last executing test programs: 23m11.37376109s ago: executing program 2 (id=3): syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0xa, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800451a00620064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYBLOB="1080607190788001220d8685a649a80b074e2edcbcfe8138c0074a935b7bd5905a891312c64f9a4385d047cdec64401819d5615b27921e1021060000002008000101"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r5, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b87511d0000007ea60864160af3653c000cc004000202080003000300000007002100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r7, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) 23m9.743990451s ago: executing program 2 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x189900, 0x0) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x189900, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r3 = eventfd(0xffffffff) r4 = eventfd(0xe2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = eventfd(0x8) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000480)=r5) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r5}) eventfd2(0x10, 0x1) (async) r6 = eventfd2(0x10, 0x1) r7 = syz_open_procfs(0x0, 0x0) io_uring_setup(0x76b, &(0x7f0000000040)={0x0, 0x8c898, 0xc000, 0xa, 0x22f, 0x0, r7}) eventfd2(0x1, 0x800) (async) r8 = eventfd2(0x1, 0x800) io_submit(0x0, 0x9, &(0x7f0000000ac0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x200, r1, &(0x7f00000000c0)="a9382ded6974241f520a56bd3057e3b8797528bf2df432aae3529f207f13470023faec1f3ead7cd775d0f6879a232df90a055b134031f76142877e753328f34fa72d29f7", 0x44, 0x7, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f00000001c0)="05c5a7679e681fd977c738478a5540a8dad74519b0416c3c21d18fca9e6bcbb1861af98e096bf42b4b5eb24695e6aacee65ec7d62528f87d7b8a28216e11445da85964ab24d271f5412662e9fe4830e446b267bf5c018af05dd28016c63366450fdcef25ab", 0x65, 0x4, 0x0, 0x0, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x43, r2, &(0x7f0000000440)="415c14ebf60c1090a7273ce15b998fec1e3a4710a5bbebbb1a1f1fc56c187d760ed9f0cd434570ba926d14c59482b684fbcc3bd5230b10fecd0501c83705b18ecf081241924fdad9ef338e0c1499b5b893dd96fa3a2e54eb757fee12ad002aeec41051891f2d60fc253afcfd55e0b40b796efdec7ba18827a0baadd0cbdc04", 0x7f, 0x6, 0x0, 0x3, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x8, r2, &(0x7f0000000640)="8bd13accf8658044ac112fd45a22380a04861e1e3f7376c6328f22b5017e146d2293ef1e1e2e8d6d23fbdb1b2c3df52da47b5a013cc32c74026ebdc33befaf2c09cda625", 0x44, 0x9, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f00000003c0)="3a8df725d3e1a34dedabc8c14e1f08bb0a75e7", 0x13, 0x9, 0x0, 0x2, r5}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f00000006c0)="620c6f49f5", 0x5, 0xb12, 0x0, 0x2, r6}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0x1, r0, &(0x7f0000000740)="633f9296b9eb5333cc8467e132eae8e3009296c4249a3b00f2acab3ac289f97fc08ced698b8af8fdd1f387147866c655f41b4277ac7bd57acaee8b9e07d83d519481420114a699b15dfa5472fde8ff937a71acff72f8b4a5388c518b7bb21b58f8c9221cd7b8c3322e3cfe115eab2f7b970b2cc426bac414f6168d214683d3", 0x7f, 0x7, 0x0, 0x3, r7}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x3, 0x9, r1, &(0x7f0000000900)="328605ad85076d2cb1c41b2d741d71154d35c800c73935c4200dfee7835d3a6a13aa7e5c9d1d180f247a422fb4d46b4c2c17f55aeba05a7ae97fceba89a74783bec669f49295a3cc73ee64435a8ab70c64e29e8e61296d562d162b4db4c0e2be68d24dcdfd7be4f7bc769005682a6a5f2846b69aae83e34396fef25c2dabf6216a46f22e3d139ee47b6f16a6dbbded4cac27ac1adf834e94dbee32cea212fa0adadff4f0ac93dea60ec6ca4382c6dc6160cf1d60549bcc797662160021aa67c795a7f07f9d97d20201ec34d5f97dec0a02833dd50ddbdbc521d395a9", 0xdc, 0x401, 0x0, 0x1, r8}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x6, 0x6, r0, &(0x7f0000000a40)="4d569c4a", 0x4, 0x100, 0x0, 0x1}]) (async) io_submit(0x0, 0x9, &(0x7f0000000ac0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x200, r1, &(0x7f00000000c0)="a9382ded6974241f520a56bd3057e3b8797528bf2df432aae3529f207f13470023faec1f3ead7cd775d0f6879a232df90a055b134031f76142877e753328f34fa72d29f7", 0x44, 0x7, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f00000001c0)="05c5a7679e681fd977c738478a5540a8dad74519b0416c3c21d18fca9e6bcbb1861af98e096bf42b4b5eb24695e6aacee65ec7d62528f87d7b8a28216e11445da85964ab24d271f5412662e9fe4830e446b267bf5c018af05dd28016c63366450fdcef25ab", 0x65, 0x4, 0x0, 0x0, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x43, r2, &(0x7f0000000440)="415c14ebf60c1090a7273ce15b998fec1e3a4710a5bbebbb1a1f1fc56c187d760ed9f0cd434570ba926d14c59482b684fbcc3bd5230b10fecd0501c83705b18ecf081241924fdad9ef338e0c1499b5b893dd96fa3a2e54eb757fee12ad002aeec41051891f2d60fc253afcfd55e0b40b796efdec7ba18827a0baadd0cbdc04", 0x7f, 0x6, 0x0, 0x3, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x8, r2, &(0x7f0000000640)="8bd13accf8658044ac112fd45a22380a04861e1e3f7376c6328f22b5017e146d2293ef1e1e2e8d6d23fbdb1b2c3df52da47b5a013cc32c74026ebdc33befaf2c09cda625", 0x44, 0x9, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f00000003c0)="3a8df725d3e1a34dedabc8c14e1f08bb0a75e7", 0x13, 0x9, 0x0, 0x2, r5}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f00000006c0)="620c6f49f5", 0x5, 0xb12, 0x0, 0x2, r6}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0x1, r0, &(0x7f0000000740)="633f9296b9eb5333cc8467e132eae8e3009296c4249a3b00f2acab3ac289f97fc08ced698b8af8fdd1f387147866c655f41b4277ac7bd57acaee8b9e07d83d519481420114a699b15dfa5472fde8ff937a71acff72f8b4a5388c518b7bb21b58f8c9221cd7b8c3322e3cfe115eab2f7b970b2cc426bac414f6168d214683d3", 0x7f, 0x7, 0x0, 0x3, r7}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x3, 0x9, r1, &(0x7f0000000900)="328605ad85076d2cb1c41b2d741d71154d35c800c73935c4200dfee7835d3a6a13aa7e5c9d1d180f247a422fb4d46b4c2c17f55aeba05a7ae97fceba89a74783bec669f49295a3cc73ee64435a8ab70c64e29e8e61296d562d162b4db4c0e2be68d24dcdfd7be4f7bc769005682a6a5f2846b69aae83e34396fef25c2dabf6216a46f22e3d139ee47b6f16a6dbbded4cac27ac1adf834e94dbee32cea212fa0adadff4f0ac93dea60ec6ca4382c6dc6160cf1d60549bcc797662160021aa67c795a7f07f9d97d20201ec34d5f97dec0a02833dd50ddbdbc521d395a9", 0xdc, 0x401, 0x0, 0x1, r8}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x6, 0x6, r0, &(0x7f0000000a40)="4d569c4a", 0x4, 0x100, 0x0, 0x1}]) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') r9 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r9, 0x409, 0x12) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r9, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r11 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r11, 0x40049366, &(0x7f0000000180)) r12 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) ioctl$AUTOFS_IOC_PROTOSUBVER(r12, 0x40049366, 0x0) 23m7.869772921s ago: executing program 2 (id=9): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x800, 0x1f, 0x10000, 0x4, 0x3, 0x10cc7, 0x4, 0x10, 0xe, 0x6, 0x2, 0x1, 0x7, 0x1, 0x6, 0x10000105, 0x0, 0x1244d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe6c, 0x3c, 0x8, 0x6, 0xffffffff, 0xeffffff8]}) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x312000, 0x800, 0x0, 0x5}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) cachestat(r3, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') socket(0x10, 0x3, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 22m52.456125152s ago: executing program 32 (id=9): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x800, 0x1f, 0x10000, 0x4, 0x3, 0x10cc7, 0x4, 0x10, 0xe, 0x6, 0x2, 0x1, 0x7, 0x1, 0x6, 0x10000105, 0x0, 0x1244d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe6c, 0x3c, 0x8, 0x6, 0xffffffff, 0xeffffff8]}) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x312000, 0x800, 0x0, 0x5}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) cachestat(r3, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') socket(0x10, 0x3, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 14m54.028315187s ago: executing program 3 (id=1649): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x48) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x2710, 0x0, 0x5000, 0x1000, &(0x7f000000a000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, 0x0}], 0x1, 0x14, &(0x7f0000000680)=[@cr4={0x1, 0x140245}], 0x1) setresuid(0x0, 0xee00, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) recvmmsg$unix(r5, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/124, 0x7c}], 0x1}}], 0x1, 0x12040, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000adc70ec13acfbff3f1dbd66afeae9bc4c413b374bb686955a2544cfac9f2a3ca7c73d565413fb40a2e40914c14a05dfbd069382ef60167d52d405dd2266f5c48b2ae8018ba6cc4e04694375c7be0e9c76f46b2db811e5366de67c7a5e0de490c53f8ec125cb35d0e6449439b5c951c4c82b42051603795dee88582e2274dae8a572ae562a426ae0731d7f1e770efa34b54b51df65f718fcd0fabd01889a04ce4692ededce059f64d23b642fea8dc111fa03b9d6ce2fd0c85e0effee6129e2cb0273efea3f5d673b3f55de11f6ebc6e756a8842449cc99abf", @ANYRES16=r7, @ANYBLOB="250427bd70006f8effff5700000008000300", @ANYRES32=0x0, @ANYBLOB="06009500060000000600950004000000060095000700000006009500f7ff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000800) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0xfffffffffffffffe) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000440)) r11 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r11, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x3, 0x0, r8, r9, r10, 0x2, 0xfffc}, 0x5, 0x13, 0x4, 0x80000000, 0x0, r11, 0x5}) fchownat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, r8, 0x800) socket$inet6_udp(0xa, 0x2, 0x0) 14m53.500524834s ago: executing program 3 (id=1652): mkdir(0x0, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) unshare(0x4000400) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 14m52.602440919s ago: executing program 3 (id=1657): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000400000092fae522447ed1a118010000786c6c250000000007000000576a28c17b1af8ff00f9ffffffa100e6829baab306010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x26, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000800000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018100000", @ANYRES32=r2, @ANYBLOB="0001000000000000001200003ab843e21a7c80a47d6777ab1033c3c6293be3fd1092e989af64fa08f31b9097cc20519805173c51a26f4de973929dfc95e06098e8e03acb382bfe910170b8c320bcd0fd3bf8048e82890e1de5917493917db77fd4", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000005da60800fcffffff18370000040000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0xa882, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1b) writev(r3, &(0x7f0000000b80), 0x0) dup(r0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='vlan0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeec, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x6) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0xc}}, 0x20) 14m52.211003466s ago: executing program 3 (id=1662): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 14m52.036662955s ago: executing program 3 (id=1663): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) unshare(0x20000400) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') pwritev(r2, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 14m51.502343673s ago: executing program 3 (id=1665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, 0x0, 0x190) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x845) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x2000c004) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(r4, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000580)="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", 0x413, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {0x0}, 0x96000}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x30}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 14m50.897583379s ago: executing program 33 (id=1665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, 0x0, 0x190) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x845) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x2000c004) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(r4, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000580)="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", 0x413, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {0x0}, 0x96000}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x30}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 13m9.61357491s ago: executing program 5 (id=1994): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30fcffff7f0000f0ffffffffff13000200010000000500000002000000fe00000004000b00"], 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_xfrm(r0, 0x0, 0x0) io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xfff7fffc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x400}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x2000000, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x161) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r7 = syz_io_uring_setup(0x31c4, &(0x7f0000000140)={0x0, 0xa18a, 0x40, 0x0, 0x349}, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x263c, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x169, 0x0, r7}, 0x0, 0x0) 13m6.526953669s ago: executing program 5 (id=2001): socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x4d, 0x3c, 0xd6, 0x10, 0x7c4, 0xa000, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5f, 0x1b, 0x40, 0x9b, [{{0x9, 0x4, 0x4b, 0xf, 0x0, 0x84, 0xf0, 0x6f, 0x8}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(r1, 0xff01, &(0x7f0000000180)) 13m4.268168457s ago: executing program 5 (id=2009): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) syz_open_dev$sg(&(0x7f0000000040), 0x2, 0x2000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') read$FUSE(r0, &(0x7f00000032c0)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1000000}, 0x94) 13m4.20053719s ago: executing program 5 (id=2010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x9) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES64=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m2.610259547s ago: executing program 5 (id=2012): close(0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='xprtrdma_prepsend_failed\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r0, 0x0, 0x4}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xfffffff8}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000022}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002240)=""/102400, 0x19000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000082000016085bee07c8b07976e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRES32=r6], 0xe4}}, 0x0) stat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000004c0)) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x102, &(0x7f0000000640)={@multicast, @multicast, @void, {@llc_tr={0x11, {@llc={0x80, 0x5e, 'o', "c811d09df23dbfb3a264efd3d8b7ea86da14eba96e4c1718968c4d768127ecca820c2c776f25e48ff91e42b00353a7aeabf863c26ee144e90038adf5e8c755892c18b37d83a0ad52dfacce0a973ac8862a9fb4a0e05b69caa308c4d0c95783a4a027159162cd2f4d2783696d688bb1d0de260de47c090a8f3b1751639a2c65873266958abeb2e67aebf75930fe62a8c751abbed8e81511fa0b294fc114dedd864beafdf0117c46f23b18f08d971ba8652374c3eb5c86b45e46909993448d7eff2bdb44ffef91d5e2b8a3c56f0a87056c3c72f93f32d3e26068f90715f1b3072e618bb2835e0749b8d33120b85886ba6811"}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04090300c908"], 0x6) 12m59.118519688s ago: executing program 5 (id=2018): ioperm(0x0, 0x7, 0xfffffff7) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x400000000000083, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89fd, &(0x7f00000002c0)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) r4 = syz_io_uring_setup(0x2f70, &(0x7f00000000c0)={0x0, 0x5a62, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x10, r2, 0x0, 0x0, 0x0, 0x40012061, 0x1, {0x3}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = syz_pidfd_open(0xffffffffffffffff, 0x0) pidfd_getfd(r10, r7, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x400, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xfff2}, {0xffff, 0xc25d2f87ca0641f2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x90) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f0000000c40)="bad330752181516b2b316f3a277f", 0xe, 0x2000041, &(0x7f00000001c0)={0x11, 0x88a8, r12, 0x1, 0xd8, 0x6, @link_local}, 0x14) ioctl$SIOCSIFHWADDR(r7, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c00"}) 12m44.048871576s ago: executing program 34 (id=2018): ioperm(0x0, 0x7, 0xfffffff7) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x400000000000083, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89fd, &(0x7f00000002c0)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) r4 = syz_io_uring_setup(0x2f70, &(0x7f00000000c0)={0x0, 0x5a62, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x10, r2, 0x0, 0x0, 0x0, 0x40012061, 0x1, {0x3}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = syz_pidfd_open(0xffffffffffffffff, 0x0) pidfd_getfd(r10, r7, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x400, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xfff2}, {0xffff, 0xc25d2f87ca0641f2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x90) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f0000000c40)="bad330752181516b2b316f3a277f", 0xe, 0x2000041, &(0x7f00000001c0)={0x11, 0x88a8, r12, 0x1, 0xd8, 0x6, @link_local}, 0x14) ioctl$SIOCSIFHWADDR(r7, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c00"}) 7m14.382556394s ago: executing program 7 (id=3177): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002600)={0x0, 0x0, 0x0}, &(0x7f0000002640)=0xc) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff, 0x18, 0x0, @val=@tracing={0x0, 0x3}}, 0x20) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000026c0), 0x28c601, 0x0) r10 = syz_io_uring_complete(0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000004bc0), 0x801, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000004dc0)={0x5, 0x8, {r5}, {r2}, 0x10c3, 0x2}) r15 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r16 = syz_pidfd_open(r5, 0x0) r17 = syz_open_procfs$namespace(r5, &(0x7f0000004e00)='ns/pid_for_children\x00') r18 = socket$inet_icmp(0x2, 0x2, 0x1) r19 = creat(&(0x7f00000000c0)='./file0\x00', 0xb4) r20 = dup2(r19, r19) ioctl$BLKTRACESETUP(r20, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x800, 0x1, 0x3}) sendmmsg$unix(r1, &(0x7f0000007380)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000240)="db878990a2e26ac6e5de8664bcc884c802993c2cab09ec68df9b9d717630", 0x1e}, {&(0x7f0000000340)="9691b9a9bf023e18ef7f4e3b734af331ae634bef8666f284a350c31713f2d4aa261c353dceaee43480c65c823f298f92f6919122a904b4e23d81e3076a0359fb85fade8c0a941a6e870f3b496701b064d1329b38949233c651c53e35f6dcaf07af57468b3034c620f2a42f96acb356ca", 0x70}, {&(0x7f00000003c0)="501f6f71ba9b2f1f9d8dcd1273cafa80933abd6310ce1fcce98325d6065a20c4a911d58d31797310e0850a5040caf4b26c0a868db7e545e0fc17cc49d6d000f4f0256ba4b44dfca68d39d5078a527eb70294ed764b2236c083a74731e352342886f631f1ff22be792632f0", 0x6b}, {&(0x7f0000000440)="82af734bc48d0c8835fa0018dfdca29b50341538c78c9f1924ee4aeca8ce7a33", 0x20}, {&(0x7f0000000480)="d35f84a669fd0971a2c1eca34c731de59fa2cbe3fe455156ee7c9d7c8d007d4986d3ce90f8e41c4b4ffbd33740ed2562d5223058c82207284b550e5c1283b8905f0a72497a46fbe50e21127417501edb05b8aa41d4ca47c7df26107fea303cb86d", 0x61}, {&(0x7f0000000500)="07825621846411b33e5a29abfabed30a9a9f85ecbd0a7b9056104c9663598339f26a1d247a8eea4f98813d9bc51163", 0x2f}], 0x6, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2, r7}}}, @rights={{0x28, 0x1, 0x1, [r1, r8, r9, r0, r0, r1]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r1, r0, r0, r10, r1]}}], 0x88, 0x4000010}}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f00000027c0)="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", 0x1000}, {&(0x7f00000037c0)="609250ea8fa97fd830608f7d3539fa2d8db1cbae0f88321125b2dc6cb41bb4fe1cfb5672471df936cd3dfa621b4c166e4416bf7c58f9bc92058a74fbbc95fe29f15eb452846992d0a34b2c0e89f2de95641b0c476e837351601d9173e3ea37deb94b16f1e6d49698b0f1a5bd85eef067b6a7bcc1cccc5db7ea92bc563974ea2d69ea93416ac27c43ae445ef932e6cd72e352d4ed028d10bf4de38608477b975c5661983ff61257a6f6cad86a32ccc6566e58039024d00f49b0fd7bf6eda7a50cac0d86981e582d8a2427b2dbf1863254e87dba7bcfe8b8db363081454434a9a27f60d6a2cd87912f77ea836e272b85079976", 0xf2}, {&(0x7f00000038c0)="e24ef5bdb513a0385bc9ad6d7cdd4f777501835e97afac3bc371216dbec66b485fa28657ae28b625d48ac8a367e5349ec8ff3382e2cde316398f14de0e84af4b0c7b99a702459063e5894a3eb3d08cb592ad17e62e994b2f13a182cddf401bd003c86db26d572dbbadfbe9416599668322b553590f2a4c1555ea4db511d31d4a347755be910bf8ba87db8cec027ad53d24ae33ebc738db7031cd", 0x9a}, {&(0x7f0000003980)="aa7e8a036a87d5107521788f3e883dbe38334e19d6248e3a721c2821905bdaeef2f6fa43d12a4bef3b3af2d5980434a2f3d22896d6ef3b215cf932dda52eb3bc282f1c0a00b3d7ecdea5f0e6e9618a1846f52a061024fd1bf4e1748fce09834dbed562a24efd0098ae1bffe954a69edb571d30839c37449414ad466ed9d7d086daad750ab84ee9bbe11deda43af2502d29805bede95112502a1e7754987998b27e19", 0xa2}, {&(0x7f0000003a40)="3f045ce7bf1e4ffd2bfaf5b29d97be20280b6df7a68670f6c4473f9fbdc794c580dcff5259cc600602141dcad0c450dbf9cd42ea8d66b6da889b0c13a9eeb533da05357cdf67ca5307490b841b3b436a4493b9f42745d0f620a2ab7fd3cefab7b4be60c2f4716f5abe0142f42ee81dd30ed2021fff135724a2a34a06a7b6c26a374220ad5607600049a6f0e0d8cb91db821bf0acc028e23c4facf163bf9e854dc082f878966e1d0a0e1847fe93f1984daef835e6108cbd58cdb45e0548823bc65e0783233b5d0bec256a1c8db5e8ba4944c8d903e0e7c540c2fea16b7bed3fcd4c35c08b0154eb7b86e5571ff905a294dd769b97d3a320f9236f0aa8f86914c8208193966e5321f617da6f544ca049954b2a88ca0feba45697a154844d80e5b4dddd1f0e2f01501e6441258f1732c81724188cab8e1c3e8273c1db88122f66d733a7f6f81061f17f7ef08141b271eee8b5bcd2189319f6df3215cdbbd027b7dd1147d849570cce1b34d3733734657c119de257abf20812f1279e425dc532b08b867c2a2fdaac0f4065073db089c96b15c3466d6cc3acf1adb55b7a0d2a0d43e79a1327e96747046f285226c6a1e44db93988bad3e8c73cc098b1c2c589975c1f23bf6e575e9fcb46968cec915361596054987a9f4c5ded67c6135c1388f8bae494330313f5b580ca7564f2739412c42f096e91babddefa192e430e863b0305566cca544187b98d82833bb600d3ff7938c63b75750afd212a7a659844b7eeee4796e4d8a3c9f83f4bf473f871b4d01c1df972f2cd549edb28efea1bd20421eb1701e0f9a999335731d2a1ea5ce40018b7e984d1147064fa6a18306f9afa17462ded11a49237e21621d927c86a528f47dfe97f3e7ed0c8039362747230fec92bfcee9c35b178530e140645691221150daa59c867b796918798dc721be79e3ffc461bf9c24dd38d00f8f7c1e095486e77887a54084e2e373e2412d4d1fa959b9b0177994aaf455722fac2daa6f1aea66a6af225de6d6bb6c46de9e092934816cc91a27446d1a6ac5d360eb6f435de1ad43c0085dfc43cd8f2cf7666c8b2121a5f85b101e62828dae909327541a177d350b44fa2b064ce45125a37e240fe830fc5d83f495fb1d216e9469496f34d2c7138320f6fe7b98b8f38024a95df745ff49e6852b9fdf4223f19610d460a15d8a7b6c98d9d77cd4cba2c7aa1dd4ae3c5f8c838397c1a4068915b12458785bb3b43ad915875dcb37edc38adc32eac15eb374325bd098d6e8020e667d488038a63c7e150157a48c3cdb6d582d6e2cd7c4288ec41514fc17718881006885db4cd598c28b203ed125666c96c330dc47cb0bdff4b89cf529d5f5bfd5372f7850b065f11ad38e4cf443cb757494a9905376c235f31f1e71c54b81a7af72a7527901c5cb42b90d710e1097d9859139188c41f4321016e50286e470c40481b229d2d6a965fd3990d6bd5cff0649b81baf53bcb38d4f37473bdf90f04998ba8e623739360dd6f1970bae9ab0fbf7db05af1a97b46e756cc661383dd6f0b5aad663c0973872323a8d7e473bbd31c5948a41bcc4518defd2393e1dfff86d93db0b557dd1ee33e308f74aef2243e89bcd577ddcb3daa298a43763019a6abbd282c20bb9f61e507543d97afd6e20c5b48d552f05b07ac4fdee3310e23e1f625e8a723c13eb27c5a40d6c5236332db13f22937f7f7aee59fb915c4a7804a387ceb465ad52fcf3f05df34080ed06e285e90b6e66ab60acf8b0e9bd51980bc8fc56c4f8f0218598131098aba4ed4ea4aa212d39c910f2e5c59fa46899a5db5967e9051d5711e0d8dbba97bc358769d7f4a645aeff397c30531604a32571b1a26125f5e5c61e6ea71a33fe699512b65c5c906758879b7bcaa2d6e128eb68b90576df58b664e2788951a24565245d7bfb661dbd1142fef1b8de7a8d4a9bd0c9c96bc258bbde6bd441869924dc54446ad4598347492f556612da81770d8d360c43a28d0516b6b2bf8aee25c9ab25deaa535e4bf72c2ff30fe55846fa7f695a4f82225bd561c5c0533af62186b80a8db709c229f89846ea403aa45937952df63ccc3372538b0bdb332f29231128ba15afe267029ae7407ea1a06822a9c3d967c508e0fc6643eeaf419d2b1dc23161ddd4e73644742325d7e5ae16e735bd97cc5ed725ba89b30515f68ba840cfd349bf0c37e03b19d155221db0dd84478ce61b8d29ad2bd5cdffbf9f7d5b36a441a7794d272705df96493cd0a49a3952602ed0a45dfbcf37c9d19961470d6bd462270c00928b18186132a6d6aa99789747ec08de300fe7cfd6e4299857a6080b5407f8dfc01323ee081f9b1f6180cdd060abf544b47d0411a970689b73f9dc2872ac27e6f83b7d82a4315e671df04aec2ad363b59b08f9126afcb73b822782c478b6a5078157b6d6272e9a11e11ad85ac4d60a86249d9d254e1628c8842dbd407284504a155800c9d157cfa5d5c7cd5a742a54705bc4e9d4a6a1468d0215bc0c24c137989acd7e5185599f1a069b0940d3239ffd3735b0c6b03700ffab52244387e3daea1006584df9328ff4408749ad1a5b5e5283f6a490c73442160e0ec0d4d879ecfe1312a88a4c69605c983e44f3f5e9a342498dfbfecfb7ced4f3b532d4f74d7d854e7f290900dac47f26d6b1d47e07f255687b80256f83138fb2553124ccdf55e0c2e65586cf106069fb7dbabb30d5b9ab30f61909a4268e3239a57f2775735241a144e45ca944