last executing test programs: 10m47.546385447s ago: executing program 2 (id=1351): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) (async) r5 = socket$inet6(0xa, 0x3, 0x6) (async) socket(0x14, 0x5, 0x5) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x1802, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f00000004c0)) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8) (async) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffe0) (async) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40081) (async) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="c40000001900080000000000fbdb289fe38a962f849e0c113917066842df25fc00000000000000000000000000000000000000000000bb00000008000000000200002000"/79, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="0100000001000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000ddffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000c001c00", @ANYRES32=r6, @ANYRES8=r7], 0xc4}, 0x1, 0x0, 0x0, 0x28008001}, 0x0) (async) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee3, 0x0, 0x2, 0xbfdfffb8}, &(0x7f00000000c0), &(0x7f0000000040)=0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0xfffffffc, 0x0, 0x3631564e, 0x7, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {0x7, 0xfffffffd}, {0x0, 0x80000}], 0x10, 0x0, 0x0, 0x0, 0x2}}) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x4004, @fd, 0x3, 0x20, 0x1, 0xf0a462ef7147f6e5, 0x1, {0x2, r9}}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000480)='net/rt_cache\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB='(k']) 10m46.649249925s ago: executing program 2 (id=1360): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010003904faffffff0000000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001000000000000000677265001c000268034470000900000008001400"], 0x48}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8cf47c81", @ANYRES16=r2, @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x50, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x4805) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r6 = socket$unix(0x1, 0x2, 0x0) shutdown(r6, 0xb403dc3ee651df83) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, 0x8) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x2, 0xa, 0x6) r9 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 10m45.724848979s ago: executing program 2 (id=1363): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406e051c0100000000000109022400010000200009040000090300000009210000000122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x166) r2 = syz_io_uring_setup(0x2c3d, &(0x7f0000000280)={0x0, 0xbbae, 0x10, 0x3, 0x8}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x20, 0x1, {0x2}}) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m42.090331586s ago: executing program 2 (id=1374): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000240)={0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000133000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, &(0x7f0000b19000/0x4000)=nil, &(0x7f0000366000/0x3000)=nil, &(0x7f000035a000/0x4000)=nil, &(0x7f000098a000/0x4000)=nil, &(0x7f00002e5000/0x4000)=nil, &(0x7f0000bbc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000df5000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)="ada7add567670a893303eaca99ec08a42110bab48f38e5c0369a48607dd74355876dd0e61df947f3145c8a894ad3daedd22306b5bafd8ca6f504be890ae4d155872984bc3bce634b66d1833aa47691208b3806bbb89d60389ba39c63ba6ca1a75f2ccd711f09da1a348252cc49da3a3d5d0d5a2e857c0cf1676c65ebd21fcb27d1dbf133ec9a3964088dd5e3d0e1bcff875a618059bd875f605c9b7889fce9a99d42f00a77baf16740aa889bbfb2b2fac4639af50b691b3fa97561291dee2a0baabbc5f8930b29ae429ad642fb9a02bb3e7bbba2878123ce52680dae62036449461c2660fd213f7bda03d709c2d370e96ce6", 0xf2, r1}, 0x68) r4 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80dc5521, &(0x7f0000002300)=""/4115) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x0, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0x4, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x6, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="140000003a000b63c55a80648c251b090ab5e9d1", 0x14}], 0x1}, 0x810) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24500, 0x0) r9 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "a8cfec1040c4c04dd41ec2264a856281649ccb419f5b625a1254d840dd56a0779c7ca83df072feb076993263e373f2e6a57807c340fc13e69230cce7912d533a", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$setperm(0x5, r9, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) r10 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'e', 0x3a, '\x00\x00eh`\x1a\x00+^\x01\xa0\xfdZ\x020\x93-M\x93\xf4\x7fj\x05B\xf5,\xf4\xe8\x18<\xfd{\xe9\xd2\xfb\xf6\xa2COg\x84\xc8\xd7\x1c\x93\x87\xc2y\xe4%\xff\x14\x91\xfc\xbdRDs[\xc0\x03^~\x1d\xda\xd5\xf5\x83B\xc4?\xe9[:\x1d\xf9\x95\x8e\xfe\x10,\\^\x84\x8d\xb39\xfeu\xbd\x05cN ~\xbf:Z\xfd!$\xfc\x01@\xc0\xc2\xe0i+\xd7\xac\xaa\xd2!\b\x1b\xa8\x9f\x9f\xe3\x06\xe3~&\xe0x8\x84\xa9\xc3\xb6\xed\x92\x95\xa5\xbb\xb8\x04dB\xfd', 0x3a, './file1'}, 0xb5) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 10m40.094271964s ago: executing program 2 (id=1384): inotify_add_watch(0xffffffffffffffff, 0x0, 0x2800047e) socket$kcm(0x10, 0x7, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x3f9, 0x7ffb, 0x10001, 0x9, 0x1, "4a1dc2845f0fa22085367ba53dbeb335b0c408", 0x927, 0x7fffffff}) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) (async) close(r3) (async) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) (rerun: 64) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 10m39.598369402s ago: executing program 2 (id=1385): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) (async, rerun: 64) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64) keyctl$get_persistent(0x16, r0, r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x162c7247a884d7fe, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x2100}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_CARRIER={0x5, 0x21, 0xd0}, @IFLA_PORT_SELF={0x30, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "10832cc684ba6ff28d3749e3f998de13"}, @IFLA_PORT_VF={0x8, 0x1, 0xc2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48014}, 0x810) (async) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)) (async) sched_setaffinity(r3, 0x8, &(0x7f00000003c0)) (async, rerun: 64) fchdir(r2) (rerun: 64) r4 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r4, &(0x7f0000000400)=""/46, 0x2e, 0x1, &(0x7f0000000440)={0x2, 0x0, @dev}, 0x10) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x40040) r6 = openat$cgroup_ro(r5, &(0x7f00000004c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f0000000500)={0x0, 0x1, @start={0x5}}) (async) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000580)=0x4) (async) ptrace(0x11, r3) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e20, @multicast2}], 0x20) (async) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000600)=0x1, 0x4) (async, rerun: 32) eventfd(0x400) (async, rerun: 32) r7 = syz_open_dev$media(&(0x7f0000000680), 0x5, 0x101000) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x4018, r7}, 0x18) (async) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000700)=0x3) (async) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000740)={{{@in=@local, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000840)=0xe8) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x6dd0f3a773e0bc34, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x805) (async) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000980)={{0x2000, 0x80a0000, 0x9, 0xb3, 0x4, 0x40, 0x7, 0x80, 0x9, 0x1, 0x10, 0xc}, {0x2000, 0xeeef0000, 0xc, 0x6, 0x17, 0xb, 0x4, 0x80, 0x5, 0xfc, 0x9, 0x5}, {0xeeee8000, 0x0, 0x3, 0xd7, 0x6, 0x3, 0x8, 0x4b, 0x9, 0xc, 0x8d, 0xf}, {0x1000, 0xeeef0000, 0x0, 0x3, 0x2, 0x7, 0x81, 0x6, 0x9, 0x5, 0x1, 0xff}, {0xdddd0000, 0x2, 0x8, 0x3, 0x7, 0x1, 0x5, 0x4, 0x8, 0x16, 0xf, 0x18}, {0x100000, 0x1000, 0xb, 0x0, 0xfa, 0xa, 0x1, 0x2f, 0x6, 0x5, 0x40, 0x9}, {0x0, 0xeeef0000, 0x8, 0x3, 0x6, 0x5, 0x12, 0x0, 0xff, 0x1, 0x2f, 0x8}, {0x8000000, 0xd000, 0x10, 0x4, 0x6, 0x5, 0x5, 0x80, 0x6, 0x1, 0x4}, {0xd000, 0x200}, {0xf000, 0x101}, 0x1, 0x0, 0x100000, 0x260044, 0xb, 0x2000, 0x80a0000, [0x8, 0x7, 0xb, 0x4]}) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async, rerun: 64) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b40), 0x202000, 0x0) (async, rerun: 64) r9 = geteuid() getgroups(0x2, &(0x7f0000000b80)=[0xee01, 0xffffffffffffffff]) mount$fuse(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x2000, &(0x7f0000000bc0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@default_permissions}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_hash}]}}) 10m24.407574506s ago: executing program 32 (id=1385): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) (async, rerun: 64) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64) keyctl$get_persistent(0x16, r0, r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x162c7247a884d7fe, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x2100}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_CARRIER={0x5, 0x21, 0xd0}, @IFLA_PORT_SELF={0x30, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "10832cc684ba6ff28d3749e3f998de13"}, @IFLA_PORT_VF={0x8, 0x1, 0xc2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48014}, 0x810) (async) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)) (async) sched_setaffinity(r3, 0x8, &(0x7f00000003c0)) (async, rerun: 64) fchdir(r2) (rerun: 64) r4 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r4, &(0x7f0000000400)=""/46, 0x2e, 0x1, &(0x7f0000000440)={0x2, 0x0, @dev}, 0x10) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x40040) r6 = openat$cgroup_ro(r5, &(0x7f00000004c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f0000000500)={0x0, 0x1, @start={0x5}}) (async) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000580)=0x4) (async) ptrace(0x11, r3) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e20, @multicast2}], 0x20) (async) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000600)=0x1, 0x4) (async, rerun: 32) eventfd(0x400) (async, rerun: 32) r7 = syz_open_dev$media(&(0x7f0000000680), 0x5, 0x101000) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x4018, r7}, 0x18) (async) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000700)=0x3) (async) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000740)={{{@in=@local, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000840)=0xe8) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x6dd0f3a773e0bc34, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x805) (async) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000980)={{0x2000, 0x80a0000, 0x9, 0xb3, 0x4, 0x40, 0x7, 0x80, 0x9, 0x1, 0x10, 0xc}, {0x2000, 0xeeef0000, 0xc, 0x6, 0x17, 0xb, 0x4, 0x80, 0x5, 0xfc, 0x9, 0x5}, {0xeeee8000, 0x0, 0x3, 0xd7, 0x6, 0x3, 0x8, 0x4b, 0x9, 0xc, 0x8d, 0xf}, {0x1000, 0xeeef0000, 0x0, 0x3, 0x2, 0x7, 0x81, 0x6, 0x9, 0x5, 0x1, 0xff}, {0xdddd0000, 0x2, 0x8, 0x3, 0x7, 0x1, 0x5, 0x4, 0x8, 0x16, 0xf, 0x18}, {0x100000, 0x1000, 0xb, 0x0, 0xfa, 0xa, 0x1, 0x2f, 0x6, 0x5, 0x40, 0x9}, {0x0, 0xeeef0000, 0x8, 0x3, 0x6, 0x5, 0x12, 0x0, 0xff, 0x1, 0x2f, 0x8}, {0x8000000, 0xd000, 0x10, 0x4, 0x6, 0x5, 0x5, 0x80, 0x6, 0x1, 0x4}, {0xd000, 0x200}, {0xf000, 0x101}, 0x1, 0x0, 0x100000, 0x260044, 0xb, 0x2000, 0x80a0000, [0x8, 0x7, 0xb, 0x4]}) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async, rerun: 64) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b40), 0x202000, 0x0) (async, rerun: 64) r9 = geteuid() getgroups(0x2, &(0x7f0000000b80)=[0xee01, 0xffffffffffffffff]) mount$fuse(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x2000, &(0x7f0000000bc0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@default_permissions}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_hash}]}}) 8m33.1268112s ago: executing program 4 (id=1783): ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230126bd7000fcdbdf251400000008000300", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000002480)=@chain={'key_or_keyring:', r6}) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r5) syz_usb_connect(0x6, 0xffffffffffffff80, 0x0, 0x0) r7 = syz_io_uring_setup(0x988, &(0x7f00000003c0)={0x0, 0x9beb, 0x20000, 0xfffffffd, 0x25d}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r7, 0x52dc, 0xf62e, 0x3, 0x0, 0xffffffffffffffc0) 8m30.242631591s ago: executing program 4 (id=1789): socket$nl_rdma(0x10, 0x3, 0x14) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) (async) r0 = socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="080003"], 0x94}}, 0x0) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 8m29.884053336s ago: executing program 4 (id=1791): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000380)={0x14, &(0x7f0000000300)={0x40, 0xc, 0x3c, {0x3c, 0xd, "07676363ebae036816944b7eab387832b9e9d8d50288bf6039511a5ce9fb50111bfee7f3237e3618dc2cdc45d6bcadeb6d20ea1a8c46f671757f"}}, &(0x7f0000000440)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "c4d1f46b37a74e9255f6b1faf258ad1038d7242f6bf3af9a49e76a317e6d0510a5c53749782ce2fd649ed31dfc9e29552468dbd7c06501946c4f925084cc94a3a5dcd584a7b60a2a04a173178b1a2e53824615837d9bbe86fe1e51cef32d988a70584a37a793717a36cddf9ec7fa7d3c4d8bea044dc4f166e4489684683b5f1ff433e6cabf1ecbd080801c72f5d12b323c138ad4f254e330a71936a14da10c5d939b448beaa42a7f1ceaaf34bfd50a128db299e4df2a1f4daa12f761a69f087f302281a0"}}}, &(0x7f0000000700)={0x34, &(0x7f0000000540)={0x40, 0xe, 0xb6, "a7c0ff5541591adb4a1e24684f7dbda8e006dfb3e1588012d7988ec6ab796c54b8ded457543b8db94c9cea4f259a5fd61b54cc32d44187d93c874adc896f3e9fcfe1bb3404d52a5ef0e721127bba24d18033aa70dbf0d46cd4dbd5125172407a544e1a3663d938dfaff65587a26908134a36d08da0f979c6605ac2e398eae83e552ba43eed953af805c639628750b9f58ff924f12a66a85d085a7ec235d9992bd5660bb9a5504e570c438147871edf69e75a27116d84"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000640)={0xc0, 0xa1, 0x4, 0xffffff7f}, &(0x7f0000000680)={0x40, 0xa0, 0x4, 0x2}, &(0x7f00000006c0)={0xc0, 0xa2, 0x2f, "0196cd0a8edf56b907538ca417a274d6b503f6078f26a28039aad10a5fbeb3d56a4ae4d8817173ad06a9902417b767"}}) syz_usb_connect$cdc_ecm(0x6, 0x4e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x1, 0x1, 0x2, 0x60, 0x9, [{{0x9, 0x4, 0x0, 0xf8, 0x2, 0x2, 0x6, 0x0, 0x4e, {{0x6, 0x24, 0x6, 0x0, 0x0, 'H'}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x6, 0x1007, 0x10}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x10, 0xc8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xe, 0x5, 0x3}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x0, 0x3, 0x8, 0x40, 0x6}, 0xb5, &(0x7f00000000c0)={0x5, 0xf, 0xb5, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x80, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x6, 0x0, 0xffff, 0xc9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x7, 0x1, 0xfffd, 0x4}, @generic={0x79, 0x10, 0x4, "420bd6ee5366749a0b91fab65d4d44a03773766a8c0b8c293310d6f54ef5450c69d083ee34c3919984ed3b1f3433cd73df0b7c8833a468890b3a66512aaa6840e19ebe77472a1a80776e7b87ca4ad0537ee30c632007a05df891e9284a6154906d530a318daec7335852b28ffe4dd3c3ced1e8a21d65"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "f909d21689328a84da1ce0f1e2aa2e98"}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000200)=@string={0x4, 0x3, "9616"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000007c0)={0x14, &(0x7f0000000740)={0x0, 0x4, 0x2c, {0x2c, 0x11, "1b9046961425e59cdfb5c47fcfe903eb286e3a42dc4085e9c6c9f87a75ff530617ec1977459c96e4fcbd"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x1c, &(0x7f0000000800)={0x20, 0x12, 0x93, "7ee5244a9920a80a285f54cc6493f9d308f20aaa2c0b3055cf2be62e505a349dd385321290b67db66ca440f4c254239f912c42031f1659822f3187b48c5620e6a3befa359e902d51b3d77139ac7f25e83f946dd9949827ca0d6a24886d221157b8637057786e4af63698a6af62f59fcfe8ee946100d42a5baaf4098756cd6b0a28f454faf2603f8ff2fce370969354f46461f4"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x1}}) 8m26.290733153s ago: executing program 4 (id=1804): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) cachestat(r0, &(0x7f0000000040), &(0x7f0000000080), 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="75b6fc71534bf77f8fceac9c190f2604034534000000000000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0xb4, @lang_id={0x0, 0x3, 0xc2b}}, 0x0, 0x0}, 0x0) 8m23.769881629s ago: executing program 4 (id=1816): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000200)={"1b00", 0x3, 0x5, 0x2, 0x6397, 0x0, "0400b7e7a2aac9779bf500", "010100", "032000", "18b637c7", ["8bbb00fda8e45cfe00000900", "ab5286400309000000008516", "400000000000000000fe4800", "000b000000000000001000"]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000451}, 0x4044810) connect$inet(r2, &(0x7f0000000280)={0x2, 0xfffd, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000200)={"1b00", 0x3, 0x5, 0x2, 0x6397, 0x0, "0400b7e7a2aac9779bf500", "010100", "032000", "18b637c7", ["8bbb00fda8e45cfe00000900", "ab5286400309000000008516", "400000000000000000fe4800", "000b000000000000001000"]}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) (async) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000451}, 0x4044810) (async) connect$inet(r2, &(0x7f0000000280)={0x2, 0xfffd, @broadcast}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) 8m23.069902658s ago: executing program 4 (id=1820): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_io_uring_setup(0x58c8, &(0x7f0000000500)={0x0, 0x3261, 0x2, 0x2, 0x2b4}, &(0x7f0000000440), &(0x7f0000000580)) mmap$IORING_OFF_SQ_RING(&(0x7f0000465000/0x1000)=nil, 0x1000, 0x3, 0xe2b83ed22bcd0993, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x329902, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000080)=0x6) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="0b0100000000000001090224000100000000730904000001030000c20921000008012207000905810300000600"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000d40), 0x0, 0xe814) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) preadv(r0, 0x0, 0x0, 0x1, 0xfffffff0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d0102030109021200010000cc0009040000002ac59800"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="e1bc70f7f4f379e829751d569f0374e9d85b27c2ec279264ca0e14d1df462996da6218d274b16707c490c53cf373ebd78d539ecea553f6d82cfe0568ba0d1e48dba72adafbe5ad51465e3e795f2271735222fd09fc35ac1702e52408dcf9d4f22faa042db5b00d0975f3f88a1892675dc9b26a01ad602893a8e4f604535e199245d10fb229026ea2df1b97badab6d33a8754de0c22808247306bf55e5664cdb52a79a7ad146040937411eacd40d2c551c1572267e6693bf85f22", 0xba, 0x40000, &(0x7f0000000040)={0xa, 0x4e24, 0x6a, @private1, 0x7}, 0x1c) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000000)='/dev/kvm\x00', 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 8m8.733176022s ago: executing program 33 (id=1820): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_io_uring_setup(0x58c8, &(0x7f0000000500)={0x0, 0x3261, 0x2, 0x2, 0x2b4}, &(0x7f0000000440), &(0x7f0000000580)) mmap$IORING_OFF_SQ_RING(&(0x7f0000465000/0x1000)=nil, 0x1000, 0x3, 0xe2b83ed22bcd0993, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x329902, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000080)=0x6) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="0b0100000000000001090224000100000000730904000001030000c20921000008012207000905810300000600"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000d40), 