 518.360624][T15026] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 518.370323][T15023] vhci_hcd vhci_hcd.0: Device attached [ 518.378484][T15026] vhci_hcd vhci_hcd.0: Device attached [ 518.403032][T15027] vhci_hcd: connection closed [ 518.404715][ T7798] vhci_hcd: stop threads [ 518.417763][T15024] vhci_hcd: connection closed [ 518.418577][ T7798] vhci_hcd: release socket [ 518.428375][ T7798] vhci_hcd: disconnect device [ 518.437160][ T7798] vhci_hcd: stop threads [ 518.442261][ T7798] vhci_hcd: release socket [ 518.446688][ T7798] vhci_hcd: disconnect device [ 518.653634][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 518.653650][ T30] audit: type=1400 audit(1742470422.849:4510): avc: denied { connect } for pid=15020 comm="syz.0.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 518.766941][ T30] audit: type=1326 audit(1742470422.949:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.6.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 519.109833][ T30] audit: type=1326 audit(1742470422.959:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.6.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 519.203279][ T5908] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 519.264763][ T30] audit: type=1326 audit(1742470422.959:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.6.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 519.363075][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 519.377194][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.397882][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 519.459952][ T30] audit: type=1326 audit(1742470422.959:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.6.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 519.489917][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 519.506033][T15046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2569'. [ 519.525987][ T5908] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 519.557104][ T30] audit: type=1326 audit(1742470422.959:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.6.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 519.566596][T15053] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2573'. [ 519.594501][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.612343][ T5908] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 519.621956][ T5908] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 519.669943][ T5908] usb 2-1: Manufacturer: syz [ 519.689860][ T5908] usb 2-1: config 0 descriptor?? [ 519.895628][ T30] audit: type=1326 audit(1742470424.089:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15056 comm="syz.6.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 519.935291][ T30] audit: type=1326 audit(1742470424.089:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15056 comm="syz.6.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 519.965798][ T30] audit: type=1326 audit(1742470424.089:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15056 comm="syz.6.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 520.015534][ T30] audit: type=1326 audit(1742470424.089:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15056 comm="syz.6.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 520.039170][ T5908] rc_core: IR keymap rc-hauppauge not found [ 520.050652][ T5908] Registered IR keymap rc-empty [ 520.058610][T12083] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 520.083520][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.089087][T15063] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2576'. [ 520.132299][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.160283][ T5908] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 520.178546][ T5908] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input57 [ 520.200432][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.220273][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.239845][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.272112][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.299689][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.340644][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.379707][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.400380][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.420107][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.447543][T15073] netlink: 34 bytes leftover after parsing attributes in process `syz.7.2581'. [ 520.458571][ T5908] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.480747][ T5908] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 520.492648][ T5908] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 520.532424][ T5908] usb 2-1: USB disconnect, device number 69 [ 524.069058][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 524.296921][ T30] audit: type=1326 audit(1742470428.259:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 524.324899][ T30] audit: type=1326 audit(1742470428.259:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 525.082024][ T30] audit: type=1400 audit(1742470429.259:4532): avc: denied { mounton } for pid=15150 comm="syz.5.2607" path="/proc/1219/task" dev="proc" ino=43120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 525.330081][T15161] netlink: 'syz.1.2609': attribute type 1 has an invalid length. [ 525.518632][T15161] bond4: (slave ip6gretap4): Enslaving as a backup interface with an up link [ 525.867822][ T30] audit: type=1400 audit(1742470430.059:4533): avc: denied { read write } for pid=15166 comm="syz.5.2612" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 525.925452][ T30] audit: type=1400 audit(1742470430.059:4534): avc: denied { open } for pid=15166 comm="syz.5.2612" path="/369/file0" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 525.953369][ T30] audit: type=1400 audit(1742470430.099:4535): avc: denied { map } for pid=15166 comm="syz.5.2612" path="/369/file0" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 527.942597][T15198] FAULT_INJECTION: forcing a failure. [ 527.942597][T15198] name failslab, interval 1, probability 0, space 0, times 0 [ 528.132023][T15198] CPU: 0 UID: 0 PID: 15198 Comm: syz.1.2620 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 528.132051][T15198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 528.132060][T15198] Call Trace: [ 528.132065][T15198] [ 528.132072][T15198] dump_stack_lvl+0x16c/0x1f0 [ 528.132098][T15198] should_fail_ex+0x50a/0x650 [ 528.132117][T15198] ? fs_reclaim_acquire+0xae/0x150 [ 528.132134][T15198] ? tomoyo_encode2+0x100/0x3e0 [ 528.132149][T15198] should_failslab+0xc2/0x120 [ 528.132162][T15198] __kmalloc_noprof+0xcb/0x510 [ 528.132173][T15198] ? rcu_is_watching+0x12/0xc0 [ 528.132186][T15198] tomoyo_encode2+0x100/0x3e0 [ 528.132203][T15198] tomoyo_encode+0x29/0x50 [ 528.132218][T15198] tomoyo_realpath_from_path+0x19d/0x720 [ 528.132235][T15198] ? tomoyo_path_number_perm+0x235/0x590 [ 528.132250][T15198] tomoyo_path_number_perm+0x248/0x590 [ 528.132263][T15198] ? tomoyo_path_number_perm+0x235/0x590 [ 528.132277][T15198] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 528.132304][T15198] ? __pfx_lock_release+0x10/0x10 [ 528.132318][T15198] ? trace_lock_acquire+0x14e/0x1f0 [ 528.132332][T15198] ? lock_acquire+0x2f/0xb0 [ 528.132345][T15198] ? __fget_files+0x40/0x3a0 [ 528.132357][T15198] ? __fget_files+0x206/0x3a0 [ 528.132369][T15198] security_file_ioctl+0x9b/0x240 [ 528.132386][T15198] __x64_sys_ioctl+0xb7/0x200 [ 528.132402][T15198] do_syscall_64+0xcd/0x250 [ 528.132418][T15198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.132433][T15198] RIP: 0033:0x7f6441d8d169 [ 528.132442][T15198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.132452][T15198] RSP: 002b:00007f643fbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.132462][T15198] RAX: ffffffffffffffda RBX: 00007f6441fa6080 RCX: 00007f6441d8d169 [ 528.132468][T15198] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 528.132474][T15198] RBP: 00007f643fbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 528.132480][T15198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.132485][T15198] R13: 0000000000000001 R14: 00007f6441fa6080 R15: 00007fffa1e53b28 [ 528.132498][T15198] [ 528.133077][T15198] ERROR: Out of memory at tomoyo_realpath_from_path. [ 528.687185][ T30] audit: type=1400 audit(1742470432.879:4536): avc: denied { connect } for pid=15207 comm="syz.5.