fc233e4adaf513eb652d6dc79423e796a9d7c8c045b000884f6f1bb8c61a6559ee7009fca4dd6059806e7343a072b492f2dba88a4fa4bf0940eedfb7e4d654a37c3ba30594bacdb88093fc925d177084174a83fb81788052d4a7ce97cc15f4a9b12be559103b658f10c9baf6a2e01755bcca103811c14b60ea99bf613e590daa874b93f499b9718e10971d8259d349c465bf1d739862672ffb30c996918be135e5f28e30b894ae404ef5ef0f78fc68ebbafd77a5f08655d3be9a889df21f24a7ad7cfbeafae07cb3ac44bb08f8dc0e16c1502777a6951e3d143a45a385618a8190c45d36acce0ad86c7f8deebc13867ebfedb522120c52aa12e0d236c5af42e10722dc62f7df565627a04d608cae3e32a633309a2f4d2c1fec07b875dff5669e7d546131678dac19568f6ef378ad0e9ee2462611f808e5692950819731b8825fb2646c766ab040b44df55bd3c98e56bd3ef0257f3e1766f5af88cf6a150148defb354adee7bc4bf4086fb0c7ba2712bbd53353781d88f21a96921161dcda0ea1779de4e892e69755e71f374c967c6f26630b7941450c3dd1d835ff1e5c2b3b097a4b76eade0c9ccb9046f5b36b482d27c2e8084a4ced65e5d8d9c36d50fe55f805b19880e6d3a9f5c0f5d03954b256259758cf103e72c4579dcc4b1346f21e9e1b11d77124b0e06c9fa820ea444ca5dca7aed31e0b8537f7d67f823668f87ce6db581c0a2607e605fc5c6ece35955711b60ae80f47ef2cc3db662f76698d88f2b1dd19e26ead552e75547348ab4f887a1e2fb99266246cf1fa1965c48a37bd6ef8ddb3d0cd28deaf045a569aa0d5df0091ec09dbadd023a305ff3a303072d342d07d4b00744202dc130d40639e0c97f2a6b3f5909ef8349b53241886d22f81012bef2ff8458dd2728909e5c1e4916cf18d2028348d41efd834c6c71c22eb2feb6216110e0c02c4be65c4d85c35dcbf42540e3708536e6f71636eeeb1d96fe1de53a8412875a26c76bf83d0764d685402c215f9aa423234949f80570e82525ced713b5d58c9b000e4febb5ea4f690c6744d38957fe39bd0dbad593ec26625828bcf25ef9bb2b9c576fdb58f0b32d1d427e442fe1c807beba49074ea60ed5a3d048eb1f5d2efb4a2d918967f284277a45a52e954b0778cda6958bb0808ba25d1194e6b566650710cd97187f821d800b67d5cbe0fd5dd2fd2f18fd6911c39f3b6d6336e4ef1baf4264b53435fb6ee6ea5898601176a5d9061fed3db73205904ab055717f55d2e3b018b2ac2179123d0be634741f118013ae6fbd30a91178a76e11f65e99682e4ce063ddd90aa90aa79986edb97954f2573086437353efd5d8eabaa77aedd2eb4af5277d12426a8e8ec2bb701a7105ea167ccf308d0f5ad404c19cba0b6fe8c90e9981ba3c6ccfd8af188cfe8ea8c92650781d92aedd9aad021aa30bfb413638c80577122a31caa0a935d4573d7602c79189f9e50c122d00988d9e9e97cd3e4e02a71ac9a70ae4f13338fc45d5dd22455b40c309563a9b61a5105bf7c2a6a896157f96a0189954c555ff278c8218951eb9868e358f3be611a54f781c578b825edc325cf5dfea4d6b191057ce11b7d86d0e7c801b172b9c944776167669ff37607a2bed75347141e7fd18ec92510ba5b818b2d0ba49096a1d8d14fa7410b22ce40dfd9fb56299531ed598782fb6fc5346318710c2d07c0db037dcc78dc16a80981284f2b618798cd09e571526e7d3f7c16f94ab59bf9ab08c869ed57a631af65ec83ea460cee92da3ebd4d96ebc8fb7bde70b1cce26ae2ffe8aadcfad609f888a529c5f7adf34a0f778f740e3ef6cc76c1ebf1bad01164e619ec61a0fdb4ffe5dee58f4f22313760485d9b9bffe327162724bf012cf17f30a17021010faab69be456a8faebe4089056d0d552e8019a4e15423396c3404c0b61d7ebb1aeb7bd3c1ba11f6698d80ef132fe8cdbd4b39538a1c967c644385f8230ee95942ed6ee6d4b83b0d098309b0c40e8c1b440bb407b02e20c07925b4fde4440fadd248b771acc9e649e939cb26ea29f4eac5550d0ffee23d169d1f735df25a43fbaf14a5180389963c45f8ccebf49b9074289e380f599f32712f6e4b7f1d1a4fad86a53da5da728846587b39acee976dd24a9a759a090c38fbd509df61d412fcca380725be049e4be8f5d8d0b9d698109a8926b492e0bad9e0d2cdcf0978e2339fbbd1c1581262453d2ef06ba4dd235a373481e13a15d9bd8982017de87bc52193c52fe7fb80fbf4062d7f9eefa322a3019fb8c3d2ba3763fc3e8b59ee8c1f11195170b6526de6cb35649efea569ebf2d5f891ed43644ab4f6027bba8087a0ce86658a8a8855313660236f27772c5c0b2f2f2010b341147b4564441e6b56d56a83deeab34b1d2fc4c1d912797952e36c9c2febded52a33571bd92520ddcc3aa1114151d76bec313f32f6876cdf7603b2110c66ed13267f09b253709561326bb106dd27d69989858ca7a6a1af327d3506e1fe914af5be8d42429061e5573a0391e2e3fcc659a807acee5d6f5dfe376c8a2c81345b6bef8bae0eb972e580f1b35f9e5cf3a64da564ac8ff84c5a9fa8d0f759868ec883c7a70d9ffdc8a1f72b7bf8d59a4f773f03537e1e576b2f21d3509f904f54e7a4e38b17c22cdcae9d7a50f250613e414d245696dedc722c5167835ff408bd3823702d0279367aec5f442f0501b1488f4b31bd3fa61916f2bf05615a8d8598fcecfaa12249303a63318e2e6c1b29da8acef9aba42a04a5cd24d8642a9904f88f95a0406931f5ddd22f97d09e8687abbf9f903b2ac1a95914330cb4075e5c7aa4628783ada3757c808fed605cf5ff7b4cc1cb628d13355d215a70bf86f511922f86c7aa4605cc5b9e93778de2d92ab503f7bfa5d72b7c5b88d0802fed5737f00cc53ce51e490dd1cc4f597b683940264d5ef486c8f307865dda1b8127883d940300ecd7d6dbfd44cb77b9f77d7efec434a3f550ee661a37748f8e994e426f0fe9814c3b4e542737cd0433cf1bd8977513eb432f74", 0x1000}, {&(0x7f0000004a40)="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", 0xfc}], 0x6, &(0x7f0000004c00)=[@rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r11, r1, r8, r12, r1]}}], 0x30, 0x80}}, {{&(0x7f0000004c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004cc0)="ab3bf87a7a4b39af834b6f6c2fc7f620b4158b293fd5931ec371763025726a297591fb0e9941e5261a36e3438603a861ff0b9aaa2e5ab0b3673e97acfba4dafffde7080e96b0563fea50058008554cda3fa29b90305ff6f334f3e4ecf64cbd6fbb003402f6befbc09eec4051d72ac7ccc3059298570ff26d11799ebb8ee36d9d5cce48ec487cdb61fb2a015f1583c9c3111dbec8e1e6f884aced2b9664bb", 0x9e}], 0x1, &(0x7f0000004e40)=[@cred={{0x1c, 0x1, 0x2, {r13, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, r2, r7}}}, @rights={{0x28, 0x1, 0x1, [r11, r15, r16, r17, r1, r1]}}], 0x68, 0x90}}, {{&(0x7f0000004ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005f40)=[{&(0x7f0000004f40)="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", 0x1000}], 0x1, &(0x7f0000006a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r17, @ANYRES32=r12, @ANYRES32=r17, @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r10, @ANYRES32=r1, @ANYBLOB="0000000020000000ddffffff000000000100000012f79134fd0a34a60b", @ANYRES32=r11, @ANYRES32=r11, @ANYRES32=r20, @ANYRES32=r15, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r16, @ANYRES32=r1, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r14, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x80}}, {{&(0x7f0000006340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000068c0)=[{&(0x7f0000005f80)="4a5ff87cc3f98feb7f8f3f5f02a19d73fd56ab0442a9cfd77438e5edea02a21dddaca3c697d23b14eafa220b682372060d39568540b371e4a082215614b7d7892735049accb90783dcaf84fc975178425ffd2be0392471263e6c9445cb8b9c525c47f438f25abbd88bc7f6f134949ec57448ee69c3cebf3fd1d2cece2d48d7b3af28b92d7cf1c31597a99ff3dfa79ec75d5751562d25e6696cb8eb55c4fee69b7809e346830bf7b556d79b023cb14d276b9dfbde25505f01b76059bc57aaad674046e66fe231782e69941da3edd0d18e548d0d1c927371a7a1084c6cc78a7b0e64e47f6f1317b5ffd5839b24a549046bb7a252ac00ba885555672d85c0baa577dacce87e011b21d1cab38dcc31d122fa1204134977a33bf7110e00000000", 0x11e}, {&(0x7f0000006400)="972c777d0b319f15d8a1c3e8438b086bf95ef8951f31789b70aa750cbc576099f94cdefad7fb049616a1b20c94394802cc2c850f2b834aea270b6aedda99449ae3dde5fff405468704f85dc45a9c7a1d791645dfe69793cb6b0f87e89ccfe6ca2160fd97766c9f80afe877a585653d3764dc2b90ee71db6b288378ee7d6d77996a4ece154f8d60529d10450d424e70713ec8bd239dcf36fbbce2cc0a9d93ab54a9a4726cc0bb6238898f54193b4fab774a0be536de1631ae7da156ad07f8db452cfd0042e84a1be8e107c694e8529b8f21bf9c154fef6bf53415c0c20d8f75319666b5e70923f4a33cd8066ebad43dfced2e11e32b", 0xf5}, {&(0x7f0000006500)="c10e2f397388188db9deb22a3fc9eebde20e1595125d7ed2c59ec4d05be5ae73af91400609ed6a2cd802a812f0e4dac86dcdbf98a8dd489e04a0b0c938708dec", 0x40}, {&(0x7f0000006540)="ce765380f40ce0c092a6a3132103eae1d1a0ef63a01c9242fe8fe9e57d7db7b0c3844d59e98dfef4846f823ed85742847231918e3eaca5970045771b3d8f60d7b3414ddcf3c65f7ccdd99cb5f163b839e0c891a53c5b7a380086a19afc9db5a04d97527cebcd5589d9ae66a1261e3e4f5bd060bc19bb0cbfe58018f2b47f3e24934a68246a2984a27cae310fedf0cc98d6c9ed368b8e9fa5ebc8cec31c3f6fca73c60326951a018b2f2d190df06be6db9441fbf35b87955c0c976344635f5558cb57fa17e19c3290e70d99743aa832", 0xcf}, {&(0x7f0000006640)="6874eef328e86e6dbc146f579631662c5e701406991ff9d2a70d040099d9e9bb1762c4b38d57d81f19d2014178b5bdd6ea8e9bccda8e6b9895d714e5afe8bac8985fe9187fe6cdccfd2854d574cf81e696e5facd930f4e2f2effbe1f419ff44e8db95247859314b5e71eae83cd4f41ca912b888a8aa06efb4a0e31de426c6cec8950a91f4c6ea7502486dcfdcea5137a0c2c881a40792c06cc299ef4fb7afae91170f5011235707141320c36a627eb2bb62bdd79b8a335512099a29cf6e4aaf8889f8846541491ee899d377168bb15444187a0da5db5f4792921602d857d0dc13674645dd72429ff6415cad337f07927ed4f9c", 0xf3}, {&(0x7f0000006740)="1c", 0x1}, {&(0x7f0000006780)="cef2b46f941a027262ec81686efd3e48f2dcfedf7852cfada0ecf36bd1b888a4f6771d2a1ab9c8ee92d4a2ae6ee93e9c4119c05ce7793149f82b687560fb13bc0eda48e76f9114e67bc9ddbeb9ca8cd5982215e85c43e12519c7cba92697baba0b62ea0ae1df656840e07c06bfdf703508ab896e78f7f79fa937224e01e17580c78ccc6b54e27b5b63f918779280785d8205ae10e2c06d7e5d89e0", 0x9b}, {&(0x7f0000006840)="64468ac7dea04603ddad481a5c3e0815eb49a656a5befe4842fafdf3f696a4f2af1a894fbb19587cb9f4d78311b9e9ad6d5d280274a925f8d57c66e7c321ee2da37b00efaa4883a7e97de2", 0x4b}], 0x8, 0x0, 0x0, 0x4028000}}, {{&(0x7f0000006940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006a00)=[{&(0x7f00000069c0)="2293c0d9e3060ba8", 0x8}], 0x1, &(0x7f0000006a40)}}, {{0x0, 0x0, &(0x7f0000006b80)=[{&(0x7f00000071c0)="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", 0x16c}], 0x1, 0x0, 0x0, 0x200048c5}}, {{&(0x7f0000006bc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000007140)=[{&(0x7f0000006c40)="ddd369e34f52279243bbdfb889d0409ec10240186d7b8a32098cca8ea33e06600f68d0d4c72e41dd0ce10416c8c10b9b31a47cab0ac2ac7258bb0dac81f29f87a1a12fccae0a002ee24d10876e5f17032e8ef5fd6bec5bd951e7bcaceff780d7c2500a27b21a5624ece005fd404d9bfdf0ae581a4aacbaa1381e6187964466ce7f1b060a783feb4529b8f8e2e98adf6c1c55f2566e90042baacc65d189ecc10dd7ea69c2f3de5f450b3a97d9b6ff2d913ea4ea7b52a1042ea6087c916cb6d6593f47", 0xc2}, {&(0x7f0000006d40)="c1a03e1b8cf3629d5350516608bf788e10fe20ce261aea944ad12e4bfd7bf48889786cdb45917e35a29efff660bfbb16b915bf02ae7611ea4e8f1b3e3448e9fe320368d04447f7311b6c8181f3a03cf7af8f4ad3fea2908b1871cad2ca24d3d9475f903db14ca910d9f9b37c1b80188ec36dae78f370022c68ce37d3f0195155704b07ae984ceddf216e456c07e3c0bdcce95e3675ade263f757470b5682499a4d59e8a9de6e32b8b338f7f427831e651dc44ba7993ac9c9938c627bbc41c8f70f638aba7ace9b9e79f090e021b05742b88f65b303b86ebb4f7754", 0xdb}, {&(0x7f0000006e40)="6680feeac07fe15b613ea3a037cf172df204324f766d49c11be8de57b9d46f925355cdc15bc58478293c7f2a8f743fddb8f5b8aa77b9f7b79ed1d468faba4eff59861a12946351ae2536205b2fcba29c78d87331baec3d691133685e3c3b61cfa052c602945cb404e183fd030f940cca06ac8e0675fff3d9855b39db1e9b3b8469f81c80c26e27eefab29fda1e8badfa3192514b211002fe41dab2a757fe8e0d4158d15f346168ef90efcca613d5746ba46b405e753c478ed2453ce34c18d5eb3312e55e2d19162d37b3a39518494b6ef0c525806275736c1270", 0xda}, {&(0x7f0000006f40)="60c4fb4a4da7fad02cabb0028bd42fbe06f8674c8aa381bb45c8264f8d3e0192320fed5e6142e671b3c48b26ced353a5e297bb4552dbd83ba73c8d4a58bf7b6288da3edf0d5a57", 0x47}, {&(0x7f0000006fc0)="46026884dc47682d8addff0f6efa79270b0f6ea34daaab7a4956f7e1fdd430b1d9a128b0408550aca46eea8a46bc61c8233711f72d331a3564905738b93cf48316201061fa9de125dd224156f4a99cd946709759564257ec7ba6c74ccc2102f35676d9ab8a41275bb41379f73d4ee889118244", 0x73}, {&(0x7f0000007040)="1b07a283ba0abd2766a18034e478b19eb7bd4a23fb6d9161e2d779d9df7fe8e4471d5d69d76e", 0x26}, {&(0x7f0000007080)="843fbfeeb1be653fb912e2e3a22f312cbca6b84f246e67e26d1f483725b5bd14c11d7deb6a729063e0dc890eba5573c49daddd6b590c02af204abdbcd5aa305492b50671fc836d9a16d0ab2a4ba11de661a6ef1e251a5efb65e15693abc48119166e46fe90b66f890cf9a4fdd2a6fed5903d1096f5e65803a9f581ed6299297447c2aa895e332dcb5bd28b0e8747b1d8e82095f19f05e2432a12246dd44bc69ebd2962dbb12ffd4a472769c2a6ae2785b69effff681bce0c73", 0xb9}], 0x7, &(0x7f00000060c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @rights={{0x30, 0x1, 0x1, [r9, r10, 0xffffffffffffffff, r10, 0xffffffffffffffff, r0, r18, r16]}}, @rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r9, r18, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, r14, r7}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r19]}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0xd8, 0x4}}], 0x8, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r21 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x659a, 0x800, 0x4020b, 0x214}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r22, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r24 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r24, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r24, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r24) syz_io_uring_submit(r22, r23, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r21, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 7m12.988710276s ago: executing program 7 (id=3182): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 7m12.180901554s ago: executing program 7 (id=3188): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xfb) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x100000000000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) accept$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r4, &(0x7f0000000580)=""/44, 0x2c, 0x10000, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x81) 7m10.576341318s ago: executing program 7 (id=3193): add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) 7m10.470421797s ago: executing program 7 (id=3194): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000a00)={0x0, 0x9, 0x0, [0x0, 0x4, 0x100000000, 0x9, 0x81], [0xfff, 0xffffffffffffffff, 0x8, 0x4, 0x4, 0x28, 0x0, 0x0, 0x6, 0x12aa00000000000, 0xd, 0x8, 0xffffffffffffd8fe, 0x81, 0x6, 0x1ff, 0x6f3, 0x7, 0x9, 0xb, 0x503f879a, 0x40, 0x400, 0x7, 0x894b, 0x8, 0xbd, 0x1, 0x0, 0x8, 0x9, 0x9, 0x4f, 0x1, 0x2, 0x5, 0x9, 0xfffffffffffffffe, 0xf, 0x7, 0x8, 0xe, 0x101, 0x7, 0x80, 0x101, 0xffffffffffffffff, 0x0, 0x40000000000004, 0x8000, 0x9, 0x3, 0x65, 0x5d2, 0x9, 0x6, 0x3, 0x6, 0x1, 0x5, 0x38e, 0x993, 0x800, 0x48, 0x1ff, 0x21, 0xfffffffffffff801, 0x46b7, 0x9, 0x4, 0x1, 0x3, 0x10000, 0x10000006, 0x8, 0x5, 0xbc, 0x45, 0xff, 0xfffffffffffffffb, 0x8, 0x1000, 0x4, 0x0, 0x73e1, 0x9, 0x101, 0x5, 0x974, 0x1, 0x8, 0x82e, 0x677, 0x2f75ac38, 0x9, 0x4, 0xa, 0xe, 0x7, 0x7, 0xfffffffffffffff9, 0x3ff, 0x4, 0x40000, 0x8001, 0xb8b, 0x3, 0x9b, 0x1b, 0xc0, 0x80, 0x6, 0x8000000080000000, 0xff, 0x8, 0x80, 0xfffffffffffff801, 0xff, 0xffffffff00000001, 0x3, 0xa4c]}) syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x7}, 0x7, 0x1, 0x4, 0x0, 0x2, 'syz1\x00', "523ca936f8f61abb3d7b1d6e25ad96acfe31ce82f2f500eb00d82e396194db04", "0b6bf1b1639cd090c61155070ae569ac4a65ef2100", [{0x8, 0x9, {0x1, 0xf}}, {0x800, 0x7, {0x1, 0xb}}, {0x9, 0x18, {0x0, 0x56c}}, {0x8, 0x1, {0x3, 0x2d}}, {0x0, 0x42, {0x3, 0x401}}, {0xffa8, 0x1, {0x3}}, {0xfff8, 0x7, {0x1, 0x2}}, {0x4, 0x1, {0x0, 0x1000000}}, {0x0, 0xfff7, {0x1, 0xa}}, {0xc, 0xff, {0x1, 0x7}}, {0x1000, 0x9, {0x1, 0xd3f}}, {0x16, 0x9, {0x0, 0x99}}, {0xe45a, 0x4fd, {0x2, 0xe3c7305}}, {0x6, 0x8, {0x1, 0x4}}, {0x2, 0xc, {0x1, 0x9}}, {0x9, 0x5, {0x2, 0x7c}}, {0x1, 0x1000, {0x2, 0x3}}, {0x0, 0xfff, {0x1, 0x68}}, {0x9, 0x7, {0x0, 0x3fd}}, {0x1, 0x10, {0x0, 0x7fff}}, {0x200e, 0x40, {0x3, 0x90a}}, {0x5, 0x2, {0x2, 0x3}}, {0x9, 0x6, {0x2, 0x6}}, {0xefe7, 0x6, {0x1, 0x5}}, {0x9, 0x6, {0x3, 0x2}}, {0x40, 0x6ba5, {0x2, 0x8}}, {0xd9, 0xcf83, {0x1, 0xc}}, {0x2, 0xff7b, {0x2, 0x9953}}, {0x8000, 0xb, {0x1, 0xfd}}, {0xc, 0x2, {0x2, 0xb}}, {0x8003, 0x5, {0x1, 0x7}}, {0x1, 0x4, {0x2, 0xe141}}, {0x1000, 0x40, {0x0, 0x5}}, {0x2, 0x5, {0x0, 0x4}}, {0xb, 0x1, {0x3, 0x4}}, {0x4, 0x58, {0x1, 0x7}}, {0x6, 0xe, {0x3, 0x10001}}, {0x8, 0x6e, {0x2, 0x7fffffff}}, {0x3, 0xff, {0x2, 0x7}}, {0x400, 0x8, {0x0, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) 7m10.330315195s ago: executing program 7 (id=3195): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xfb) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x100000000000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) accept$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r4, &(0x7f0000000580)=""/44, 0x2c, 0x10000, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x81) 7m10.171016174s ago: executing program 35 (id=3195): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xfb) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x100000000000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) accept$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r4, &(0x7f0000000580)=""/44, 0x2c, 0x10000, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x81) 3m13.026168259s ago: executing program 6 (id=3935): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x10000}) r5 = inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x424) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) fallocate(r4, 0x1, 0x100000000, 0x10000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00001c0000/0x1000)=nil, 0x1000}, 0x1}) 3m12.861970316s ago: executing program 6 (id=3937): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x400) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x33000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000080)=0x7f) ioctl$I2C_TIMEOUT(r1, 0x702, 0x6) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000000c0)={0xc5, "d16048dd57ba2a83c4206c1613b8e5dc56c501b294f7a34dec1f9e6007fad0ff5c71f39657d946a024daebe831cd6043b4afdac8482077f1048af4e89b52f73357bbadf8bb59d23da4f04c223e59b5df666b468a1c2e9825cd623e8fb43b2599a0dbb1bc4a58f6dda4d6555eff55078a61c75013aadf6ae92499d3a8d45f0939fc1fb8b63f45ee887290a25d6cff8752627b666eed726c7001802ebc45605dcf7a8d87a9d9a685936e65603193a38adaf15fb65ec614d562d7dbdc82f1fb797db558149030"}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x204a84, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000200)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='veno', 0x4) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, r0, r0], 0x3) syz_usb_connect(0x5, 0x53a, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x2e, 0x1a, 0x1d, 0xff, 0x413c, 0x81b3, 0xe701, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x528, 0x3, 0x4, 0x40, 0x0, 0xff, [{{0x9, 0x4, 0xc3, 0x1, 0x1, 0x4, 0x3, 0x7a, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8172}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0xfff7, 0x81}}], [{{0x9, 0x5, 0x3, 0x0, 0x8, 0x7, 0xf9, 0x7}}]}}, {{0x9, 0x4, 0x56, 0x1, 0xe, 0xfd, 0x8, 0xa1, 0x9, [@hid_hid={0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xf43}}], [{{0x9, 0x5, 0x2, 0x8, 0x7af, 0x5, 0x8, 0x81}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x9, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x2cc9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xe6, 0x9, 0x8}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x9b, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x2, 0x4, 0x3, [@generic={0x26, 0x22, "34b6952ab359ace92d89246dc08a25251c265b86aaf2f014b21df1d00574547b37c08702"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x8}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0xe, 0x7, 0x6}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x8, 0x2, 0x6c}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x8, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x60}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xd8, 0xfc, 0xf0, [@generic={0x1c, 0xc, "c7291f491b33785f593c82672c16e1a182aec9d7f59c760b860b"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4c, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x0, 0x5, 0x0, [@generic={0xe4, 0x4, "2cb96fd462650ee6ac9f2b51bb37155e92dd791e2b8a8c84fbd3702da4de65dadcdd4cc15675d4b2acb7aef873f69aac8b2565cd647533e85da10b76a50d7a1612d69008bbcac7a4896194f2b0ca81169e8014781274abdf9b2f1471d4d3460b88fb7191841ea3e662733a677c732220a67177a1e73639dd43129763875e5ea5bfb127f9ad595591991ee5b76219ef1459e673d1bad07122b8375767423ad0a7c95566bbc2cc4139aafb3a5d07b596a8439af4d4a84237d046e0151a3517a1239520199b7abc30c5bbf321d6abb31d988a59418b70b1ca55cc0298ad5e6dbd7d397a"}, @generic={0xb7, 0x9, "e0cf794295d7c8e2089579a4f9d64431be1ed17e382c347eb247e99dd7632ae46a854b808477f4a4d12cb22df48c0544b262e77557c3b4ad5bd12cb897fe080544be625b738f8e358a35efdf99427237dcd4149a5220577e15797f816703edd2f686ad65957c11e7c521c405a376055a76633e9498a63961b389365f532ca0f424577dfab2e862b21f9a3f17640f5a27f1a2dbc1bf064b88011b7bbb2411626b9470d3d6f3025104dd71e52fb691a362293dc9355c"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x620, 0x6, 0xe}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0xf9, 0x3, 0x4, [@generic={0x13, 0x3, "db0f633a70c687dd02234e8dc39c1347d8"}]}}, {{0x9, 0x5, 0x981566d254283291, 0x18, 0x200, 0x7, 0xf5, 0xd2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x3}, @generic={0x1b, 0xf, "e188f63df1c794a0711db86f58f5ca3fd4c305ba4cee4b500f"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x1df, 0x40, 0xa, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x4}]}}]}}, {{0x9, 0x4, 0xaf, 0x4, 0x8, 0xd1, 0xb, 0xa3, 0x3, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "3754d9084b4c"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x2, 0x81}, {0x6, 0x24, 0x1a, 0x4, 0x2}, [@dmm={0x7, 0x24, 0x14, 0xd2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x1, 0xfbff, 0x7f, 0x5, 0x5}, @acm={0x4}]}], [{{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x5, 0x0, 0x5, [@generic={0x15, 0xf, "9beb112f65a21a7f65baa3b79df4da72a404ea"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x40, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x1000}]}}, {{0x9, 0x5, 0x5, 0x8, 0x3ff, 0x2, 0x3, 0x3, [@generic={0x86, 0x0, "5444ce8524a87163c450e36255a9563d49a3dc34ffec97c5c9412bd5e7f7b29154a9f4909f13cafeee9f03d19ddf23d99a699b936da0f2865ddc984e3a006b7f70629e9c690f5f00739cac3c2c1b9c529a723c3f70e9ccf309b15f3bfb76eb2b320a6a194c903f5f51d55139696c89b7fb1b193e876e2b3c214d576d78244d47dbf18bbe"}, @generic={0xc2, 0x1, "9a632c9ccb7c7ec42ba31b4effc46aa4a1e4124e5077f215c4ff7db8f5f08e981debe5252291121292e34163a6b24e3f987a09703400065be759f2d8069c7d563e61db4f46f40dd45693f2724cde18ee1dc1de6628ecba25cb3ceb9c846921fd164d41a9c1eac21aa1f21500389a5accdf963c997542a466b4024eb73bb6c1ed00a181d9aa58f758c5789562444d4721541c3ef7ae665c4b8cf4b6d69a8c47e522d64203a08b08ea80fcd50180aac789a4892e390b469b35e660ca763addbcac"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0xfc, 0x8, 0x1}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x8c, 0x2, 0x2, [@generic={0x3b, 0x30, "93d5ad362f2ca789d224cc92c004bc7d6aab884896ed8f52d24c7597492b458f3284d80297e32395d366c583812b937dafa86073c27f75546a"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x6f, 0x2, 0xe}}, {{0x9, 0x5, 0xb, 0x10, 0x1df, 0x1, 0x6, 0x9}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x5, 0x5, 0x5}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x310, 0x7, 0x0, 0x4, 0x20}, 0xb4, &(0x7f0000000840)={0x5, 0xf, 0xb4, 0x2, [@generic={0xac, 0x10, 0x1, "452f0b6c0a1746e689e362c17c5ac731e387620417d610ee2c98caf793afdd94e27d8b093ee56f20736f9d9055c52e7df1fcff336895de92b2b03a1f92329d4be98394b218e97ff31bd56a92c10f8813dbeea3b7caf68452ff80901dd08d78f4b048c034a116faa2952cc37acd2673242af6385eaf577fdd0d740d2cd983cc415d1223f8f46bd575d653e261febc35bd29ead7dac015d80372023748e72a9ec12b0a306056116acee0"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x804}}, {0xf4, &(0x7f00000009c0)=@string={0xf4, 0x3, "5037b87cb15c814fb0da7ae787d663faf9b4419def06a6068e4576b4435818ac8af7d8abb5fca7b7dec81253e6afbdb39e84a59ee2dc62827aca78233e8a81b557d5299fd1d9517825dfd133b82f80ced4949b43238d81bfcac38cf295a5ed8f9880548266a31a00170995b95ec5a69ece8236a13f29f749257cc54d6a8d95e0e69e2c072ef3d69a1874b6ac74fcb8766ad25f95d8cfe83d5f3efc155ac13bdf9afa58568580b3e7b53f87c8c3b9539fea530a4e4c29cf3db6969e99b93328e774a20a37a016cb9dc7e0794f1b166ca3a2557ccc6e6c58fae9b6c7c440b6e8bc68868221889b82e756a17c91a2d1e6fc7faa"}}]}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000b40)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) read$msr(r1, &(0x7f0000000b80)=""/48, 0x30) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x21, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x6d}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d00)='syzkaller\x00', 0xd, 0xd7, &(0x7f0000000d40)=""/215, 0x41000, 0x3c, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000e40)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e80)=[r1, r1], &(0x7f0000000ec0)=[{0x3, 0x4, 0x0, 0x4}, {0x5, 0x1, 0x2}, {0x1, 0x5, 0x6, 0x1}, {0x2, 0x1, 0x0, 0x3}, {0x0, 0x1, 0xd, 0x8}, {0x0, 0x3, 0x10, 0xa}], 0x10, 0x9}, 0x94) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001000)={0xa, 0x0, {0x6, @struct={0xffff20d4, 0x6}, 0x0, 0x5, 0x2, 0x8, 0x80, 0xd, 0x10, @struct={0x3, 0x10000}, 0x6, 0x7fff, [0x7f, 0xf97c, 0x7fffffffffffffff, 0x9, 0x4b2, 0x5e27]}, {0xc9, @usage=0x8, 0x0, 0x7, 0xffffffffffffffd9, 0x2, 0x200, 0x101, 0x42, @struct={0xe, 0x1d}, 0x8, 0x9, [0x81, 0x8001, 0x4, 0x3, 0x2, 0x6]}, {0x6, @usage=0x5, 0x0, 0x5, 0xa, 0xb, 0x5, 0x919, 0x4, @usage=0x401, 0x9, 0xb, [0xd, 0x7, 0x5, 0x9, 0x100]}, {0x0, 0x1, 0x5}}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001400)={r5, "c675ba4cb3845ad766ddfdcf99c10944"}) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000002400)=0x4) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000002440)={0xb6, 0x0, 0x200000000}) rmdir(&(0x7f00000024c0)='./file0\x00') ptrace$setregset(0x4205, 0x0, 