0x0, 0xe814) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) preadv(r0, 0x0, 0x0, 0x1, 0xfffffff0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d0102030109021200010000cc0009040000002ac59800"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="e1bc70f7f4f379e829751d569f0374e9d85b27c2ec279264ca0e14d1df462996da6218d274b16707c490c53cf373ebd78d539ecea553f6d82cfe0568ba0d1e48dba72adafbe5ad51465e3e795f2271735222fd09fc35ac1702e52408dcf9d4f22faa042db5b00d0975f3f88a1892675dc9b26a01ad602893a8e4f604535e199245d10fb229026ea2df1b97badab6d33a8754de0c22808247306bf55e5664cdb52a79a7ad146040937411eacd40d2c551c1572267e6693bf85f22", 0xba, 0x40000, &(0x7f0000000040)={0xa, 0x4e24, 0x6a, @private1, 0x7}, 0x1c) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000000)='/dev/kvm\x00', 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 3m40.493838881s ago: executing program 0 (id=2720): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000240)=ANY=[@ANYBLOB='noswap']) open(&(0x7f0000000000)='./file0\x00', 0x6000, 0x12a) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}]}) 3m40.174065379s ago: executing program 0 (id=2721): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x400, 0x0, 0x9, 0x6}, {0x9, 0x5, 0xd, 0x2, 0x40, 0x5f, 0xa0, 0x9a}, {0x9, 0x5, 0x5, 0x3, 0x20, 0xa, 0x10, 0x10}}}}}}]}}, 0x0) (rerun: 64) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000}) (async, rerun: 64) r2 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0xcd1d, 0x10100, 0x2}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x4}}, 0x40) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x1}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32) io_uring_enter(r2, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) (async, rerun: 32) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x75) (async, rerun: 32) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) (async, rerun: 32) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) pipe(&(0x7f00000000c0)) (async, rerun: 64) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x71, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x4, 0x0, 0x400003}, 0x0) (async, rerun: 64) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) (rerun: 64) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000000680)={&(0x7f00000001c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40001}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) socket(0x1, 0x2, 0x0) (rerun: 32) 3m36.726815011s ago: executing program 0 (id=2728): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000080)='./file0\x00', 0x115) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f1585231b560608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}, {@dfltuid}]}}) r8 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r8, &(0x7f00000076c0)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3m35.563897634s ago: executing program 0 (id=2735): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300), &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=""/237}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f00000001c0)=[0x39e], 0x2) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) close_range(r2, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208001e0000000401a80008000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) 3m35.457720328s ago: executing program 0 (id=2736): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000500)={0x0, 0x100008b}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0xfffffffb) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x1, 0x0) (async) read$msr(0xffffffffffffffff, &(0x7f000001b000)=""/102400, 0x19000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x4840) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioperm(0x9, 0x9, 0x7) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) (async) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) (async) syz_pidfd_open(0x0, 0x0) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0xa7d8, 0xf5d9, 0xefcf, 0xfff, 0x5, "cce4ca264c6c70443b4c6830c267a000", 0x8, 0x1000}) (async) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) (async) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x6c6c9c9e, 0x0) read$msr(r5, &(0x7f00000345c0)=""/102365, 0x18fdd) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 3m34.954664853s ago: executing program 0 (id=2738): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5f46}}, './file0\x00'}) sendto$x25(r0, &(0x7f0000000140)="423f0b0ead1109c94056661e7c964d658b690d6960406ad293f5507154e97c5e5e7fceb9fde6a553b2c6cd7e38530e04c896fed6ca15e80a16c0978c5ff8069cb801bd0010d4513fc6243bbd82d3a5c9a973b9d4f0c643c46024200fdcc8d57aeac8faf78b62ebc3480a597691c6356947bd6ebc49b1d7f528f8e230acc883388831dccfa97496321db061c3e33bb683ba7338008970c950a19e2e371f88a1cf1adbd6dcb8165ef13bbe46c6c5e10f761193070be2cab4633851f9a600968160fab8988270", 0xc5, 0x8001, &(0x7f0000000240)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x1, @mcast1, 0x1000}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0xfffe, 0x0, @mcast1}}, {{0xa, 0x4e24, 0x0, @empty, 0x8}}}, 0x108) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0144147ca400000000001c0000001c00000007000000000000000200000d000000000500000096cedff5fc8db3000000000a0000000500000000615f2e6161000000000000000000000000000054861b5b7add9fe37268320aaaae308599cbc72ea7d77466d612e8883365656c08021d45eb90fc71e01d731e3e80f2645b5786e84d"], 0x0, 0x3b, 0x0, 0x0, 0x9}, 0x28) 3m20.403776745s ago: executing program 34 (id=2738): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5f46}}, './file0\x00'}) sendto$x25(r0, &(0x7f0000000140)="423f0b0ead1109c94056661e7c964d658b690d6960406ad293f5507154e97c5e5e7fceb9fde6a553b2c6cd7e38530e04c896fed6ca15e80a16c0978c5ff8069cb801bd0010d4513fc6243bbd82d3a5c9a973b9d4f0c643c46024200fdcc8d57aeac8faf78b62ebc3480a597691c6356947bd6ebc49b1d7f528f8e230acc883388831dccfa97496321db061c3e33bb683ba7338008970c950a19e2e371f88a1cf1adbd6dcb8165ef13bbe46c6c5e10f761193070be2cab4633851f9a600968160fab8988270", 0xc5, 0x8001, &(0x7f0000000240)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x1, @mcast1, 0x1000}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0xfffe, 0x0, @mcast1}}, {{0xa, 0x4e24, 0x0, @empty, 0x8}}}, 0x108) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0144147ca400000000001c0000001c00000007000000000000000200000d000000000500000096cedff5fc8db3000000000a0000000500000000615f2e6161000000000000000000000000000054861b5b7add9fe37268320aaaae308599cbc72ea7d77466d612e8883365656c08021d45eb90fc71e01d731e3e80f2645b5786e84d"], 0x0, 0x3b, 0x0, 0x0, 0x9}, 0x28) 2m57.918429681s ago: executing program 1 (id=2837): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020be73f043c0100000000000000430000000800", @ANYRES32=0x0, @ANYBLOB="00ed0000008b06e0000020000000bdb436140b005f0fcb2da79f00a285a1c58d13887c899321545ea9fcc5866b0ef872fd498c5582846b6789660cd2663a50e996bcf66a16d4c510265c1aba11e40372b702f5fe2a82a4e57a9b92049889660a9233641e1cc9150e007668102fcd5f39a9b8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e00000020000000200000000"], 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) userfaultfd(0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000800)={0x9c, 0x0, &(0x7f00000006c0)=[@register_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0x100a, 0x1}, @flat=@handle={0x73682a85, 0x100a, 0x2}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x1000}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xd}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/179, 0xb3, 0x1, 0xd}, @flat=@weak_handle={0x77682a85, 0x101}}, &(0x7f0000000500)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x2}], 0x77, 0x0, &(0x7f0000000780)="62873b44ddcd95fac13b65aea50805eea76a300bfef4b85f650e55d57aecc0fce86a85b4ef6cce0039f7f282d5e0380a8d288040de1a8a671c65994dc5b87bd9f91bfd7eed694b7f4e6b20bd4af3bef97fe882924248e6417de8484cfbc8168dd87ca4482898d7d89857ba414d6748fc9126a67b893ef3"}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000400)={0x0, 0xffffffffffffff88, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x40048850) syz_init_net_socket$ax25(0x3, 0x7, 0xce) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 2m54.528357643s ago: executing program 1 (id=2841): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x544}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000362000/0x4000)=nil, &(0x7f0000099000/0x4000)=nil, 0x4000, 0x2}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000980)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000268000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/103, 0x67, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}, &(0x7f0000000280)=0x40) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) (async) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f00000000c0)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r7, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/75, 0x4b}, {&(0x7f0000000380)=""/239, 0xef}, {&(0x7f0000000480)=""/106, 0x6a}, {&(0x7f0000000500)=""/67, 0x43}], 0x4}, 0x6}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) readahead(r4, 0x0, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) fallocate(r9, 0x3, 0x80007, 0x8000c60) (async) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2m54.384007928s ago: executing program 1 (id=2842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) socket$inet6(0x10, 0x1, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, 0x0, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000779000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a000380"], 0x2c}}, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) 2m49.573201692s ago: executing program 1 (id=2852): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)={0x6c, 0x0, 0x1, 0x301, 0x0, 0x1a14, {0x2, 0x0, 0x1}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0xfffffffffffffeb1, 0x1, 'RAS\x00'}}, @CTA_FILTER={0x0, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x0, 0x1, 0x100}, @CTA_FILTER_ORIG_FLAGS={0x1, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x0, 0x1, 0x88}, @CTA_FILTER_ORIG_FLAGS={0x0, 0x1, 0x41}, @CTA_FILTER_ORIG_FLAGS={0x0, 0x1, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x0, 0x2, 0x400}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r3 = dup(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES8=r2, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r5 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="bf", 0x1, 0xfffffffffffffffb) keyctl$describe(0x6, r5, &(0x7f0000001540)=""/18, 0x12) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r9, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) 2m46.138763334s ago: executing program 1 (id=2864): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000000000088}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x401) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./file1/file0/file0\x00', 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xc3100, 0x3, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5e) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f00000002c0), 0x44, &(0x7f0000000440)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}, {@metacopy_off}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, 'GPL\x00'}}, {@flag='nomand'}], 0x2f}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 2m43.654140962s ago: executing program 1 (id=2871): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xde}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080), 0x7f03) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4040010) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r9 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r9, 0x21, &(0x7f0000002d00)={0x800002a, 0x0, 0xffffffff}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2m29.153404016s ago: executing program 35 (id=2871): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xde}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080), 0x7f03) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4040010) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r9 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r9, 0x21, &(0x7f0000002d00)={0x800002a, 0x0, 0xffffffff}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2m21.987601364s ago: executing program 5 (id=2929): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028000080080003"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028000080080003"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) (async) 2m21.814205304s ago: executing program 5 (id=2931): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4, 0xc, @loopback, 0x2}, 0x1c) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 2m21.741849469s ago: executing program 5 (id=2932): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'veth1_virt_wifi\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70296f908000000b703000000000000850000000600000085000000050000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$dri(0x0, 0x7a, 0x20000) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000840), 0x40000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0100020002000240"], 0xc) 2m18.710632662s ago: executing program 5 (id=2941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x5a9b, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x0, 0x6, 0x9}) 2m18.630808496s ago: executing program 5 (id=2942): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x16001) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xd166}}, './file0\x00'}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x60881, 0x0) (async) fchdir(r1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f00000001c0)={0xa3, 0x0, &(0x7f0000000180)}) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0xa2000) ioctl$CEC_ADAP_G_CAPS(r2, 0xc04c6100, &(0x7f0000000100)) (async) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES16], 0x0) 2m15.647818493s ago: executing program 5 (id=2953): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) (async) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) (async) acct(&(0x7f00000001c0)='./file0\x00') (async) 2m0.881589233s ago: executing program 36 (id=2953): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) (async) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) (async) acct(&(0x7f00000001c0)='./file0\x00') (async) 19.897196836s ago: executing program 7 (id=3351): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/67, 0x43}, {&(0x7f00000003c0)=""/243, 0xf3}], 0x4, &(0x7f00000025c0)=""/4096, 0x1000}, 0x10000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='personality\x00') lseek(r2, 0x1000000, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x26, 0x10000180}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000140)='gpu_mem_total\x00', r4, 0x0, 0x400000000005}, 0x18) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r0, @ANYRESDEC=r4], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 19.686655128s ago: executing program 7 (id=3352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) socketpair(0x1, 0x1, 0x310b085a, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 19.366574065s ago: executing program 7 (id=3354): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002540)='./file0\x00', &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x94ba5b603aee7fc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002600)={0x0, 0x0, 0x0}, &(0x7f0000002640)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002740)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000002840)=0xe8) getgroups(0x1, &(0x7f0000002880)=[0xee01]) statx(0xffffffffffffffff, &(0x7f00000029c0)='./file0\x00', 0x1000, 0x80, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000040)="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", 0x2000, &(0x7f0000002c40)={&(0x7f0000002040)={0x50, 0x0, 0x1000, {0x7, 0x2b, 0x6, 0x80004, 0x9, 0x4dcd, 0x9a4, 0x5, 0x0, 0x0, 0x10, 0xa}}, &(0x7f00000020c0)={0x18, 0xfffffffffffffff5, 0x8, {0x10000}}, &(0x7f0000002100)={0x18, 0xffffffffffffffda, 0xfffffffffffffff9, {0x4}}, &(0x7f0000002140)={0x18, 0xfffffffffffffff5, 0x8, {0x8}}, &(0x7f0000002180)={0x18, 0x0, 0x7, {0x10}}, &(0x7f00000021c0)={0x28, 0xfffffffffffffffe, 0x8, {{0xffffffffffffffff, 0x1ff, 0x0, r1}}}, &(0x7f0000002200)={0x60, 0x0, 0x3, {{0xae, 0x6, 0x9, 0x2, 0x5, 0x400, 0xbe, 0x7fffffff}}}, &(0x7f0000002280)={0x18, 0x0, 0x2, {0x3}}, &(0x7f00000022c0)={0x11, 0x0, 0xca5, {'\x00'}}, &(0x7f0000002300)={0x20, 0xffffffffffffffda, 0x1d06, {0x0, 0xa}}, &(0x7f0000002340)={0x78, 0x0, 0x0, {0xfff, 0x0, 0x0, {0x4, 0x8, 0xffffffffffffffff, 0x2fe, 0x0, 0x7f, 0x3, 0x5, 0x2, 0x2000, 0x1000, 0xee01, 0xee00, 0x9, 0x200}}}, &(0x7f0000002440)={0x90, 0xffffffffffffffda, 0x4, {0x2, 0x0, 0x6, 0x1, 0x7, 0x8, {0x3, 0xf, 0x1, 0x220, 0x80000001, 0x9, 0x6, 0x1, 0x0, 0x6000, 0x81, 0x0, r3, 0x4, 0x9}}}, &(0x7f0000002500)={0x30, 0x0, 0x8, [{0x5, 0x9, 0x4, 0x2, '%\\.}'}]}, &(0x7f0000002680)={0xb0, 0x0, 0x4000000, [{{0x5, 0x0, 0x93, 0x2, 0x80000000, 0x1, {0x4, 0xb8, 0x5, 0xb715, 0xd, 0x1, 0x6, 0x2e, 0xf148, 0xc000, 0x10, r4, r7, 0x7, 0x200}}, {0x4, 0x0, 0x2, 0x98000000, '(.'