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 528.720656][T15211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.759293][T15211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.360071][T15228] overlayfs: missing 'lowerdir' [ 530.946107][ T30] audit: type=1326 audit(1742470435.139:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.2632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f6441d8d169 code=0x0 [ 531.049672][ T26] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 531.219830][ T26] usb 6-1: Using ep0 maxpacket: 16 [ 531.239962][ T26] usb 6-1: config 0 interface 0 has no altsetting 0 [ 531.249258][ T26] usb 6-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 531.275923][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.310444][ T26] usb 6-1: config 0 descriptor?? [ 531.337729][ T30] audit: type=1326 audit(1742470435.529:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.7.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 531.376220][T15251] netlink: 'syz.6.2637': attribute type 15 has an invalid length. [ 531.410420][ T30] audit: type=1326 audit(1742470435.529:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.7.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 531.444131][ T30] audit: type=1326 audit(1742470435.529:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.7.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 531.501784][T15255] netlink: 45 bytes leftover after parsing attributes in process `syz.7.2639'. [ 531.503035][ T30] audit: type=1326 audit(1742470435.529:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.7.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 531.536942][T15251] mmap: syz.6.2637 (15251): VmData 37449728 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 531.538232][ T30] audit: type=1326 audit(1742470435.529:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.7.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 531.576887][ T30] audit: type=1400 audit(1742470435.729:4543): avc: denied { accept } for pid=15250 comm="syz.6.2637" path="socket:[42740]" dev="sockfs" ino=42740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 531.590019][T15259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.615176][T15259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.624635][T15259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.634411][T15260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.646927][T15259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.650942][T15262] fuse: Bad value for 'fd' [ 531.663234][ T5870] Process accounting resumed [ 531.675597][T15260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.898255][T15259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.907131][T15259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.915701][T15259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.925212][T15259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.934516][T15260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.943251][T15260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.951307][ T118] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 532.114631][T15268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.144649][ T118] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 532.222070][ T118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.267695][T15268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.411910][ T118] usb 2-1: config 0 descriptor?? [ 532.428669][ T118] cp210x 2-1:0.0: cp210x converter detected [ 532.442884][ T26] usbhid 6-1:0.0: can't add hid device: -71 [ 532.448991][ T26] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 532.462684][ T26] usb 6-1: USB disconnect, device number 75 [ 532.675160][ T30] audit: type=1326 audit(1742470436.869:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.6.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 532.708969][ T30] audit: type=1326 audit(1742470436.869:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.6.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 532.737441][ T30] audit: type=1326 audit(1742470436.869:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.6.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f865f38d169 code=0x7ffc0000 [ 532.773911][T15287] bond0: entered promiscuous mode [ 532.778968][T15287] bond_slave_0: entered promiscuous mode [ 532.786771][T15287] bond_slave_1: entered promiscuous mode [ 532.851179][T15293] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2653'. [ 532.861152][T15293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2653'. [ 532.873383][T15293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.885214][T15293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15293 comm=syz.5.2653 [ 532.939816][ T118] usb 2-1: cp210x converter now attached to ttyUSB0 [ 532.956952][T15293] syz.5.2653: attempt to access beyond end of device [ 532.956952][T15293] loop5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 532.971119][ T118] usb 2-1: USB disconnect, device number 70 [ 532.978898][ T118] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 532.987437][ T118] cp210x 2-1:0.0: device disconnected [ 533.120717][T15293] vxfs: unable to read disk superblock at 1 [ 533.161881][T15293] syz.5.2653: attempt to access beyond end of device [ 533.161881][T15293] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 533.932840][T15293] vxfs: unable to read disk superblock at 8 [ 533.932890][T15292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.938750][T15293] vxfs: can't find superblock. [ 534.060308][T15312] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.073314][T15312] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.119237][T15312] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.289970][ T118] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 534.313833][T15312] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.460076][ T118] usb 2-1: Using ep0 maxpacket: 32 [ 534.469338][ T118] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 534.489627][ T118] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 534.559748][ T118] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 534.569509][ T118] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 534.688670][ T118] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 534.699835][ T118] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 534.737707][ T118] usb 2-1: Product: syz [ 534.757923][ T118] usb 2-1: Manufacturer: syz [ 534.772573][ T118] usb 2-1: SerialNumber: syz [ 534.797154][ T118] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input58 [ 535.006766][ T118] usb 2-1: USB disconnect, device number 71 [ 535.015030][ T118] appletouch 