0x3, &(0x7f0000002580)={&(0x7f0000002500)="98e6b79d2e31b5dece4d5bcac21d9d3d8ecc3d3d79ec3ef7c02f4a06443cfa839026dfd38d246544fa6f2d9ed90c77a822fcb61db8f12607c4e9dc68165e4efa0166e8baa2e6911847591348", 0x4c}) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f00000025c0)) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000002600)) open_by_handle_at(r3, &(0x7f0000002640)=@ocfs2_parent={0x18, 0x2, {{0x96b, 0x8, 0x3}, {0xa5ca, 0x0, 0xff}}}, 0x100) landlock_restrict_self(r1, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002700)={0x0, 0x0, 0x0}, &(0x7f0000002740)=0xc) r7 = getegid() r8 = getgid() setxattr$system_posix_acl(&(0x7f0000002680)='./file0\x00', &(0x7f00000026c0)='system.posix_acl_access\x00', &(0x7f00000029c0)={{}, {0x1, 0x6}, [], {0x4, 0x3}, [{0x8, 0x0, r6}, {0x8, 0x3, r7}, {0x8, 0xa, r8}, {0x8, 0x5}, {0x8, 0x3}, {0x8, 0x5}], {0x10, 0x3}, {0x20, 0x3}}, 0x54, 0x4) 3m9.736820497s ago: executing program 6 (id=3951): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) listen(0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xe000202b}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000906010100000000000000000200ffff08000940000000390900020073797a31000000000500010007f8ff0014000880100007800c00018008000140e0000002"], 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x4042) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000280)={0x3, 0x3c76, 0x3e06, 0x5a55, 0x8, 0x2}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000003c0)={0x4, 0xc14, 0x5, 0x30}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3m8.29712512s ago: executing program 6 (id=3954): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a802000000000000014000200fc0000000000000000000000000000041400010020010000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f0000000080)={0x9, 0x2d0c, 0xffffffffffffff7f, 0x1000, 0x0, 0xf5, 0x3d, 0xb08}, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040)=0x9, 0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(r3, 0x5433, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r4, 0x13108}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper}) lseek(r0, 0x10000000005, 0x0) 3m8.155895229s ago: executing program 6 (id=3955): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000440)=0x10) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ff2000dd40000000000000730a00fe000000001f04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e04"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4000, r0}, 0x18) 3m7.224817797s ago: executing program 6 (id=3958): r0 = open(&(0x7f0000000540)='./cgroup\x00', 0x2, 0xa5f27971a06ef75b) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$key(0xf, 0x3, 0x2) fcntl$lock(r0, 0x26, &(0x7f00000006c0)={0x1, 0x4, 0x1, 0xfffb}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x2}, 0x94) io_setup(0x8, &(0x7f00000004c0)=0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x40003, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r6, 0x5, &(0x7f0000000680)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xe02, 0xffffffffffffffff, &(0x7f0000000340)="59df113f374d53c7a4eb6e4edafcbe4731a58674206ff568e25b741ddaa4d552506326240644d6dbbb3f73ceafdd65b7d0433f0aba4b6c206a3c8b66f3cff243ad599259d9314f2b43dc9315e6396fbeffa4", 0x52, 0xffffffffffffffff, 0x0, 0x3, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x1, r1, &(0x7f0000001480)="b72c50e7ee9a3073873a0f3148b30feb4e9cc75795a8bd5342ce6f89af23797128c1a1cd061e448f0aca63d2161e795fc58d180df8ae920cf91963245627da4ed4bafce8207c5fad07c045cdaa7e055c3563d883e32af37dfe90081cf3f27377ad671fef6b56b701605a914dcc030798909ab6eadb3a2a07ae487f199c42a55d7de6d15ea41ce4fda1d3b7fab707353447d1d33dce567e9e9b80a74ea6820e1967235ac13072bdfb263cf6adc2d3461b860a230680908f09ea7012eff986915ac2a7678ea085d81d0894a324cbadbad2bca3e8d61c369bfc1d0b78b102986b2fe1a2c8cda6d7605718dc5ae7523386934ce414422b4c663b95199f0ff6985f1e2be403dbe812e111b128f1a5dad41348d4818aea82c23c5c7f817eedb032ffd4b57aba55f181a8f7101c9208d1d7f68fefa882d6c0307371ee00b34d99d3aa9b9e52e28ed978016608c33b4e1a587c486fe8bdfa3cf1bdcd7c6860bf369e8640820c2b5559a15025643f7829fd651a033e76016c87e5d4ea62ed8928195e0c65856a840c524721f8805a8b7946ba5e9ec889ef689c77fb221c5ea5b808748295a254e6cd277dcda660e3004d264c69f30542d0840b0f519888f33d62450c5012072b7599816459ffe03d1f71fb57d8ed01d39c6888b61ab0fbcdbed8bee495eb4525a242297615ad3c5559cb79a684d97ebb9e8615d77ce7cc384c4f4f348efbb12789ea957bb08c609c5d76ebb1d8d2ecdac16992b855211c6b735ec544119eaec7507d2e2f1bcfb659b2cd18f30e93e99bb32914f0251884d1e0e3a860ae89ecfe5bcffb2cf89f0577fc9bddbf3ad6a11c751fee99113508e21dfa67e14a3375bfd0ab956d6445088c99a872468ad5dd4964c0fd16f592f3d4c8284c76d742c5df43078bcb75dfb4c5c09f4793bdd1f29e787cbae5531b12e37fe2a020083358c47210e4fc2402e3622c50370ed0b7f97bd8c9f81afacc3669fff33f99c3165a25313bdbc311b2f21a410a664da5e1adbd1551d3ac6b07485f56bcb3a0b556d4d33141856cb4bb84b2c776e0f319ddbc19637099a814b12ee3a3ff4e87bfecfcd87dcff9d2d3a323c2e60f23964f1506d42d097a25859afd738b57fc7d0c9b79536962ef6ad65db6bf903e0b8017cd42979e6db4ca2b39da2e0ab5668323ef36b2695a0175483ef5dfb832162ff4fb6e0141861c61688db9a586f2333ddd65bba5f85d31d0abc25dfa88f8cf7b291fb5ffa9526dd1cae3c786794adb721a3f50979f5541a50e05ae85dc9aff4305c7eb47b50338fe3d63df68135a72f22e5c24d52c51f5bc4b5cde4e32993a1c69781b15bfaf02a2caa16b432163efbd4e53c324d0316b48405f0baf92fd595a9d018d5c92b920b0ad739f7c425a6872b32b4c32ca6899f4a5ec61d4d99d76123e7ddfc43bcdb8808fd11a2a6bd0ea6289bc31a3e68bed674e75952e31c94bb77ac52ecc5d88df4b6a5b9761252c1b74a856407c6daf6ed32565d81ce487aed46b0d6e16bcf119091bd12b75984e23a16c5cf3e4d9c8e3c977688e33fa835beb5da2abd4397e317d5c1477412f0867a52aa522f7ebd702ccedc82a161b72a40c0fca3f7d0e8a1687f1c82ed0594d3ce01ad8e6057dd88189a0803d7a53923ee90504db03c1b34666bd93d68f6985faadccf2c64616b030319e42dbdc03f119adc9cf7999f41beb07f1543efc49997a8550de37ebc0541c66e8d22d05ec93a97a932b9d27e4cd4860db3333d3d7df73309d62e0d0641d85958f6139601b8aed2644a6c9c4af844dec0fb8d0e0b679bd7f45974251d420cadc837233467ba2debb198237096cdfa5e83385de952171630ecdd5ea6008384cf0fd5c76d86b8b79c155561456cd405cdada6dc52ed89827642b3fe19f57415dcec49f84f3eb78413d7e297557557370f87ba54b3133480a1bd75a7a29a4335005207fd75d50529eb7ba31794f0166fc8767eb3bb56d17efb0a7881da8e0fdf5ece4a887bf0f65ce54ae5c6f857331a2adc27aaf472fba1661d93bb7445ec2288ea5b2728fc180b4efa83af308cd331298bf58e861cf372ef612847471f726ec97ca4e4fc7f51814a4a405dee03d2e25e64ab058a64fc805c4b9e3c23c7d257357658ab9106dd72279f888a996d49c1cc2f96fca4cba8e7c1b83687bf616a4409948ee060279f19627f761ac0100d6c3947defb654a96b602d0fdda7073bd827e5473e3570927bcb00105a327c1a28e9f9639dd8b832d4fe2deda189debf663501c63c419ecb4fab66e10b031c6d0fc2ed9fdfcaefc4d6dacbf9b0cc5ce243dabf6d10d47cfb7fff85e00627d8b2837eba61b8e0fc896cc6470efbade7ff6f3922ed3f07203d1cec5bbd159fda9af90710bd101d1f0d33063bb0a241494d57fb191550aea9ca8aa573038510f1c28f4085a31cf4a2972926df94ca32dfdfd0000061e96e03d473433dc0510183fc0dadde5ff81fa81532f92e7d8b0b5bb8bfb7c666872aac398db10ac994e784f0c38c30eb3c1923956884ee6bbecfc04704cdbb05d44bce3dd33b46ebfc02701201ab32ee87eb4f9cf476e6052e4c6d551d3dac66aaf4a3e853e5f458ac058bd5843803197a120d5006ac6962f12b969a9fbe785b9cfef4431ffa42d3b76538630c5344ba961cf81889cef1fd235dd83d37eb4660d3254592a392f44d30ba393b882b0e444ca5f5ed5e8ecd5bcb662f11fe737c17d7904c88032e1b9e23517a275b4a148fb26ee0b96480179a9eb5f61cf7c7cbb0420308984f70856426f997bdbe4f76bf6182e1f2d5a67ccd7eafb424139561047a7a45f436e0e0100e1a3345dc5767eb9d9fdc1bc423ebc6defae180f1f99286e7b82f0de386a88bed107e8d5a6d794016cf59674fee8b4681d94546195132e35ecbdba349572d295fc69df3599d8c13ed361b056cca4eca606ef996fe9975813d4ee068b1981bece40f8a9c7b03875cbf51436bed179ed71be982b148dc9d8dd28a7fe4727fa4f10c870032b662b8e825e8b883c03b7dab4fad7cdca4a69c33c09995e9aeb0c552aa255dae00cc69351728cfb0f2d0a1d1f438f611636e734d79bd3871b95f9e288d478058faf7d619f090c32086301bbc270210e15d5d1051d1513a2f64cb62239ebb2305dee567ab7b32c7de731a69353183dcdb987dbd8793de7e60f15b8782f5576137a3cef619e57704b1ba7deedbbdf51aa37ffe45a6f3bddcf9081fe10065b994db8702b7a2a307c562131f374bcd375ed6887482caefc09ae40cc3f21156729cd5879ef44ed8006304c929ecf85b3ea66df359fe7682f10b8e49aa8aa0cbe36b0644ddf86ea0e5641262e016a6f73fc84953416a0f866c8bd01df8e033bf9fda453e79c7d9a6f51fe86861eb63c1cccf040072678c34f3268cbf06277aadbfc07e88d694241e10358a6095b6f49f187b7bebad331429bb102295e7284ed7800e7a496687ed5f860d3e1d22c18f5323e2201673537318e4d3e31ac903d2225f651d34a117a76dca69c3fe56c8868076f95bf125453ad0c0c46a7067689aef6abf6406a6c2092d89ccdceebfb752e924685fab1fe5cda932ff07dfd61b112d381d75ed948ef714d377407a20ba80b65cd58ca353b3faa6ac9f15d399835e4565f41c25ff34e44dd0b26f8a889171c00b97af6ae8a36fc91df49ae5aa39fa138f8483c55b459b155f0ccfb13470699aad645d00d663df26d0f347980b6b03b776cd23b6cd8280dfe0d3dbbfa93e610c05e6f397705d25a58199693f968a4a2a5ec029a28d8655c34ff992560dd087e9a756be17fe57d173ff79e7237b819b0329b4f67e7309f2666c27fd3934bf443759315656e7f45a78df6b7fbdc114cd1753569982ce5b795cd067931f987552809e3b09c4d1d5d84103b41874c4a873abdd25f9275b5a5d63a071b73a12395dd3e57c22d279f33bc665fa853b8de7449a6a7c63578139d65d6d528637fb9342133e197bd3fee560494e03dc0cdc43583bd961b4720afe2e2c6d8a12303cceb4e121408d9ae287c7c2cb31a4cb120b86c921423a7d600189e6cdcfaf17d385f7f02d3303810a013859f15814ee9235d6222f88eb5fb77807e6ec330767d056393b154c55973998714079c4df9eb2bb95d4a8db6d928bbe3525098663932c8ee689d0cbb483a0030847cedd433ce1ad9c6a54ae9a9b0f6df8b7d712dbc7392278dbcc730838e8838f5ff13d44f61a687ee3119f6fd01ec09a5098c7d4e0a824d59ae758570bea5b8f6c825d279946122312401dc4e058f5f4e8778d14ad2bb8488b265910a65a6f841873c2079e636011dee160c5895a6753c2d3a318a8fd1d3b687c8a93d7aaf551ba30506d503bcdb6a1795b4e1ceaa6532ab3120232d562c3cf343453d9b745cfeff1d8fb7a98d7bd1fa08646335cebb4508fa820638264f4ab3181ed5a632eabbbe6d4ae8633e5b32f0ea321981002160cd032d234a912ec33f7bc2b3f13b11eb3860206a0ea2e9b9e30327255cb1de642f2e94f6830237ba06b58455536fb88521aa36b0dcd26a1760d53900fc83c1867539e8f77ad4b4849ceb1ae70ffef94c8aa1fabe7333dd9efa8ef2ad5bb68626f32ccfcee357b7484ca0536e02d43661cea02076a6bf24f345a10fbe491401fde6615b4346acdfcca68ff34c2372a68f3625eb0902fc6bc72401dd784b04dd5f13f71fc3b5ea7986a0f38b7ad7db4e0322d5361d9bdcb348fbe150d623223512222c46f05c58e4e55dd83201ff2c3e756dfcc87c6db480ea1f42e5cae3415a86f60a8130eb4f6aaa39bc359c02798b2194b15e4ad4ac7fe5f2795d96f943a8b180e6c0caa1976f9f14989761f7d714b6510ac3eaf77014ec694ab2e363e42de8c3e9932426e9f0fbddebdcd55dc93e0b27396b46174b7ed9de3a6d6a657c0e15522caba3f93c417cfa911d59a1000950ac0688d21ad846e78d2ba1166e906d680fbb1867b3d6c78ef3cfe87646e2da9dc34126baea9ca4f1d5f3898c29f62696fa34d9533f9527b1fff0e939ce89a87eebca95196e207385078039a442f2fe23f063e25eab3a7a189e54856bf073facc72e846716a4dc8baa0a7f08d56e180578fa013309fe93661ce81621f8bdc290d480495eb518e8a08e72a1637915e6ac5ee4f479b37f23d434fa05d5b71eb92e1b326847776ec5d48c03614cb3287b5b85bd63bde2cb862f7be9ba6c8365e6f4bc687cbc4778d018724d98a661c6d09cff7812de13123bd183fae885e67c0d31cf653a13cb1a2bbfb04325f12a4190e46f5b94fa36c669621f1fd1013ad5027cc829d150ee2546f42672caa9e69d270d663c939d36349ab76634fefa251808b95c83015271a9d90ba822ae535382546f9cc5837b9bd2256abb76a58ecfbd27b583130e5a625a9bc88973901e5cd80102db8c4b21ffe22b50070226739a34c3f88c5eb12559278d974978101e11286aafdf932a739c92196156b040603518d434ef7a026c9ffc4dc7c02ce3fbb338dda1f7e9347ec98314b2098da6649ba37dda0ebd9585a8793c951452d1898504f4aa6d8c2ea4a61e0730e4c5ba0eca6808ad89d81e3d7bae0015ee91f71c9fa7b6091781d78282d6c625f5f66db79924ae277bcbffd9b95c20dcc5b25797b9fb247d92787948c7c1c4ce5b739ce519c2f3aa2f84404244fdc5c88ab4f8409574611a8a35367b6a641e383eb0e8ea2757e88c1d137b42153783604c1162343867f694f7f6b544c010b996e966f00430e66206e33279e5ef53bfc34d614c4ce58f9f7cd74ecd4eed27726a71", 0x1000, 0xca8, 0x0, 0x1, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x3f, r2, &(0x7f00000003c0)="44d83c103565f1786dc7cfc07fe34dc0cb5da03bcb60d0bb652b0c28eb93ca85bde04ce37f38501bc57b5ca89191c5b1bbd8f2f4454882aab13a64cd8f7ce26d80a88b0c273c0e141cfe04b2efda62388a8960df8d9a6a7654979759e6cd7fd00c0b6f45b258dd3055d6ca880eb5722940affac0f0b78c9551d2bcbf500e941d7967", 0x82, 0x3, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, &(0x7f0000000600)="98c5fa3209805eecd069da0f571a45c0cbd261772cb0ab58b5dee31e638721e70c68a6a89ebc73331c98dc3c442fc8566ad44855e24fa1693bb6d721bc38a5655a67c7f590", 0x45, 0x2, 0x0, 0x2, r7}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r8 = syz_open_dev$vim2m(&(0x7f0000000480), 0x101, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000000)={0xf0f044, 0x6c}) ppoll(&(0x7f0000000080)=[{r8, 0x349}], 0x1, 0x0, 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="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", 0x23c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2m51.994481495s ago: executing program 36 (id=3958): r0 = open(&(0x7f0000000540)='./cgroup\x00', 0x2, 0xa5f27971a06ef75b) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$key(0xf, 0x3, 0x2) fcntl$lock(r0, 0x26, &(0x7f00000006c0)={0x1, 0x4, 0x1, 0xfffb}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x2}, 0x94) io_setup(0x8, &(0x7f00000004c0)=0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x40003, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r6, 0x5, &(0x7f0000000680)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xe02, 0xffffffffffffffff, &(0x7f0000000340)="59df113f374d53c7a4eb6e4edafcbe4731a58674206ff568e25b741ddaa4d552506326240644d6dbbb3f73ceafdd65b7d0433f0aba4b6c206a3c8b66f3cff243ad599259d9314f2b43dc9315e6396fbeffa4", 0x52, 0xffffffffffffffff, 0x0, 0x3, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x1, r1, &(0x7f0000001480)="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", 0x1000, 0xca8, 0x0, 0x1, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x3f, r2, &(0x7f00000003c0)="44d83c103565f1786dc7cfc07fe34dc0cb5da03bcb60d0bb652b0c28eb93ca85bde04ce37f38501bc57b5ca89191c5b1bbd8f2f4454882aab13a64cd8f7ce26d80a88b0c273c0e141cfe04b2efda62388a8960df8d9a6a7654979759e6cd7fd00c0b6f45b258dd3055d6ca880eb5722940affac0f0b78c9551d2bcbf500e941d7967", 0x82, 0x3, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, &(0x7f0000000600)="98c5fa3209805eecd069da0f571a45c0cbd261772cb0ab58b5dee31e638721e70c68a6a89ebc73331c98dc3c442fc8566ad44855e24fa1693bb6d721bc38a5655a67c7f590", 0x45, 0x2, 0x0, 0x2, r7}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r8 = syz_open_dev$vim2m(&(0x7f0000000480), 0x101, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000000)={0xf0f044, 0x6c}) ppoll(&(0x7f0000000080)=[{r8, 0x349}], 0x1, 0x0, 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="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", 0x23c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 5.88005008s ago: executing program 8 (id=4618): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x8040) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x280, 0xa, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x80000003, '\x00', @ptr=0xc621}}) 5.797939167s ago: executing program 8 (id=4619): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x6f}]}}]}, 0x3c}, 0x1, 0x7000000, 0x0, 0x15181b09c6bdc4c6}, 0x20008004) 5.769220116s ago: executing program 8 (id=4620): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x0, @private2, 0x800}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x8, 0x2, 0x0, 0x0, 0x2}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x10000000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) 5.768555596s ago: executing program 4 (id=4621): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.430800622s ago: executing program 8 (id=4622): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_setup(0xc, &(0x7f0000000180)=0x0) read$FUSE(r0, &(0x7f0000003140)={0x2020, 0x0, 0x0}, 0x2020) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$FUSE_INTERRUPT(r0, &(0x7f0000000140)={0x10, 0x0, r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x60881, 0x0) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c92012000ee2"], 0x17) syz_open_dev$I2C(0x0, 0x1, 0x2603) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r6, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, r5, 0x0, 0x0, 0x2, 0x0, 0x4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x4, r5, 0x0, 0x0, 0x6, 0x0, 0x2}]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r3, r9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r9, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYBLOB="020001"], 0x9) 5.412417936s ago: executing program 4 (id=4624): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRES32=r0], 0xb8}}, 0x20040014) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x2}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 5.064245577s ago: executing program 4 (id=4627): sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="68000000d4c7d601b45a08a303f3a91e74929697a9142d250f58ecd2c4a38918fa6cad28d2871e2d8db136c1a9d2362f5c7b87fae5cf32087e6d3873a022ed6695a048075260875cbc7b98c2d402d6", @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf25010000000000000008410000004c00180000000575647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x20000090) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x5, 0x0, 0xb49, 0x9, 0xdbc8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000680)={0xa, 0x4e24, 0xfffffffe, @mcast2, 0x20002}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa1", 0x467, 0x6000000000000000, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) unshare(0x62040200) 4.874206073s ago: executing program 1 (id=4628): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000b7d32e7d160012000a00ff120048035c3b61c1d67f6f94007134cf0239f2b8a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2", 0xd8}], 0x1}, 0x894) 4.689094717s ago: executing program 1 (id=4629): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x2) setsockopt$inet_tcp_int(r1, 0x6, 0x4acb9277b59ffbc1, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x400000009) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r4, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ecm(0x0, 0x68, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x4, {{0xb, 0x24, 0x6, 0x0, 0x0, "7a18dc13c193"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7fd}, [@mdlm_detail={0x4, 0x24, 0x13, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x5, 0xfe, 0x4, 0x5, 0x3}, @obex={0x5, 0x24, 0x15, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) 4.449374529s ago: executing program 9 (id=4630): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 4.406811027s ago: executing program 9 (id=4631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r2, 0xe503, 0x0) capget(&(0x7f0000000000)={0x0, 0xffffffffffffffff}, &(0x7f0000000100)={0xfffffffb, 0x7fff, 0x4, 0xe66, 0x0, 0x6f1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x1000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x404) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r7, 0x25, 0x0, @void}, 0x10) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x1}}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x2, 0x4f, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="a3996a7ad42d396e33be651ed1b4f6a5a5dbf782039ba2f21c66a5c00d6805fca04ff163546860d252e4e915b4929632c17c31d992b138db5d221152cbcea6a70bf67948cd07d71cc36190cd8a8d163badaa26229203c5e3e01674fab0f6fd62d094560315c900d4d123d76a0853586d8147003564479ccf2f6c984bf75542ab42328b41d5800936fe5889534447fcc14573675dd225359d05d878a2c6d241eeee13fe0c8693c62489958790920e3365d1d05dc011cc7f636f49cd9229b6cc3ddbbb72357efd7d73453265c1a10088d0f7758fc226a87a59b8a11dcf366a545331c458af611c", 0xe6}, {&(0x7f0000000400)="c9257bd02fc7d79e7571d3dde89e5269583c6806abbbb8b72ade268d937ff9c4fd5c241d573a5de4ed32733716872ed05c3049de19ce04a8aacd51c381fc723927e3f53ed015b8c31ce3d1915a63b89e75282f28afc3ff6797dab9c7e86a6356f2687287fc7c93528779f025a711259ddc35a40507606a3aec45c2e6221b64a687fd917caa", 0x85}], 0x2) sendmsg$inet(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000340)="b006c98a6d1dd7297d0e5adc46467361e786303959f43f87ef9e1e811eed8a5a6e7e0c9b07df0ac6486131c8d1c8c3c6e4c5ab7b4fc39cf03bef9e43c4ddc79e6218b2854e35c10de6e705c15da74daebabe946c9bcce17d56d67c0929ffb08ce74d59f656e0055f7c940b93b9f53b7896598ac6134848fd652731a6c7ca9a044af89c5023a71e5aa8c6586c4e05e4bc97778f345a80", 0x96}, {0x0}, {&(0x7f0000000280)="25c38582bb867e3e4976f2dbfbe516118523ee5d9539ebd0f87be8072b57c3860aade06dd40aad3536243937f662407cb02d16c958a414afed15f204", 0x3c}], 0x3}, 0x40000) ioctl$MON_IOCG_STATS(r1, 0xc0109207, &(0x7f0000000340)) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4, 0x0, 0xfb, 0x8}, {0xd967, 0x7, 0xfb, 0x9}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 4.23937797s ago: executing program 0 (id=4632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x7000000) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) 3.968612198s ago: executing program 0 (id=4633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x4800}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x20000000000fff}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}, 0x1, 0x0, 0x0, 0x4020}, 0x0) 3.93166936s ago: executing program 0 (id=4634): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.764771707s ago: executing program 0 (id=4635): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea8000000000010902"], 0x0) openat$qrtrtun(0xffffff9c, &(0x7f0000000080), 0x208000) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.612158038s ago: executing program 4 (id=4636): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x8, 0x12) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000000)) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x114a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000040)=0xfffffffb) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi2\x00', 0xc01, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) syz_emit_ethernet(0x66, &(0x7f0000000f80)=ANY=[@ANYBLOB="ffe6ffffffff6487a2bed3d608004500005800000000006c907800000000000000000420880b0000fffc00000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x7, 0x8, @vifc_lcl_addr=@local, @private=0xa010102}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 3.464225762s ago: executing program 9 (id=4637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x2, 0xdf1b, 0x28, @remote, @loopback, 0x8000, 0x8, 0x0, 0x7f}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa}, @generic={0x8, 0x5, 0xe, 0x9, 0x74e}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0xb1, &(0x7f0000000380)=""/177, 0x40f00, 0x5c, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xd, 0x7fff, 0x8001}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 3.462986742s ago: executing program 9 (id=4638): socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x9, 0x80, 0x0, 0x40000, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) getrlimit(0x7, &(0x7f00000010c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$read(0x2, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x23) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x7000000) fgetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00', &(0x7f000001b000)=""/4096, 0x1000) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 2.945506897s ago: executing program 9 (id=4639): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYRES32=r5], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.74483107s ago: executing program 4 (id=4640): r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), 0x4) r1 = getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000700000409000100737909000000000000000000090a010400000000000000000700000308000a4000000000090002000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100000000000000820000000033"], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'pim6reg\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(r1, 0xe, &(0x7f0000000140)={0xa00, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008de1000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4000880) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}}, 0x4000) 1.991291344s ago: executing program 1 (id=4641): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x5bdd, &(0x7f0000000280)={0x0, 0x5f41, 0x400}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet_icmp(0x2, 0x2, 0x1) socket$can_raw(0x1d, 0x3, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000480)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 1.880703448s ago: executing program 8 (id=4642): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x44081, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x3bf6, 0xb, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f00000000c0)) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) timer_create(0x3, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000002, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) socket$inet(0x2, 0x1, 0x0) 1.815993943s ago: executing program 4 (id=4643): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$clear(0x7, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x40086603, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_usb_connect(0x3, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2405"], 