}}]}, &(0x7f00000028c0)={0xa0, 0x0, 0xaa5a, {{0x0, 0x1, 0x3, 0x7fff, 0xfff, 0x100, {0x3, 0x7, 0x3d, 0x3, 0x400, 0x100, 0x7f, 0x4, 0x2f5e, 0xa000, 0x8, r8, r9, 0x7, 0xfff}}, {0x0, 0x1a}}}, &(0x7f0000002980)={0x20, 0x0, 0x9, {0x78, 0x0, 0xe8, 0x4}}, &(0x7f0000002b00)={0x130, 0x16a14b0fee22d892, 0xffffffffffffff7f, {0xc, 0x3, 0x0, '\x00', {0x400, 0x7, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, r11, 0x2000, '\x00', 0xf, 0x8000000000000000, 0x2, 0x5, {0x83fb, 0x6}, {0x100000001, 0x8}, {0xffffffffffffffff, 0x2}, {0xf, 0xff}, 0x0, 0x8, 0xc, 0x3}}}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r12, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x48000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002e80)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000002f80)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000002fc0)={0xeada, 0x9, {r5}, {r6}, 0x0, 0x5}) lsetxattr$system_posix_acl(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)='system.posix_acl_default\x00', &(0x7f0000003000)={{}, {0x1, 0x7}, [{0x2, 0x4, r2}, {0x2, 0x1, r13}, {0x2, 0x4, r10}, {0x2, 0x4, r2}, {0x2, 0x4, r10}, {0x2, 0x5, r14}, {0x2, 0xb, r10}], {}, [{0x8, 0x1, r3}], {0x10, 0x2}, {0x20, 0x8}}, 0x64, 0x3) rename(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)='./file0\x00') r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003140)={0x0, 0x80, 0x6, &(0x7f0000003100)={0x15, "23e253c024f34d3e77d8308fc5739b9d42b4cdda6b5dc3b019503e134889df7381"}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), r12) r16 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003200)={0x4, &(0x7f00000031c0)=[{0x2, 0x2, 0x8, 0x8}, {0x5, 0x8, 0x8}, {0x83, 0x7b, 0x5, 0x10}, {0x0, 0x8, 0xa, 0x80}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r16, 0x40182103, &(0x7f00000032c0)={r17, 0x0, r15, 0x5, 0x80000}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003380)=0x0) mount$tmpfs(0x0, &(0x7f0000003300)='./file0\x00', &(0x7f0000003340), 0x804000, &(0x7f00000033c0)={[{@noswap}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x74, 0x67]}}, {@quota}, {@inode64}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x37, 0x65, 0x67]}}], [{@smackfshat={'smackfshat', 0x3d, 'nl80211\x00'}}, {@fowner_gt={'fowner>', r18}}, {@fsname={'fsname', 0x3d, 'system.posix_acl_default\x00'}}, {@uid_eq={'uid', 0x3d, r14}}, {@permit_directio}]}) ioctl$INCFS_IOC_CREATE_FILE(r16, 0xc058671e, &(0x7f0000003900)={{'\x00', 0x2}, {0x2}, 0x40, 0x0, 0x0, &(0x7f00000034c0)='./file0\x00', &(0x7f0000003500)='./file0\x00', &(0x7f0000003540)="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", 0x1df, 0x0, &(0x7f0000003740)={0x2, 0xe3, {0x1, 0xc, 0x7f, "36ddb93c809975fe74104a6f25116b3794aca9e5c206d9b3c9e53da899ea35b7009783042a722e4da5959859cbfdd720d10a52eaef89438e7561e6816b0de6ddd92af67d57577872c80769786ce19b01d381800873a742a4efb433b9ba7ce389077d1f0b81a8b2e7b37e3637f7373c69378d800b8be5c632566e9882a3f227", 0x57, "fb9199ff9a9a3c73030912fdfffa3d49edb14cb800e0a4e875768767125a6ba890a542d3c4c2370d29a5b0d1dd52b03c8a6a4e15a479e3f67369557933817a8539befc69fe710e54f3188f1826385ce56ce46b1a9d83bd"}, 0xa9, "3ce500e8758080a8a37e262609be43915cd01726b4356f7e476d93521128b55ae17ecf0047d7bf705165c906b98596b99b5bde6c8acfb73acf29aca585b04765d928621eaa01fccef82533019758d61187d57fed84796ebdce53520eea686f5f689c4d0d26cc25fffd02b50714bec1c4232e9140355b382871e94170a639f97b6d7bbf544692fe22e0999d909be66945de48d396e59f79e9d7ec6a2521c9a6eb6019c3e4e2c96ade7b"}, 0x198}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000039c0)={&(0x7f0000003980)=""/36, 0x8000, 0x0, 0x6, 0x2}, 0x20) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a40), r12) sendmsg$NL80211_CMD_DISASSOCIATE(r12, &(0x7f0000003bc0)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003b80)={&(0x7f0000003a80)={0xc4, r19, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="4365e9f027c3dd13254920df558a0976389f2b300e4c6ceccbc59144"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x162f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xff81}, @NL80211_ATTR_IE={0x5e, 0x2a, [@mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, {{}, 0xde, 0x8, @device_a, 0x8, @void, 0x7, 0x6, @device_b, 0x556c}}, @perr={0x84, 0x2f, {0x9, 0x3, [{{0x0, 0x1}, @broadcast, 0xd, @value=@broadcast}, {{}, @broadcast, 0x2, @void, 0x2d}, {{}, @device_b, 0x1, @void, 0x17}]}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0xf}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8011) r20 = syz_clone(0x1010000, &(0x7f0000003c00)="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", 0x1000, &(0x7f0000004c00), &(0x7f0000004c40), &(0x7f0000004c80)="f4feb55108cab9a77ce741e35e1e099682041f73238e4ebad8500bf72c398d20fb7ef9229bef2d82f1fb1ac5ffc1856a916d4a0d926d46975d09ea84ea498545a0053a8fb0a5bdaa3d4852e429da6aba80ca323d46328f5290016b00a0b9b157076e1c14c58378388bc3fe1dd10a9158e39534ee2f6118c09cc3777ca37e199e27432e554f284c173c3be04a2ef6b6840a08e4304f9c76b1356c") ptrace$ARCH_MAP_VDSO_32(0x1e, r20, 0x76, 0x2002) sendmsg$TIPC_NL_MEDIA_GET(r12, &(0x7f0000005040)={&(0x7f0000004d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005000)={&(0x7f0000004d80)={0x280, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffd9d}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x577}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x27}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6fb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x74a2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf661}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x62}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa94}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5a25a556}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffd9b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x61e}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x516}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x800}, 0x20000cc5) 19.222424362s ago: executing program 7 (id=3355): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x60000) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x4, 0x10000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) unshare(0x24020400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x292701, 0x0) r6 = dup(0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000140)={0x181e1001, 0x5000, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) fcntl$notify(r5, 0x402, 0x8) sendfile(r4, r3, &(0x7f0000002080)=0x3a, 0x23b) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000ac0)='./file0\x00', 0x0) 17.054019617s ago: executing program 8 (id=3362): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x109c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r2 = open_tree(0xffffffffffffffff, 0x0, 0x89901) sendfile(0xffffffffffffffff, r1, 0x0, 0x82) ioctl$sock_proto_private(r2, 0x800089e4, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000280)=ANY=[]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x0, 0x1ffffffd, 0x4, 0x6, 0x0, {0x6, 0x100, 0x0, 0xd, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50, 0x0, r4, {0x7, 0x26, 0x10001, 0xfffffffff2a2764e, 0x0, 0x0, 0x0, 0x3}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x1a) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0xa0, 0x0, 0x3, {{0xffffffffffffffff, 0x0, 0x0, 0x10000000000, 0xfffffffb, 0x0, {0x0, 0x7fff, 0x6, 0x2, 0x3, 0x0, 0x0, 0x2, 0xfffffffd, 0x8000, 0xfffffffc, r5, r6, 0xfffffffd}}}}, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1f3ffc00e2c84759d7d9fd9283c99837740684c16abb86b2d1fa8f4317d06a89834cca941105bebe30e047af0f8ba7f462e9b3147e04e849971bc8f40294507f1a4e84d01959ffcbf780f5aea14d6ccd746ffb08b7424954c36d0731ea8e6fc1000614ad19db3a898fdf6974a48966c92e84b7a1352b6e078492e25e00"/140, @ANYRESDEC=r3], 0x98}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$nl_route(r2, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) 15.318464085s ago: executing program 8 (id=3364): close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) setreuid(0xee01, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xdd) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(0xffffffffffffffff) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) (async) setreuid(0xee01, 0xee01) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xdd) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00') (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) 14.769927439s ago: executing program 8 (id=3368): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000001090400000000000000000001000004300002002c00018014000300fe88000000000000000000000000000114000400fc000000"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x8) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}], [{@euid_lt}], 0x6b}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x1, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) epoll_create(0x400) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000080)=0x2) 14.538723802s ago: executing program 6 (id=3369): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0xa, 0x47) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x51, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x8, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)='(', 0x1}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) (async) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r8, 0x0, 0x0) (async) sendmsg$key(r8, 0x0, 0x0) close(r8) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x8, &(0x7f0000000200), 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x8, &(0x7f0000000200), 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x2, 0xfff1}, {0xe, 0xb}, {0x9, 0xffff}}, ["", ""]}, 0x24}}, 0x4008000) socket(0x29, 0x3, 0x0) 13.833925179s ago: executing program 6 (id=3370): syz_open_dev$sndpcmp(&(0x7f0000000380), 0x1, 0x8100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="23000000010007", 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r3, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000fc0)=""/130) syz_emit_ethernet(0x1c1, &(0x7f0000001540)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x38, 0x4, 0x1, 0x0, 0x1b3, 0x66, 0x0, 0xf6, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x2b, 0x96, [@dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @local, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010101, @remote]}, @generic={0x94, 0xf, "b1ae6cfffd9fe2b58f3dd470b3"}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x0, 0x9, "a608f29a50b44d"}, {0x1, 0x6, "b5938968"}]}, @ssrr={0x89, 0x23, 0xcb, [@private=0xa010102, @local, @local, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010100, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4c, 0x95, 0x1, 0xf, [{@local, 0xf9}, {@local, 0xc0}, {@remote, 0x6}, {@private=0xa010100, 0x9}, {@empty, 0xfffffff9}, {@local, 0x9}, {@rand_addr=0x64010100, 0x138}, {@multicast2, 0x1000}, {@multicast1, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0x19, 0x3, 0x8, [{@remote, 0x4}]}, @end]}}, {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x12, 0x142, 0x9, 0x0, 0x33, {[@nop, @fastopen={0x22, 0xc, "b1a489cd742f0ff6399f"}, @generic={0x1, 0x6, "acae8dd8"}, @timestamp={0x8, 0xa, 0x6, 0xfffffe01}, @window={0x3, 0x3, 0x8}, @sack={0x5, 0x12, [0x2, 0x1, 0xffffffff, 0x4]}]}}, {"1c49dae7019901c5328bfd14a61e6f14edf72d015173fb6cb01a53c7060fecf7893656e34ae49b12ed4569fa367fdad1630370696f464ae4a5b21eb724c6fcdffbc5a754d323e0f488ee71e493d7942978f35598126f4e2c2dd9cf4aaedc2d61478bde23e1a9962e06027bb3852dcc798cc9f604fd47cf2073d1ff851b55c608bd87b9cc38a2ac6cff1763"}}}}}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000001080)={0x0, 0x1, r2}) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, &(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @empty}, 0x2, 0x2, 0x1, 0x3}}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0x6, 0x0, &(0x7f0000000200)="63eced8e46dc", 0x0, 0xc697, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd}, 0x50) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x7cb7562f2d67) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 12.885717679s ago: executing program 9 (id=3372): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) 12.706090205s ago: executing program 9 (id=3373): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000480)={@remote, @remote, 0x0, 0x1, [@rand_addr=0x64010100]}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x2020) syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xaa, 0x3a, 0x37, 0x40, 0xb48, 0x2003, 0x3961, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x53, 0x0, 0x1, 0x27, 0xa1, 0x41, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x0, 0xa, 0x2, 0xfe}}]}}]}}]}}, 0x0) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r4, r3, 0x0, 0x80000000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000844}, 0x488c5ec5e04d419d) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000fa", @ANYRES16=r0, @ANYBLOB="010029bd7000000000000100000044000180060001000a00000008000b00736970000c000700000000002200000008000900620002000a0006006c626c637200000008000800000000000800050001000000"], 0x58}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000300)={0xe, 0x2, 0x5, "444900d730fae901000000068ff697b900", 0x20363159}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000009000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000600)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000740)={@remote, @remote, @local, 0x0, 0x8, 0x3, 0x480, 0x2, 0x1000004, r8}) r9 = syz_open_dev$vcsu(&(0x7f0000000000), 0xffff, 0x2400) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x7800, 0x8, 0x7, 0x1, {{0xc, 0x4, 0x1, 0x3, 0x30, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@noop, @noop, @rr={0x7, 0x7, 0x6a, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @noop, @end, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x4a, [@rand_addr=0x64010100]}]}}}}}) prctl$PR_SCHED_CORE(0x22, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=@can_newroute={0x90, 0x18, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1d, 0x1, 0x3}, [@CGW_LIM_HOPS={0x5, 0xd, 0x7}, @CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "d421c6254e905984"}, 0x6}}, @CGW_FILTER={0xc, 0xb, {{0x2, 0x0, 0x1}, {0x1}}}, @CGW_DST_IF={0x8, 0xa, r10}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "b150732ffef2548b"}, 0x5}}, @CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "e34b7961405350e3"}, 0x5}}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x7, 0x2, 0x0, 0x0, "71faea12f78a23ef"}, 0x4}}]}, 0x90}}, 0x8060) ioctl$KVM_GET_STATS_FD_cpu(r9, 0xaece) 12.705359784s ago: executing program 3 (id=3374): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x124c1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x2000) 12.496598873s ago: executing program 3 (id=3375): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) (async) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x141240) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x380, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x380, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000002000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006c617374000000000c00028008000140000000060900010073797a30000000000900020073797a320000000014000000110001c98c8254a599c10000000000"], 0x74}}, 0x0) socket(0x2, 0x80805, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000019340)={r2, 0xe0, &(0x7f0000019240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f00000190c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000019100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000019140)=[{}], 0x8, 0x10, &(0x7f0000019180), &(0x7f00000191c0), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000019200)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000019340)={r2, 0xe0, &(0x7f0000019240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f00000190c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000019100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000019140)=[{}], 0x8, 0x10, &(0x7f0000019180), &(0x7f00000191c0), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000019200)}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x1c, r7, 0x1, 0x70bd27, 0xa, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r9, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r9, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00') (async) renameat(r9, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r9, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 12.105731148s ago: executing program 6 (id=3376): r0 = syz_usb_connect(0x4, 0x133, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x89, 0x68, 0xcb, 0x20, 0x45e, 0x451, 0x88f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x121, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x7f, 0x2, 0x2, 0xe0, 0x8b, 0x89, 0x0, [], [{{0x9, 0x5, 0xe, 0x2, 0x200, 0x2, 0x0, 0x0, [@generic={0xfd, 0xb, "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"}]}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 11.9105566s ago: executing program 8 (id=3377): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, 0x0, 0x40) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000740)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000780)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000007c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000800)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000880)={&(0x7f0000000840)=[0x0, 0x0, 0x0, r5, r6, r7, r8], 0x7}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r0, 0x0, 0x0) fchdir(r9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000640)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) 11.567069624s ago: executing program 3 (id=3378): syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) read$FUSE(r5, &(0x7f0000000bc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000480)=0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0), 0x218000, &(0x7f00000005c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfffffffffffffffb}}, {}, {@default_permissions}], [{@euid_eq={'euid', 0x3d, r7}}, {@smackfsroot={'smackfsroot', 0x3d, '-:\xfb$,^&-'}}, {@smackfsdef={'smackfsdef', 0x3d, '.()\x1e[&\\,!\xe5@\t\xa8'}}, {@smackfsfloor}, {@uid_gt={'uid>', r8}}, {@obj_role}]}}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$MEDIA_IOC_DEVICE_INFO(r5, 0xc1007c00, &(0x7f0000000280)) 11.536601628s ago: executing program 3 (id=3379): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x101, 0x4, 0x1f4bf1ba}, 0x10) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 11.426371596s ago: executing program 6 (id=3380): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_procfs$pagemap(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x24}}, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = memfd_create(0x0, 0x3) ftruncate(r3, 0xffff) (async) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={r3, 0x1, 0x10000}) syz_io_uring_submit(0x0, 0x0, 0x0) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc2}}) epoll_create(0x50) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000240)={0x52, 0x1, 0x1, {0x1, 0x1}, {0x45, 0x2}, @const={0x3, {0x400, 0x5, 0x9, 0x3}}}) (async) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) 11.353940532s ago: executing program 6 (id=3381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "68c4502393926b50", "02f7fffffffffffffff400", "0100"}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x10c7010, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@version_L}], [{@dont_appraise}, {@uid_eq={'uid', 0x3d, r5}}, {@fsmagic={'fsmagic', 0x3d, 0xb}}, {@fsname={'fsname', 0x3d, '\xc8^\'@'}}, {@measure}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@dont_hash}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd27, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000) 11.019264713s ago: executing program 9 (id=3382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "68c4502393926b50", "02f7fffffffffffffff400", "0100"}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x10c7010, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@version_L}], [{@dont_appraise}, {@uid_eq={'uid', 0x3d, r5}}, {@fsmagic={'fsmagic', 0x3d, 0xb}}, {@fsname={'fsname', 0x3d, '\xc8^\'@'}}, {@measure}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@dont_hash}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd27, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000) 10.974610213s ago: executing program 3 (id=3383): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000140)=0xb, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) sendto$unix(r2, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) 10.512713927s ago: executing program 7 (id=3384): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kvm_dirty_ring_push\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x28000) fsopen(0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a3c22400905fb0aff03f70709090587"], 0x0) fchdir(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$rxrpc(0x21, 0x2, 0xa) shutdown(r3, 0x1) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close_range(r0, r4, 0x0) 10.511765803s ago: executing program 6 (id=3385): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x400) preadv(r3, &(0x7f00000000c0)=[{&(0x7f00000008c0)=""/4107, 0x100b}], 0x1, 0x7fff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, &(0x7f00000000c0)=@tcp6}, 0x20) bind$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000004c0)={[0x0, &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x8, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@delqdisc={0x24, 