2-1:1.0: input: appletouch disconnected [ 535.086099][T15336] /dev/sg0: Can't lookup blockdev [ 535.270168][T15341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.329985][T15341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.479754][ T5870] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 535.676579][ T5870] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 536.009670][ T118] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 536.018533][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.058733][ T5870] usb 6-1: config 0 descriptor?? [ 536.085519][ T5870] cp210x 6-1:0.0: cp210x converter detected [ 536.160248][T15355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2673'. [ 536.160964][ T118] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 536.201814][T15355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.229301][T15355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.258845][ T118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.267949][T15355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.293271][T15355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.419745][ T118] usb 2-1: config 0 descriptor?? [ 536.427583][ T118] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 536.449568][ T118] dvb-usb: bulk message failed: -22 (3/0) [ 536.510191][ T118] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 536.570006][ T118] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 536.584236][ T118] usb 2-1: media controller created [ 536.596616][ T118] dvb-usb: bulk message failed: -22 (5/0) [ 536.599973][ T5870] usb 6-1: cp210x converter now attached to ttyUSB0 [ 536.611748][ T118] dvb-usb: MAC address reading failed. [ 536.636988][ T118] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.640752][ T5870] usb 6-1: USB disconnect, device number 76 [ 536.675778][ T118] dvb-usb: bulk message failed: -22 (6/0) [ 536.693071][ T118] dvb-usb: bulk message failed: -22 (6/0) [ 536.699495][ T118] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 536.700274][ T5870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 536.710248][ T118] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input59 [ 536.737361][ T118] dvb-usb: schedule remote query interval to 100 msecs. [ 536.746873][ T118] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 536.758536][ T118] usb 2-1: USB disconnect, device number 72 [ 536.772220][ T118] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 536.795372][ T5870] cp210x 6-1:0.0: device disconnected [ 537.058570][T15368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.067383][T15368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.220048][ T5870] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 537.240693][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 537.240707][ T30] audit: type=1400 audit(1742470441.439:4553): avc: denied { open } for pid=15376 comm="syz.1.2680" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 537.271674][ T30] audit: type=1400 audit(1742470441.439:4554): avc: denied { open } for pid=15376 comm="syz.1.2680" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 537.295308][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.382097][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.402939][ T5870] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.412323][ T5870] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 537.440208][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.453956][ T5870] usb 6-1: config 0 descriptor?? [ 537.472923][T15390] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15390 comm=syz.7.2684 [ 537.999263][ T5869] usb 6-1: USB disconnect, device number 77 [ 538.153124][ T30] audit: type=1400 audit(1742470442.329:4555): avc: denied { sys_ptrace } for pid=15399 comm="syz.7.2687" capability=19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 538.238920][ T30] audit: type=1400 audit(1742470442.339:4556): avc: denied { execute } for pid=15399 comm="syz.7.2687" path="/cpu.stat" dev="rootfs" ino=44041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 538.313652][ T30] audit: type=1400 audit(1742470442.469:4557): avc: denied { execute } for pid=15403 comm="syz.0.2689" path="/dev/audio1" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 538.497561][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 538.511158][ T7164] bond0: (slave syz_tun): Releasing backup interface [ 538.511727][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 538.534150][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 538.547270][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 538.557617][ T5832] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 538.572938][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 538.607644][ T30] audit: type=1400 audit(1742470442.799:4558): avc: denied { mounton } for pid=15410 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 538.661760][T15414] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2692'. [ 538.662747][T15410] Failed to initialize the IGMP autojoin socket (err -2) [ 538.741916][ T7791] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.880501][ T7791] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.959750][ T5869] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 538.997658][ T7791] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.025074][T15410] chnl_net:caif_netlink_parms(): no params data found [ 539.113207][ T7791] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.130890][ T5869] usb 6-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.141175][ T5869] usb 6-1: config 0 interface 0 has no altsetting 0 [ 539.147788][ T5869] usb 6-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 539.166842][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.176551][ T5869] usb 6-1: config 0 descriptor?? [ 539.194809][T15410] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.205079][T15410] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.214783][T15410] bridge_slave_0: entered allmulticast mode [ 539.233909][T15410] bridge_slave_0: entered promiscuous mode [ 539.249142][T15410] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.271767][T15410] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.309828][T15410] bridge_slave_1: entered allmulticast mode [ 539.317202][T15410] bridge_slave_1: entered promiscuous mode [ 539.407125][T15410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.461491][T15410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.754891][ T30] audit: type=1400 audit(1742470443.929:4559): avc: denied { connect } for pid=15415 comm="syz.5.