0x0) 1.792193362s ago: executing program 0 (id=4644): socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x9, 0x80, 0x0, 0x40000, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) getrlimit(0x7, &(0x7f00000010c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xffffffffffffffff) keyctl$read(0x2, r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x23) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x7000000) fgetxattr(r2, &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00', &(0x7f000001b000)=""/4096, 0x1000) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.740679907s ago: executing program 1 (id=4645): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$KVM_RUN(r2, 0xae80, 0x0) 941.916825ms ago: executing program 1 (id=4646): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000100)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) ptrace(0x8, r2) ptrace(0x4207, r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x80, 0x800006, 0x39, @dev={0x12, 0x80, '\x00', 0xfe}, @mcast2={0xff, 0x3}, 0x7, 0xba08}}) 889.068952ms ago: executing program 0 (id=4647): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1000000000000000, &(0x7f0000000040)}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)={0x0, 0x31}, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') syz_usb_control_io$sierra_net(r1, &(0x7f00000000c0)={0x14, &(0x7f00000002c0)={0x40, 0x31, 0xc1, {0xc1, 0x5, "8fb524ee27bb4d9d3a5a78633638adad3b9fb654aa6012ab979d2c239bc08c3073b10a38058545a7d864494262faaf84029c24c95abd6b88fc74e7963a1dcf9ec2cb3692ee752d8be32e10c07aa85fc7bdea1c3b4410d6c643bf95e3c9e8803616ed8e37b020802fec5d31476e3b13f137d783e397512d7d394ebce1b6757c857d48bf378395bf0e2be7d9f8ae8a21cff14a3c2f2411bae94d318219939b348e0003019cc2b240f19660d265379beea617383f923a5ffdb684bb810daa6983"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000100)={0x40, 0x13, 0x21, "edaf4a5c42369905c1b631f5e3a0edf86c9390e98407d6eced2f207de153d5a30d"}, &(0x7f0000000440)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000180)={0x21, 0x0, 0x4, "a3e0d56a"}}) 793.792577ms ago: executing program 9 (id=4648): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sg(&(0x7f00000002c0), 0x2, 0x80800) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x0, {0x0, r3}}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000540)="fd0bcb4a016fa6d149fc2c80fe43fd5ece48471bced24c3851cbe5f6f5ddd94c8b6cc6629d68771eac005ab253770d2b6cee0eaca2dc5f477dd7bf5be05c25c82308bfe69916b8f4264cd4b9c4b83579b6fa031324070489a4a1cf3d13a3f96c07c9cb5180c238f54326a509f6d1b5bb5958ee0f1c671882d64dbd8ceb12bdff643e5183b890f2f05b9b17578e7e08e84df0334fab8b3f1a3d22557823447f8f8d46c2034d885bb014db5b6581823c8cac2a8ca4071ace7f3e5166930ad23df4669d4333ffe364b435e7531ad0c15a6831d673fd2014926eb9730fb265e6c301af6765b38719044bda8a56733a231c", 0xef}], 0x1, 0x10, 0x5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='ts=rdma,port=0x0000000000004e23,\x00\x00\x00\x00']) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0) 696.762228ms ago: executing program 1 (id=4649): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x8082801, 0x5fa, 0x9, 0x1ff, 0x0, [{0x4d, 0xef, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0x1, 0x7f, 0x9, '\x00', 0x5}, {0x80, 0x3, 0x8}, {0xb, 0x50, 0x7f, '\x00', 0x5c}, {0x0, 0x0, 0x80, '\x00', 0x8}, {0x6, 0x9, 0x2, '\x00', 0xa}, {0xd, 0x2, 0xb, '\x00', 0x45}, {0xa, 0x89, 0x0, '\x00', 0xff}, {0x7, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x5, '\x00', 0x1}, {0xc, 0x4, 0x19}, {0x3, 0x86, 0xc, '\x00', 0xf9}, {0x5, 0x5}, {0x4, 0x4, 0x83, '\x00', 0x7}, {0xb, 0xff, 0x7, '\x00', 0x7}, {0x9e, 0x7, 0xd1, '\x00', 0x2}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x60, 0xa, '\x00', 0x3}, {0x7, 0x1, 0x8, '\x00', 0x4}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x6, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0xca, 0xdf, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}}, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x4e, 0x80, 0x34, 0x3, 0xed, 0x81, 0x6, 0x2, 0x3, 0x1d, 0x7, 0x4, 0xbe, 0xff, 0xe, 0x5}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="f243050000008000001f00850800444afbfad1436c77bd0f9bcf95a2060d1c2f84e750b98c21cdd26457dc2e52cca0c891fc1b11a298516a21d15d51c6905923306b50629c0f91a96a360bf03f089221ff8491bdb17dbc109e3b28c06f9a6d11e93587fc0e6c81da2d3e9657cc97a172693e45338d022c563f4d78a67ed5e989fe5983727dd631e200bb5f6c47ee", 0x8e, 0x0, &(0x7f0000000300)={0x11, 0x4, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 0s ago: executing program 8 (id=4650): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001e0002002abd7000fddbdf25000000000ea0e1c5e472dc2abc7b03dc82afbf190d3c771e44a474dd80fc32c47d2f9fff5cca984bae32fe0824a979e02f1b3c11ee8a3522eabebf3e3ff52201848bd1bc2370f9adb4"], 0x14}, 0x1, 0x0, 0x0, 0xc081}, 0x44) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2b, 0x4, 0xe, 0x0, 0x40, @empty, @empty, 0x40, 0x7800, 0x6b}}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x1000000000000, 0x512, 0x9, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x80, 0xffc99a3b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007f, 0x0, 0x0, 0x0, 0x60d2, 0x0, 0x5, 0x1, 0x2}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES8, @ANYRES16=r2, @ANYRES16=r7], 0x0) kernel console output (not intermixed with test programs): et permissive=1 [ 1271.403116][T19698] apple 0003:05AC:0320.0031: probe with driver apple failed with error -22 [ 1271.463567][T21713] ip6_tunnel: non-ECT from fc02:0000:0000:0800:0000:0000:0000:0000 with DS=0x6 [ 1272.512176][T19698] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1272.669789][T19698] usb 5-1: Using ep0 maxpacket: 8 [ 1272.679355][T19698] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1272.689117][T19698] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1272.706669][T19698] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1272.724887][T19698] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1272.796239][T19698] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1272.834872][T19698] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1272.850858][T19698] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1272.886841][T19698] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1272.965158][T21732] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1273.051545][T19698] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1273.080322][T19698] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1273.464701][T19698] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1273.472365][T19698] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1273.484558][T19698] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1273.529961][T15099] usb 2-1: USB disconnect, device number 79 [ 1273.547567][T19698] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1273.599656][T19698] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1273.655201][T19698] usb 5-1: string descriptor 0 read error: -22 [ 1273.811630][T19698] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1273.821542][T19698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.834692][T19698] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1274.641063][T21727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.649903][T21727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.679393][T21727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3965'. [ 1274.733385][T21727] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3965'. [ 1274.789700][T21745] netlink: 'syz.8.3969': attribute type 1 has an invalid length. [ 1274.797510][T21745] netlink: 480 bytes leftover after parsing attributes in process `syz.8.3969'. [ 1274.930429][T21745] loop5: detected capacity change from 0 to 7 [ 1275.041723][T21745] Dev loop5: unable to read RDB block 7 [ 1275.062508][T21745] loop5: unable to read partition table [ 1275.093754][T21745] loop5: partition table beyond EOD, truncated [ 1275.101853][T21745] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1275.940940][ T30] audit: type=1400 audit(1768429667.761:3157): avc: denied { setopt } for pid=21743 comm="syz.8.3969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1276.140421][ T30] audit: type=1800 audit(1768429667.861:3158): pid=21751 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.3970" name="/newroot/172/bus" dev="tmpfs" ino=951 res=0 errno=0 [ 1279.149957][T15099] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1279.158069][ T9] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1279.322386][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1279.335460][T15099] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1279.360985][T19990] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1279.369624][ T5822] Bluetooth: hci6: command 0xfc11 tx timeout [ 1279.391107][T20013] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1279.528538][ T9] usb 2-1: string descriptor 0 read error: -71 [ 1279.542393][T15099] usb 1-1: string descriptor 0 read error: -71 [ 1279.552559][T15099] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1279.562559][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1279.572757][T15099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1279.582795][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1279.604627][T15099] usb 1-1: can't set config #1, error -71 [ 1279.636506][ T9] usb 2-1: can't set config #1, error -71 [ 1279.643164][ T89] usb 5-1: USB disconnect, device number 82 [ 1279.653059][T15099] usb 1-1: USB disconnect, device number 112 [ 1279.659234][ T9] usb 2-1: USB disconnect, device number 80 [ 1280.216891][T21777] fuse: Unknown parameter '0xffffffffffffffffw' [ 1280.903062][ T30] audit: type=1804 audit(1768429672.751:3159): pid=21780 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3977" name="/newroot/165/file0" dev="tmpfs" ino=905 res=1 errno=0 [ 1281.092406][ T30] audit: type=1400 audit(1768429672.961:3160): avc: denied { listen } for pid=21766 comm="syz.8.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1281.247949][ T30] audit: type=1400 audit(1768429673.111:3161): avc: denied { read } for pid=21782 comm="syz.4.3979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1281.279908][ T89] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1281.529875][ T89] usb 2-1: Using ep0 maxpacket: 32 [ 1281.540112][ T89] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1281.566593][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.590282][ T89] usb 2-1: config 0 descriptor?? [ 1281.614116][ T89] usb 2-1: selecting invalid altsetting 3 [ 1281.631230][ T89] comedi comedi5: could not set alternate setting 3 in high speed [ 1281.680210][ T89] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1281.703181][ T89] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1283.170543][ T9] usb 2-1: USB disconnect, device number 81 [ 1283.959935][ T30] audit: type=1804 audit(1768429675.821:3162): pid=21799 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3984" name="/newroot/247/file0" dev="tmpfs" ino=1336 res=1 errno=0 [ 1284.287486][T21806] virtio-fs: tag not found [ 1284.294523][T21806] overlay: ./file0 is not a directory [ 1285.279872][T21816] fuse: Unknown parameter '0xffffffffffffffff…' [ 1285.449803][ T30] audit: type=1800 audit(1768429677.041:3163): pid=21812 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.8.3982" name="/newroot/151/bus" dev="tmpfs" ino=862 res=0 errno=0 [ 1285.496735][T21813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3987'. [ 1285.640431][T21823] i2c i2c-0: Invalid block write size 34 [ 1285.701962][T21825] IPVS: set_ctl: invalid protocol: 0 100.1.0.255:20000 [ 1285.708957][ T9] IPVS: starting estimator thread 0... [ 1285.822792][T21826] IPVS: using max 41 ests per chain, 98400 per kthread [ 1285.889841][ T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1285.944679][T20013] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1285.959929][T20013] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1285.969407][T20013] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1285.981957][T20013] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1285.989505][T20013] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1286.034477][ T30] audit: type=1400 audit(1768429677.901:3164): avc: denied { mounton } for pid=21830 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1286.076344][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1286.100904][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1286.120472][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1286.140904][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.180814][ T9] usb 5-1: config 0 descriptor?? [ 1286.867895][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1287.309241][T21830] lo speed is unknown, defaulting to 1000 [ 1287.543392][T21842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3992'. [ 1287.724596][T21830] chnl_net:caif_netlink_parms(): no params data found [ 1287.889203][T21830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.912537][T21830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.033109][T21830] bridge_slave_0: entered allmulticast mode [ 1288.041841][T21830] bridge_slave_0: entered promiscuous mode [ 1288.058944][T21830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.079912][T20013] Bluetooth: hci3: command tx timeout [ 1288.439842][T21830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.448422][T21830] bridge_slave_1: entered allmulticast mode [ 1288.496282][T21830] bridge_slave_1: entered promiscuous mode [ 1288.662393][ T89] usb 5-1: USB disconnect, device number 83 [ 1288.695380][T21830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.822969][T21830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.892970][ T30] audit: type=1400 audit(1768429680.761:3165): avc: denied { write } for pid=21862 comm="syz.4.3998" lport=47442 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1288.978949][ T30] audit: type=1400 audit(1768429680.791:3166): avc: denied { setopt } for pid=21862 comm="syz.4.3998" lport=47442 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1289.185825][T21830] team0: Port device team_slave_0 added [ 1289.732001][ T30] audit: type=1800 audit(1768429681.601:3167): pid=21868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.4000" name="/newroot/250/bus" dev="tmpfs" ino=1352 res=0 errno=0 [ 1289.733165][T21830] team0: Port device team_slave_1 added [ 1290.005626][T21830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1290.022182][T21830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1290.110454][T21830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1290.133974][T21830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1290.170047][T20013] Bluetooth: hci3: command tx timeout [ 1290.173630][T21830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1290.324879][T21830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.402370][T21886] SELinux: failed to load policy [ 1290.419051][ T30] audit: type=1400 audit(1768429682.261:3168): avc: denied { load_policy } for pid=21878 comm="syz.0.4002" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1290.545345][ T30] audit: type=1804 audit(1768429682.361:3169): pid=21889 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.4005" name="/newroot/253/file0" dev="tmpfs" ino=1369 res=1 errno=0 [ 1290.748543][T21882] 9p: Bad value for 'rfdno' [ 1290.943575][T21830] hsr_slave_0: entered promiscuous mode [ 1290.970488][T21830] hsr_slave_1: entered promiscuous mode [ 1291.063752][T21830] debugfs: 'hsr0' already exists in 'hsr' [ 1291.080028][T21830] Cannot create hsr debugfs directory [ 1291.098586][T21863] lo speed is unknown, defaulting to 1000 [ 1291.681628][T15099] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1292.279948][T20013] Bluetooth: hci3: command tx timeout [ 1292.304791][T15099] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1292.319397][T15099] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1292.329070][T15099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1292.338323][T15099] usb 2-1: SerialNumber: syz [ 1292.778504][T21830] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1292.951060][T21830] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1292.980606][T21830] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1293.017508][T21830] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1293.632142][T21830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.708830][T21830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.763536][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.770733][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.828161][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.835277][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.023771][T15099] usb 2-1: bad CDC descriptors [ 1294.040045][T15099] usb 2-1: USB disconnect, device number 82 [ 1294.040196][T21924] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4012'. [ 1294.359864][T20013] Bluetooth: hci3: command tx timeout [ 1294.628288][T21830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.739328][T21941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4011'. [ 1294.801787][ T30] audit: type=1400 audit(1768429686.671:3170): avc: denied { setopt } for pid=21921 comm="syz.4.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1295.071239][T21830] veth0_vlan: entered promiscuous mode [ 1295.124905][T21830] veth1_vlan: entered promiscuous mode [ 1295.204991][T21830] veth0_macvtap: entered promiscuous mode [ 1295.224286][T21830] veth1_macvtap: entered promiscuous mode [ 1295.276629][T21830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.327017][T21830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.355298][ T6016] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.385661][ T6016] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.422295][ T6016] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.444247][ T6016] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.580270][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.588158][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.638958][ T6185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.659847][ T6185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.698064][ T30] audit: type=1400 audit(1768429687.561:3171): avc: denied { mounton } for pid=21830 comm="syz-executor" path="/root/syzkaller.AY0VEh/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1295.789981][ T30] audit: type=1400 audit(1768429687.591:3172): avc: denied { mounton } for pid=21830 comm="syz-executor" path="/root/syzkaller.AY0VEh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=81173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1295.895782][T21956] tipc: Enabling of bearer rejected, failed to enable media [ 1295.915880][ T30] audit: type=1400 audit(1768429687.591:3173): avc: denied { mounton } for pid=21830 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1295.995615][ T30] audit: type=1400 audit(1768429687.611:3174): avc: denied { mount } for pid=21830 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1296.062661][ T30] audit: type=1400 audit(1768429687.611:3175): avc: denied { mounton } for pid=21830 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1297.466802][ T30] audit: type=1804 audit(1768429689.331:3176): pid=21963 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.4017" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0 [ 1297.734615][T21974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21974 comm=syz.9.4019 [ 1297.909879][ T5894] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1298.061576][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1298.089964][ T5894] usb 5-1: not running at top speed; connect to a high speed hub [ 1298.099208][ T5894] usb 5-1: config 2 has an invalid interface number: 212 but max is 1 [ 1298.123295][ T5894] usb 5-1: config 2 has an invalid interface number: 226 but max is 1 [ 1298.140634][ T5894] usb 5-1: config 2 has no interface number 0 [ 1298.146747][ T5894] usb 5-1: config 2 has no interface number 1 [ 1298.169958][ T5894] usb 5-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1298.192090][ T5894] usb 5-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1298.219819][ T5894] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1298.239905][ T5894] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid maxpacket 30768, setting to 64 [ 1298.269854][ T5894] usb 5-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1298.289868][ T5894] usb 5-1: config 2 interface 212 has no altsetting 0 [ 1298.311728][ T5894] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1298.329843][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.337863][ T5894] usb 5-1: Product: syz [ 1298.350464][ T5894] usb 5-1: Manufacturer: syz [ 1298.361700][ T5894] usb 5-1: SerialNumber: syz [ 1298.592598][T21973] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4020'. [ 1298.617715][T21973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4020'. [ 1298.730507][T21973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4020'. [ 1298.798685][ T5894] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.226/input/input58 [ 1298.836115][ T5894] usb 5-1: USB disconnect, device number 84 [ 1298.836169][ C0] xpad 5-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19 [ 1299.286371][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.300156][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.439229][T21980] binder: 21979:21980 ioctl 400c620e 200000000380 returned -22 [ 1299.465384][T21980] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4021'. [ 1299.988281][T21994] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4025'. [ 1300.215211][ T30] audit: type=1804 audit(1768429692.081:3177): pid=21997 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.4026" name="/newroot/258/file0" dev="tmpfs" ino=1395 res=1 errno=0 [ 1300.590073][T22000] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1301.031784][T22004] tipc: Enabling of bearer rejected, failed to enable media [ 1301.311382][T22010] ubi: mtd0 is already attached to ubi31 [ 1303.655101][T21700] syz_tun (unregistering): left allmulticast mode [ 1303.731497][T22035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4037'. [ 1303.741087][T22035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4037'. [ 1303.838217][T17333] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.879111][T17333] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.005753][T17333] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.070024][T17333] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.238219][T17333] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.269420][T17333] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.531084][T17333] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.582770][T17333] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.724379][T22050] netlink: 'syz.0.4039': attribute type 2 has an invalid length. [ 1304.965007][T17333] bridge0: port 2(batadv0) entered disabled state [ 1304.988045][T17333] team0: left allmulticast mode [ 1305.021372][T17333] bridge0: port 1(team0) entered disabled state [ 1305.784693][T22063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4042'. [ 1305.828378][T22064] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4041'. [ 1306.526733][T17333] dvmrp6 (unregistering): left allmulticast mode [ 1306.673760][ T30] audit: type=1400 audit(1768429698.541:3178): avc: denied { call } for pid=22073 comm="syz.4.4046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1306.759411][ T30] audit: type=1400 audit(1768429698.561:3179): avc: denied { transfer } for pid=22073 comm="syz.4.4046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1308.445308][T17333] bond0 (unregistering): Released all slaves [ 1309.154761][T17333] bond1 (unregistering): (slave wlan0): Releasing active interface [ 1309.166028][T17333] bond1 (unregistering): Released all slaves [ 1309.180248][T22052] tipc: Enabling of bearer rejected, failed to enable media [ 1309.215835][T22064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.223235][T22064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.667585][T22097] netlink: 188 bytes leftover after parsing attributes in process `syz.8.4049'. [ 1309.888160][T20735] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1310.461073][T20735] usb 1-1: Using ep0 maxpacket: 8 [ 1310.484077][T20735] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1310.506723][T20735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.628015][T20735] usb 1-1: Product: syz [ 1310.665526][T20735] usb 1-1: Manufacturer: syz [ 1310.696452][T20735] usb 1-1: SerialNumber: syz [ 1310.888774][T20735] usb 1-1: config 0 descriptor?? [ 1310.894851][ T30] audit: type=1400 audit(1768429702.231:3180): avc: denied { getopt } for pid=22091 comm="syz.8.