0x25, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xa, 0xb}, {0x7, 0x2}}}, 0x24}}, 0x8004) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00'}) 10.381076804s ago: executing program 9 (id=3386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x31fbfc75dfedef56, {0x32c7, 0x80}, 0xcd, 0x3}}) ptrace(0x4208, r2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', r7, 0x7, 0x7, 0xfffffffe, 0x80000000, {{0x5, 0x4, 0x0, 0x8, 0x14, 0xffff, 0x0, 0xec, 0x0, 0x0, @multicast2, @broadcast}}}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x200000d1) symlinkat(0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0) 9.299242406s ago: executing program 8 (id=3387): r0 = socket$caif_stream(0x25, 0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_usb_connect(0x7, 0x3b, &(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES32=r3, @ANYRES16, @ANYRES64=r0], &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffd43, 0x0}) 9.161755892s ago: executing program 9 (id=3388): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x4008af25, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000280), 0x0, 0x80000, 0x0, 0xffffffffffffffff}) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x6, @none, 0x0, 0x2}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="980000000001050500000400000000000a0000003c0002802c00018014000300ff01000000000000000000000000200114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff0800074000000001040006809476a4d772e8ccd6943824f62191910861e313bf628fc1cf7b3486ebb2fed80506701cc2ce9d0a840f5c2bad430befe8e9079775c2"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc0000000000000000000001080007400000000004000680"], 0x98}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x4e2d83, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYRES64=r4], 0x1530}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x64, 0x0, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x3, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 8.880356833s ago: executing program 3 (id=3389): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f0000000200), 0x6c6c9c9e, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x6c6c9c9e, 0x0) read$msr(r1, &(0x7f000004b780)=""/102361, 0xffffff53) getpid() (async) r2 = getpid() r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0x8da8d) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0xfffffffffffffd63, 0x5}) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000005000)=""/102370, 0x18fe2) (async) read$msr(r5, &(0x7f0000005000)=""/102370, 0x18fe2) move_pages(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, 0x0, 0x0) syz_emit_ethernet(0x13d, 0x0, 0x0) (async) syz_emit_ethernet(0x13d, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5670fae9d6dcd3292ea54e5beef915d564c90aede", 0x18) accept4(r6, 0x0, 0x0, 0x800) (async) accept4(r6, 0x0, 0x0, 0x800) 4.262559638s ago: executing program 8 (id=3390): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') read$FUSE(r1, &(0x7f0000004dc0)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9bd"], 0x1c}}, 0x4000000) recvmmsg$unix(r3, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/229, 0xe5}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f00000008c0)=""/215, 0xd7}, {&(0x7f0000000740)=""/254, 0xfe}], 0x6}}], 0x3, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}) close_range(r0, 0xffffffffffffffff, 0x0) 1.955134816s ago: executing program 9 (id=3391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) syz_emit_ethernet(0xa2, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000280)={r3}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r4, 0x100000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r6, 0xffffffffffffffff, 0x4, 0x7) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x0, 0x0) 0s ago: executing program 7 (id=3392): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r4 = accept(r0, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) write(r5, &(0x7f0000000040)="cb", 0xfffffdef) kernel console output (not intermixed with test programs): es leftover after parsing attributes in process `syz.6.2952'. [ 1008.959040][T19156] SELinux: failed to load policy [ 1009.189993][ T5975] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1009.363500][ T5975] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1009.392718][ T5975] usb 7-1: config 0 has no interface number 0 [ 1009.436671][ T5975] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 107, changing to 10 [ 1009.485598][ T5975] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 25455, setting to 1024 [ 1009.542568][ T5975] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1009.584895][ T5975] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1009.618940][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.650981][ T5975] usb 7-1: config 0 descriptor?? [ 1009.821231][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1009.833514][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1009.842678][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1009.851275][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1009.860563][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1009.908442][T19170] wlan0 speed is unknown, defaulting to 1000 [ 1010.147294][T19170] chnl_net:caif_netlink_parms(): no params data found [ 1010.211592][T19170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.219294][T19170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.226651][T19170] bridge_slave_0: entered allmulticast mode [ 1010.233860][T19170] bridge_slave_0: entered promiscuous mode [ 1010.244638][T19156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.245425][T19170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.260126][T19156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.260583][T19170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.275198][T19170] bridge_slave_1: entered allmulticast mode [ 1010.282971][T19170] bridge_slave_1: entered promiscuous mode [ 1010.292611][ T5975] input: HID 28bd:0042 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0042.0032/input/input59 [ 1010.334614][T19170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.351502][T19170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.372897][ T5975] uclogic 0003:28BD:0042.0032: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.6-1/input1 [ 1010.421555][T19170] team0: Port device team_slave_0 added [ 1010.431639][T19170] team0: Port device team_slave_1 added [ 1010.481118][ T5975] usb 7-1: USB disconnect, device number 54 [ 1010.508643][T19170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.517487][T19170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1010.547693][T19170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.559675][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.568356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.592986][T19170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.604972][T19170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1010.636172][T19170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.807484][T19181] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1010.995012][T19170] hsr_slave_0: entered promiscuous mode [ 1011.011582][T19170] hsr_slave_1: entered promiscuous mode [ 1011.017813][T19170] debugfs: 'hsr0' already exists in 'hsr' [ 1011.031399][T19170] Cannot create hsr debugfs directory [ 1011.162635][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.171329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.180752][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.235965][T19170] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.248886][T19170] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.336876][T19170] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.355453][T19170] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.384976][T19190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2965'. [ 1011.436528][T19170] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.458823][T19170] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.848251][ T5849] Bluetooth: hci0: command tx timeout [ 1011.991891][T19170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1012.000515][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.011866][T19170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1012.022832][T19170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1012.193242][T19170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1012.309260][T19170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.326627][T19170] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.337646][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.344823][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.403363][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.410464][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.515368][T19170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1012.525920][T19170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1013.337807][T19170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.431991][T19170] veth0_vlan: entered promiscuous mode [ 1013.449062][T19170] veth1_vlan: entered promiscuous mode [ 1013.492194][T19170] veth0_macvtap: entered promiscuous mode [ 1013.509777][T19170] veth1_macvtap: entered promiscuous mode [ 1013.536322][T19170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.551555][T19170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.753662][ T1153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.810670][ T1153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.826954][ T1153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.836268][ T5849] Bluetooth: hci0: command tx timeout [ 1013.844736][ T1103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.955696][T19214] openvswitch: netlink: Flow actions attr not present in new flow. [ 1014.058108][T19219] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2970'. [ 1014.060493][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.084761][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.107235][T19219] netlink: 'syz.8.2970': attribute type 3 has an invalid length. [ 1014.115230][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.116697][T19219] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2970'. [ 1014.128209][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.765824][T19234] netlink: 'syz.6.2972': attribute type 3 has an invalid length. [ 1014.774374][T19234] netlink: 'syz.6.2972': attribute type 3 has an invalid length. [ 1015.721285][T19240] trusted_key: encrypted_key: master key parameter '-\)<=}U拙6V^'JڟhX)\s'' is invalid [ 1015.736941][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2974'. [ 1015.810482][ T5849] Bluetooth: hci0: command tx timeout [ 1016.050950][ T30] audit: type=1326 audit(1040.421:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.7.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1016.058661][ T3517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.082411][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.160808][ T30] audit: type=1326 audit(1040.421:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.7.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1016.183906][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.191068][ T30] audit: type=1326 audit(1040.432:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.7.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1016.214020][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.222312][ T30] audit: type=1326 audit(1040.432:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.7.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1016.245257][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.686467][ T30] audit: type=1326 audit(1040.432:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.7.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1016.687543][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.719574][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.728451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.739177][ T30] audit: type=1326 audit(1040.432:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.7.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1016.806072][ T30] audit: type=1326 audit(1040.432:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.7.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1016.829032][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.841207][ T30] audit: type=1326 audit(1040.432:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.7.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1016.864151][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.876982][ T30] audit: type=1326 audit(1040.432:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.7.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1016.905504][ T30] audit: type=1326 audit(1040.432:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19237 comm="syz.7.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1016.928435][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.953225][ T6027] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1017.006535][T19255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.022214][T19255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.030510][T12040] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1017.096216][ T6027] usb 7-1: device descriptor read/64, error -71 [ 1017.217298][T12040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1017.228684][T12040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.248023][T12040] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1017.265988][T12040] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1017.266994][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.280059][T12040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.302337][T12040] usb 4-1: config 0 descriptor?? [ 1017.353122][ T6027] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1017.496557][ T6027] usb 7-1: device descriptor read/64, error -71 [ 1017.610497][ T6027] usb usb7-port1: attempt power cycle [ 1017.712992][T12040] magicmouse 0003:05AC:0269.0033: unknown main item tag 0x3 [ 1017.727940][T12040] magicmouse 0003:05AC:0269.0033: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 1017.791491][ T5849] Bluetooth: hci0: command tx timeout [ 1017.930935][ T5975] usb 4-1: USB disconnect, device number 36 [ 1017.953207][ T6027] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1017.973090][ T6027] usb 7-1: device descriptor read/8, error -71 [ 1018.219792][ T6027] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1018.248920][ T6027] usb 7-1: device descriptor read/8, error -71 [ 1018.365293][ T6027] usb usb7-port1: unable to enumerate USB device [ 1018.736576][ T5975] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1018.888042][ T5975] usb 4-1: Using ep0 maxpacket: 16 [ 1018.894736][ T5975] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1018.907110][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1018.920721][ T5975] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1018.930270][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.940453][ T5975] usb 4-1: config 0 descriptor?? [ 1019.690602][T19274] syz_tun: entered allmulticast mode [ 1020.008842][ T6027] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 1020.161237][ T6027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 1020.184198][ T6027] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1020.199677][ T6027] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.208504][ T6027] usb 7-1: Product: syz [ 1020.217007][ T6027] usb 7-1: Manufacturer: syz [ 1020.262927][ T6027] usb 7-1: SerialNumber: syz [ 1020.303549][ T6027] usb 7-1: config 0 descriptor?? [ 1020.501511][T19280] overlayfs: failed to resolve './bus': -2 [ 1020.736215][T12040] usb 7-1: USB disconnect, device number 59 [ 1020.744446][T19273] syz_tun: left allmulticast mode [ 1021.015902][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1021.015919][ T30] audit: type=1400 audit(1045.681:1350): avc: denied { add_name } for pid=19281 comm="syz.8.2987" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1021.024196][T19283] o2cb: This node has not been configured. [ 1021.043178][ T30] audit: type=1400 audit(1045.691:1351): avc: denied { create } for pid=19281 comm="syz.8.2987" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1021.043288][ T30] audit: type=1400 audit(1045.691:1352): avc: denied { associate } for pid=19281 comm="syz.8.2987" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1021.094531][T19283] o2cb: Cluster check failed. Fix errors before retrying. [ 1021.102663][T19283] (syz.8.2987,19283,0):user_dlm_register:674 ERROR: status = -22 [ 1021.111865][T19283] (syz.8.2987,19283,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 1021.526406][ T3517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.535484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.633537][T19289] IPv6: syztnl1: Disabled Multicast RS [ 1021.671481][T19289] random: crng reseeded on system resumption [ 1022.135289][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.143407][ T3517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.151528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.243144][T12149] Process accounting resumed [ 1022.330972][ T5975] usbhid 4-1:0.0: can't add hid device: -71 [ 1022.351069][ T5975] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1022.385913][ T5975] usb 4-1: USB disconnect, device number 37 [ 1022.410025][T19297] netlink: 'syz.3.2992': attribute type 1 has an invalid length. [ 1022.613822][T19302] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2992'. [ 1022.616367][T19300] gretap1: entered promiscuous mode [ 1022.749190][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.791045][T15451] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1022.804774][T15451] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1022.813888][T15451] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1022.822262][T15451] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1022.832369][T15451] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1023.031515][T19303] wlan0 speed is unknown, defaulting to 1000 [ 1023.086667][T19306] befs: (nullb0): invalid magic header [ 1023.931754][T19310] veth3: entered allmulticast mode [ 1024.463047][T19303] chnl_net:caif_netlink_parms(): no params data found [ 1024.591712][T19303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.604801][T19303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.614388][T19303] bridge_slave_0: entered allmulticast mode [ 1024.624378][T19303] bridge_slave_0: entered promiscuous mode [ 1024.639320][T19303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.652532][T19303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.660295][T19303] bridge_slave_1: entered allmulticast mode [ 1024.672203][T19303] bridge_slave_1: entered promiscuous mode [ 1024.738137][T19303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.784605][T19303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.882964][T15451] Bluetooth: hci4: command tx timeout [ 1024.942401][T19303] team0: Port device