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 539.774648][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.816384][ T5869] holtek_mouse 0003:04D9:A072.001B: unknown main item tag 0x4 [ 539.900004][ T5869] holtek_mouse 0003:04D9:A072.001B: unknown main item tag 0x3 [ 540.013318][ T5869] holtek_mouse 0003:04D9:A072.001B: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.5-1/input0 [ 540.025591][T15410] team0: Port device team_slave_0 added [ 540.058258][ T5869] usb 6-1: USB disconnect, device number 78 [ 540.140278][T15410] team0: Port device team_slave_1 added [ 540.232397][ T7791] bridge_slave_1: left allmulticast mode [ 540.238063][ T7791] bridge_slave_1: left promiscuous mode [ 540.270573][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.333426][ T7791] bridge_slave_0: left allmulticast mode [ 540.339130][ T7791] bridge_slave_0: left promiscuous mode [ 540.345205][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.680748][T12083] Bluetooth: hci5: command tx timeout [ 540.884085][ T7791] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 540.976529][ T7791] bond3 (unregistering): (slave ip6gretap2): Releasing backup interface [ 541.148772][ T7791] bond4 (unregistering): (slave ip6gretap3): Releasing backup interface [ 541.384805][ T30] audit: type=1400 audit(1742470445.579:4560): avc: denied { sys_chroot } for pid=15440 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 541.406121][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.413269][ T30] audit: type=1400 audit(1742470445.579:4561): avc: denied { setgid } for pid=15440 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 541.414326][ T7791] bond5 (unregistering): (slave ip6gretap4): Releasing backup interface [ 541.434310][ T30] audit: type=1400 audit(1742470445.579:4562): avc: denied { setrlimit } for pid=15440 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 541.481429][T15439] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 541.487966][T15439] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 541.496631][T15439] vhci_hcd vhci_hcd.0: Device attached [ 541.582934][T15444] Failed to initialize the IGMP autojoin socket (err -2) [ 541.690421][ T7791] bond6 (unregistering): (slave ip6gretap5): Releasing backup interface [ 541.949347][ T7791] bond7 (unregistering): (slave ip6gretap6): Releasing backup interface [ 542.109913][ T26] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 542.405345][ T7791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.422310][ T7791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.432646][ T7791] bond0 (unregistering): Released all slaves [ 542.441903][ T7791] bond1 (unregistering): Released all slaves [ 542.452727][ T7791] bond2 (unregistering): Released all slaves [ 542.462997][ T7791] bond3 (unregistering): Released all slaves [ 542.477249][ T7791] bond4 (unregistering): Released all slaves [ 542.487123][ T7791] bond5 (unregistering): Released all slaves [ 542.496581][ T7791] bond6 (unregistering): Released all slaves [ 542.506268][ T7791] bond7 (unregistering): Released all slaves [ 542.516485][T15410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.523876][T15410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.550690][T15410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.567938][T15410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.600762][T15410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.639965][T15410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.718443][ T7791] : left promiscuous mode [ 542.723889][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 542.723902][ T30] audit: type=1400 audit(1742470446.909:4564): avc: denied { write } for pid=15459 comm="syz.1.2704" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 542.762410][T12083] Bluetooth: hci5: command tx timeout [ 542.762760][ T30] audit: type=1400 audit(1742470446.919:4565): avc: denied { ioctl } for pid=15459 comm="syz.1.2704" path="/dev/usbmon6" dev="devtmpfs" ino=734 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 542.776375][T15463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.802004][T15463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.812447][T15463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.823192][T15463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.895658][T15472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2706'. [ 542.901450][T15410] hsr_slave_0: entered promiscuous mode [ 542.925358][T15410] hsr_slave_1: entered promiscuous mode [ 542.931518][T15410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.950707][T15410] Cannot create hsr debugfs directory [ 542.960532][ T7791] tipc: Left network mode [ 543.113959][ T30] audit: type=1400 audit(1742470447.279:4566): avc: denied { ioctl } for pid=15475 comm="syz.1.2708" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 543.227277][ T30] audit: type=1400 audit(1742470447.419:4567): avc: denied { getopt } for pid=15478 comm="syz.0.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 543.251649][T15479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.260875][T15479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.332320][ T5819] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 543.409922][ T7791] hsr_slave_0: left promiscuous mode [ 543.417807][ T7791] hsr_slave_1: left promiscuous mode [ 543.435024][ T7791] veth1_macvtap: left promiscuous mode [ 543.440744][ T7791] veth0_macvtap: left promiscuous mode [ 543.446267][ T7791] veth1_vlan: left promiscuous mode [ 543.451929][ T7791] veth0_vlan: left promiscuous mode [ 543.469693][ T5819] usb 2-1: device descriptor read/64, error -71 [ 543.733614][ T5819] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 543.788528][ T7791] team0 (unregistering): Port device team_slave_1 removed [ 543.856301][ T7791] team0 (unregistering): Port device team_slave_0 removed [ 543.879760][ T5819] usb 2-1: device descriptor read/64, error -71 [ 544.001477][ T5819] usb usb2-port1: attempt power cycle [ 544.270526][T15442] vhci_hcd: connection reset by peer [ 544.284976][ T7798] vhci_hcd: stop threads [ 544.304578][ T7798] vhci_hcd: release socket [ 544.309234][ T7798] vhci_hcd: disconnect device [ 544.392890][ T5819] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 544.440998][ T5819] usb 2-1: device descriptor read/8, error -71 [ 544.550688][ T5898] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 544.685832][ T30] audit: type=1400 audit(1742470448.869:4568): avc: denied { nlmsg_read } for pid=15504 comm="syz.7.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 544.709783][ T5819] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 544.752939][ T5898] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 544.762371][ T5819] usb 2-1: device descriptor read/8, error -71 [ 544.779625][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.821460][ T5898] usb 6-1: config 0 descriptor?? [ 544.842113][T12083] Bluetooth: hci5: command tx timeout [ 544.853601][ T5898] cp210x 6-1:0.0: cp210x converter detected [ 544.868455][T15410] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 544.875932][ T5819] usb usb2-port1: unable to enumerate USB device [ 545.109371][ T7791] IPVS: stop unused estimator thread 0... [ 545.120527][T15410] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 545.157028][T15410] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 545.182187][T15410] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 545.275190][ T5898] usb 6-1: cp210x converter now attached to ttyUSB0 [ 545.283183][ T5898] usb 6-1: USB disconnect, device number 79 [ 545.291301][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 545.313186][ T5898] cp210x 6-1:0.0: device disconnected [ 545.486798][T15410] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.505123][ T7791] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.512207][ T7791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.558146][ T7805] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.565236][ T7805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.888763][T15528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15528 comm=syz.7.2721 [ 546.019079][T15410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.060253][ T1767] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 546.244954][ T1767] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 546.269158][ T1767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.288743][ T1767] usb 6-1: Product: syz [ 546.301206][ T1767] usb 6-1: Manufacturer: syz [ 546.315102][ T1767] usb 6-1: SerialNumber: syz [ 546.334186][ T1767] usb 6-1: config 0 descriptor?? [ 546.746184][T15565] netlink: 'syz.1.2731': attribute type 1 has an invalid length. [ 547.354187][T12083] Bluetooth: hci5: command tx timeout [ 547.531945][ T26] vhci_hcd: vhci_device speed not set [ 547.627836][ T1767] airspy 6-1:0.0: Board ID: 00 [ 547.631647][T15410] veth0_vlan: entered promiscuous mode [ 547.638095][ T1767] airspy 6-1:0.0: Firmware version: [ 547.640398][ T30] audit: type=1400 audit(1742470451.599:4569): avc: denied { remount } for pid=15560 comm="syz.0.2730" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 547.695149][T15565] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 547.712868][T15570] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2732'. [ 547.725507][T15410] veth1_vlan: entered promiscuous mode [ 547.872737][T15576] FAULT_INJECTION: forcing a failure. [ 547.872737][T15576] name failslab, interval 1, probability 0, space 0, times 0 [ 547.887664][T15576] CPU: 1 UID: 0 PID: 15576 Comm: syz.0.2734 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 547.887686][T15576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 547.887695][T15576] Call Trace: [ 547.887709][T15576] [ 547.887715][T15576] dump_stack_lvl+0x16c/0x1f0 [ 547.887744][T15576] should_fail_ex+0x50a/0x650 [ 547.887768][T15576] ? fs_reclaim_acquire+0xae/0x150 [ 547.887793][T15576] ? tomoyo_encode2+0x100/0x3e0 [ 547.887817][T15576] should_failslab+0xc2/0x120 [ 547.887836][T15576] __kmalloc_noprof+0xcb/0x510 [ 547.887853][T15576] ? d_absolute_path+0x137/0x1b0 [ 547.887874][T15576] ? rcu_is_watching+0x12/0xc0 [ 547.887895][T15576] tomoyo_encode2+0x100/0x3e0 [ 547.887920][T15576] tomoyo_encode+0x29/0x50 [ 547.887943][T15576] tomoyo_realpath_from_path+0x19d/0x720 [ 547.887974][T15576] tomoyo_path_number_perm+0x248/0x590 [ 547.887994][T15576] ? tomoyo_path_number_perm+0x235/0x590 [ 547.888017][T15576] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 547.888062][T15576] ? __pfx_lock_release+0x10/0x10 [ 547.888085][T15576] ? trace_lock_acquire+0x14e/0x1f0 [ 547.888107][T15576] ? lock_acquire+0x2f/0xb0 [ 547.888128][T15576] ? __fget_files+0x40/0x3a0 [ 547.888148][T15576] ? __fget_files+0x206/0x3a0 [ 547.888167][T15576] security_file_ioctl+0x9b/0x240 [ 547.888191][T15576] __x64_sys_ioctl+0xb7/0x200 [ 547.888216][T15576] do_syscall_64+0xcd/0x250 [ 547.888241][T15576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.888264][T15576] RIP: 0033:0x7f88ce58d169 [ 547.888278][T15576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.888294][T15576] RSP: 002b:00007f88cf4b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.888309][T15576] RAX: ffffffffffffffda RBX: 00007f88ce7a5fa0 RCX: 00007f88ce58d169 [ 547.888320][T15576] RDX: 0000400000000000 RSI: 0000000000005393 RDI: 0000000000000003 [ 547.888329][T15576] RBP: 00007f88cf4b5090 R08: 0000000000000000 R09: 0000000000000000 [ 547.888339][T15576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.888348][T15576] R13: 0000000000000000 R14: 00007f88ce7a5fa0 R15: 00007ffdb5809718 [ 547.888371][T15576] [ 547.888383][T15576] ERROR: Out of memory at tomoyo_realpath_from_path. [ 547.911361][T15410] veth0_macvtap: entered promiscuous mode [ 547.942697][T15525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.136602][T15410] veth1_macvtap: entered promiscuous mode [ 548.160211][T15525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.236335][T15410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.268196][T15410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.283657][T15410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.295801][T15410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.328100][T15410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.368554][T15410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.394921][T15410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.407326][T15410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.418710][T15410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.436451][T15410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.587388][T15410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.627411][T15410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.858144][T15410] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 548.882578][T15410] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 548.907214][T15410] wireguard: wg0: Could not create IPv4 socket [ 548.926338][T15410] wireguard: wg1: Could not create IPv4 socket [ 548.938019][T15410] wireguard: wg2: Could not create IPv4 socket [ 549.024021][ T1767] airspy 6-1:0.0: usb_control_msg() failed -71 request 10 [ 549.042070][ T1767] airspy 6-1:0.0: Registered as swradio24 [ 549.048800][ T1767] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 549.071171][ T1767] usb 6-1: USB disconnect, device number 80 [ 549.207720][ T30] audit: type=1326 audit(1742470453.399:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15591 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 549.250323][ T30] audit: type=1326 audit(1742470453.399:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15591 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 549.280236][ T30] audit: type=1326 audit(1742470453.399:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15591 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 549.304014][ T30] audit: type=1326 audit(1742470453.399:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15591 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 549.361435][ T30] audit: type=1326 audit(1742470453.399:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15591 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 549.423602][ T30] audit: type=1326 audit(1742470453.399:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15591 comm="syz.7.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 549.524955][T15597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.536113][T15597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.361816][ T30] audit: type=1400 audit(1742470454.559:4576): avc: denied { map } for pid=15611 comm="syz.5.2743" path="socket:[44803]" dev="sockfs" ino=44803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 550.689677][ T1767] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 550.853292][ T1767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.865251][ T1767] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 550.877541][ T1767] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.907395][ T1767] usb 6-1: config 0 descriptor?? [ 550.938344][T15624] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2747'. [ 550.948234][T15624] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2747'. [ 550.961674][T15624] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2747'. [ 550.972471][T15624] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2747'. [ 550.984134][T15624] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2747'. [ 550.993495][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2748'. [ 551.005616][T15624] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2747'. [ 551.014842][T15624] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2747'. [ 551.027102][T15624] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2747'. [ 551.630405][ T1767] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 551.641071][ T1767] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001C/input/input60 [ 552.318514][ T1767] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 552.606657][T15639] netlink: 'syz.0.2750': attribute type 13 has an invalid length. [ 553.073903][T15649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15649 comm=syz.0.2750 [ 553.514564][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 553.528160][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 553.548900][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 553.567344][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 553.596589][T15656] __nla_validate_parse: 168 callbacks suppressed [ 553.596626][T15656] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2754'. [ 553.632679][ T30] audit: type=1326 audit(1742470457.819:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15651 comm="syz.7.