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1311.030777][T20735] gspca_main: se401-2.14.0 probing 047d:5003 [ 1312.114565][T20735] gspca_se401: read req failed req 0x06 error -19 [ 1312.139161][T20735] usb 1-1: USB disconnect, device number 113 [ 1312.281848][T17333] hsr_slave_0: left promiscuous mode [ 1312.298535][T17333] hsr_slave_1: left promiscuous mode [ 1312.315586][ T30] audit: type=1400 audit(1768429704.181:3181): avc: denied { write } for pid=22121 comm="syz.9.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1312.381883][T17333] veth1_macvtap: left promiscuous mode [ 1312.388877][T17333] veth0_macvtap: left promiscuous mode [ 1312.407151][T22123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4057'. [ 1312.419180][T17333] veth1_vlan: left promiscuous mode [ 1312.429575][T17333] veth0_vlan: left promiscuous mode [ 1313.462518][ T30] audit: type=1400 audit(1768429705.321:3182): avc: denied { mount } for pid=22132 comm="syz.1.4059" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1313.527466][ T30] audit: type=1400 audit(1768429705.361:3183): avc: denied { search } for pid=22132 comm="syz.1.4059" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1313.553213][ T30] audit: type=1400 audit(1768429705.361:3184): avc: denied { search } for pid=22132 comm="syz.1.4059" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1313.590175][ T30] audit: type=1400 audit(1768429705.361:3185): avc: denied { read open } for pid=22132 comm="syz.1.4059" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1313.824715][T22149] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1315.474751][T22143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4062'. [ 1315.519950][T20013] Bluetooth: hci3: command tx timeout [ 1315.617993][ T30] audit: type=1400 audit(1768429707.481:3186): avc: denied { setopt } for pid=22152 comm="syz.1.4064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1315.837334][T22165] tipc: Enabling of bearer rejected, failed to enable media [ 1316.380106][T22168] fuse: Unknown parameter '0xffffffffffffffff©' [ 1316.913573][ T30] audit: type=1400 audit(1768429708.781:3187): avc: denied { append } for pid=22155 comm="syz.9.4066" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1316.962530][ T30] audit: type=1400 audit(1768429708.811:3188): avc: denied { map } for pid=22155 comm="syz.9.4066" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1317.193116][ T30] audit: type=1400 audit(1768429708.811:3189): avc: denied { execute } for pid=22155 comm="syz.9.4066" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1317.637241][T22177] fuse: Unknown parameter '/dev/ptp0' [ 1317.720996][ T30] audit: type=1400 audit(1768429709.501:3190): avc: denied { mounton } for pid=22174 comm="syz.1.4073" path="/271/file0" dev="tmpfs" ino=1462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1318.465621][T17333] IPVS: stop unused estimator thread 0... [ 1318.679880][ T5894] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1318.867045][ T5894] usb 10-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f [ 1318.901232][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1318.930354][ T5894] usb 10-1: Manufacturer: syz [ 1319.323852][ T5894] peak_usb 10-1:127.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1319.795377][ T5894] peak_usb 10-1:127.0 can0: sending command failure: -22 [ 1319.936360][ T5894] peak_usb 10-1:127.0 can0: sending command failure: -22 [ 1319.945045][ T5894] peak_usb 10-1:127.0 can0: sending command failure: -22 [ 1320.090892][ T5894] peak_usb 10-1:127.0: probe with driver peak_usb failed with error -22 [ 1320.164100][T22206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 1320.668905][ T30] audit: type=1400 audit(1768429712.531:3191): avc: denied { write } for pid=22211 comm="syz.1.4081" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1321.024345][ T30] audit: type=1400 audit(1768429712.891:3192): avc: denied { relabelfrom } for pid=22211 comm="syz.1.4081" name="UNIX" dev="sockfs" ino=82582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1321.024457][T22213] SELinux: Context system_u:object_r:ifconfig_exec_t:s0 is not valid (left unmapped). [ 1321.449238][T22218] fuse: Unknown parameter '0xffffffffffffffffO' [ 1322.075229][ T9] usb 10-1: USB disconnect, device number 2 [ 1322.374896][ T30] audit: type=1400 audit(1768429712.931:3193): avc: denied { relabelto } for pid=22211 comm="syz.1.4081" name="UNIX" dev="sockfs" ino=82582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:ifconfig_exec_t:s0" [ 1322.469629][T22225] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4083'. [ 1322.857731][T22227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4086'. [ 1323.066565][ T30] audit: type=1400 audit(1768429714.921:3194): avc: denied { setopt } for pid=22228 comm="syz.4.4087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1323.177173][T22231] kAFS: unable to lookup cell 'ÿ' [ 1323.193070][T22231] kAFS: unable to lookup cell '(,c¾Ì' [ 1323.208031][ T30] audit: type=1400 audit(1768429715.061:3195): avc: denied { setopt } for pid=22228 comm="syz.4.4087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1323.551184][T22242] vivid-000: ================= START STATUS ================= [ 1323.558903][T22242] vivid-000: Test Pattern: 75% Colorbar [ 1323.564900][T22242] vivid-000: Fill Percentage of Frame: 100 [ 1323.570851][T22242] vivid-000: Horizontal Movement: Move Right Slow [ 1323.577325][T22242] vivid-000: Vertical Movement: No Movement [ 1323.583309][T22242] vivid-000: OSD Text Mode: All [ 1323.588208][T22242] vivid-000: Show Border: false [ 1323.593207][T22242] vivid-000: Show Square: false [ 1323.598117][T22242] vivid-000: Sensor Flipped Horizontally: false [ 1323.606278][T22242] vivid-000: Sensor Flipped Vertically: false [ 1323.612495][T22242] vivid-000: Insert SAV Code in Image: false [ 1323.618518][T22242] vivid-000: Insert EAV Code in Image: false [ 1323.624603][T22242] vivid-000: Insert Video Guard Band: false [ 1323.630576][T22242] vivid-000: Reduced Framerate: false [ 1323.635993][T22242] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1323.643741][T22242] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1323.651809][T22242] vivid-000: Enable Capture Cropping: true [ 1323.657689][T22242] vivid-000: Enable Capture Composing: true [ 1323.663686][T22242] vivid-000: Enable Capture Scaler: true [ 1323.669373][T22242] vivid-000: Timestamp Source: End of Frame [ 1323.675349][T22242] vivid-000: Colorspace: Rec. 709 [ 1323.680476][T22242] vivid-000: Transfer Function: Default [ 1323.686064][T22242] vivid-000: Y'CbCr Encoding: Default [ 1323.691516][T22242] vivid-000: HSV Encoding: Hue 0-179 [ 1323.696842][T22242] vivid-000: Quantization: Limited Range [ 1323.702545][T22242] vivid-000: Apply Alpha To Red Only: false [ 1323.708475][T22242] vivid-000: Standard Aspect Ratio: 4x3 [ 1323.714114][T22242] vivid-000: DV Timings Signal Mode: Current DV Timings [ 1323.721133][T22242] vivid-000: DV Timings: 640x480p59 inactive [ 1323.727159][T22242] vivid-000: DV Timings Aspect Ratio: 16x9 [ 1323.733046][T22242] vivid-000: Maximum EDID Blocks: 2 [ 1323.738271][T22242] vivid-000: Limited RGB Range (16-235): true [ 1323.744452][T22242] vivid-000: Rx RGB Quantization Range: Automatic [ 1323.751014][T22242] vivid-000: Power Present: 0x00000001 [ 1323.756524][T22242] tpg source WxH: 1280x720 (Y'CbCr) [ 1323.761777][T22242] tpg field: 1 [ 1323.765150][T22242] tpg crop: (0,0)/1280x720 [ 1323.769570][T22242] tpg compose: (0,0)/1280x720 [ 1323.774283][T22242] tpg colorspace: 3 [ 1323.778104][T22242] tpg transfer function: 0/0 [ 1323.782772][T22242] tpg Y'CbCr encoding: 0/0 [ 1323.787187][T22242] tpg quantization: 2/0 [ 1323.791368][T22242] tpg RGB range: 0/1 [ 1323.795265][T22242] vivid-000: ================== END STATUS ================== [ 1323.803037][T22239] vivid-000: ================= START STATUS ================= [ 1323.811472][T22239] vivid-000: Test Pattern: 75% Colorbar [ 1323.819878][T22239] vivid-000: Fill Percentage of Frame: 100 [ 1323.828239][T22239] vivid-000: Horizontal Movement: Move Right Slow [ 1323.835568][T22239] vivid-000: Vertical Movement: No Movement [ 1323.842969][T22239] vivid-000: OSD Text Mode: All [ 1323.850188][T22239] vivid-000: Show Border: false [ 1323.857448][T22239] vivid-000: Show Square: false [ 1323.863662][T22239] vivid-000: Sensor Flipped Horizontally: false [ 1323.871921][T22239] vivid-000: Sensor Flipped Vertically: false [ 1323.879159][T22239] vivid-000: Insert SAV Code in Image: false [ 1323.887448][T22239] vivid-000: Insert EAV Code in Image: false [ 1323.894682][T22239] vivid-000: Insert Video Guard Band: false [ 1323.901942][T22239] vivid-000: Reduced Framerate: false [ 1323.910210][T22239] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1323.920539][T22239] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1323.934417][T22239] vivid-000: Enable Capture Cropping: true [ 1323.942724][T22239] vivid-000: Enable Capture Composing: true [ 1323.950969][T22239] vivid-000: Enable Capture Scaler: true [ 1323.959231][T22239] vivid-000: Timestamp Source: End of Frame [ 1323.967512][T22239] vivid-000: Colorspace: Rec. 709 [ 1323.974731][T22239] vivid-000: Transfer Function: Default [ 1323.983053][T22239] vivid-000: Y'CbCr Encoding: Default [ 1323.991320][T22239] vivid-000: HSV Encoding: Hue 0-179 [ 1323.999605][T22239] vivid-000: Quantization: Limited Range [ 1324.007873][T22239] vivid-000: Apply Alpha To Red Only: false [ 1324.018526][T22239] vivid-000: Standard Aspect Ratio: 4x3 [ 1324.026796][T22239] vivid-000: DV Timings Signal Mode: Current DV Timings [ 1324.036060][T22239] vivid-000: DV Timings: 640x480p59 inactive [ 1324.048510][T22239] vivid-000: DV Timings Aspect Ratio: 16x9 [ 1324.058850][T22239] vivid-000: Maximum EDID Blocks: 2 [ 1324.067123][T22239] vivid-000: Limited RGB Range (16-235): true [ 1324.076413][T22239] vivid-000: Rx RGB Quantization Range: Automatic [ 1324.085693][T22239] vivid-000: Power Present: 0x00000001 [ 1324.092954][T22239] tpg source WxH: 1280x720 (Y'CbCr) [ 1324.100189][T22239] tpg field: 1 [ 1324.105330][T22239] tpg crop: (0,0)/1280x720 [ 1324.111529][T22239] tpg compose: (0,0)/1280x720 [ 1324.116670][T22239] tpg colorspace: 3 [ 1324.120838][T22239] tpg transfer function: 0/0 [ 1324.125981][T22239] tpg Y'CbCr encoding: 0/0 [ 1324.131131][T22239] tpg quantization: 2/0 [ 1324.136265][T22239] tpg RGB range: 0/1 [ 1324.140410][T22239] vivid-000: ================== END STATUS ================== [ 1324.314874][T22246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4091'. [ 1325.705042][T22261] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.4095'. [ 1325.810824][T16941] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1326.279863][T22264] fuse: Unknown parameter '0xffffffffffffffffI' [ 1326.792078][T16941] usb 2-1: config 0 has no interfaces? [ 1326.812149][T16941] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1326.858743][T16941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.914508][T16941] usb 2-1: config 0 descriptor?? [ 1327.013778][T22267] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1327.020855][T22267] overlayfs: failed to set xattr on upper [ 1327.026572][T22267] overlayfs: ...falling back to redirect_dir=nofollow. [ 1327.033462][T22267] overlayfs: ...falling back to index=off. [ 1327.039236][T22267] overlayfs: ...falling back to uuid=null. [ 1327.045448][T22267] overlayfs: overlapping lowerdir path [ 1327.510567][T16941] usb 2-1: USB disconnect, device number 83 [ 1327.670188][T22279] ./cgroup: Can't lookup blockdev [ 1328.090423][T22289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4104'. [ 1328.549385][ T30] audit: type=1400 audit(1768429720.411:3196): avc: denied { bind } for pid=22294 comm="syz.4.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1328.643416][T22300] trusted_key: encrypted_key: insufficient parameters specified [ 1328.718660][ T30] audit: type=1400 audit(1768429720.551:3197): avc: denied { connect } for pid=22294 comm="syz.4.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1330.182918][T16941] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1330.424022][T22316] Device name cannot be null; rc = [-22] [ 1330.637992][T22320] loop6: detected capacity change from 0 to 2640 [ 1330.647964][T22320] buffer_io_error: 5 callbacks suppressed [ 1330.647982][T22320] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.666607][T22320] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.667442][T22319] loop7: detected capacity change from 0 to 7 [ 1330.674820][T22320] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.689572][T22320] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.741435][T16941] usb 10-1: Using ep0 maxpacket: 16 [ 1330.747312][T22323] loop6: detected capacity change from 2640 to 524288000 [ 1330.758174][T22320] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.766702][T16941] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.779786][ C1] blk_print_req_error: 5 callbacks suppressed [ 1330.779802][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1330.795515][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1330.806104][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1330.815734][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1330.823976][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1330.833556][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1330.841564][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1330.842270][T16941] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.851253][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1330.861949][T22320] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.878089][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1330.888094][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1330.899074][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1330.909018][T22319] ldm_validate_partition_table(): Disk read failed. [ 1330.919112][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1330.929739][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1330.931092][T16941] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1330.949209][T22320] ldm_validate_partition_table(): Disk read failed. [ 1330.949823][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1330.956141][T16941] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.975475][T22320] Dev loop6: unable to read RDB block 0 [ 1330.982152][T22319] Dev loop7: unable to read RDB block 0 [ 1330.992439][T22319] loop7: unable to read partition table [ 1331.005237][T22319] loop7: partition table beyond EOD, truncated [ 1331.031035][T22320] loop6: unable to read partition table [ 1331.037017][T22320] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 1331.043371][T22319] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 1331.443223][T16941] mcp2221 0003:04D8:00DD.0032: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 1331.513053][T22335] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4115'. [ 1331.589987][ T5881] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1331.644101][ T30] audit: type=1800 audit(1768429723.501:3198): pid=22331 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.4115" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1331.771238][ T5881] usb 5-1: config 0 has no interfaces? [ 1331.776794][ T5881] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1331.792544][T22302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.830064][T22302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.837919][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.865411][ T9] usb 10-1: USB disconnect, device number 3 [ 1331.908164][ T5881] usb 5-1: config 0 descriptor?? [ 1331.957421][ T30] audit: type=1400 audit(1768429723.821:3199): avc: denied { write } for pid=22338 comm="syz.1.4118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1331.979177][T22339] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1332.089409][T22340] overlay: Unknown parameter '/' [ 1332.149599][T22341] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1332.296771][ T30] audit: type=1400 audit(1768429723.951:3200): avc: denied { mounton } for pid=22338 comm="syz.1.4118" path="/281/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1332.353632][T21170] usb 5-1: USB disconnect, device number 85 [ 1332.400807][ T30] audit: type=1400 audit(1768429724.091:3201): avc: denied { getattr } for pid=22338 comm="syz.1.4118" name="saved_tgids" dev="tracefs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1332.482557][ T30] audit: type=1400 audit(1768429724.331:3202): avc: denied { unmount } for pid=16884 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1332.753255][ T30] audit: type=1400 audit(1768429724.381:3203): avc: denied { getopt } for pid=22347 comm="syz.1.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1333.299877][T21170] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1333.449809][T21170] usb 10-1: device descriptor read/64, error -71 [ 1333.719873][T21170] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1333.859804][T21170] usb 10-1: device descriptor read/64, error -71 [ 1333.980032][T21170] usb usb10-port1: attempt power cycle [ 1334.779866][T21170] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1334.800478][T21170] usb 10-1: device descriptor read/8, error -71 [ 1334.806213][T22383] SELinux: failed to load policy [ 1335.190086][T21170] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1335.391730][T21170] usb 10-1: device descriptor read/8, error -71 [ 1335.661250][T21170] usb usb10-port1: unable to enumerate USB device [ 1336.057424][ T30] audit: type=1804 audit(1768429727.921:3204): pid=22400 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.4135" name="/newroot/21/file0" dev="tmpfs" ino=130 res=1 errno=0 [ 1336.057531][ T9] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1336.187314][T22399] sp0: Synchronizing with TNC [ 1336.331466][ T9] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1336.340668][ T9] usb 2-1: config 0 has no interface number 0 [ 1336.351215][ T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1336.373931][ T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1336.386291][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1336.396865][ T9] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1336.439802][ T9] usb 2-1: Product: syz [ 1336.453991][ T9] usb 2-1: SerialNumber: syz [ 1336.466039][ T9] usb 2-1: config 0 descriptor?? [ 1336.485086][T22391] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1336.496416][ T9] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 1336.712251][T22412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4136'. [ 1336.812285][ T30] audit: type=1400 audit(1768429728.651:3205): avc: denied { write } for pid=22409 comm="syz.9.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1337.159403][ T30] audit: type=1400 audit(1768429728.801:3206): avc: denied { ioctl } for pid=22413 comm="syz.8.4140" path="socket:[83102]" dev="sockfs" ino=83102 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1337.159433][ T30] audit: type=1400 audit(1768429728.821:3207): avc: denied { setattr } for pid=22413 comm="syz.8.4140" path="socket:[84068]" dev="sockfs" ino=84068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1337.317801][T22421] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1337.317820][T22421] overlayfs: failed to set xattr on upper [ 1337.317825][T22421] overlayfs: ...falling back to redirect_dir=nofollow. [ 1337.317830][T22421] overlayfs: ...falling back to index=off. [ 1337.317835][T22421] overlayfs: ...falling back to uuid=null. [ 1337.317892][T22421] overlayfs: overlapping lowerdir path [ 1337.505527][T22424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=22424 comm=syz.4.4142 [ 1337.736688][T22432] netlink: 'syz.4.4145': attribute type 2 has an invalid length. [ 1337.736708][T22432] netlink: 'syz.4.4145': attribute type 1 has an invalid length. [ 1338.031164][T20735] usb 2-1: USB disconnect, device number 84 [ 1338.599114][T22440] dummy0: entered promiscuous mode [ 1338.613869][T22440] macvlan2: entered promiscuous mode [ 1340.903880][ T30] audit: type=1804 audit(1768429732.761:3208): pid=22467 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4155" name="/newroot/206/file0" dev="tmpfs" ino=1122 res=1 errno=0 [ 1341.530801][ T30] audit: type=1400 audit(1768429733.401:3209): avc: denied { name_bind } for pid=22447 comm="syz.0.4151" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1341.578987][T22480] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1341.617151][T22482] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4160'. [ 1341.730080][T22482] netlink: 'syz.8.4160': attribute type 6 has an invalid length. [ 1341.737840][T22482] netlink: 21 bytes leftover after parsing attributes in process `syz.8.4160'. [ 1343.203841][T22501] netlink: 'syz.4.4165': attribute type 29 has an invalid length. [ 1343.266271][T22502] netlink: 'syz.4.4165': attribute type 29 has an invalid length. [ 1343.719202][T22506] netlink: 'syz.0.4166': attribute type 2 has an invalid length. [ 1343.752011][T22506] netlink: 'syz.0.4166': attribute type 1 has an invalid length. [ 1344.082287][T22518] netlink: 'syz.4.4168': attribute type 2 has an invalid length. [ 1344.090727][ T6003] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1344.159845][T20735] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1344.252900][ T30] audit: type=1400 audit(1768429736.121:3210): avc: denied { map } for pid=22514 comm="syz.9.4171" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1344.284411][T22519] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1344.409962][ T6003] usb 2-1: Using ep0 maxpacket: 8 [ 1344.417203][T20735] usb 1-1: config 0 has no interfaces? [ 1344.423220][T20735] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1344.439036][ T6003] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1344.468920][T20735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.486581][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.523863][T20735] usb 1-1: config 0 descriptor?? [ 1344.531893][ T6003] usb 2-1: Product: syz [ 1344.544414][ T6003] usb 2-1: Manufacturer: syz [ 1344.569774][ T6003] usb 2-1: SerialNumber: syz [ 1344.617153][ T6003] usb 2-1: config 0 descriptor?? [ 1344.637553][T22523] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1344.663185][ T6003] gspca_main: se401-2.14.0 probing 047d:5003 [ 1344.676436][T22523] SELinux: failed to load policy [ 1344.794216][ T5894] usb 1-1: USB disconnect, device number 114 [ 1345.090611][ T6003] gspca_se401: ExtraFeatures: 110 [ 1345.096020][ T6003] gspca_se401: Too many frame sizes [ 1345.466935][ T30] audit: type=1400 audit(1768429737.141:3211): avc: denied { override_creds } for pid=22536 comm="syz.4.4177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1346.024045][ T5894] usb 2-1: USB disconnect, device number 85 [ 1346.336633][T22551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4180'. [ 1346.577768][T22560] trusted_key: encrypted_key: insufficient parameters specified [ 1347.284951][T22569] SELinux: failed to load policy [ 1347.290469][T22574] sysfs: cannot create duplicate filename '/class/ieee80211/Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥”!!bíÓÙ.