team_slave_0 added [ 1024.976376][T19303] team0: Port device team_slave_1 added [ 1025.067352][T19303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.101107][T19303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.127103][ C1] vkms_vblank_simulate: vblank timer overrun [ 1025.229993][T19303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.255900][T19303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.263273][T19303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.386124][T19303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.438275][T19303] hsr_slave_0: entered promiscuous mode [ 1025.446016][T19303] hsr_slave_1: entered promiscuous mode [ 1025.454402][T19303] debugfs: 'hsr0' already exists in 'hsr' [ 1025.466278][T19303] Cannot create hsr debugfs directory [ 1025.630791][ T6027] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1025.752384][T19336] wlan0 speed is unknown, defaulting to 1000 [ 1025.788257][ T6027] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1025.813003][ T6027] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.826671][ T6027] usb 7-1: Product: syz [ 1025.868489][T19347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19347 comm=syz.8.3001 [ 1025.884458][ T6027] usb 7-1: Manufacturer: syz [ 1025.904467][ T6027] usb 7-1: SerialNumber: syz [ 1025.934414][ T6027] usb 7-1: config 0 descriptor?? [ 1025.956640][ T6027] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1026.073042][T19303] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1026.096673][T19303] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1026.148702][T19303] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1026.198326][T19303] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1026.305046][ T6027] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1026.338038][ T6027] sq905c 7-1:0.0: Reading version command failed [ 1026.349949][ T6027] sq905c 7-1:0.0: probe with driver sq905c failed with error -71 [ 1026.375243][ T30] audit: type=1400 audit(1051.318:1353): avc: denied { write } for pid=19359 comm="syz.6.3002" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1026.399129][ T6027] usb 7-1: USB disconnect, device number 60 [ 1026.414082][ T3517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.416264][T19303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.422564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.473420][T19303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.487493][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.494657][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.518213][ T9378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.525373][ T9378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.807415][T19303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.877189][T15451] Bluetooth: hci4: command tx timeout [ 1027.013684][T19133] netfs: Potential volume collision new=00000005 old=00000004 [ 1027.240288][T19303] veth0_vlan: entered promiscuous mode [ 1027.274680][T19303] veth1_vlan: entered promiscuous mode [ 1027.276953][T19377] SELinux: failed to load policy [ 1027.376932][T19303] veth0_macvtap: entered promiscuous mode [ 1027.396379][T19303] veth1_macvtap: entered promiscuous mode [ 1027.433099][T19303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.455505][T19303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.477330][ T1153] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.510262][ T1153] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.557374][ T1153] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.573675][ T1153] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.585515][ T2152] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1027.628390][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.636674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.646277][ T3517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.742696][ T2152] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1027.765516][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.776922][ T2152] usb 7-1: config 0 has no interface number 0 [ 1027.783036][ T2152] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 107, changing to 10 [ 1027.799645][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.838692][ T2152] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 25455, setting to 1024 [ 1027.852248][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.861274][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.919685][ T2152] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1027.995014][ T2152] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1028.023397][ T2152] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.035642][ T2152] usb 7-1: config 0 descriptor?? [ 1028.248345][T19387] block nbd7: shutting down sockets [ 1028.254078][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.326689][ T6027] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1028.534539][ T6027] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1028.553882][ T6027] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.564427][ T6027] usb 10-1: Product: syz [ 1028.573799][ T6027] usb 10-1: Manufacturer: syz [ 1028.581353][ T6027] usb 10-1: SerialNumber: syz [ 1028.622389][ T6027] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1028.646878][ T43] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1028.667437][T19377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.718362][T19377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.797266][ T2152] input: HID 28bd:0042 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0042.0034/input/input60 [ 1028.844221][T15451] Bluetooth: hci4: command tx timeout [ 1028.845267][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1028.860548][T19391] FAULT_INJECTION: forcing a failure. [ 1028.860548][T19391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.875081][T19391] CPU: 0 UID: 0 PID: 19391 Comm: syz.8.3008 Not tainted syzkaller #0 PREEMPT(full) [ 1028.875106][T19391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1028.875116][T19391] Call Trace: [ 1028.875122][T19391] [ 1028.875128][T19391] dump_stack_lvl+0x16c/0x1f0 [ 1028.875155][T19391] should_fail_ex+0x512/0x640 [ 1028.875180][T19391] _copy_to_user+0x32/0xd0 [ 1028.875206][T19391] drm_ioctl+0x5eb/0xc30 [ 1028.875233][T19391] ? __pfx_drm_mode_getresources+0x10/0x10 [ 1028.875252][T19391] ? __pfx_drm_ioctl+0x10/0x10 [ 1028.875285][T19391] ? selinux_file_ioctl+0x180/0x270 [ 1028.875308][T19391] ? selinux_file_ioctl+0xb4/0x270 [ 1028.875333][T19391] ? __pfx_drm_ioctl+0x10/0x10 [ 1028.875357][T19391] __x64_sys_ioctl+0x18b/0x210 [ 1028.875386][T19391] do_syscall_64+0xcd/0x4c0 [ 1028.875412][T19391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.875429][T19391] RIP: 0033:0x7f4f9718ebe9 [ 1028.875444][T19391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1028.875459][T19391] RSP: 002b:00007f4f98069038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1028.875476][T19391] RAX: ffffffffffffffda RBX: 00007f4f973c5fa0 RCX: 00007f4f9718ebe9 [ 1028.875486][T19391] RDX: 00002000000004c0 RSI: 00000000c04064a0 RDI: 0000000000000003 [ 1028.875496][T19391] RBP: 00007f4f98069090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.875506][T19391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.875516][T19391] R13: 00007f4f973c6038 R14: 00007f4f973c5fa0 R15: 00007fff8623e978 [ 1028.875539][T19391] [ 1029.171301][ T2152] uclogic 0003:28BD:0042.0034: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.6-1/input1 [ 1029.238917][ T92] usb 7-1: USB disconnect, device number 61 [ 1029.655865][T19404] tmpfs: Bad value for 'mpol' [ 1029.674284][ T30] audit: type=1400 audit(1054.688:1354): avc: denied { map } for pid=19401 comm="syz.8.3011" path="socket:[69125]" dev="sockfs" ino=69125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1029.872462][ T43] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1029.900440][ T43] ath9k_htc: Failed to initialize the device [ 1029.913461][ T30] audit: type=1400 audit(1054.688:1355): avc: denied { accept } for pid=19401 comm="syz.8.3011" path="socket:[69125]" dev="sockfs" ino=69125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1029.935047][T19402] fido_id[19402]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1029.988495][ T43] usb 10-1: ath9k_htc: USB layer deinitialized [ 1030.451496][T19415] block nbd6: Attempted send on invalid socket [ 1030.457777][T19415] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1030.469754][T19415] efs: cannot read volume header [ 1031.258325][T15451] Bluetooth: hci4: command tx timeout [ 1031.264183][ T5975] usb 10-1: USB disconnect, device number 2 [ 1031.631912][ T30] audit: type=1804 audit(1056.829:1356): pid=19422 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.3016" name="/newroot/31/file0" dev="tmpfs" ino=181 res=1 errno=0 [ 1031.942819][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.951116][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.044442][ T30] audit: type=1326 audit(1057.260:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19425 comm="syz.7.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1032.154017][T19424] netlink: 'syz.6.3015': attribute type 10 has an invalid length. [ 1032.187188][T19424] bridge0: port 3(team0) entered disabled state [ 1032.206909][ T30] audit: type=1326 audit(1057.260:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19425 comm="syz.7.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1032.295348][T19429] block nbd7: Attempted send on invalid socket [ 1032.302280][T19429] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1032.312319][T19429] XFS (nbd7): SB validate failed with error -5. [ 1032.344607][T19424] team0: left allmulticast mode [ 1032.412629][T19424] team_slave_0: left allmulticast mode [ 1032.420424][ T30] audit: type=1326 audit(1057.260:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19425 comm="syz.7.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1032.462059][T19424] team_slave_1: left allmulticast mode [ 1032.474555][ T30] audit: type=1326 audit(1057.260:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19425 comm="syz.7.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1032.514254][ T3517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.528687][T19444] netlink: 'syz.6.3015': attribute type 10 has an invalid length. [ 1032.547234][ T30] audit: type=1326 audit(1057.260:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19425 comm="syz.7.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1032.578553][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.583563][ T30] audit: type=1326 audit(1057.260:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19425 comm="syz.7.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1032.586910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.674690][ T30] audit: type=1326 audit(1057.260:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19425 comm="syz.7.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1032.708357][ T30] audit: type=1326 audit(1057.260:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19425 comm="syz.7.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1032.716818][T19424] batadv1: left allmulticast mode [ 1032.736064][ T30] audit: type=1326 audit(1057.260:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19425 comm="syz.7.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f069cf8ebe9 code=0x7ffc0000 [ 1032.832455][T19444] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3015'. [ 1032.841710][T19424] team0: left promiscuous mode [ 1032.846868][T19424] team_slave_0: left promiscuous mode [ 1032.854161][T19424] team_slave_1: left promiscuous mode [ 1032.860197][T19424] batadv1: left promiscuous mode [ 1033.108717][T19424] bridge0: port 3(team0) entered disabled state [ 1033.362753][T19454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=19454 comm=syz.8.3021 [ 1033.719576][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.056781][T19457] netlink: 'syz.7.3022': attribute type 1 has an invalid length. [ 1034.223445][T19460] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3022'. [ 1034.263419][T19424] batman_adv: batadv0: Adding interface: team0 [ 1034.279436][T19424] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.467404][T19424] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1034.528616][T19444] team0: entered promiscuous mode [ 1034.533749][T19444] team_slave_0: entered promiscuous mode [ 1034.549035][T19444] team_slave_1: entered promiscuous mode [ 1034.554876][T19444] batadv1: entered promiscuous mode [ 1034.582791][T19444] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.589957][T19444] batman_adv: batadv0: Interface activated: team0 [ 1034.596917][T19444] batman_adv: batadv0: Interface deactivated: team0 [ 1034.607561][T19444] batman_adv: batadv0: Removing interface: team0 [ 1034.621969][T19444] bridge0: port 3(team0) entered blocking state [ 1034.628815][T19444] bridge0: port 3(team0) entered disabled state [ 1034.638179][T19444] team0: entered allmulticast mode [ 1034.646844][T19444] team_slave_0: entered allmulticast mode [ 1034.652970][T19444] team_slave_1: entered allmulticast mode [ 1034.658847][T19444] batadv1: entered allmulticast mode [ 1034.666794][T19444] bridge0: port 3(team0) entered blocking state [ 1034.673186][T19444] bridge0: port 3(team0) entered forwarding state [ 1034.787773][T19457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1034.929375][T19458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1034.942086][T19458] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1034.973006][T19458] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1035.000242][T19459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.010195][T19459] batadv_slave_1: entered promiscuous mode [ 1035.024081][T19459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.040276][T19459] bond1: (slave batadv_slave_1): making interface the new active one [ 1035.048517][ T3497] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1035.048555][ T3497] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1035.072531][T19459] bond1: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 1035.084296][T19460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1036.130537][T19491] tmpfs: Bad value for 'huge' [ 1037.314337][T19511] trusted_key: encrypted_key: insufficient parameters specified [ 1037.366437][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.389068][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1037.389085][ T30] audit: type=1400 audit(1062.887:1374): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1037.422379][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.430808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.534954][ T30] audit: type=1400 audit(1062.887:1375): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1037.722376][T19514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1037.732231][T19514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1037.747138][T19514] netlink: 'syz.3.3034': attribute type 12 has an invalid length. [ 1037.967219][T19523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3035'. [ 1037.988919][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.997502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.225222][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.237618][T19534] netlink: 'syz.3.3036': attribute type 4 has an invalid length. [ 1039.301813][ T30] audit: type=1804 audit(1064.892:1376): pid=19532 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.3037" name="/newroot/5/file0" dev="tmpfs" ino=45 res=1 errno=0 [ 1039.334239][T19539] netlink: 'syz.3.3036': attribute type 4 has an invalid length. [ 1039.434291][T19539] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 1039.462959][ T30] audit: type=1800 audit(1065.018:1377): pid=19540 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3039" name="/" dev="9p" ino=14355223812243458 res=0 errno=0 [ 1040.278078][T19547] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3042'. [ 1040.439429][T19557] SELinux: policydb magic number 0x6f727473 does not match expected magic number 0xf97cff8c [ 1040.532030][T19557] SELinux: failed to load policy [ 1040.677137][T19564] sp0: Synchronizing with TNC [ 1040.943472][T19565] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1041.010268][T19565] F2FS-fs (loop19): Can't find valid F2FS filesystem in 1th superblock [ 1041.067793][T19566] loop7: detected capacity change from 0 to 7 [ 1041.493040][T19565] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1041.558371][T19565] F2FS-fs (loop19): Can't find valid F2FS filesystem in 2th superblock [ 1041.571538][T18580] Dev loop7: unable to read RDB block 7 [ 1041.578026][ T5918] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1041.647448][T18580] loop7: unable to read partition table [ 1041.663873][T18580] loop7: partition table beyond EOD, truncated [ 1041.816256][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 1041.828098][ T5918] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 1041.878263][ T5918] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1041.888560][T19574] bridge_slave_0: left allmulticast mode [ 1041.896253][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.908736][ T5918] usb 7-1: Product: syz [ 1041.913149][T19566] Dev loop7: unable to read RDB block 7 [ 1041.913185][T19566] loop7: unable to read partition table [ 1041.913336][T19566] loop7: partition table beyond EOD, truncated [ 1041.932824][ T5918] usb 7-1: Manufacturer: syz [ 1041.937422][ T5918] usb 7-1: SerialNumber: syz [ 1041.943101][T19574] bridge_slave_0: left promiscuous mode [ 1041.952395][T19574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.961002][T19566] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1041.989164][ T5918] usb 7-1: config 0 descriptor?? [ 1041.998387][ T5918] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1042.009740][ T5918] usb 7-1: setting power ON [ 1042.033503][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 1042.053872][T19574] bridge_slave_1: left allmulticast mode [ 1042.059531][T19574] bridge_slave_1: left promiscuous mode [ 1042.102844][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1042.116316][T19576] netlink: 'syz.3.3047': attribute type 10 has an invalid length. [ 1042.124512][ T5918] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1042.124555][ T5918] usb 7-1: media controller created [ 1042.143457][T19574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.153181][T19576] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3047'. [ 1042.182427][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1042.237900][T19568] overlay: ./file0 is not a directory [ 1042.248904][T19574] bond0: (slave bond_slave_0): Releasing backup interface [ 1042.585446][ T5918] usb 7-1: selecting invalid altsetting 6 [ 1042.606269][T19574] bond0: (slave bond_slave_1): Releasing backup interface [ 1042.622738][ T5918] usb 7-1: digital interface selection failed (-22) [ 1042.641700][ T5918] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1042.645051][T19563] [U] ` [ 1042.686524][T19574] team0: Port device team_slave_0 removed [ 1042.704260][T19574] team0: Port device team_slave_1 removed [ 1042.713735][T19574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1042.724040][T19574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1042.732808][T19574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1042.742950][T19574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.763773][T19576] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1042.785093][T19576] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.820335][T19576] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1042.864977][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.866369][ T5918] usb 7-1: setting power OFF [ 1042.874253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.875504][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.913966][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 1042.925348][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1042.945458][ T5918] (NULL device *): no alternate interface [ 1043.079778][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1043.153463][T19580] netlink: 'syz.3.3048': attribute type 3 has an invalid length. [ 1043.162644][T19580] netlink: 'syz.3.3048': attribute type 3 has an invalid length. [ 1043.531351][ T3517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.535225][ T5918] usb 7-1: USB disconnect, device number 62 [ 1043.539726][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.850798][ T30] audit: type=1400 audit(1069.658:1378): avc: denied { remount } for pid=19586 comm="syz.9.3050" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1044.447947][T19606] affs: No valid root block on device nullb0 [ 1044.598023][ T5911] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1044.715175][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.726046][T19599] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3053'. [ 1044.818064][ T5911] usb 10-1: Using ep0 maxpacket: 32 [ 1044.826384][ T5911] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1044.839501][ T5911] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.858424][ T5911] usb 10-1: config 0 descriptor?? [ 1044.910874][T19613] netlink: 'syz.6.3056': attribute type 10 has an invalid length. [ 1044.926961][T19613] bridge0: port 3(team0) entered disabled state [ 1044.946021][T19613] team0: left allmulticast mode [ 1044.968122][T19613] team_slave_0: left allmulticast mode [ 1044.984700][T19613] team_slave_1: left allmulticast mode [ 1045.004099][T19613] batadv1: left allmulticast mode [ 1045.012553][T19613] team0: left promiscuous mode [ 1045.022437][T19613] team_slave_0: left promiscuous mode [ 1045.057292][T19613] team_slave_1: left promiscuous mode [ 1045.146169][ T5911] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1045.184526][ T5911] usb 10-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1045.196866][T19613] batadv1: left promiscuous mode [ 1045.241201][ T5911] usb 10-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1045.351414][T19613] bridge0: port 3(team0) entered disabled state [ 1045.671876][T19627] netlink: 'syz.6.3056': attribute type 10 has an invalid length. [ 1045.692974][T19627] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3056'. [ 1046.025092][T19613] batman_adv: batadv0: Adding interface: team0 [ 1046.065111][T19613] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.453511][T19629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.492391][T19613] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1047.625295][T19627] team0: entered promiscuous mode [ 1047.670700][T19627] team_slave_0: entered promiscuous mode [ 1047.742165][T19627] team_slave_1: entered promiscuous mode [ 1047.881044][T19627] batadv1: entered promiscuous mode [ 1047.930061][ T6027] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1048.059789][T19627] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.215970][ T6027] usb 4-1: Using ep0 maxpacket: 8 [ 1048.547338][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.556793][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.565637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.584540][T19627] batman_adv: batadv0: Interface activated: team0 [ 1048.593780][ T6027] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1048.603142][ T6027] usb 4-1: config 179 has no interface number 0 [ 1048.613071][T19627] batman_adv: batadv0: Interface deactivated: team0 [ 1048.622870][ T6027] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1048.635052][ T6027] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1048.672452][T19627] batman_adv: batadv0: Removing interface: team0 [ 1048.687155][ T6027] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1048.702721][T19627] bridge0: port 3(team0) entered blocking state [ 1048.710214][ T6027] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1048.728704][T19627] bridge0: port 3(team0) entered disabled state [ 1048.737658][ T6027] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1048.752788][T19627] team0: entered allmulticast mode [ 1048.758276][T19627] team_slave_0: entered allmulticast mode [ 1048.764209][ T6027] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1048.774338][T19627] team_slave_1: entered allmulticast mode [ 1048.780426][ T6027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.790462][T19627] batadv1: entered allmulticast mode [ 1048.801850][T19627] bridge0: port 3(team0) entered blocking state [ 1048.808226][T19627] bridge0: port 3(team0) entered forwarding state [ 1048.824675][T19638] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1048.860029][T19640] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1048.880400][T19645] netlink: 'syz.7.3063': attribute type 3 has an invalid length. [ 1048.888767][T19645] netlink: 'syz.7.3063': attribute type 3 has an invalid length. [ 1048.980179][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.988547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.070657][ T1153] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1049.080237][ T1153] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1049.604702][T12040] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input63 [ 1049.736433][T19638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.807218][T19638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.856626][T19653] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3067'. [ 1050.077339][ T92] usb 4-1: USB disconnect, device number 38 [ 1050.083481][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1050.083511][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1050.179551][ T3517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.560609][T19669] lo speed is unknown, defaulting to 1000 [ 1050.566731][T19669] lo speed is unknown, defaulting to 1000 [ 1050.578348][T19669] lo speed is unknown, defaulting to 1000 [ 1050.632924][T19669] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1050.946316][T19669] lo speed is unknown, defaulting to 1000 [ 1050.952903][T19669] lo speed is unknown, defaulting to 1000 [ 1050.959263][T19669] lo speed is unknown, defaulting to 1000 [ 1050.965694][T19669] lo speed is unknown, defaulting to 1000 [ 1050.972602][T19669] lo speed is unknown, defaulting to 1000 [ 1050.980762][T19669] lo speed is unknown, defaulting to 1000 [ 1050.987335][T19669] lo speed is unknown, defaulting to 1000 [ 1050.993779][T19669] lo speed is unknown, defaulting to 1000 [ 1051.005905][T12040] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1051.327338][T12040] usb 7-1: Using ep0 maxpacket: 8 [ 1051.334422][T12040] usb 7-1: config 93 has an invalid interface number: 31 but max is 0 [ 1051.347122][T12040] usb 7-1: config 93 has an invalid descriptor of length 55, skipping remainder of the config [ 1051.388250][T12040] usb 7-1: config 93 has no interface number 0 [ 1051.400523][T12040] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1051.413516][T12040] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.492829][T12040] usb 7-1: Product: syz [ 1051.497027][T12040] usb 7-1: Manufacturer: syz [ 1051.501654][T12040] usb 7-1: SerialNumber: syz [ 1051.572041][T12040] uvcvideo 7-1:93.31: probe with driver uvcvideo failed with error -22 [ 1051.742535][ T2152] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1051.805541][T12040] usb 7-1: USB disconnect, device number 63 [ 1051.899100][ T2152] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.912333][ T2152] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1051.944716][ T2152] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1051.956062][ T2152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.621689][T19713] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3081'. [ 1052.735665][T19713] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3081'. [ 1052.941609][T19724] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3084'. [ 1052.950852][T19724] 0XD: renamed from macvtap0 (while UP) [ 1052.994282][T19724] 0XD: entered allmulticast mode [ 1053.105555][T19724] veth0_macvtap: entered allmulticast mode [ 1053.159098][T19724] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 1053.284287][T19735] netlink: 188 bytes leftover after parsing attributes in process `syz.9.3086'. [ 1053.319453][T19735] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1053.384893][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.393415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.544691][ T2152] wlan0 speed is unknown, defaulting to 1000 [ 1053.555034][ T2152] syz1: Port: 1 Link DOWN [ 1053.841717][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.212301][ T2152] usb 4-1: USB disconnect, device number 39 [ 1054.448133][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.456715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.666180][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.740676][ T9] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1055.769295][ T30] audit: type=1400 audit(1082.172:1379): avc: denied { connect } for pid=19756 comm="syz.7.3091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1055.958864][T19767] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3094'. [ 1056.017827][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1056.017953][T19767] IPVS: Error joining to the multicast group [ 1056.041233][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.057971][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.073998][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1056.090001][T19768] netlink: 'syz.3.3093': attribute type 10 has an invalid length. [ 1056.119270][ T9] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1056.155203][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.186282][ T9] usb 7-1: config 0 descriptor?? [ 1056.743138][T19780] Invalid ELF header magic: != ELF [ 1056.750120][T19780] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3097'. [ 1056.764950][ T9] shield 0003:0955:7214.0035: unknown main item tag 0x0 [ 1056.773786][ T9] shield 0003:0955:7214.0035: unknown main item tag 0x0 [ 1056.785967][ T9] shield 0003:0955:7214.0035: unknown main item tag 0x0 [ 1056.793867][ T9] shield 0003:0955:7214.0035: unknown main item tag 0x0 [ 1056.805848][ T9] shield 0003:0955:7214.0035: unknown main item tag 0x0 [ 1056.828783][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input64 [ 1056.893318][ T9] shield 0003:0955:7214.0035: Registered Thunderstrike controller [ 1056.911516][T19779] netlink: 'syz.3.3093': attribute type 10 has an invalid length. [ 1056.920185][ T9] shield 0003:0955:7214.0035: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 1056.939037][T19779] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3093'. [ 1056.979495][T19768] batman_adv: batadv0: Adding interface: team0 [ 1056.987622][T19768] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.020520][ T5975] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1057.043879][ T9] usb 7-1: USB disconnect, device number 64 [ 1057.102351][ T5975] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1057.135059][ T5975] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1057.156328][ T5975] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1057.207936][T19768] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1057.243304][T19779] team0: entered promiscuous mode [ 1057.266206][T19779] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.302867][T19779] batman_adv: batadv0: Interface activated: team0 [ 1057.382537][T19779] batman_adv: batadv0: Interface deactivated: team0 [ 1058.118016][T15451] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1058.280012][T19779] batman_adv: batadv0: Removing interface: team0 [ 1058.351124][T19779] bridge0: port 1(team0) entered blocking state [ 1058.388931][T19779] bridge0: port 1(team0) entered disabled state [ 1058.579901][T19779] team0: entered allmulticast mode [ 1059.104839][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.112986][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.122459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.312152][ T2152] lo speed is unknown, defaulting to 1000 [ 1059.339505][T19804] netlink: 'syz.8.3100': attribute type 10 has an invalid length. [ 1059.541171][T19812] netlink: 'syz.8.3100': attribute type 10 has an invalid length. [ 1059.595372][T19804] batman_adv: batadv0: Adding interface: team0 [ 1059.608885][ T43] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1059.725296][T19812] netlink: 2 bytes leftover after parsing attributes in process `syz.8.3100'. [ 1059.771311][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 1059.779243][ T43] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1059.791732][ T43] usb 7-1: config 0 has no interface number 0 [ 1059.803674][T19804] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.841354][ T43] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1059.978166][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.987975][ T43] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1059.987996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.988043][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.398821][T19804] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1060.408885][ T43] usb 7-1: Product: syz [ 1060.421081][ T43] usb 7-1: Manufacturer: syz [ 1060.425722][ T43] usb 7-1: SerialNumber: syz [ 1060.435634][ T43] usb 7-1: config 0 descriptor?? [ 1060.467300][ T2152] page_pool_release_retry() stalled pool shutdown: id 59, 1 inflight 60 sec [ 1060.498588][T19812] team0: entered promiscuous mode [ 1060.515539][T19812] team_slave_0: entered promiscuous mode [ 1060.525795][T19812] team_slave_1: entered promiscuous mode [ 1060.592804][T19812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.610215][T19812] batman_adv: batadv0: Interface activated: team0 [ 1060.621047][T19812] batman_adv: batadv0: Interface deactivated: team0 [ 1060.630960][T19812] batman_adv: batadv0: Removing interface: team0 [ 1060.639088][T19812] bridge0: port 3(team0) entered blocking state [ 1060.645547][T19812] bridge0: port 3(team0) entered disabled state [ 1060.670171][T19812] team0: entered allmulticast mode [ 1060.717021][ T43] usbtouchscreen 7-1:0.214: Failed to read FW rev: 0 [ 1060.732815][ T2152] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1060.740629][T19812] team_slave_0: entered allmulticast mode [ 1060.747089][T19812] team_slave_1: entered allmulticast mode [ 1060.764550][T19812] bridge0: port 3(team0) entered blocking state [ 1060.770940][T19812] bridge0: port 3(team0) entered forwarding state [ 1060.789996][ T43] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 1060.880209][ T2152] usb 4-1: not running at top speed; connect to a high speed hub [ 1060.890026][ T2152] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1060.922066][ T9] usb 7-1: USB disconnect, device number 65 [ 1061.153317][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.257529][ T9] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1061.409369][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1061.422187][ T9] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1061.439916][ T9] usb 7-1: config 0 has no interface number 0 [ 1061.450595][ T9] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1061.464280][ T9] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1061.478765][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1061.488855][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.497568][ T9] usb 7-1: Product: syz [ 1061.501902][ T9] usb 7-1: Manufacturer: syz [ 1061.507479][ T9] usb 7-1: SerialNumber: syz [ 1061.527241][ T9] usb 7-1: config 0 descriptor?? [ 1062.121157][ T9] appletouch 7-1:0.85: Geyser mode initialized. [ 1062.129527][ T9] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input66 [ 1062.320931][ T30] audit: type=1400 audit(1089.048:1380): avc: denied { name_bind } for pid=19841 comm="syz.6.3112" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1062.459502][ T30] audit: type=1400 audit(1089.205:1381): avc: denied { getopt } for pid=19858 comm="syz.7.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1062.743868][T19860] @: renamed from vlan0 (while UP) [ 1063.587254][ T2152] usb 4-1: New USB device found, idVendor=18d1, idProduct=502b, bcdDevice= 0.40 [ 1063.597500][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.618588][ T2152] usb 4-1: Product: 뱐蔲쳞뤃 [ 1063.734134][ T2152] usb 4-1: can't set config #1, error -71 [ 1063.751386][ T2152] usb 4-1: USB disconnect, device number 40 [ 1063.766001][T19880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3123'. [ 1063.878924][T19880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3123'. [ 1064.563752][ T3517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.571915][ T3517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.580421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.597841][T19880] team0: left allmulticast mode [ 1064.621860][T19880] bridge0: port 1(team0) entered disabled state [ 1064.633871][T12040] usb 7-1: USB disconnect, device number 66 [ 1064.675143][T19880] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1064.698312][ T30] audit: type=1400 audit(1091.525:1382): avc: denied { ioctl } for pid=19892 comm="syz.8.3125" path="socket:[71083]" dev="sockfs" ino=71083 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1064.748193][T12040] appletouch 7-1:0.85: input: appletouch disconnected [ 1064.828294][ T30] audit: type=1400 audit(1091.578:1383): avc: denied { read write } for pid=19896 comm="syz.6.3126" name="vbi5" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1064.875869][ T30] audit: type=1400 audit(1091.578:1384): avc: denied { open } for pid=19896 comm="syz.6.3126" path="/dev/vbi5" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1064.900094][ T30] audit: type=1400 audit(1091.588:1385): avc: denied { ioctl } for pid=19896 comm="syz.6.3126" path="/dev/vbi5" dev="devtmpfs" ino=979 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1064.939808][ T30] audit: type=1400 audit(1091.798:1386): avc: denied { read } for pid=19896 comm="syz.6.