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 553.732286][ T5832] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 553.742569][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 554.143179][ T30] audit: type=1326 audit(1742470457.819:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15651 comm="syz.7.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 554.167188][ T30] audit: type=1326 audit(1742470457.819:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15651 comm="syz.7.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 554.211801][ T5898] usb 6-1: USB disconnect, device number 81 [ 554.255258][ T30] audit: type=1326 audit(1742470457.819:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15651 comm="syz.7.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 554.263756][T15654] Failed to initialize the IGMP autojoin socket (err -2) [ 554.362790][ T30] audit: type=1326 audit(1742470457.819:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15651 comm="syz.7.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f37d8d169 code=0x7ffc0000 [ 554.753804][T15671] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2758'. [ 554.931755][T15671] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2758'. [ 555.870315][ T5832] Bluetooth: hci5: command tx timeout [ 556.097294][ T30] audit: type=1326 audit(1742470460.279:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.1.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6441d8d169 code=0x7ffc0000 [ 556.121155][ T5898] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 556.344151][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.459846][ T30] audit: type=1326 audit(1742470460.279:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.1.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6441d8d169 code=0x7ffc0000 [ 556.491913][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.518095][ T5898] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 556.539157][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.557610][ T30] audit: type=1326 audit(1742470460.279:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.1.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6441d8d169 code=0x7ffc0000 [ 556.588415][ T5898] usb 6-1: config 0 descriptor?? [ 556.593816][ T30] audit: type=1326 audit(1742470460.279:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.1.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6441d8d169 code=0x7ffc0000 [ 556.665806][ T30] audit: type=1326 audit(1742470460.279:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.1.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6441d8d169 code=0x7ffc0000 [ 556.699965][T15708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.730658][T15708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.115439][T15694] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 557.496181][T15715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.543071][ T1086] Bluetooth: hci6: Frame reassembly failed (-84) [ 557.565821][T15715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.617775][T15654] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 557.960192][T12083] Bluetooth: hci5: command tx timeout [ 557.988253][T15654] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 558.066612][T15654] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 558.116356][T15654] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 558.155317][ T30] audit: type=1400 audit(1742470462.349:4587): avc: denied { mounton } for pid=15722 comm="syz.0.2774" path="/" dev="configfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 558.530094][ T30] audit: type=1400 audit(1742470462.719:4588): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 558.693037][T15742] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1427833091 (2855666182 ns) > initial count (312964716 ns). Using initial count to start timer. [ 558.934147][T15654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.945402][T15654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.956483][T15654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.967726][T15654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.984277][T15654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.996624][T15654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.006892][T15654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.017890][T15654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.028606][T15654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.041536][T15654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.149676][T12083] Bluetooth: hci6: command 0x1003 tx timeout [ 559.161706][ T5832] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 559.199377][T15767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2782'. [ 559.217070][ T5898] usb 6-1: string descriptor 0 read error: -71 [ 559.238999][ T5898] uclogic 0003:256C:006D.001D: failed retrieving string descriptor #200: -71 [ 559.289427][ T5898] uclogic 0003:256C:006D.001D: failed retrieving pen parameters: -71 [ 559.309375][T15654] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 559.360686][ T5898] uclogic 0003:256C:006D.001D: failed probing pen v2 parameters: -71 [ 559.494476][ T5898] uclogic 0003:256C:006D.001D: failed probing parameters: -71 [ 559.573215][ T5898] uclogic 0003:256C:006D.001D: probe with driver uclogic failed with error -71 [ 559.588933][ T5898] usb 6-1: USB disconnect, device number 82 [ 559.644948][T15654] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 559.771584][T15654] wireguard: wg0: Could not create IPv4 socket [ 559.780085][T15654] wireguard: wg1: Could not create IPv4 socket [ 559.788166][T15654] wireguard: wg2: Could not create IPv4 socket [ 560.756845][T15798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.767618][T15798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.727137][ T30] audit: type=1326 audit(1742470465.919:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15821 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 561.810934][ T30] audit: type=1326 audit(1742470465.919:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15821 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 561.862570][ T30] audit: type=1326 audit(1742470465.919:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15821 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 561.887751][ T30] audit: type=1326 audit(1742470465.919:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15821 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 561.939758][ T30] audit: type=1326 audit(1742470465.919:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15821 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84818d169 code=0x7ffc0000 [ 562.592815][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.600159][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.750174][ T1767] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 562.994297][ T1767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.024556][ T1767] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 563.045548][ T1767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.057122][ T1767] usb 2-1: config 0 descriptor?? [ 563.660550][ T1767] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 563.681838][ T1767] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001E/input/input61 [ 563.748859][T15859] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2802'. [ 563.767915][ T1767] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 563.780244][ T30] audit: type=1326 audit(1742470467.959:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.0.