˜>„nS‡#^‘§' [ 1347.305640][T22574] CPU: 1 UID: 0 PID: 22574 Comm: syz.9.4188 Tainted: G L syzkaller #0 PREEMPT(full) [ 1347.305673][T22574] Tainted: [L]=SOFTLOCKUP [ 1347.305681][T22574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1347.305693][T22574] Call Trace: [ 1347.305699][T22574] [ 1347.305708][T22574] dump_stack_lvl+0x16c/0x1f0 [ 1347.305740][T22574] sysfs_warn_dup+0x7f/0xa0 [ 1347.305764][T22574] sysfs_do_create_link_sd+0x124/0x140 [ 1347.305790][T22574] sysfs_create_link+0x61/0xc0 [ 1347.305812][T22574] device_add+0x652/0x1980 [ 1347.305839][T22574] ? __pfx_device_add+0x10/0x10 [ 1347.305860][T22574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1347.305884][T22574] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1347.305914][T22574] wiphy_register+0x1ea1/0x2cc0 [ 1347.305943][T22574] ? __rtnl_unlock+0x68/0xf0 [ 1347.305967][T22574] ? __dev_change_flags+0x570/0x6f0 [ 1347.305993][T22574] ? __pfx_wiphy_register+0x10/0x10 [ 1347.306021][T22574] ? __asan_memset+0x23/0x50 [ 1347.306049][T22574] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 1347.306080][T22574] ieee80211_register_hw+0x2bb2/0x4160 [ 1347.306118][T22574] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1347.306145][T22574] ? __pfx___debug_object_init+0x10/0x10 [ 1347.306174][T22574] ? find_held_lock+0x2b/0x80 [ 1347.306203][T22574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1347.306225][T22574] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1347.306248][T22574] ? __hrtimer_setup+0x176/0x280 [ 1347.306278][T22574] mac80211_hwsim_new_radio+0x3323/0x5150 [ 1347.306323][T22574] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1347.306362][T22574] ? __asan_memcpy+0x3c/0x60 [ 1347.306387][T22574] hwsim_new_radio_nl+0xba2/0x1330 [ 1347.306421][T22574] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1347.306463][T22574] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1347.306494][T22574] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1347.306532][T22574] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1347.306563][T22574] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1347.306601][T22574] ? bpf_lsm_capable+0x9/0x10 [ 1347.306620][T22574] ? security_capable+0x7e/0x260 [ 1347.306643][T22574] ? ns_capable+0xd7/0x110 [ 1347.306671][T22574] genl_rcv_msg+0x55c/0x800 [ 1347.306701][T22574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1347.306728][T22574] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1347.306759][T22574] ? __lock_acquire+0x436/0x2890 [ 1347.306785][T22574] netlink_rcv_skb+0x158/0x420 [ 1347.306808][T22574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1347.306836][T22574] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1347.306874][T22574] ? netlink_deliver_tap+0x1ae/0xd30 [ 1347.306901][T22574] genl_rcv+0x28/0x40 [ 1347.306925][T22574] netlink_unicast+0x5aa/0x870 [ 1347.306953][T22574] ? __pfx_netlink_unicast+0x10/0x10 [ 1347.306986][T22574] netlink_sendmsg+0x8c8/0xdd0 [ 1347.307015][T22574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1347.307050][T22574] ____sys_sendmsg+0xa5d/0xc30 [ 1347.307077][T22574] ? copy_msghdr_from_user+0x10a/0x160 [ 1347.307097][T22574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1347.307120][T22574] ? preempt_schedule_thunk+0x16/0x30 [ 1347.307144][T22574] ? try_to_wake_up+0xa67/0x1860 [ 1347.307178][T22574] ___sys_sendmsg+0x134/0x1d0 [ 1347.307200][T22574] ? __pfx____sys_sendmsg+0x10/0x10 [ 1347.307221][T22574] ? futex_private_hash_put+0x160/0x1b0 [ 1347.307276][T22574] __sys_sendmsg+0x16d/0x220 [ 1347.307298][T22574] ? __pfx___sys_sendmsg+0x10/0x10 [ 1347.307317][T22574] ? __x64_sys_futex+0x1e0/0x4c0 [ 1347.307367][T22574] do_syscall_64+0xcd/0xf80 [ 1347.307397][T22574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.307417][T22574] RIP: 0033:0x7fcf79b8f749 [ 1347.307435][T22574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1347.307455][T22574] RSP: 002b:00007fcf7a968038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1347.307472][T22574] RAX: ffffffffffffffda RBX: 00007fcf79de5fa0 RCX: 00007fcf79b8f749 [ 1347.307484][T22574] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 1347.307495][T22574] RBP: 00007fcf79c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1347.307506][T22574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1347.307518][T22574] R13: 00007fcf79de6038 R14: 00007fcf79de5fa0 R15: 00007ffe1966ca48 [ 1347.307547][T22574] [ 1347.808613][ T30] audit: type=1400 audit(1768429739.671:3212): avc: denied { ioctl } for pid=22573 comm="syz.9.4188" path="socket:[84358]" dev="sockfs" ino=84358 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1347.834429][ T5894] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1348.000224][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 1348.231152][ T5894] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1348.247131][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.255589][ T5894] usb 2-1: Product: syz [ 1348.259923][ T5894] usb 2-1: Manufacturer: syz [ 1348.267086][ T5894] usb 2-1: SerialNumber: syz [ 1348.361460][ T5894] usb 2-1: config 0 descriptor?? [ 1348.861667][ T6003] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1348.957747][ T5894] airspy 2-1:0.0: Board ID: 00 [ 1348.964579][ T5894] airspy 2-1:0.0: Firmware version: [ 1349.049409][ T30] audit: type=1804 audit(1768429740.911:3213): pid=22599 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.4194" name="/newroot/213/file0" dev="tmpfs" ino=1181 res=1 errno=0 [ 1349.096154][ T6003] usb 10-1: config 0 has no interfaces? [ 1349.121357][ T6003] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1349.165888][ T6003] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.179190][ T6003] usb 10-1: config 0 descriptor?? [ 1349.750937][ T5894] airspy 2-1:0.0: usb_control_msg() failed -71 request 12 [ 1349.786745][ T5894] airspy 2-1:0.0: Registered as swradio24 [ 1349.799028][ T5894] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1349.894563][ T5894] usb 2-1: USB disconnect, device number 86 [ 1349.921917][T21170] usb 10-1: USB disconnect, device number 8 [ 1352.288991][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1352.455304][T22637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1353.332646][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1353.439772][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.642327][T22652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4198'. [ 1353.756084][ T9] usb 2-1: Product: syz [ 1353.780799][ T9] usb 2-1: Manufacturer: syz [ 1353.787496][ T9] usb 2-1: SerialNumber: syz [ 1353.830030][ T9] usb 2-1: config 0 descriptor?? [ 1353.836400][T22657] netlink: 'syz.8.4207': attribute type 11 has an invalid length. [ 1354.117887][T22657] netlink: 448 bytes leftover after parsing attributes in process `syz.8.4207'. [ 1354.159822][ T9] usb 2-1: USB disconnect, device number 87 [ 1354.180316][ T30] audit: type=1804 audit(1768429746.041:3214): pid=22658 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.4208" name="/newroot/39/file0" dev="tmpfs" ino=224 res=1 errno=0 [ 1354.422082][T22671] netlink: 'syz.8.4212': attribute type 11 has an invalid length. [ 1356.275359][ T30] audit: type=1804 audit(1768429748.141:3215): pid=22710 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.4221" name="/newroot/43/file0" dev="tmpfs" ino=245 res=1 errno=0 [ 1356.789883][T16941] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1357.499778][T16941] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1357.724962][ T30] audit: type=1400 audit(1768429749.591:3216): avc: denied { ioctl } for pid=22733 comm="syz.8.4228" path="socket:[83786]" dev="sockfs" ino=83786 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1357.833039][T16941] usb 5-1: config 0 has no interface number 0 [ 1357.839192][T16941] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1357.850340][T16941] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1357.862983][T16941] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1357.872288][T16941] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1357.880418][T16941] usb 5-1: Product: syz [ 1357.884593][T16941] usb 5-1: SerialNumber: syz [ 1357.900703][ T30] audit: type=1400 audit(1768429749.771:3217): avc: denied { bind } for pid=22731 comm="syz.1.4227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1357.920874][T16941] usb 5-1: config 0 descriptor?? [ 1357.926493][T22713] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1357.935321][T22732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4227'. [ 1357.936287][T16941] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 1357.993698][ T30] audit: type=1400 audit(1768429749.861:3218): avc: denied { map } for pid=22731 comm="syz.1.4227" path="socket:[83780]" dev="sockfs" ino=83780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1358.030650][ T30] audit: type=1400 audit(1768429749.861:3219): avc: denied { read } for pid=22731 comm="syz.1.4227" path="socket:[83780]" dev="sockfs" ino=83780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1358.074207][T22747] binder: 22746:22747 ioctl c0306201 200000000080 returned -14 [ 1358.127325][T22749] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4232'. [ 1358.204420][ T30] audit: type=1400 audit(1768429749.951:3220): avc: denied { write } for pid=22746 comm="syz.9.4231" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1358.242977][ T5923] usb 5-1: USB disconnect, device number 86 [ 1358.558607][ T30] audit: type=1804 audit(1768429750.421:3221): pid=22761 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.4233" name="/newroot/222/file0" dev="tmpfs" ino=1228 res=1 errno=0 [ 1358.699839][ T30] audit: type=1804 audit(1768429750.561:3222): pid=22763 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.4235" name="/newroot/47/file0" dev="tmpfs" ino=267 res=1 errno=0 [ 1358.810546][ T5822] Bluetooth: hci3: command 0x0405 tx timeout [ 1359.190044][T22771] FAULT_INJECTION: forcing a failure. [ 1359.190044][T22771] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.202928][T22771] CPU: 0 UID: 0 PID: 22771 Comm: syz.8.4238 Tainted: G L syzkaller #0 PREEMPT(full) [ 1359.202955][T22771] Tainted: [L]=SOFTLOCKUP [ 1359.202961][T22771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1359.202971][T22771] Call Trace: [ 1359.202979][T22771] [ 1359.202986][T22771] dump_stack_lvl+0x16c/0x1f0 [ 1359.203014][T22771] should_fail_ex+0x512/0x640 [ 1359.203040][T22771] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1359.203062][T22771] should_failslab+0xc2/0x120 [ 1359.203084][T22771] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1359.203102][T22771] ? __alloc_skb+0x156/0x410 [ 1359.203124][T22771] ? __alloc_skb+0x156/0x410 [ 1359.203138][T22771] __alloc_skb+0x156/0x410 [ 1359.203153][T22771] ? __alloc_skb+0x35d/0x410 [ 1359.203168][T22771] ? __pfx___alloc_skb+0x10/0x10 [ 1359.203193][T22771] netlink_alloc_large_skb+0x69/0x140 [ 1359.203218][T22771] netlink_sendmsg+0x698/0xdd0 [ 1359.203245][T22771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1359.203283][T22771] ____sys_sendmsg+0xa5d/0xc30 [ 1359.203307][T22771] ? copy_msghdr_from_user+0x10a/0x160 [ 1359.203326][T22771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1359.203364][T22771] ___sys_sendmsg+0x134/0x1d0 [ 1359.203385][T22771] ? __pfx____sys_sendmsg+0x10/0x10 [ 1359.203405][T22771] ? lock_acquire+0x179/0x330 [ 1359.203461][T22771] __sys_sendmsg+0x16d/0x220 [ 1359.203481][T22771] ? __pfx___sys_sendmsg+0x10/0x10 [ 1359.203499][T22771] ? __pfx___schedule+0x10/0x10 [ 1359.203527][T22771] ? rcu_is_watching+0x12/0xc0 [ 1359.203552][T22771] do_syscall_64+0xcd/0xf80 [ 1359.203578][T22771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.203596][T22771] RIP: 0033:0x7f2b1558f749 [ 1359.203610][T22771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1359.203627][T22771] RSP: 002b:00007f2b1648a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1359.203644][T22771] RAX: ffffffffffffffda RBX: 00007f2b157e6180 RCX: 00007f2b1558f749 [ 1359.203656][T22771] RDX: 0000000010000004 RSI: 0000200000000440 RDI: 0000000000000006 [ 1359.203666][T22771] RBP: 00007f2b1648a090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.203676][T22771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.203686][T22771] R13: 00007f2b157e6218 R14: 00007f2b157e6180 R15: 00007ffd1f1ae738 [ 1359.203711][T22771] [ 1360.926477][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.933408][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.189910][T16939] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1361.563138][T16939] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1361.651939][T16939] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1361.680502][T16939] usb 10-1: can't read configurations, error -71 [ 1362.749680][T22802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=22802 comm=syz.4.4241 [ 1364.089350][ T30] audit: type=1804 audit(1768429755.851:3223): pid=22829 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4252" name="/newroot/227/file0" dev="tmpfs" ino=1231 res=1 errno=0 [ 1364.136963][T22820] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4251'. [ 1366.290801][T22856] xt_connbytes: Forcing CT accounting to be enabled [ 1366.297617][T22856] set match dimension is over the limit! [ 1366.314056][ T30] audit: type=1400 audit(1768429758.171:3224): avc: denied { create } for pid=22855 comm="syz.8.4260" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 1366.580543][ T30] audit: type=1804 audit(1768429758.441:3225): pid=22872 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.4264" name="/newroot/228/file0" dev="tmpfs" ino=1259 res=1 errno=0 [ 1366.669900][ T5844] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1366.863837][ T5844] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1366.892152][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.916923][ T5844] usb 5-1: config 0 descriptor?? [ 1367.690430][ T30] audit: type=1400 audit(1768429759.561:3226): avc: denied { write } for pid=22857 comm="syz.4.4261" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1367.738523][ T5844] usb 5-1: Cannot set MAC address [ 1367.754120][ T5844] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1367.759312][ T30] audit: type=1400 audit(1768429759.581:3227): avc: denied { open } for pid=22857 comm="syz.4.4261" path="/230/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1367.885597][ T5844] usb 5-1: USB disconnect, device number 87 [ 1368.102700][T22899] netlink: 'syz.8.4271': attribute type 2 has an invalid length. [ 1368.522421][T22908] overlayfs: failed to resolve './file1/file0': -2 [ 1368.655723][ T30] audit: type=1804 audit(1768429760.521:3228): pid=22911 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.4276" name="/newroot/57/file0" dev="tmpfs" ino=320 res=1 errno=0 [ 1368.971214][ T30] audit: type=1400 audit(1768429760.841:3229): avc: denied { ioctl } for pid=22915 comm="syz.0.4278" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1369.187717][T22926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4279'. [ 1369.678748][ T30] audit: type=1326 audit(1768429760.921:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22915 comm="syz.0.4278" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46b2d8f749 code=0x0 [ 1371.573072][T22948] overlayfs: failed to resolve './file1/file0': -2 [ 1372.050554][T22959] netlink: 'syz.4.4288': attribute type 2 has an invalid length. [ 1372.742231][ T1006] Bluetooth: hci1: Frame reassembly failed (-84) [ 1372.842056][ T1006] Bluetooth: hci1: Frame reassembly failed (-84) [ 1372.900269][T20735] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1373.503581][T20735] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1373.536984][T22970] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 1373.878839][T20735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1373.990289][T20735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1373.994523][T22974] tipc: Enabling of bearer rejected, failed to enable media [ 1374.023188][T20735] usb 1-1: SerialNumber: syz [ 1374.113334][T22979] netlink: 'syz.1.4293': attribute type 10 has an invalid length. [ 1374.121816][T22979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4293'. [ 1374.252497][T20735] usb 1-1: bad CDC descriptors [ 1374.537336][T22979] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1374.583721][T20735] usb 1-1: USB disconnect, device number 115 [ 1374.639837][T20013] Bluetooth: hci1: command 0xfc11 tx timeout [ 1374.642327][ T5822] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1375.086291][T22991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4298'. [ 1375.480965][T22993] overlayfs: failed to resolve './file1/file0': -2 [ 1376.070978][T23003] netlink: 'syz.4.4301': attribute type 2 has an invalid length. [ 1376.396638][ T30] audit: type=1400 audit(1768429768.241:3231): avc: denied { write } for pid=23007 comm="syz.9.4303" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1376.544334][T23010] netlink: 'syz.1.4302': attribute type 2 has an invalid length. [ 1376.877939][ T30] audit: type=1400 audit(1768429768.431:3232): avc: denied { mount } for pid=23007 comm="syz.9.4303" name="/" dev="autofs" ino=85149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1377.259602][ T30] audit: type=1400 audit(1768429769.121:3233): avc: denied { unmount } for pid=21830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1377.339803][T16938] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1377.509879][T16938] usb 5-1: Using ep0 maxpacket: 32 [ 1377.526663][T16938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.565289][T16938] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1377.603693][T16938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.633485][T16938] usb 5-1: config 0 descriptor?? [ 1378.142115][T16938] samsung 0003:0419:0600.0033: item fetching failed at offset 0/2 [ 1378.161292][T16938] samsung 0003:0419:0600.0033: parse failed [ 1378.167247][T16938] samsung 0003:0419:0600.0033: probe with driver samsung failed with error -22 [ 1378.397342][T23018] veth1_macvtap: left promiscuous mode [ 1378.426759][T23018] macsec0: entered promiscuous mode [ 1378.477579][T23021] veth1_macvtap: entered promiscuous mode [ 1378.650089][T23021] macsec0: left promiscuous mode [ 1378.666759][T23018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4307'. [ 1378.693739][T23047] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 1380.063278][ T30] audit: type=1400 audit(1768429771.931:3234): avc: denied { read } for pid=23017 comm="syz.4.4307" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1380.089813][ T30] audit: type=1400 audit(1768429771.961:3235): avc: denied { open } for pid=23017 comm="syz.4.4307" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1380.165851][ T5844] usb 5-1: USB disconnect, device number 88 [ 1383.128530][ T30] audit: type=1400 audit(1768429774.991:3236): avc: denied { ioctl } for pid=23103 comm="syz.8.4326" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1383.574609][T23104] fuse: Bad value for 'user_id' [ 1383.579513][T23104] fuse: Bad value for 'user_id' [ 1383.588531][T23104] Device name not specified. [ 1383.588531][T23104] [ 1384.741410][T23129] netlink: 'syz.4.4332': attribute type 2 has an invalid length. [ 1386.317640][ T1006] Bluetooth: hci1: Frame reassembly failed (-84) [ 1386.660542][ T6003] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1386.670684][T23154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4340'. [ 1386.680262][ T30] audit: type=1804 audit(1768429778.451:3237): pid=23156 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4339" name="/newroot/251/file0" dev="tmpfs" ino=1357 res=1 errno=0 [ 1386.782685][T23161] FAULT_INJECTION: forcing a failure. [ 1386.782685][T23161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1386.797297][T23161] CPU: 1 UID: 0 PID: 23161 Comm: syz.4.4341 Tainted: G L syzkaller #0 PREEMPT(full) [ 1386.797317][T23161] Tainted: [L]=SOFTLOCKUP [ 1386.797321][T23161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1386.797327][T23161] Call Trace: [ 1386.797330][T23161] [ 1386.797335][T23161] dump_stack_lvl+0x16c/0x1f0 [ 1386.797354][T23161] should_fail_ex+0x512/0x640 [ 1386.797373][T23161] _copy_from_iter+0x2a4/0x16c0 [ 1386.797391][T23161] ? __alloc_skb+0x220/0x410 [ 1386.797400][T23161] ? __alloc_skb+0x35d/0x410 [ 1386.797409][T23161] ? __pfx__copy_from_iter+0x10/0x10 [ 1386.797424][T23161] ? netlink_autobind.isra.0+0x158/0x370 [ 1386.797442][T23161] netlink_sendmsg+0x820/0xdd0 [ 1386.797458][T23161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1386.797475][T23161] ____sys_sendmsg+0xa5d/0xc30 [ 1386.797490][T23161] ? copy_msghdr_from_user+0x10a/0x160 [ 1386.797501][T23161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1386.797520][T23161] ___sys_sendmsg+0x134/0x1d0 [ 1386.797532][T23161] ? __pfx____sys_sendmsg+0x10/0x10 [ 1386.797557][T23161] __sys_sendmsg+0x16d/0x220 [ 1386.797568][T23161] ? __pfx___sys_sendmsg+0x10/0x10 [ 1386.797587][T23161] do_syscall_64+0xcd/0xf80 [ 1386.797603][T23161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.797613][T23161] RIP: 0033:0x7f687a18f749 [ 1386.797623][T23161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1386.797633][T23161] RSP: 002b:00007f687b022038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1386.797643][T23161] RAX: ffffffffffffffda RBX: 00007f687a3e5fa0 RCX: 00007f687a18f749 [ 1386.797650][T23161] RDX: 0000000000004814 RSI: 0000200000000140 RDI: 0000000000000003 [ 1386.797656][T23161] RBP: 00007f687b022090 R08: 0000000000000000 R09: 0000000000000000 [ 1386.797662][T23161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1386.797668][T23161] R13: 00007f687a3e6038 R14: 00007f687a3e5fa0 R15: 00007ffdbce2e938 [ 1386.797681][T23161] [ 1386.861786][ T6003] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1387.021083][ T6003] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1387.030610][ T6003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1387.052061][ T6003] usb 2-1: SerialNumber: syz [ 1387.223207][ T30] audit: type=1400 audit(1768429779.091:3238): avc: denied { bind } for pid=23170 comm="syz.8.4345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1387.291631][T16941] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1387.568957][T23175] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4346'. [ 1387.588450][T16941] usb 5-1: Using ep0 maxpacket: 16 [ 1387.775339][T16941] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1387.842645][T16941] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1387.852237][T16941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.860850][T16941] usb 5-1: Product: syz [ 1387.865181][T16941] usb 5-1: Manufacturer: syz [ 1387.870205][T16941] usb 5-1: SerialNumber: syz [ 1387.877672][T16941] usb 5-1: config 0 descriptor?? [ 1387.955298][T23179] fuse: Bad value for 'fd' [ 1388.088674][ T5923] usb 5-1: USB disconnect, device number 89 [ 1388.199872][T16941] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1388.329814][T20013] Bluetooth: hci1: command 0xfc11 tx timeout [ 1388.329847][ T5822] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1388.359807][T16941] usb 10-1: Using ep0 maxpacket: 32 [ 1388.366982][T16941] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1388.378276][T16941] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1388.388461][T16941] usb 10-1: New USB device found, idVendor=18d1, idProduct=502d, bcdDevice= 0.00 [ 1388.397920][T16941] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.409854][T16941] usb 10-1: config 0 descriptor?? [ 1389.136957][ T6003] usb 2-1: bad CDC descriptors [ 1389.146106][ T6003] usb 2-1: USB disconnect, device number 88 [ 1389.170799][ T5822] Bluetooth: hci5: unexpected event for opcode 0x0c38 [ 1389.192035][T23179] xt_connbytes: Forcing CT accounting to be enabled [ 1389.205524][T16941] usbhid 10-1:0.0: can't add hid device: -71 [ 1389.211851][T16941] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1389.222640][T16941] usb 10-1: USB disconnect, device number 11 [ 1389.635584][ T6003] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1390.211584][ T6003] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1390.219618][ T6003] usb 2-1: config 0 has no interface number 0 [ 1390.235139][ T6003] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1390.247115][ T6003] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1390.259464][ T6003] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1390.268556][ T6003] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1390.276724][ T6003] usb 2-1: Product: syz [ 1390.281208][ T6003] usb 2-1: SerialNumber: syz [ 1390.287810][ T6003] usb 2-1: config 0 descriptor?? [ 1390.293632][T23203] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1390.303293][ T6003] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 1391.929240][T16941] usb 2-1: USB disconnect, device number 89 [ 1392.772954][T23230] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4363'. [ 1393.338881][T23247] FAULT_INJECTION: forcing a failure. [ 1393.338881][T23247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.756796][T22776] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1393.765410][T23247] CPU: 0 UID: 0 PID: 23247 Comm: syz.8.4369 Tainted: G L syzkaller #0 PREEMPT(full) [ 1393.765436][T23247] Tainted: [L]=SOFTLOCKUP [ 1393.765445][T23247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1393.765454][T23247] Call Trace: [ 1393.765460][T23247] [ 1393.765467][T23247] dump_stack_lvl+0x16c/0x1f0 [ 1393.765491][T23247] should_fail_ex+0x512/0x640 [ 1393.765517][T23247] _copy_from_user+0x2e/0xd0 [ 1393.765542][T23247] do_fb_ioctl+0x46c/0x7e0 [ 1393.765562][T23247] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1393.765589][T23247] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1393.765628][T23247] ? selinux_file_ioctl+0x180/0x270 [ 1393.765652][T23247] fb_ioctl+0xe5/0x150 [ 1393.765667][T23247] ? __pfx_fb_ioctl+0x10/0x10 [ 1393.765683][T23247] __x64_sys_ioctl+0x18e/0x210 [ 1393.765701][T23247] do_syscall_64+0xcd/0xf80 [ 1393.765721][T23247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.765736][T23247] RIP: 