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1064.967172][T19871] Bluetooth: hci1: command 0x0405 tx timeout [ 1065.420178][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.428477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.039115][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.148400][T19915] FAULT_INJECTION: forcing a failure. [ 1066.148400][T19915] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.161611][T19915] CPU: 0 UID: 0 PID: 19915 Comm: syz.8.3131 Not tainted syzkaller #0 PREEMPT(full) [ 1066.161635][T19915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1066.161645][T19915] Call Trace: [ 1066.161651][T19915] [ 1066.161658][T19915] dump_stack_lvl+0x16c/0x1f0 [ 1066.161687][T19915] should_fail_ex+0x512/0x640 [ 1066.161708][T19915] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 1066.161729][T19915] should_failslab+0xc2/0x120 [ 1066.161751][T19915] __kmalloc_cache_node_noprof+0x6d/0x420 [ 1066.161768][T19915] ? __get_vm_area_node+0x101/0x330 [ 1066.161791][T19915] ? __lock_acquire+0x62e/0x1ce0 [ 1066.161819][T19915] __get_vm_area_node+0x101/0x330 [ 1066.161846][T19915] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1066.161872][T19915] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1066.161892][T19915] ? find_held_lock+0x2b/0x80 [ 1066.161914][T19915] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1066.161933][T19915] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1066.161958][T19915] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1066.161984][T19915] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1066.162021][T19915] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1066.162037][T19915] __vmalloc_node_noprof+0xad/0xf0 [ 1066.162060][T19915] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1066.162080][T19915] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1066.162096][T19915] ? security_capable+0x7e/0x260 [ 1066.162118][T19915] bpf_prog_alloc+0x3b/0x230 [ 1066.162132][T19915] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1066.162152][T19915] bpf_prog_load+0x1a04/0x2490 [ 1066.162179][T19915] ? __pfx_bpf_prog_load+0x10/0x10 [ 1066.162203][T19915] ? avc_has_perm+0x144/0x1f0 [ 1066.162232][T19915] ? selinux_bpf+0xde/0x130 [ 1066.162249][T19915] ? bpf_lsm_bpf+0x9/0x10 [ 1066.162273][T19915] __sys_bpf+0x4a3f/0x4de0 [ 1066.162297][T19915] ? __pfx___sys_bpf+0x10/0x10 [ 1066.162320][T19915] ? ksys_write+0x190/0x250 [ 1066.162342][T19915] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1066.162378][T19915] ? fput+0x9b/0xd0 [ 1066.162401][T19915] ? ksys_write+0x1ac/0x250 [ 1066.162418][T19915] ? __pfx_ksys_write+0x10/0x10 [ 1066.162440][T19915] __x64_sys_bpf+0x78/0xc0 [ 1066.162462][T19915] ? lockdep_hardirqs_on+0x7c/0x110 [ 1066.162484][T19915] do_syscall_64+0xcd/0x4c0 [ 1066.162509][T19915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.162527][T19915] RIP: 0033:0x7f4f9718ebe9 [ 1066.162542][T19915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1066.162557][T19915] RSP: 002b:00007f4f98069038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1066.162574][T19915] RAX: ffffffffffffffda RBX: 00007f4f973c5fa0 RCX: 00007f4f9718ebe9 [ 1066.162584][T19915] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 1066.162592][T19915] RBP: 00007f4f98069090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.162602][T19915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.162612][T19915] R13: 00007f4f973c6038 R14: 00007f4f973c5fa0 R15: 00007fff8623e978 [ 1066.162633][T19915] [ 1066.488985][T19915] syz.8.3131: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1066.514465][T19915] CPU: 0 UID: 0 PID: 19915 Comm: syz.8.3131 Not tainted syzkaller #0 PREEMPT(full) [ 1066.514487][T19915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1066.514496][T19915] Call Trace: [ 1066.514503][T19915] [ 1066.514509][T19915] dump_stack_lvl+0x16c/0x1f0 [ 1066.514533][T19915] warn_alloc+0x248/0x3a0 [ 1066.514551][T19915] ? __pfx_warn_alloc+0x10/0x10 [ 1066.514568][T19915] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 1066.514588][T19915] ? __kasan_kmalloc+0x8a/0xb0 [ 1066.514606][T19915] ? __get_vm_area_node+0x208/0x330 [ 1066.514635][T19915] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1066.514663][T19915] ? find_held_lock+0x2b/0x80 [ 1066.514685][T19915] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1066.514706][T19915] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1066.514732][T19915] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1066.514758][T19915] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1066.514787][T19915] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1066.514802][T19915] __vmalloc_node_noprof+0xad/0xf0 [ 1066.514828][T19915] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1066.514840][T19915] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 1066.514854][T19915] ? security_capable+0x7e/0x260 [ 1066.514867][T19915] bpf_prog_alloc+0x3b/0x230 [ 1066.514876][T19915] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1066.514890][T19915] bpf_prog_load+0x1a04/0x2490 [ 1066.514906][T19915] ? __pfx_bpf_prog_load+0x10/0x10 [ 1066.514921][T19915] ? avc_has_perm+0x144/0x1f0 [ 1066.514938][T19915] ? selinux_bpf+0xde/0x130 [ 1066.514949][T19915] ? bpf_lsm_bpf+0x9/0x10 [ 1066.514965][T19915] __sys_bpf+0x4a3f/0x4de0 [ 1066.514980][T19915] ? __pfx___sys_bpf+0x10/0x10 [ 1066.514994][T19915] ? ksys_write+0x190/0x250 [ 1066.515007][T19915] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1066.515028][T19915] ? fput+0x9b/0xd0 [ 1066.515042][T19915] ? ksys_write+0x1ac/0x250 [ 1066.515052][T19915] ? __pfx_ksys_write+0x10/0x10 [ 1066.515066][T19915] __x64_sys_bpf+0x78/0xc0 [ 1066.515081][T19915] ? lockdep_hardirqs_on+0x7c/0x110 [ 1066.515095][T19915] do_syscall_64+0xcd/0x4c0 [ 1066.515110][T19915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.515121][T19915] RIP: 0033:0x7f4f9718ebe9 [ 1066.515130][T19915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1066.515141][T19915] RSP: 002b:00007f4f98069038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1066.515151][T19915] RAX: ffffffffffffffda RBX: 00007f4f973c5fa0 RCX: 00007f4f9718ebe9 [ 1066.515158][T19915] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 1066.515164][T19915] RBP: 00007f4f98069090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.515170][T19915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.515176][T19915] R13: 00007f4f973c6038 R14: 00007f4f973c5fa0 R15: 00007fff8623e978 [ 1066.515190][T19915] [ 1066.801986][T19915] Mem-Info: [ 1066.805203][T19915] active_anon:32163 inactive_anon:0 isolated_anon:0 [ 1066.805203][T19915] active_file:21353 inactive_file:41566 isolated_file:0 [ 1066.805203][T19915] unevictable:768 dirty:389 writeback:0 [ 1066.805203][T19915] slab_reclaimable:8958 slab_unreclaimable:121860 [ 1066.805203][T19915] mapped:41650 shmem:20601 pagetables:1961 [ 1066.805203][T19915] sec_pagetables:0 bounce:0 [ 1066.805203][T19915] kernel_misc_reclaimable:0 [ 1066.805203][T19915] free:1226563 free_pcp:15448 free_cma:0 [ 1066.852736][T19915] Node 0 active_anon:128652kB inactive_anon:0kB active_file:85388kB inactive_file:165900kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:166500kB dirty:1556kB writeback:0kB shmem:80868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13968kB pagetables:7680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1066.885872][T19915] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1066.917288][T19915] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1066.946936][T19915] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 1066.952948][T19915] Node 0 DMA32 free:1003088kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:128640kB inactive_anon:0kB active_file:85388kB inactive_file:164572kB unevictable:1536kB writepending:1556kB present:3129332kB managed:2539340kB mlocked:0kB bounce:0kB free_pcp:34948kB local_pcp:23512kB free_cma:0kB [ 1066.986344][T19915] lowmem_reserve[]: 0 0 1 1 1 [ 1066.991518][T19915] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 1067.021536][T19915] lowmem_reserve[]: 0 0 0 0 0 [ 1067.026214][T19915] Node 1 Normal free:3887792kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:364kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26808kB local_pcp:9056kB free_cma:0kB [ 1067.058498][T19915] lowmem_reserve[]: 0 0 0 0 0 [ 1067.063187][T19915] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1067.076408][T19915] Node 0 DMA32: 456*4kB (UME) 382*8kB (UME) 420*16kB (ME) 240*32kB (M) 148*64kB (ME) 174*128kB (ME) 409*256kB (UME) 335*512kB (UME) 200*1024kB (UME) 8*2048kB (UME) 111*4096kB (M) = 1003088kB [ 1067.096787][T19915] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1067.110659][T19915] Node 1 Normal: 202*4kB (UME) 63*8kB (UE) 45*16kB (UE) 108*32kB (UE) 9*64kB (UME) 18*128kB (UE) 6*256kB (UM) 6*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3887792kB [ 1067.129668][T19915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.140193][T19915] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1067.150517][T19915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.161608][T19915] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1067.172570][T19915] 84541 total pagecache pages [ 1067.177421][T19915] 0 pages in swap cache [ 1067.187508][T19915] Free swap = 124996kB [ 1067.192475][T19915] Total swap = 124996kB [ 1067.196623][T19915] 2097051 pages RAM [ 1067.205855][T19915] 0 pages HighMem/MovableOnly [ 1067.212099][T19915] 430254 pages reserved [ 1067.216344][T19915] 0 pages cma reserved [ 1069.104846][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3140'. [ 1069.581225][T19961] libceph: resolve '. [ 1069.581225][T19961] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1069.581225][T19961] ' (ret=-3): failed [ 1069.699385][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.708932][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.717270][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.300061][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.309033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.904904][T19985] 9pnet_fd: Insufficient options for proto=fd [ 1071.142405][ T30] audit: type=1400 audit(1098.286:1387): avc: denied { ioctl } for pid=19992 comm="syz.8.3151" path="socket:[72288]" dev="sockfs" ino=72288 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1071.549901][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.698081][T20005] Bluetooth: MGMT ver 1.23 [ 1071.793678][T20011] kernel profiling enabled (shift: 17) [ 1072.031268][ T9] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 1072.187939][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1072.200400][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 1072.217669][ T9] usb 7-1: config 5 has an invalid interface number: 201 but max is 0 [ 1072.234498][ T9] usb 7-1: config 5 has no interface number 0 [ 1072.242454][ T9] usb 7-1: config 5 interface 201 has no altsetting 0 [ 1072.257755][ T9] usb 7-1: New USB device found, idVendor=19d2, idProduct=0199, bcdDevice=9c.c0 [ 1072.270643][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.281409][ T9] usb 7-1: Product: syz [ 1072.285608][ T9] usb 7-1: Manufacturer: syz [ 1072.293157][ T9] usb 7-1: SerialNumber: syz [ 1072.504459][T20011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.516773][T20011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.531206][T20011] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3157'. [ 1072.546931][ T9] hub 7-1:5.201: bad descriptor, ignoring hub [ 1072.556728][ T9] hub 7-1:5.201: probe with driver hub failed with error -5 [ 1072.565584][ T9] option 7-1:5.201: GSM modem (1-port) converter detected [ 1072.605195][ T9] usb 7-1: USB disconnect, device number 67 [ 1072.626351][ T9] option 7-1:5.201: device disconnected [ 1072.964418][T20030] SELinux: failed to load policy [ 1073.066468][T20024] orangefs_mount: mount request failed with -4 [ 1073.808443][T15451] Bluetooth: hci0: command tx timeout [ 1074.366380][T20048] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3167'. [ 1074.763807][ T92] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1074.919123][ T92] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1074.930289][ T92] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.940185][ T92] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1074.947205][ T92] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1074.956401][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.968611][ T92] usb 4-1: config 0 descriptor?? [ 1075.184171][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.193421][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.201683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.303256][ T30] audit: type=1804 audit(1102.685:1388): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.3177" name="/newroot/282/file0" dev="tmpfs" ino=1523 res=1 errno=0 [ 1075.373578][ T92] lenovo 0003:17EF:60EE.0036: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0 [ 1075.801129][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.810028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.205977][ T92] lenovo 0003:17EF:60EE.0036: Failed to switch middle button: -71 [ 1076.226726][ T92] lenovo 0003:17EF:60EE.0036: Fn-lock setting failed: -71 [ 1076.421361][ T92] lenovo 0003:17EF:60EE.0036: Sensitivity setting failed: -71 [ 1076.453599][ T92] usb 4-1: USB disconnect, device number 41 [ 1076.774146][ T2152] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1077.211172][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.605754][T20105] netlink: 356 bytes leftover after parsing attributes in process `syz.8.3182'. [ 1079.494441][ T30] audit: type=1804 audit(1107.083:1389): pid=20122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.3189" name="/newroot/50/file0" dev="tmpfs" ino=282 res=1 errno=0 [ 1079.516252][ C1] vkms_vblank_simulate: vblank timer overrun [ 1079.752975][ T30] audit: type=1400 audit(1107.346:1390): avc: denied { ioctl } for pid=20123 comm="syz.7.3190" path="/dev/sg0" dev="devtmpfs" ino=770 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1079.877330][T20136] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1080.013252][T20136] futex_wake_op: syz.8.3195 tries to shift op by 32; fix this program [ 1080.022697][ T30] audit: type=1326 audit(1107.629:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20135 comm="syz.8.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9718ebe9 code=0x7ffc0000 [ 1080.053690][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.061943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.448940][ T30] audit: type=1326 audit(1107.629:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20135 comm="syz.8.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9718ebe9 code=0x7ffc0000 [ 1080.457121][T20136] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3195'. [ 1080.660870][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.666059][ T30] audit: type=1326 audit(1107.629:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20135 comm="syz.8.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9718ebe9 code=0x7ffc0000 [ 1080.698338][ T30] audit: type=1326 audit(1107.640:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20135 comm="syz.8.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9718ebe9 code=0x7ffc0000 [ 1080.874021][ T30] audit: type=1326 audit(1107.640:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20135 comm="syz.8.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4f9718ebe9 code=0x7ffc0000 [ 1080.920174][ T30] audit: type=1326 audit(1107.640:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20135 comm="syz.8.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9718ebe9 code=0x7ffc0000 [ 1081.010850][ T30] audit: type=1326 audit(1107.640:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20135 comm="syz.8.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4f9718ebe9 code=0x7ffc0000 [ 1081.042785][ T30] audit: type=1326 audit(1108.039:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20135 comm="syz.8.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9718ebe9 code=0x7ffc0000 [ 1081.270823][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.279053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.372826][T20150] smc: net device bond0 applied user defined pnetid SYZ0 [ 1081.412821][T20151] smc: net device bond0 erased user defined pnetid SYZ0 [ 1082.303395][T20166] netlink: 'syz.9.3201': attribute type 10 has an invalid length. [ 1082.348412][T20166] batman_adv: batadv0: Adding interface: team0 [ 1082.368872][T20166] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.375304][T20173] netlink: 'syz.9.3201': attribute type 10 has an invalid length. [ 1082.427168][T20166] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1082.427181][T20173] netlink: 2 bytes leftover after parsing attributes in process `syz.9.3201'. [ 1082.499204][ T3517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.570581][T20173] team0: entered promiscuous mode [ 1082.576223][T20173] team_slave_0: entered promiscuous mode [ 1082.648036][T20173] team_slave_1: entered promiscuous mode [ 1083.526345][T20173] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.560383][T20173] batman_adv: batadv0: Interface activated: team0 [ 1083.587735][T20173] batman_adv: batadv0: Interface deactivated: team0 [ 1083.610783][T20173] batman_adv: batadv0: Removing interface: team0 [ 1083.652564][T20173] bridge0: port 3(team0) entered blocking state [ 1083.660166][T20173] bridge0: port 3(team0) entered disabled state [ 1083.670299][T20173] team0: entered allmulticast mode [ 1083.692117][T20173] team_slave_0: entered allmulticast mode [ 1083.708278][T20173] team_slave_1: entered allmulticast mode [ 1083.763992][T20173] bridge0: port 3(team0) entered blocking state [ 1083.770517][T20173] bridge0: port 3(team0) entered forwarding state [ 1083.813672][ T2152] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1083.996561][ T2152] usb 7-1: Using ep0 maxpacket: 32 [ 1084.027556][ T2152] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.059332][ T2152] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.092929][ T2152] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1084.114587][ T2152] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.161320][ T2152] usb 7-1: config 0 descriptor?? [ 1084.282026][ T2152] hub 7-1:0.0: USB hub found [ 1084.323658][T20206] bridge1: entered promiscuous mode [ 1084.426208][T20208] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3211'. [ 1084.557016][ T2152] hub 7-1:0.0: 1 port detected [ 1084.778949][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1084.778964][ T30] audit: type=1804 audit(1112.584:1420): pid=20211 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.3213" name="/newroot/67/file0" dev="tmpfs" ino=367 res=1 errno=0 [ 1084.844798][ T92] usb 7-1: USB disconnect, device number 69 [ 1085.548350][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.556998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.691636][T20230] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3216'. [ 1085.708264][ T30] audit: type=1400 audit(1113.582:1421): avc: denied { bind } for pid=20223 comm="syz.7.3216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1085.802986][ T30] audit: type=1400 audit(1113.582:1422): avc: denied { write } for pid=20223 