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 563.780287][ T30] audit: type=1326 audit(1742470467.959:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.0.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 563.780317][ T30] audit: type=1326 audit(1742470467.959:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.0.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 563.780346][ T30] audit: type=1326 audit(1742470467.959:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.0.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 563.780376][ T30] audit: type=1326 audit(1742470467.959:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.0.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ce58d169 code=0x7ffc0000 [ 563.781564][T15859] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2802'. [ 563.908892][T15859] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2802'. [ 563.917824][T15859] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2802'. [ 563.927136][T15859] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2802'. [ 563.936093][T15859] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2802'. [ 563.946651][T15859] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2802'. [ 563.955813][T15859] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2802'. [ 563.965387][T15859] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2802'. [ 564.156375][ T1767] [ 564.156384][ T1767] ====================================================== [ 564.156390][ T1767] WARNING: possible circular locking dependency detected [ 564.156395][ T1767] 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 Not tainted [ 564.156402][ T1767] ------------------------------------------------------ [ 564.156406][ T1767] kworker/0:2/1767 is trying to acquire lock: [ 564.156412][ T1767] ffff88801b0990b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 564.156442][ T1767] [ 564.156442][ T1767] but task is already holding lock: [ 564.156446][ T1767] ffffffff8e1aaa40 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 564.156466][ T1767] [ 564.156466][ T1767] which lock already depends on the new lock. [ 564.156466][ T1767] [ 564.156470][ T1767] [ 564.156470][ T1767] the existing dependency chain (in reverse order) is: [ 564.156473][ T1767] [ 564.156473][ T1767] -> #2 (console_lock){+.+.}-{0:0}: [ 564.156486][ T1767] console_lock+0x7a/0xa0 [ 564.156497][ T1767] con_flush_chars+0x5e/0x80 [ 564.156508][ T1767] n_tty_receive_buf_common+0xa99/0x1980 [ 564.156525][ T1767] tty_ioctl+0x575/0x15d0 [ 564.156537][ T1767] __x64_sys_ioctl+0x190/0x200 [ 564.156551][ T1767] do_syscall_64+0xcd/0x250 [ 564.156565][ T1767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.156580][ T1767] [ 564.156580][ T1767] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 564.156594][ T1767] down_read+0x9a/0x330 [ 564.156608][ T1767] n_tty_receive_buf_common+0x85/0x1980 [ 564.156624][ T1767] tty_ldisc_receive_buf+0xa2/0x190 [ 564.156635][ T1767] tty_port_default_receive_buf+0x70/0xb0 [ 564.156648][ T1767] flush_to_ldisc+0x264/0x780 [ 564.156659][ T1767] process_one_work+0x9c5/0x1ba0 [ 564.156673][ T1767] worker_thread+0x6c8/0xf00 [ 564.156686][ T1767] kthread+0x3af/0x750 [ 564.156697][ T1767] ret_from_fork+0x45/0x80 [ 564.156711][ T1767] ret_from_fork_asm+0x1a/0x30 [ 564.156722][ T1767] [ 564.156722][ T1767] -> #0 (&buf->lock){+.+.}-{4:4}: [ 564.156735][ T1767] __lock_acquire+0x249e/0x3c40 [ 564.156749][ T1767] lock_acquire.part.0+0x11b/0x380 [ 564.156768][ T1767] __mutex_lock+0x19b/0xb10 [ 564.156781][ T1767] tty_buffer_flush+0x72/0x310 [ 564.156793][ T1767] tty_ldisc_flush+0x64/0xe0 [ 564.156803][ T1767] __do_SAK+0x6a7/0x800 [ 564.156815][ T1767] vc_SAK+0x7f/0x310 [ 564.156822][ T1767] process_one_work+0x9c5/0x1ba0 [ 564.156835][ T1767] worker_thread+0x6c8/0xf00 [ 564.156847][ T1767] kthread+0x3af/0x750 [ 564.156859][ T1767] ret_from_fork+0x45/0x80 [ 564.156871][ T1767] ret_from_fork_asm+0x1a/0x30 [ 564.156882][ T1767] [ 564.156882][ T1767] other info that might help us debug this: [ 564.156882][ T1767] [ 564.156885][ T1767] Chain exists of: [ 564.156885][ T1767] &buf->lock --> &tty->termios_rwsem --> console_lock [ 564.156885][ T1767] [ 564.156901][ T1767] Possible unsafe locking scenario: [ 564.156901][ T1767] [ 564.156904][ T1767] CPU0 CPU1 [ 564.156907][ T1767] ---- ---- [ 564.156910][ T1767] lock(console_lock); [ 564.156917][ T1767] lock(&tty->termios_rwsem); [ 564.156924][ T1767] lock(console_lock); [ 564.156931][ T1767] lock(&buf->lock); [ 564.156938][ T1767] [ 564.156938][ T1767] *** DEADLOCK *** [ 564.156938][ T1767] [ 564.156940][ T1767] 4 locks held by kworker/0:2/1767: [ 564.156946][ T1767] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 564.156974][ T1767] #1: ffffc90004977d18 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 564.157002][ T1767] #2: ffffffff8e1aaa40 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 564.157024][ T1767] #3: ffff88805b58c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xe0 [ 564.157048][ T1767] [ 564.157048][ T1767] stack backtrace: [ 564.157053][ T1767] CPU: 0 UID: 0 PID: 1767 Comm: kworker/0:2 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 564.157064][ T1767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 564.157071][ T1767] Workqueue: events vc_SAK [ 564.157080][ T1767] Call Trace: [ 564.157083][ T1767] [ 564.157087][ T1767] dump_stack_lvl+0x116/0x1f0 [ 564.157103][ T1767] print_circular_bug+0x490/0x760 [ 564.157118][ T1767] check_noncircular+0x31a/0x400 [ 564.157132][ T1767] ? __pfx_check_noncircular+0x10/0x10 [ 564.157146][ T1767] ? lockdep_lock+0xc6/0x200 [ 564.157157][ T1767] ? __pfx_lockdep_lock+0x10/0x10 [ 564.157169][ T1767] __lock_acquire+0x249e/0x3c40 [ 564.157185][ T1767] ? __pfx___lock_acquire+0x10/0x10 [ 564.157199][ T1767] ? rcu_is_watching+0x12/0xc0 [ 564.157212][ T1767] lock_acquire.part.0+0x11b/0x380 [ 564.157226][ T1767] ? tty_buffer_flush+0x72/0x310 [ 564.157238][ T1767] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 564.157253][ T1767] ? rcu_is_watching+0x12/0xc0 [ 564.157263][ T1767] ? trace_lock_acquire+0x14e/0x1f0 [ 564.157275][ T1767] ? __pfx___lock_acquire+0x10/0x10 [ 564.157289][ T1767] ? tty_buffer_flush+0x72/0x310 [ 564.157301][ T1767] ? lock_acquire+0x2f/0xb0 [ 564.157314][ T1767] ? tty_buffer_flush+0x72/0x310 [ 564.157327][ T1767] __mutex_lock+0x19b/0xb10 [ 564.157340][ T1767] ? tty_buffer_flush+0x72/0x310 [ 564.157352][ T1767] ? tty_buffer_flush+0x72/0x310 [ 564.157364][ T1767] ? __pfx___mutex_lock+0x10/0x10 [ 564.157377][ T1767] ? rcu_is_watching+0x12/0xc0 [ 564.157388][ T1767] ? tty_ldisc_flush+0x1c/0xe0 [ 564.157400][ T1767] ? tty_buffer_flush+0x72/0x310 [ 564.157412][ T1767] tty_buffer_flush+0x72/0x310 [ 