0033:0x7f2b1558f749 [ 1393.765748][T23247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1393.765763][T23247] RSP: 002b:00007f2b164cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1393.765780][T23247] RAX: ffffffffffffffda RBX: 00007f2b157e5fa0 RCX: 00007f2b1558f749 [ 1393.765791][T23247] RDX: 0000200000000380 RSI: 0000000000004606 RDI: 0000000000000003 [ 1393.765800][T23247] RBP: 00007f2b164cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.765808][T23247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.765816][T23247] R13: 00007f2b157e6038 R14: 00007f2b157e5fa0 R15: 00007ffd1f1ae738 [ 1393.765839][T23247] [ 1394.131676][T22776] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1394.141038][T22776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.151435][T22776] usb 2-1: config 0 descriptor?? [ 1394.165668][T22776] cp210x 2-1:0.0: cp210x converter detected [ 1394.465546][T23269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1394.518532][T23272] kvm: pic: single mode not supported [ 1394.518549][T23272] kvm: pic: level sensitive irq not supported [ 1394.544615][T23272] picdev_read: 7 callbacks suppressed [ 1394.544637][T23272] kvm: pic: non byte read [ 1394.568952][T22776] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1394.612692][T22776] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1394.664273][T23272] kvm: pic: non byte read [ 1394.670261][T23272] kvm: pic: single mode not supported [ 1394.670322][T23272] kvm: pic: non byte read [ 1394.684494][T23272] kvm: pic: single mode not supported [ 1394.684504][T23272] kvm: pic: level sensitive irq not supported [ 1394.692342][T23272] kvm: pic: non byte read [ 1394.710097][T23272] kvm: pic: non byte read [ 1394.714697][T23272] kvm: pic: single mode not supported [ 1394.714743][T23272] kvm: pic: non byte read [ 1394.724899][T23272] kvm: pic: non byte read [ 1394.729466][T23272] kvm: pic: non byte read [ 1394.739974][T23272] kvm: pic: single mode not supported [ 1394.739985][T23272] kvm: pic: level sensitive irq not supported [ 1394.745384][T23272] kvm: pic: non byte read [ 1394.987619][T23289] netlink: 'syz.1.4366': attribute type 4 has an invalid length. [ 1394.999783][ T5923] usb 2-1: USB disconnect, device number 90 [ 1395.036152][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1395.066021][ T5923] cp210x 2-1:0.0: device disconnected [ 1395.184669][ T89] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 1395.380125][ T89] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1395.388845][ T89] usb 5-1: config 0 has no interface number 0 [ 1395.395411][ T89] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1395.408351][ T89] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1395.425202][ T89] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1395.435870][ T89] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1395.450233][ T89] usb 5-1: Product: syz [ 1395.454805][ T89] usb 5-1: SerialNumber: syz [ 1395.461816][ T89] usb 5-1: config 0 descriptor?? [ 1395.467519][T23282] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1395.477445][ T89] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 1395.500197][T20735] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1395.649747][T20735] usb 1-1: Using ep0 maxpacket: 32 [ 1395.665204][T20735] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1395.693565][T20735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.710947][T20735] usb 1-1: Product: syz [ 1395.719287][T20735] usb 1-1: Manufacturer: syz [ 1395.729095][T20735] usb 1-1: SerialNumber: syz [ 1395.766654][T22776] usb 5-1: USB disconnect, device number 90 [ 1395.857622][T20735] usb 1-1: config 0 descriptor?? [ 1396.195006][T23303] ceph: No mds server is up or the cluster is laggy [ 1396.231756][T16941] libceph: connect (1)[c::]:6789 error -101 [ 1396.264951][T16941] libceph: mon0 (1)[c::]:6789 connect error [ 1396.451401][T20735] airspy 1-1:0.0: Board ID: 00 [ 1396.459336][T20735] airspy 1-1:0.0: Firmware version: 1 Æ+zÔhb [ 1397.367441][T20735] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 1397.531812][T20735] airspy 1-1:0.0: Registered as swradio24 [ 1397.537622][T20735] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1397.701657][T20735] usb 1-1: USB disconnect, device number 116 [ 1399.337349][ T30] audit: type=1400 audit(1768429791.201:3239): avc: denied { getopt } for pid=23351 comm="syz.9.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1399.479955][ T89] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 1399.800239][T23353] Trying to write to read-only block-device nullb0 [ 1399.972935][ T89] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1399.990867][ T89] usb 1-1: config 0 has no interface number 0 [ 1400.585185][ T89] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1400.662088][ T89] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1400.705153][ T89] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1400.724674][ T89] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1400.743600][ T89] usb 1-1: Product: syz [ 1400.751850][ T89] usb 1-1: SerialNumber: syz [ 1400.776057][ T89] usb 1-1: config 0 descriptor?? [ 1400.792876][T23348] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1400.826984][ T89] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 1401.149487][ T89] usb 1-1: USB disconnect, device number 117 [ 1401.349311][ T30] audit: type=1400 audit(1768429793.211:3240): avc: denied { write } for pid=23374 comm="syz.1.4403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1401.487443][T23381] netlink: 'syz.9.4404': attribute type 16 has an invalid length. [ 1401.788206][T23381] netlink: 'syz.9.4404': attribute type 17 has an invalid length. [ 1401.901045][T23381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1402.019839][ T89] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1402.241850][ T89] usb 10-1: config 0 has an invalid interface number: 255 but max is 0 [ 1402.260039][ T89] usb 10-1: config 0 has no interface number 0 [ 1402.273892][ T89] usb 10-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1402.299937][ T89] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.329169][ T89] usb 10-1: config 0 descriptor?? [ 1402.519836][T22776] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1402.679800][T22776] usb 5-1: Using ep0 maxpacket: 8 [ 1402.688339][ T5922] usb 10-1: USB disconnect, device number 12 [ 1402.697359][T22776] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1402.713739][T22776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.730364][T22776] usb 5-1: Product: syz [ 1402.734777][T22776] usb 5-1: Manufacturer: syz [ 1402.739478][T22776] usb 5-1: SerialNumber: syz [ 1402.746498][T22776] usb 5-1: config 0 descriptor?? [ 1402.814614][T22776] gspca_main: se401-2.14.0 probing 047d:5003 [ 1403.003218][T23407] overlayfs: missing 'lowerdir' [ 1403.238342][T22776] gspca_se401: ExtraFeatures: 110 [ 1403.247783][T22776] gspca_se401: Too many frame sizes [ 1403.274299][T23413] loop7: detected capacity change from 0 to 2640 [ 1403.284123][T23413] buffer_io_error: 21 callbacks suppressed [ 1403.284138][T23413] Buffer I/O error on dev loop7, logical block 0, async page read [ 1403.360620][T23413] Buffer I/O error on dev loop7, logical block 0, async page read [ 1403.368507][T23413] Buffer I/O error on dev loop7, logical block 0, async page read [ 1403.376495][T23413] Buffer I/O error on dev loop7, logical block 0, async page read [ 1403.384415][T23413] Buffer I/O error on dev loop7, logical block 0, async page read [ 1403.399836][T23413] Buffer I/O error on dev loop7, logical block 0, async page read [ 1403.409350][T23413] Buffer I/O error on dev loop7, logical block 0, async page read [ 1403.417563][T23413] Buffer I/O error on dev loop7, logical block 0, async page read [ 1403.438704][T23413] ldm_validate_partition_table(): Disk read failed. [ 1403.451253][T22776] usb 5-1: USB disconnect, device number 91 [ 1403.469985][T23414] Invalid logical block size (5) [ 1403.477698][T23413] Buffer I/O error on dev loop7, logical block 0, async page read [ 1403.485957][T23413] Buffer I/O error on dev loop7, logical block 0, async page read [ 1403.494427][T23413] Dev loop7: unable to read RDB block 0 [ 1403.500578][T23413] loop7: unable to read partition table [ 1403.506353][T23413] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1403.516428][ T30] audit: type=1400 audit(1768429795.371:3241): avc: denied { ioctl } for pid=23416 comm="syz.1.4417" path="socket:[87544]" dev="sockfs" ino=87544 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1403.769972][ T30] audit: type=1400 audit(1768429795.611:3242): avc: denied { setattr } for pid=23418 comm="syz.9.4418" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1404.678406][T23422] lo speed is unknown, defaulting to 1000 [ 1405.270278][ T5922] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1405.544497][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 1405.609973][ T5922] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1405.634560][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.693167][ T5922] usb 5-1: Product: syz [ 1405.697334][ T5922] usb 5-1: Manufacturer: syz [ 1405.780737][ T5922] usb 5-1: SerialNumber: syz [ 1405.802085][ T5922] usb 5-1: config 0 descriptor?? [ 1406.582428][ T5922] airspy 5-1:0.0: Board ID: 00 [ 1406.587204][ T5922] airspy 5-1:0.0: Firmware version: 1 Æ+zÔhb [ 1406.993270][ T5922] airspy 5-1:0.0: usb_control_msg() failed -71 request 0e [ 1407.038802][ T5922] airspy 5-1:0.0: Registered as swradio24 [ 1407.062024][ T5922] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1407.087734][ T5922] usb 5-1: USB disconnect, device number 92 [ 1407.148459][T23463] FAULT_INJECTION: forcing a failure. [ 1407.148459][T23463] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.181290][T23463] CPU: 0 UID: 0 PID: 23463 Comm: syz.1.4429 Tainted: G L syzkaller #0 PREEMPT(full) [ 1407.181316][T23463] Tainted: [L]=SOFTLOCKUP [ 1407.181320][T23463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1407.181326][T23463] Call Trace: [ 1407.181330][T23463] [ 1407.181335][T23463] dump_stack_lvl+0x16c/0x1f0 [ 1407.181355][T23463] should_fail_ex+0x512/0x640 [ 1407.181371][T23463] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1407.181384][T23463] should_failslab+0xc2/0x120 [ 1407.181399][T23463] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1407.181410][T23463] ? __alloc_skb+0x156/0x410 [ 1407.181422][T23463] ? __alloc_skb+0x156/0x410 [ 1407.181430][T23463] __alloc_skb+0x156/0x410 [ 1407.181438][T23463] ? __alloc_skb+0x35d/0x410 [ 1407.181447][T23463] ? __pfx___alloc_skb+0x10/0x10 [ 1407.181456][T23463] ? netlink_autobind.isra.0+0x158/0x370 [ 1407.181473][T23463] netlink_alloc_large_skb+0x69/0x140 [ 1407.181487][T23463] netlink_sendmsg+0x698/0xdd0 [ 1407.181503][T23463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1407.181520][T23463] ____sys_sendmsg+0xa5d/0xc30 [ 1407.181535][T23463] ? copy_msghdr_from_user+0x10a/0x160 [ 1407.181546][T23463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1407.181566][T23463] ___sys_sendmsg+0x134/0x1d0 [ 1407.181578][T23463] ? __pfx____sys_sendmsg+0x10/0x10 [ 1407.181604][T23463] __sys_sendmsg+0x16d/0x220 [ 1407.181615][T23463] ? __pfx___sys_sendmsg+0x10/0x10 [ 1407.181634][T23463] do_syscall_64+0xcd/0xf80 [ 1407.181649][T23463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.181660][T23463] RIP: 0033:0x7f4ae018f749 [ 1407.181669][T23463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1407.181679][T23463] RSP: 002b:00007f4ae1114038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1407.181690][T23463] RAX: ffffffffffffffda RBX: 00007f4ae03e5fa0 RCX: 00007f4ae018f749 [ 1407.181697][T23463] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1407.181703][T23463] RBP: 00007f4ae1114090 R08: 0000000000000000 R09: 0000000000000000 [ 1407.181709][T23463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1407.181715][T23463] R13: 00007f4ae03e6038 R14: 00007f4ae03e5fa0 R15: 00007ffc185abaa8 [ 1407.181728][T23463] [ 1408.019312][T23475] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 1408.837816][T23485] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 1409.005846][ T5822] Bluetooth: hci3: command 0x0405 tx timeout [ 1409.989902][ T30] audit: type=1400 audit(1768429801.851:3243): avc: denied { write } for pid=23493 comm="syz.0.4439" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1410.071191][T23498] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4437'. [ 1410.528687][T23499] FAULT_INJECTION: forcing a failure. [ 1410.528687][T23499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1410.541928][T23499] CPU: 0 UID: 0 PID: 23499 Comm: syz.1.4441 Tainted: G L syzkaller #0 PREEMPT(full) [ 1410.541951][T23499] Tainted: [L]=SOFTLOCKUP [ 1410.541955][T23499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1410.541960][T23499] Call Trace: [ 1410.541966][T23499] [ 1410.541971][T23499] dump_stack_lvl+0x16c/0x1f0 [ 1410.541990][T23499] should_fail_ex+0x512/0x640 [ 1410.542008][T23499] _copy_to_user+0x32/0xd0 [ 1410.542025][T23499] simple_read_from_buffer+0xcb/0x170 [ 1410.542041][T23499] proc_fail_nth_read+0x197/0x240 [ 1410.542053][T23499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1410.542065][T23499] ? rw_verify_area+0xcf/0x6c0 [ 1410.542076][T23499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1410.542087][T23499] vfs_read+0x1e4/0xcf0 [ 1410.542100][T23499] ? __pfx___mutex_lock+0x10/0x10 [ 1410.542116][T23499] ? __pfx_vfs_read+0x10/0x10 [ 1410.542132][T23499] ? __fget_files+0x20e/0x3c0 [ 1410.542146][T23499] ? lockdep_hardirqs_on+0x10/0x110 [ 1410.542163][T23499] ksys_read+0x12a/0x250 [ 1410.542175][T23499] ? __pfx_ksys_read+0x10/0x10 [ 1410.542188][T23499] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 1410.542204][T23499] do_syscall_64+0xcd/0xf80 [ 1410.542219][T23499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.542230][T23499] RIP: 0033:0x7f4ae018e15c [ 1410.542239][T23499] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1410.542250][T23499] RSP: 002b:00007f4ae10f3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1410.542260][T23499] RAX: ffffffffffffffda RBX: 00007f4ae03e6090 RCX: 00007f4ae018e15c [ 1410.542267][T23499] RDX: 000000000000000f RSI: 00007f4ae10f30a0 RDI: 0000000000000005 [ 1410.542273][T23499] RBP: 00007f4ae10f3090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.542279][T23499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1410.542285][T23499] R13: 00007f4ae03e6128 R14: 00007f4ae03e6090 R15: 00007ffc185abaa8 [ 1410.542299][T23499] [ 1411.299810][T16940] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1411.462933][T16940] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1411.496515][T16940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.519837][T16940] usb 1-1: Product: syz [ 1411.524027][T16940] usb 1-1: Manufacturer: syz [ 1411.548288][T16940] usb 1-1: SerialNumber: syz [ 1411.560765][T16940] usb 1-1: config 0 descriptor?? [ 1411.916816][ T5922] usb 1-1: USB disconnect, device number 118 [ 1412.181807][ T30] audit: type=1400 audit(1768429804.051:3244): avc: denied { read } for pid=23493 comm="syz.0.4439" dev="sockfs" ino=87686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1412.184175][T23494] netlink: 'syz.0.4439': attribute type 1 has an invalid length. [ 1412.233921][T23494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1412.268413][T23494] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1412.288651][T23494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4439'. [ 1412.305662][T23494] netlink: 'syz.0.4439': attribute type 13 has an invalid length. [ 1412.926532][T23524] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 1412.950055][ T1006] Bluetooth: hci1: Frame reassembly failed (-84) [ 1413.109929][ T5922] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1413.243957][T23530] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1413.255716][T23530] SELinux: failed to load policy [ 1413.321737][ T5922] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1413.364349][T23529] SELinux: failed to load policy [ 1413.509177][ T5922] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1413.597071][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1413.627200][ T5922] usb 5-1: SerialNumber: syz [ 1413.633912][ T30] audit: type=1804 audit(1768429805.501:3245): pid=23536 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.4452" name="/newroot/96/file0" dev="tmpfs" ino=532 res=1 errno=0 [ 1414.479918][T20735] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1414.650088][T20735] usb 2-1: Using ep0 maxpacket: 8 [ 1414.659571][T20735] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1414.669655][T20735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.678596][T20735] usb 2-1: Product: syz [ 1414.683231][T20735] usb 2-1: Manufacturer: syz [ 1414.687934][T20735] usb 2-1: SerialNumber: syz [ 1414.729405][T20735] usb 2-1: config 0 descriptor?? [ 1414.746291][T20735] gspca_main: se401-2.14.0 probing 047d:5003 [ 1414.879943][T20013] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1415.159550][T20735] gspca_se401: ExtraFeatures: 110 [ 1415.192652][T20735] gspca_se401: Too many frame sizes [ 1415.376101][T20735] usb 2-1: USB disconnect, device number 91 [ 1415.714729][ T5922] usb 5-1: bad CDC descriptors [ 1415.742756][ T5922] usb 5-1: USB disconnect, device number 93 [ 1416.298032][T23565] SELinux: failed to load policy [ 1417.402292][T23588] tipc: Enabling of bearer rejected, failed to enable media [ 1418.315183][T23600] FAULT_INJECTION: forcing a failure. [ 1418.315183][T23600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1418.329211][T23600] CPU: 0 UID: 0 PID: 23600 Comm: syz.4.4473 Tainted: G L syzkaller #0 PREEMPT(full) [ 1418.329239][T23600] Tainted: [L]=SOFTLOCKUP [ 1418.329244][T23600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1418.329253][T23600] Call Trace: [ 1418.329259][T23600] [ 1418.329265][T23600] dump_stack_lvl+0x16c/0x1f0 [ 1418.329288][T23600] should_fail_ex+0x512/0x640 [ 1418.329320][T23600] _copy_from_user+0x2e/0xd0 [ 1418.329343][T23600] inet_ioctl+0x31c/0x3f0 [ 1418.329370][T23600] ? __pfx_inet_ioctl+0x10/0x10 [ 1418.329408][T23600] ? tomoyo_path_number_perm+0x18d/0x580 [ 1418.329435][T23600] sock_do_ioctl+0x118/0x280 [ 1418.329458][T23600] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1418.329484][T23600] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1418.329503][T23600] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1418.329526][T23600] sock_ioctl+0x227/0x6b0 [ 1418.329546][T23600] ? __pfx_sock_ioctl+0x10/0x10 [ 1418.329564][T23600] ? hook_file_ioctl_common+0x144/0x410 [ 1418.329592][T23600] ? selinux_file_ioctl+0x180/0x270 [ 1418.329611][T23600] ? selinux_file_ioctl+0xb4/0x270 [ 1418.329633][T23600] ? __pfx_sock_ioctl+0x10/0x10 [ 1418.329655][T23600] __x64_sys_ioctl+0x18e/0x210 [ 1418.329680][T23600] do_syscall_64+0xcd/0xf80 [ 1418.329701][T23600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1418.329717][T23600] RIP: 0033:0x7f687a18f749 [ 1418.329731][T23600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1418.329746][T23600] RSP: 002b:00007f687b022038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1418.329762][T23600] RAX: ffffffffffffffda RBX: 00007f687a3e5fa0 RCX: 00007f687a18f749 [ 1418.329773][T23600] RDX: 0000200000000300 RSI: 000000000000890c RDI: 0000000000000003 [ 1418.329783][T23600] RBP: 00007f687b022090 R08: 0000000000000000 R09: 0000000000000000 [ 1418.329792][T23600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1418.329800][T23600] R13: 00007f687a3e6038 R14: 00007f687a3e5fa0 R15: 00007ffdbce2e938 [ 1418.329822][T23600] [ 1419.326156][T23617] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4477'. [ 1421.157024][T23651] FAULT_INJECTION: forcing a failure. [ 1421.157024][T23651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1421.180258][T23651] CPU: 0 UID: 0 PID: 23651 Comm: syz.0.4488 Tainted: G L syzkaller #0 PREEMPT(full) [ 1421.180287][T23651] Tainted: [L]=SOFTLOCKUP [ 1421.180293][T23651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1421.180303][T23651] Call Trace: [ 1421.180309][T23651] [ 1421.180316][T23651] dump_stack_lvl+0x16c/0x1f0 [ 1421.180342][T23651] should_fail_ex+0x512/0x640 [ 1421.180369][T23651] _copy_from_user+0x2e/0xd0 [ 1421.180394][T23651] copy_msghdr_from_user+0x98/0x160 [ 1421.180413][T23651] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1421.180442][T23651] ___sys_sendmsg+0xfe/0x1d0 [ 1421.180462][T23651] ? __pfx____sys_sendmsg+0x10/0x10 [ 1421.180509][T23651] __sys_sendmsg+0x16d/0x220 [ 1421.180528][T23651] ? __pfx___sys_sendmsg+0x10/0x10 [ 1421.180560][T23651] do_syscall_64+0xcd/0xf80 [ 1421.180584][T23651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.180601][T23651] RIP: 0033:0x7f46b2d8f749 [ 1421.180615][T23651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1421.180631][T23651] RSP: 002b:00007f46b3ba9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1421.180649][T23651] RAX: ffffffffffffffda RBX: 00007f46b2fe5fa0 RCX: 00007f46b2d8f749 [ 1421.180660][T23651] RDX: 0000000004004000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1421.180670][T23651] RBP: 00007f46b3ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 1421.180680][T23651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1421.180689][T23651] R13: 00007f46b2fe6038 R14: 00007f46b2fe5fa0 R15: 00007ffe6ec41b98 [ 1421.180713][T23651] [ 1421.210728][ T30] audit: type=1800 audit(1768429813.061:3246): pid=23646 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.4485" name="/newroot/281/bus" dev="tmpfs" ino=1512 res=0 errno=0 [ 1421.242511][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1421.669935][ T89] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1421.699084][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.723505][T23663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4492'. [ 1421.742194][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1421.754696][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1421.769916][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1421.779642][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.808185][ T9] usb 10-1: config 0 descriptor?? [ 1421.831474][ T89] usb 1-1: Using ep0 maxpacket: 32 [ 1421.861320][ T89] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1421.871484][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.879550][ T89] usb 1-1: Product: syz [ 1421.888026][ T89] usb 1-1: Manufacturer: syz [ 1421.898526][ T89] usb 1-1: SerialNumber: syz [ 1421.922722][ T89] usb 1-1: config 0 descriptor?? [ 1422.163860][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.173178][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.277708][ T30] audit: type=1400 audit(1768429814.141:3247): avc: denied { setopt } for pid=23671 comm="syz.4.4496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1422.338494][ T9] plantronics 0003:047F:FFFF.0034: item fetching failed at offset 11/15 [ 1422.347525][ T9] plantronics 0003:047F:FFFF.0034: parse failed [ 1422.353983][ T9] plantronics 0003:047F:FFFF.0034: probe with driver plantronics failed with error -22 [ 1422.371697][ T89] airspy 1-1:0.0: Board ID: 00 [ 1422.376575][ T89] airspy 1-1:0.0: Firmware version: 1 Æ+zÔhb [ 1422.509800][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1422.539866][T22776] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1422.693978][ T5922] usb 10-1: USB disconnect, device number 13 [ 1422.750661][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1422.757443][T22776] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.768204][T22776] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1422.780581][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.793538][T22776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.793690][ T89] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 1422.802462][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1422.836010][T22776] usb 5-1: config 0 descriptor?? [ 1422.840123][ T89] airspy 1-1:0.0: Registered as swradio24 [ 1422.847001][ T89] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1422.848687][T22776] pwc: Askey VC010 type 2 USB webcam detected. [ 1422.859295][ T89] usb 1-1: USB disconnect, device number 119 [ 1422.869625][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1422.884607][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.896024][ T9] usb 2-1: Product: syz [ 1422.903500][ T30] audit: type=1400 audit(1768429814.771:3248): avc: denied { accept } for pid=23675 comm="syz.8.4498" lport=50794 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1422.903739][ T9] usb 2-1: Manufacturer: syz [ 1422.933182][ T9] usb 2-1: SerialNumber: syz [ 1423.392125][T22776] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1423.401160][T22776] pwc: recv_control_msg error -32 req 02 val 2700 [ 1423.408284][T22776] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1423.470669][T23683] binder: 23680:23683 ioctl c0046209 ffffffffff600000 returned -22 [ 1423.857179][T22776] pwc: recv_control_msg error -71 req 04 val 1300 [ 1423.864201][T22776] pwc: recv_control_msg error -71 req 04 val 1400 [ 1423.871097][T22776] pwc: recv_control_msg error -71 req 02 val 2000 [ 1423.877922][T22776] pwc: recv_control_msg error -71 req 02 val 2100 [ 1423.884999][T22776] pwc: recv_control_msg error -71 req 04 val 1500 [ 1423.891972][T22776] pwc: recv_control_msg error -71 req 02 val 2500 [ 1423.901953][T22776] pwc: recv_control_msg error -71 req 02 val 2400 [ 1423.910182][T22776] pwc: recv_control_msg error -71 req 02 val 2600 [ 1423.916946][T22776] pwc: recv_control_msg error -71 req 02 val 2900 [ 1423.924158][T23686] autofs4:pid:23686:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1803188595.1701604449), cmd(0xc0189371) [ 1423.924190][T22776] pwc: recv_control_msg error -71 req 02 val 2800 [ 1423.939353][T23686] autofs4:pid:23686:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371) [ 1423.950197][T22776] pwc: recv_control_msg error -71 req 04 val 1100 [ 1423.975643][T22776] pwc: recv_control_msg error -71 req 04 val 1200 [ 1423.993166][T22776] pwc: Registered as video103. [ 1423.999502][T22776] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input60 [ 1424.030641][T22776] usb 5-1: USB disconnect, device number 94 [ 1424.626787][ T30] audit: type=1800 audit(1768429816.491:3249): pid=23701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4504" name="file1" dev="tmpfs" ino=1467 res=0 errno=0 [ 1424.756765][ T30] audit: type=1800 audit(1768429816.621:3250): pid=23698 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.9.4502" name="/newroot/104/bus" dev="tmpfs" ino=573 res=0 errno=0 [ 1426.185466][ T30] audit: type=1400 audit(1768429817.501:3251): avc: denied { listen } for pid=23717 comm="syz.9.4509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1426.239885][T20735] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1426.260684][ T9] usb 2-1: skipping empty audio interface (v1) [ 1426.313789][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1426.347590][ T9] usb 2-1: USB disconnect, device number 92 [ 1426.430295][T20735] usb 5-1: Using ep0 maxpacket: 32 [ 1426.469265][T20735] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1426.497747][T20735] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1426.517672][T20735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.537977][T20735] usb 5-1: Product: syz [ 1426.558190][T20735] usb 5-1: Manufacturer: syz [ 1426.566938][T20735] usb 5-1: SerialNumber: syz [ 1426.582606][T20735] usb 5-1: config 0 descriptor?? [ 1426.810650][T23714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.826322][T23714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.027327][T23734] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4514'. [ 1427.680420][T20735] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 1428.485254][T23752] FAULT_INJECTION: forcing a failure. [ 1428.485254][T23752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1428.498402][T23752] CPU: 0 UID: 0 PID: 23752 Comm: syz.8.4517 Tainted: G L syzkaller #0 PREEMPT(full) [ 1428.498427][T23752] Tainted: [L]=SOFTLOCKUP [ 1428.498432][T23752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1428.498439][T23752] Call Trace: [ 1428.498443][T23752] [ 1428.498448][T23752] dump_stack_lvl+0x16c/0x1f0 [ 1428.498468][T23752] should_fail_ex+0x512/0x640 [ 1428.498487][T23752] _copy_to_user+0x32/0xd0 [ 1428.498505][T23752] simple_read_from_buffer+0xcb/0x170 [ 1428.498521][T23752] proc_fail_nth_read+0x197/0x240 [ 1428.498534][T23752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1428.498546][T23752] ? rw_verify_area+0xcf/0x6c0 [ 1428.498558][T23752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1428.498568][T23752] vfs_read+0x1e4/0xcf0 [ 1428.498582][T23752] ? __pfx___mutex_lock+0x10/0x10 [ 1428.498599][T23752] ? __pfx_vfs_read+0x10/0x10 [ 1428.498615][T23752] ? __fget_files+0x20e/0x3c0 [ 1428.498634][T23752] ksys_read+0x12a/0x250 [ 1428.498646][T23752] ? __pfx_ksys_read+0x10/0x10 [ 1428.498658][T23752] ? fput+0xdd/0xf0 [ 1428.498666][T23752] ? fput+0xe2/0xf0 [ 1428.498677][T23752] do_syscall_64+0xcd/0xf80 [ 1428.498693][T23752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.498704][T23752] RIP: 0033:0x7f2b1558e15c [ 1428.498713][T23752] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1428.498723][T23752] RSP: 002b:00007f2b164ab030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1428.498734][T23752] RAX: ffffffffffffffda RBX: 00007f2b157e6090 RCX: 00007f2b1558e15c [ 1428.498741][T23752] RDX: 000000000000000f RSI: 00007f2b164ab0a0 RDI: 0000000000000005 [ 1428.498747][T23752] RBP: 00007f2b164ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1428.498754][T23752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1428.498760][T23752] R13: 00007f2b157e6128 R14: 00007f2b157e6090 R15: 00007ffd1f1ae738 [ 1428.498774][T23752] [ 1429.079165][T20735] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 1429.182927][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1429.227498][ T30] audit: type=1400 audit(1768429821.081:3252): avc: denied { connect } for pid=23741 comm="syz.1.4516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1429.279514][ T30] audit: type=1400 audit(1768429821.141:3253): avc: denied { ioctl } for pid=23757 comm="syz.4.4521" path="socket:[89023]" dev="sockfs" ino=89023 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1429.284053][T20735] usb 5-1: USB disconnect, device number 95 [ 1429.642783][ T30] audit: type=1400 audit(1768429821.511:3254): avc: denied { ioctl } for pid=23762 comm="syz.9.4522" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1429.824553][ T30] audit: type=1400 audit(1768429821.691:3255): avc: denied { read append } for pid=23771 comm="syz.1.4524" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1429.881716][ T30] audit: type=1400 audit(1768429821.721:3256): avc: denied { open } for pid=23771 comm="syz.1.4524" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1429.899792][T20735] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1430.114752][T23780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4525'. [ 1430.382415][T20735] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1430.399426][T20735] usb 5-1: config 0 has no interface number 0 [ 1430.426683][T20735] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1430.526690][T20735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.552959][T20735] usb 5-1: Product: syz [ 1430.561983][T20735] usb 5-1: Manufacturer: syz [ 1430.988544][T20735] usb 5-1: SerialNumber: syz [ 1431.021382][T20735] usb 5-1: config 0 descriptor?? [ 1431.133712][ T30] audit: type=1800 audit(1768429823.001:3257): pid=23786 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.8.4519" name="/newroot/255/bus" dev="tmpfs" ino=1404 res=0 errno=0 [ 1431.255965][T20735] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1431.362132][T20735] usb 5-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 1431.419812][T20735] usb 5-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 1432.455083][ T6195] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1432.610263][T23797] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 1432.691841][T23804] Cannot find add_set index 0 as target [ 1434.696217][ T30] audit: type=1400 audit(1768429826.561:3258): avc: denied { getopt } for pid=23838 comm="syz.8.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1435.254250][ T30] audit: type=1400 audit(1768429827.121:3259): avc: denied { accept } for pid=23838 comm="syz.8.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1436.115288][T23858] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4544'. [ 1436.720993][T23866] overlayfs: missing 'lowerdir' [ 1437.978107][ T30] audit: type=1400 audit(1768429829.841:3260): avc: denied { write } for pid=23882 comm="syz.1.4552" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1438.175359][ T1243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1438.599748][ T30] audit: type=1804 audit(1768429830.431:3261): pid=23901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.4554" name="/newroot/117/file0" dev="tmpfs" ino=641 res=1 errno=0 [ 1438.952690][ T6185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1439.274620][T23912] overlayfs: missing 'lowerdir' [ 1441.413050][T23949] /dev/nullb0: Can't open blockdev [ 1441.786810][T23954] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4571'. [ 1443.378416][T17122] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1443.401682][T23970] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1443.417514][ T9] IPVS: starting estimator thread 0... [ 1443.510250][T23972] IPVS: using max 44 ests per chain, 105600 per kthread [ 1444.561921][ T1243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1444.604418][T23991] fuse: Bad value for 'fd' [ 1445.169797][ T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1445.541173][ T9] usb 10-1: config 0 has an invalid interface number: 17 but max is 0 [ 1445.549618][ T9] usb 10-1: config 0 has no interface number 0 [ 1445.561936][ T9] usb 10-1: New USB device found, idVendor=07ca, idProduct=a800, bcdDevice=98.f4 [ 1445.591894][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.609746][ T9] usb 10-1: Product: syz [ 1445.615348][ T9] usb 10-1: Manufacturer: syz [ 1445.629743][ T9] usb 10-1: SerialNumber: syz [ 1445.641429][ T9] usb 10-1: config 0 descriptor?? [ 1445.652246][ T9] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 1445.668584][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1445.688642][ T9] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 1445.725427][ T9] usb 10-1: media controller created [ 1445.868139][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1445.990423][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1445.997882][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1446.012601][ T9] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 1446.109814][ T9] rc_core: IR keymap rc-avermedia-m135a not found [ 1446.119487][ T9] Registered IR keymap rc-empty [ 1446.130262][ T9] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 1446.163454][ T9] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input61 [ 1446.190645][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1446.205070][ T9] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 1446.229060][ T9] usb 10-1: USB disconnect, device number 14 [ 1446.276576][ T9] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 1446.776920][T24023] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4591'. [ 1446.862606][T24027] wg1: entered promiscuous mode [ 1446.871744][T24027] wg1: entered allmulticast mode [ 1447.652155][T24038] x_tables: duplicate underflow at hook 2 [ 1448.480015][T24047] UHID_CREATE from different security context by process 445 (syz.9.4597), this is not allowed. [ 1449.046883][T17122] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1449.260728][T24058] autofs: Bad value for 'fd' [ 1450.174188][T24076] syzkaller0: entered promiscuous mode [ 1450.184487][T24076] syzkaller0: entered allmulticast mode [ 1450.195688][ T30] audit: type=1400 audit(1768429842.061:3262): avc: denied { read } for pid=24077 comm="syz.9.4607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1450.320278][T17122] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1451.163432][T24106] netlink: 'syz.8.4616': attribute type 1 has an invalid length. [ 1451.171648][T24106] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4616'. [ 1451.186730][ T30] audit: type=1400 audit(1768429843.051:3263): avc: denied { read } for pid=24101 comm="syz.8.4616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1451.187129][T24106] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4616'. [ 1451.240166][ T6003] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1451.401042][ T6003] usb 2-1: config 0 has no interfaces? [ 1451.406719][ T6003] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1451.416062][ T6003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.424200][ T9] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1451.433422][ T6003] usb 2-1: config 0 descriptor?? [ 1451.600396][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1451.608142][ T9] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1451.617335][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.625466][ T9] usb 1-1: Product: syz [ 1451.638108][ T9] usb 1-1: Manufacturer: syz [ 1451.643717][ T9] usb 1-1: SerialNumber: syz [ 1451.650685][ T9] usb 1-1: config 0 descriptor?? [ 1451.658560][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 1451.671722][T16939] usb 2-1: USB disconnect, device number 93 [ 1452.086940][T20013] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1452.365447][ T9] gspca_se401: ExtraFeatures: 110 [ 1452.379819][ T9] gspca_se401: Too many frame sizes [ 1452.492471][ T30] audit: type=1804 audit(1768429844.351:3264): pid=24127 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.4625" name="/newroot/373/file0" dev="tmpfs" ino=1998 res=1 errno=0 [ 1452.643069][T16939] usb 1-1: USB disconnect, device number 120 [ 1452.839439][ T30] audit: type=1804 audit(1768429844.701:3265): pid=24130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.4626" name="/newroot/137/file0" dev="tmpfs" ino=742 res=1 errno=0 [ 1452.976860][ T6185] Bluetooth: hci1: Frame reassembly failed (-84) [ 1452.984952][ T6185] Bluetooth: hci1: Frame reassembly failed (-84) [ 1452.994858][T24139] netlink: 'syz.4.4627': attribute type 4 has an invalid length. [ 1453.201008][T24143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1453.220216][T22776] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1453.232274][T24139] lo speed is unknown, defaulting to 1000 [ 1453.250798][ T30] audit: type=1400 audit(1768429845.121:3266): avc: denied { ioctl } for pid=24142 comm="syz.9.4631" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1453.412673][T22776] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1453.437328][T22776] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1453.446856][T22776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1453.457756][T22776] usb 2-1: SerialNumber: syz [ 1453.722951][T22776] usb 2-1: bad CDC descriptors [ 1453.736235][T22776] usb 2-1: USB disconnect, device number 94 [ 1454.050001][T16939] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1454.499191][T16939] usb 1-1: config 0 has no interfaces? [ 1454.505867][T16939] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1454.516185][T16939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.527910][T16939] usb 1-1: config 0 descriptor?? [ 1454.528251][ T30] audit: type=1804 audit(1768429846.391:3267): pid=24163 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.4638" name="/newroot/141/file0" dev="tmpfs" ino=764 res=1 errno=0 [ 1454.754193][T16939] usb 1-1: USB disconnect, device number 121 [ 1454.800058][ T9266] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1454.937425][T24175] hub 9-0:1.0: USB hub found [ 1454.942880][T24175] hub 9-0:1.0: 1 port detected [ 1454.961455][T20013] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1455.395409][T24117] overlayfs: statfs failed on './file0' [ 1456.162586][ T9266] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1456.933616][T22776] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1457.002930][T24204] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1457.427082][T24203] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1457.446643][T24203] kvm: Disabled LAPIC found during irq injection [ 1562.547438][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1562.554410][ C0] rcu: 1-...!: (1 GPs behind) idle=856c/0/0x1 softirq=136824/136825 fqs=1 [ 1562.564241][ C0] rcu: (detected by 0, t=10506 jiffies, g=120949, q=355 ncpus=2) [ 1562.572042][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1562.572067][ C1] NMI backtrace for cpu 1 [ 1562.572081][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1562.572099][ C1] Tainted: [L]=SOFTLOCKUP [ 1562.572104][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1562.572111][ C1] RIP: 0010:__rcu_read_unlock+0xbb/0x5a0 [ 1562.572133][ C1] Code: 3b 48 8d bd 88 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 <84> d2 0f 85 cf 01 00 00 8b 85 88 04 00 00 85 c0 75 55 65 48 8b 1d [ 1562.572145][ C1] RSP: 0018:ffffc90000a08d68 EFLAGS: 00000006 [ 1562.572156][ C1] RAX: 0000000000000003 RBX: 0000000000000000 RCX: ffffc90000a08d54 [ 1562.572164][ C1] RDX: 0000000000000000 RSI: ffffffff8daa8a1d RDI: ffff88801dab2948 [ 1562.572172][ C1] RBP: ffff88801dab24c0 R08: 0000000000000001 R09: 0000000000000000 [ 1562.572181][ C1] R10: 0000000000000001 R11: ffff88801dab2ff0 R12: ffff88801dab24c0 [ 1562.572189][ C1] R13: 1891e14bc00d618a R14: 0000000000000002 R15: ffff888074e6bc10 [ 1562.572197][ C1] FS: 0000000000000000(0000) GS:ffff8881249f4000(0000) knlGS:0000000000000000 [ 1562.572210][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1562.572218][ C1] CR2: 00007f2b155733e0 CR3: 000000007778b000 CR4: 00000000003526f0 [ 1562.572226][ C1] Call Trace: [ 1562.572232][ C1] [ 1562.572240][ C1] advance_sched+0x6f6/0xc80 [ 1562.572263][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1562.572280][ C1] __hrtimer_run_queues+0x202/0xc40 [ 1562.572301][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1562.572318][ C1] ? read_tsc+0x9/0x20 [ 1562.572338][ C1] hrtimer_interrupt+0x397/0x8e0 [ 1562.572355][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 1562.572372][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1562.572389][ C1] [ 1562.572394][ C1] [ 1562.572399][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1562.572412][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1562.572427][ C1] Code: 86 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f9 11 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1562.572438][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 1562.572448][ C1] RAX: 000000000598ee59 RBX: 0000000000000001 RCX: ffffffff8b7866d9 [ 1562.572456][ C1] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b480 [ 1562.572463][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 1562.572471][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 1562.572479][ C1] R13: ffff88801dab24c0 R14: ffffffff9088bdd0 R15: 0000000000000000 [ 1562.572490][ C1] ? ct_kernel_exit+0x139/0x190 [ 1562.572508][ C1] default_idle+0x13/0x20 [ 1562.572525][ C1] default_idle_call+0x6c/0xb0 [ 1562.572541][ C1] do_idle+0x38d/0x510 [ 1562.572560][ C1] ? __pfx_do_idle+0x10/0x10 [ 1562.572580][ C1] cpu_startup_entry+0x4f/0x60 [ 1562.572597][ C1] start_secondary+0x21d/0x2d0 [ 1562.572610][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1562.572624][ C1] common_startup_64+0x13e/0x148 [ 1562.572650][ C1] [ 1562.573062][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g120949 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1562.887724][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1562.897676][ C0] rcu: RCU grace-period kthread stack dump: [ 1562.903545][ C0] task:rcu_preempt state:R running task stack:28056 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1562.917021][ C0] Call Trace: [ 1562.920285][ C0] [ 1562.923207][ C0] ? __schedule+0x10b9/0x6150 [ 1562.927875][ C0] __schedule+0x1139/0x6150 [ 1562.932370][ C0] ? __lock_acquire+0x436/0x2890 [ 1562.937323][ C0] ? __mod_timer+0x8f2/0xd30 [ 1562.941923][ C0] ? __pfx___schedule+0x10/0x10 [ 1562.946784][ C0] ? find_held_lock+0x2b/0x80 [ 1562.951472][ C0] ? schedule+0x2d7/0x3a0 [ 1562.955799][ C0] schedule+0xe7/0x3a0 [ 1562.959864][ C0] schedule_timeout+0x123/0x290 [ 1562.964704][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1562.970066][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1562.975348][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1562.981149][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1562.986601][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1562.991362][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1562.996642][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1563.001833][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1563.006760][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1563.011604][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1563.017405][ C0] rcu_gp_kthread+0x26d/0x380 [ 1563.022074][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1563.027260][ C0] ? rcu_is_watching+0x12/0xc0 [ 1563.032012][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1563.037203][ C0] ? __kthread_parkme+0x19e/0x250 [ 1563.042222][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1563.047408][ C0] kthread+0x3c5/0x780 [ 1563.051471][ C0] ? __pfx_kthread+0x10/0x10 [ 1563.056051][ C0] ? rcu_is_watching+0x12/0xc0 [ 1563.060798][ C0] ? __pfx_kthread+0x10/0x10 [ 1563.065387][ C0] ret_from_fork+0x983/0xb10 [ 1563.069965][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1563.075066][ C0] ? __switch_to+0x7af/0x10d0 [ 1563.079733][ C0] ? __pfx_kthread+0x10/0x10 [ 1563.084313][ C0] ret_from_fork_asm+0x1a/0x30 [ 1563.089087][ C0] [ 1563.092089][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1563.098399][ C0] CPU: 0 UID: 0 PID: 3802 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 1563.109492][ C0] Tainted: [L]=SOFTLOCKUP [ 1563.113795][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1563.123835][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1563.130330][ C0] RIP: 0010:smp_call_function_many_cond+0xdfd/0x15e0 [ 1563.136998][ C0] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 45 5f 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 b6 05 00 00 8b 43 08 31 [ 1563.156592][ C0] RSP: 0018:ffffc9000d567808 EFLAGS: 00000293 [ 1563.162643][ C0] RAX: 0000000000000000 RBX: ffff8880b8540cc0 RCX: ffffffff81b29cb1 [ 1563.170604][ C0] RDX: ffff888033550000 RSI: ffffffff81b29c8b RDI: 0000000000000005 [ 1563.178559][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1563.186512][ C0] R10: 0000000000000001 R11: ffff888033550b30 R12: dffffc0000000000 [ 1563.194465][ C0] R13: ffffed10170a8199 R14: 0000000000000001 R15: 0000000000000001 [ 1563.202428][ C0] FS: 0000000000000000(0000) GS:ffff8881248f4000(0000) knlGS:0000000000000000 [ 1563.211359][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1563.217936][ C0] CR2: 00007f2b164a9fe0 CR3: 000000000e184000 CR4: 00000000003526f0 [ 1563.225900][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 1563.233858][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1563.241818][ C0] Call Trace: [ 1563.245172][ C0] [ 1563.248104][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1563.253128][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x3e/0x1b0 [ 1563.259623][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1563.265938][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1563.271305][ C0] ? __pfx___text_poke+0x10/0x10 [ 1563.276239][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1563.281261][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1563.286362][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x3e/0x1b0 [ 1563.292849][ C0] smp_text_poke_batch_finish+0x27b/0xdb0 [ 1563.298568][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1563.304804][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1563.311037][ C0] ? find_held_lock+0x2b/0x80 [ 1563.315711][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1563.321692][ C0] jump_label_update+0x376/0x550 [ 1563.326644][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 1563.332550][ C0] static_key_enable+0x1a/0x20 [ 1563.337312][ C0] toggle_allocation_gate+0xfa/0x280 [ 1563.342598][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1563.348485][ C0] ? rcu_is_watching+0x12/0xc0 [ 1563.353242][ C0] process_one_work+0x9ba/0x1b20 [ 1563.358183][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1563.364330][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1563.369702][ C0] ? assign_work+0x1a0/0x250 [ 1563.374285][ C0] worker_thread+0x6c8/0xf10 [ 1563.378876][ C0] ? __kthread_parkme+0x19e/0x250 [ 1563.383891][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1563.388993][ C0] kthread+0x3c5/0x780 [ 1563.393055][ C0] ? __pfx_kthread+0x10/0x10 [ 1563.397638][ C0] ? rcu_is_watching+0x12/0xc0 [ 1563.402387][ C0] ? __pfx_kthread+0x10/0x10 [ 1563.406971][ C0] ret_from_fork+0x983/0xb10 [ 1563.411551][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1563.416650][ C0] ? __switch_to+0x7af/0x10d0 [ 1563.421319][ C0] ? __pfx_kthread+0x10/0x10 [ 1563.425899][ C0] ret_from_fork_asm+0x1a/0x30 [ 1563.430668][ C0]