564.157425][ T1767] tty_ldisc_flush+0x64/0xe0 [ 564.157435][ T1767] __do_SAK+0x6a7/0x800 [ 564.157448][ T1767] ? lock_acquire+0x2f/0xb0 [ 564.157461][ T1767] ? vc_SAK+0x13/0x310 [ 564.157470][ T1767] vc_SAK+0x7f/0x310 [ 564.157479][ T1767] process_one_work+0x9c5/0x1ba0 [ 564.157494][ T1767] ? __pfx_console_callback+0x10/0x10 [ 564.157508][ T1767] ? __pfx_process_one_work+0x10/0x10 [ 564.157524][ T1767] ? assign_work+0x1a0/0x250 [ 564.157536][ T1767] worker_thread+0x6c8/0xf00 [ 564.157551][ T1767] ? __kthread_parkme+0x148/0x220 [ 564.157561][ T1767] ? __pfx_worker_thread+0x10/0x10 [ 564.157575][ T1767] kthread+0x3af/0x750 [ 564.157587][ T1767] ? __pfx_kthread+0x10/0x10 [ 564.157599][ T1767] ? lock_acquire+0x2f/0xb0 [ 564.157614][ T1767] ? __pfx_kthread+0x10/0x10 [ 564.157626][ T1767] ret_from_fork+0x45/0x80 [ 564.157639][ T1767] ? __pfx_kthread+0x10/0x10 [ 564.157651][ T1767] ret_from_fork_asm+0x1a/0x30 [ 564.157664][ T1767] [ 564.493471][ T5819] usb 2-1: USB disconnect, device number 77 [ 565.095535][ T1767] usb 1-1: USB disconnect, device number 5 [ 565.358614][ T7122] syz_tun (unregistering): left allmulticast mode [ 565.366674][ T7122] syz_tun (unregistering): left promiscuous mode [ 565.385475][ T7122] bridge0: port 3(syz_tun) entered disabled state [ 565.498370][ T7791] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.521067][ T7791] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.617351][ T7791] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.628693][ T7791] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.720951][ T7791] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.730757][ T7791] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.800710][ T7791] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.810559][ T7791] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.891286][ T7791] bridge_slave_1: left allmulticast mode [ 565.896936][ T7791] bridge_slave_1: left promiscuous mode [ 565.902730][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.910683][ T7791] bridge_slave_0: left allmulticast mode [ 565.916302][ T7791] bridge_slave_0: left promiscuous mode [ 565.921950][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.942759][ T7791] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 565.953355][ T7791] bond2 (unregistering): (slave ip6gretap2): Releasing backup interface [ 566.173917][ T7791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.183851][ T7791] bond_slave_0: left promiscuous mode [ 566.190300][ T7791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.199120][ T7791] bond_slave_1: left promiscuous mode [ 566.205309][ T7791] bond0 (unregistering): Released all slaves [ 566.212991][ T7791] bond1 (unregistering): Released all slaves [ 566.221341][ T7791] bond2 (unregistering): Released all slaves [ 566.400400][ T7791] hsr_slave_0: left promiscuous mode [ 566.405914][ T7791] hsr_slave_1: left promiscuous mode [ 566.412235][ T7791] veth1_macvtap: left promiscuous mode [ 566.417690][ T7791] veth0_macvtap: left promiscuous mode [ 566.423644][ T7791] veth1_vlan: left promiscuous mode [ 566.428884][ T7791] veth0_vlan: left promiscuous mode [ 566.506644][ T7791] team0 (unregistering): Port device team_slave_1 removed [ 566.530045][ T7791] team0 (unregistering): Port device team_slave_0 removed [ 566.594846][ T52] lo speed is unknown, defaulting to 1000 [ 566.600665][ T52] infiniband syś2: ib_query_port failed (-19) [ 566.778612][ T7791] IPVS: stop unused estimator thread 0... [ 566.833458][ T7791] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.892913][ T7791] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.932907][ T7791] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.992349][ T7791] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.251470][ T7791] bridge_slave_1: left allmulticast mode [ 567.257134][ T7791] bridge_slave_1: left promiscuous mode [ 567.262835][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.270497][ T7791] bridge_slave_0: left allmulticast mode [ 567.276115][ T7791] bridge_slave_0: left promiscuous mode [ 567.282915][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.312810][ T7791] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 567.326375][ T7791] bond2 (unregistering): (slave ip6gretap3): Releasing backup interface [ 567.336854][ T7791] bond4 (unregistering): (slave ip6gretap4): Releasing backup interface [ 567.348303][ T7791] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 567.358122][ T7791] bond2 (unregistering): (slave ip6gretap2): Releasing backup interface [ 567.370237][ T7791] bond3 (unregistering): (slave ip6gretap4): Releasing backup interface [ 567.380120][ T7791] bond4 (unregistering): (slave ip6gretap5): Releasing backup interface [ 567.390683][ T7791] bond5 (unregistering): (slave ip6gretap6): Releasing backup interface [ 567.768160][ T7791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.777921][ T7791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.787114][ T7791] bond0 (unregistering): Released all slaves [ 567.794991][ T7791] bond1 (unregistering): Released all slaves [ 567.802557][ T7791] bond2 (unregistering): Released all slaves [ 567.810774][ T7791] bond3 (unregistering): Released all slaves [ 567.818097][ T7791] bond4 (unregistering): Released all slaves [ 567.908779][ T7791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.919965][ T7791] bond_slave_0: left promiscuous mode [ 567.928593][ T7791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.938693][ T7791] bond_slave_1: left promiscuous mode [ 567.946040][ T7791] bond0 (unregistering): Released all slaves [ 567.954066][ T7791] bond1 (unregistering): Released all slaves [ 567.962243][ T7791] bond2 (unregistering): Released all slaves [ 567.969727][ T7791] bond3 (unregistering): Released all slaves [ 567.977354][ T7791] bond4 (unregistering): Released all slaves [ 567.986327][ T7791] bond5 (unregistering): Released all slaves [ 568.108800][ T7791] team0: Port device wlan1 removed [ 568.349111][ T7791] hsr_slave_0: left promiscuous mode [ 568.354710][ T7791] hsr_slave_1: left promiscuous mode [ 568.360505][ T7791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.367880][ T7791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.375386][ T7791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.384000][ T7791] hsr_slave_0: left promiscuous mode [ 568.389483][ T7791] hsr_slave_1: left promiscuous mode [ 568.395203][ T7791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.402631][ T7791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.410110][ T7791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.417476][ T7791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.426540][ T7791] veth1_macvtap: left promiscuous mode [ 568.432128][ T7791] veth0_macvtap: left promiscuous mode [ 568.437596][ T7791] veth1_vlan: left promiscuous mode [ 568.442909][ T7791] veth0_vlan: left promiscuous mode [ 568.448519][ T7791] veth1_vlan: left promiscuous mode [ 568.453864][ T7791] veth0_vlan: left promiscuous mode [ 568.582883][ T7791] team0 (unregistering): Port device team_slave_1 removed [ 568.602124][ T7791] team0 (unregistering): Port device team_slave_0 removed [ 568.755071][ T7791] team_slave_1 (unregistering): left promiscuous mode [ 568.762132][ T7791] team0 (unregistering): Port device team_slave_1 removed [ 568.785400][ T7791] team_slave_0 (unregistering): left promiscuous mode [ 568.792541][ T7791] team0 (unregistering): Port device team_slave_0 removed [ 569.339878][ T7791] IPVS: stop unused estimator thread 0...