comm="syz.7.3216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1086.150372][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.159368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.168791][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.269464][T20235] SELinux: failed to load policy [ 1086.612590][T20238] netlink: 'syz.6.3219': attribute type 10 has an invalid length. [ 1086.661952][T20241] netlink: 'syz.6.3219': attribute type 10 has an invalid length. [ 1086.662415][T20238] bridge0: port 3(team0) entered disabled state [ 1086.684369][T20241] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3219'. [ 1086.684599][T20238] team0: left allmulticast mode [ 1086.700130][T20238] team_slave_0: left allmulticast mode [ 1086.705652][T20238] team_slave_1: left allmulticast mode [ 1086.712724][T20238] batadv1: left allmulticast mode [ 1086.717840][T20238] team0: left promiscuous mode [ 1086.764343][T20238] team_slave_0: left promiscuous mode [ 1086.799838][T20238] team_slave_1: left promiscuous mode [ 1086.834717][T20238] batadv1: left promiscuous mode [ 1086.913977][T20238] bridge0: port 3(team0) entered disabled state [ 1086.932875][T20238] batman_adv: batadv0: Adding interface: team0 [ 1086.936408][T20244] Invalid source name [ 1086.945024][T20238] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.972981][ C0] vkms_vblank_simulate: vblank timer overrun [ 1086.980568][T20238] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1086.998649][ T30] audit: type=1400 audit(1114.946:1423): avc: denied { name_bind } for pid=20243 comm="syz.7.3221" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1087.020019][ C0] vkms_vblank_simulate: vblank timer overrun [ 1087.069140][T20241] team0: entered promiscuous mode [ 1087.103606][T20241] team_slave_0: entered promiscuous mode [ 1087.114769][T20241] team_slave_1: entered promiscuous mode [ 1087.122228][T20241] batadv1: entered promiscuous mode [ 1087.134569][T20241] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.183650][T20241] batman_adv: batadv0: Interface activated: team0 [ 1087.304844][T20241] batman_adv: batadv0: Interface deactivated: team0 [ 1087.316379][T20241] batman_adv: batadv0: Removing interface: team0 [ 1087.324183][T20241] bridge0: port 3(team0) entered blocking state [ 1087.369178][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.397115][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1087.753291][T20241] bridge0: port 3(team0) entered disabled state [ 1087.765630][T20241] team0: entered allmulticast mode [ 1087.809202][T20241] team_slave_0: entered allmulticast mode [ 1087.855366][T20241] team_slave_1: entered allmulticast mode [ 1087.866259][T20241] batadv1: entered allmulticast mode [ 1087.882523][T20241] bridge0: port 3(team0) entered blocking state [ 1087.888872][T20241] bridge0: port 3(team0) entered forwarding state [ 1088.445585][ T1103] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1088.455604][ T1103] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1088.551359][ T30] audit: type=1400 audit(1116.595:1424): avc: denied { read } for pid=20258 comm="syz.6.3225" name="file0" dev="tmpfs" ino=1579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1088.573275][ C0] vkms_vblank_simulate: vblank timer overrun [ 1089.354388][ T92] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1089.497677][T20271] syz_tun: entered allmulticast mode [ 1089.528415][ T92] usb 7-1: device descriptor read/64, error -71 [ 1089.812677][ T92] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1089.822880][T20278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3231'. [ 1089.976677][ T92] usb 7-1: device descriptor read/64, error -71 [ 1090.090856][ T92] usb usb7-port1: attempt power cycle [ 1090.423905][ T92] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1090.481887][ T92] usb 7-1: device descriptor read/8, error -71 [ 1090.557895][T20290] netlink: 'syz.7.3233': attribute type 10 has an invalid length. [ 1090.572196][T20290] bridge0: port 3(team0) entered disabled state [ 1090.581732][T20290] team0: left allmulticast mode [ 1090.589483][T20290] team_slave_0: left allmulticast mode [ 1090.610271][T20290] team_slave_1: left allmulticast mode [ 1090.646091][T20290] team0: left promiscuous mode [ 1090.738241][ T92] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1090.767700][ T92] usb 7-1: device descriptor read/8, error -71 [ 1090.776451][ T43] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1090.808553][T20290] team_slave_0: left promiscuous mode [ 1090.815084][T20290] team_slave_1: left promiscuous mode [ 1090.927213][T20291] netlink: 'syz.7.3233': attribute type 10 has an invalid length. [ 1090.936199][ T92] usb usb7-port1: unable to enumerate USB device [ 1090.947156][T20290] bridge0: port 3(team0) entered disabled state [ 1090.957318][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 1090.963755][T20291] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3233'. [ 1090.975833][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1090.986942][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1091.025734][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.034312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.058478][ T43] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1091.081323][T20290] batman_adv: batadv0: Adding interface: team0 [ 1091.090686][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.100406][T20290] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.127159][T20290] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1091.145200][T20293] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3235'. [ 1091.174842][ T43] usb 4-1: Product: syz [ 1091.180768][ T43] usb 4-1: Manufacturer: syz [ 1091.186190][ T43] usb 4-1: SerialNumber: syz [ 1091.210092][ T43] usb 4-1: config 0 descriptor?? [ 1091.258525][ T43] usb 4-1: no audio or video endpoints found [ 1091.457942][T20289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.472422][T20289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.525817][T20297] netlink: 'syz.9.3236': attribute type 10 has an invalid length. [ 1091.539498][T20297] bridge0: port 3(team0) entered disabled state [ 1091.546896][T20297] team0: left allmulticast mode [ 1091.555618][T20297] team_slave_0: left allmulticast mode [ 1091.561354][T20297] team_slave_1: left allmulticast mode [ 1091.570077][T20289] ptrace attach of "./syz-executor exec"[19170] was attempted by "./syz-executor exec"[20289] [ 1091.589765][T20297] team0: left promiscuous mode [ 1091.621163][T20297] team_slave_0: left promiscuous mode [ 1091.635645][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.644287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.655451][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.664367][T11018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.747414][T20297] team_slave_1: left promiscuous mode [ 1091.751223][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.822736][T20307] netlink: 'syz.9.3236': attribute type 10 has an invalid length. [ 1091.832846][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.851972][T20302] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1091.903739][T20297] bridge0: port 3(team0) entered disabled state [ 1091.905810][T20307] netlink: 2 bytes leftover after parsing attributes in process `syz.9.3236'. [ 1092.290535][T11018] usb 4-1: USB disconnect, device number 42 [ 1092.322411][T20297] batman_adv: batadv0: Adding interface: team0 [ 1092.356389][T20297] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.464335][T20297] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1092.477614][T20291] team0: entered promiscuous mode [ 1092.484175][T20291] team_slave_0: entered promiscuous mode [ 1092.493582][T20315] SELinux: failed to load policy [ 1092.528851][T20291] team_slave_1: entered promiscuous mode [ 1092.541407][T20291] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.548489][T20291] batman_adv: batadv0: Interface activated: team0 [ 1092.555757][T20291] batman_adv: batadv0: Interface deactivated: team0 [ 1092.563167][T20291] batman_adv: batadv0: Removing interface: team0 [ 1092.572913][T20291] bridge0: port 3(team0) entered blocking state [ 1092.581059][T20291] bridge0: port 3(team0) entered disabled state [ 1092.588382][T20291] team0: entered allmulticast mode [ 1092.593608][T20291] team_slave_0: entered allmulticast mode [ 1092.599805][T20291] team_slave_1: entered allmulticast mode [ 1092.616679][T20291] bridge0: port 3(team0) entered blocking state [ 1092.623006][T20291] bridge0: port 3(team0) entered forwarding state [ 1092.647931][T20307] team0: entered promiscuous mode [ 1092.664652][T20307] team_slave_0: entered promiscuous mode [ 1092.672080][T20307] team_slave_1: entered promiscuous mode [ 1092.690188][T20307] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.705209][T20307] batman_adv: batadv0: Interface activated: team0 [ 1092.719886][T20307] batman_adv: batadv0: Interface deactivated: team0 [ 1092.726870][T20307] batman_adv: batadv0: Removing interface: team0 [ 1092.739762][T20307] bridge0: port 3(team0) entered blocking state [ 1092.746840][T20307] bridge0: port 3(team0) entered disabled state [ 1092.757652][T20307] team0: entered allmulticast mode [ 1092.762830][T20307] team_slave_0: entered allmulticast mode [ 1092.771310][T20307] team_slave_1: entered allmulticast mode [ 1092.793941][T20307] bridge0: port 3(team0) entered blocking state [ 1092.800341][T20307] bridge0: port 3(team0) entered forwarding state [ 1092.853424][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.884615][ T2152] usb 7-1: new low-speed USB device number 74 using dummy_hcd [ 1092.975620][ T30] audit: type=1400 audit(2000000003.600:1425): avc: denied { read } for pid=20319 comm="syz.3.3241" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1093.042779][ T2152] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.075406][ T2152] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1093.090106][ T2152] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1093.110949][ T2152] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1093.135550][ T30] audit: type=1400 audit(2000000003.600:1426): avc: denied { open } for pid=20319 comm="syz.3.3241" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1093.137162][ T2152] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1093.327125][ T2152] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1093.356292][ T30] audit: type=1400 audit(2000000003.600:1427): avc: denied { append } for pid=20319 comm="syz.3.3241" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1093.413133][ T2152] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.584581][T20318] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1093.599889][ T2152] hub 7-1:1.0: bad descriptor, ignoring hub [ 1093.662188][ T2152] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1093.798030][T20318] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3240'. [ 1094.062796][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.117611][ T2152] cdc_wdm 7-1:1.0: skipping garbage [ 1094.203036][ T2152] cdc_wdm 7-1:1.0: skipping garbage [ 1094.272432][ T2152] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1094.288010][ T2152] cdc_wdm 7-1:1.0: Unknown control protocol [ 1094.324461][ T2152] usb 7-1: USB disconnect, device number 74 [ 1096.107707][ T6027] net_ratelimit: 1 callbacks suppressed [ 1096.107724][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.131228][T20368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1096.512433][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.520569][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.529004][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.537232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.780837][T20384] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1096.793058][T20384] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1097.292706][T20384] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1097.340956][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.349151][ T9378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.420745][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.561279][T12040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.905552][T20398] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3254'. [ 1098.104918][T20404] netlink: 'syz.7.3257': attribute type 1 has an invalid length. [ 1098.118666][T20404] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.3257'. [ 1098.145370][T20401] bridge0: entered promiscuous mode [ 1098.168305][T20401] macvlan2: entered promiscuous mode [ 1098.260504][T20411] QAT: failed to copy from user cfg_data. [ 1098.286567][ T30] audit: type=1804 audit(2000000009.196:1428): pid=20413 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.3259" name="/newroot/79/file0" dev="tmpfs" ino=428 res=1 errno=0 [ 1098.380681][T20411] : renamed from bond_slave_0 (while UP) [ 1098.571635][T20417] SELinux: failed to load policy [ 1098.603800][T20422] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3260'. [ 1098.649851][ T30] audit: type=1400 audit(2000000009.574:1429): avc: denied { nlmsg_write } for pid=20423 comm="syz.9.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1098.818422][ T9] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1098.882100][T20430] block nbd9: Attempted send on invalid socket [ 1098.888921][T20430] I/O error, dev nbd9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1098.908171][T20430] block nbd9: Attempted send on invalid socket [ 1098.924286][T20430] I/O error, dev nbd9, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1098.935952][T20430] Mount JFS Failure: -5 [ 1098.983143][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1098.992721][ T9] usb 7-1: config 0 has no interface number 0 [ 1099.056414][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 107, changing to 10 [ 1099.068171][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 25455, setting to 1024 [ 1099.105981][ T9] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1099.121673][ T9] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1099.151760][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.176324][ T9] usb 7-1: config 0 descriptor?? [ 1099.781144][T20417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.797920][T20417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.078292][ T9] input: HID 28bd:0042 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0042.0037/input/input68 [ 1100.157600][ T9] uclogic 0003:28BD:0042.0037: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.6-1/input1 [ 1100.310432][ T2152] usb 7-1: USB disconnect, device number 75 [ 1100.361724][T11018] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1100.426314][T20455] fido_id[20455]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1100.503617][T11018] usb 4-1: device descriptor read/64, error -71 [ 1100.731027][T11018] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1100.770528][ T30] audit: type=1804 audit(2000000011.810:1430): pid=20460 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.3271" name="/newroot/83/file0" dev="tmpfs" ino=452 res=1 errno=0 [ 1100.884546][T11018] usb 4-1: device descriptor read/64, error -71 [ 1100.988938][T11018] usb usb4-port1: attempt power cycle [ 1101.360008][T11018] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1101.550795][T11018] usb 4-1: device descriptor read/8, error -71 [ 1101.617364][ T6027] net_ratelimit: 3 callbacks suppressed [ 1101.617381][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.791364][T11018] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1101.936896][T11018] usb 4-1: device descriptor read/8, error -71 [ 1101.988127][ T30] audit: type=1804 audit(2000000013.070:1431): pid=20475 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.3275" name="/newroot/74/file1" dev="fuse" ino=1 res=1 errno=0 [ 1102.012763][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.020878][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.028997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.037095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.184038][T11018] usb usb4-port1: unable to enumerate USB device [ 1102.194102][ T30] audit: type=1800 audit(2000000013.070:1432): pid=20475 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.3275" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1102.415404][T20483] geneve2: entered promiscuous mode [ 1102.448154][T20483] geneve2: entered allmulticast mode [ 1102.609362][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.619743][T11018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.707515][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.719963][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.916253][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.143662][T20505] SELinux: failed to load policy [ 1104.228549][ T30] audit: type=1804 audit(2000000015.432:1433): pid=20510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.3284" name="/newroot/54/file0" dev="tmpfs" ino=299 res=1 errno=0 [ 1104.255820][T20509] wlan0 speed is unknown, defaulting to 1000 [ 1104.701346][T20509] lo speed is unknown, defaulting to 1000 [ 1105.875626][T11018] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1105.919704][T11018] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1106.531651][ T6027] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1106.708360][ T6027] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 1106.717654][ T6027] usb 7-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1106.726031][ T6027] usb 7-1: Product: syz [ 1106.730264][ T6027] usb 7-1: Manufacturer: syz [ 1106.734934][ T6027] usb 7-1: SerialNumber: syz [ 1106.741818][ T6027] usb 7-1: config 0 descriptor?? [ 1106.749258][ T6027] ch341 7-1:0.0: ch341-uart converter detected [ 1106.885375][ T5911] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1106.951652][ T6027] usb 7-1: failed to receive control message: -121 [ 1106.971238][ T6027] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 1107.001266][ T5911] dvb_usb_az6027 10-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1107.025204][ T5911] usb 10-1: USB disconnect, device number 3 [ 1107.345180][ T5911] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1107.374457][T20554] usb usb8: usbfs: process 20554 (syz.3.3293) did not claim interface 0 before use [ 1107.593009][ T30] audit: type=1804 audit(2000000018.969:1434): pid=20559 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.3296" name="/newroot/57/file0" dev="tmpfs" ino=315 res=1 errno=0 [ 1107.659816][T20562] netlink: 'syz.9.3297': attribute type 1 has an invalid length. [ 1108.337300][ T1103] bond0 (unregistering): Released all slaves [ 1108.577169][ T1103] bond1 (unregistering): Released all slaves [ 1108.611064][ T1103] bond2 (unregistering): Released all slaves [ 1108.770275][ T1103] bond3 (unregistering): Released all slaves [ 1108.785098][ T1103] bond4 (unregistering): Released all slaves [ 1108.796079][T20562] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1109.776606][ T1103] : left promiscuous mode [ 1109.821623][ T5911] usb 7-1: USB disconnect, device number 76 [ 1109.984715][ T5911] ch341 7-1:0.0: device disconnected [ 1110.509011][ T1103] tipc: Left network mode [ 1110.547042][T20632] SELinux: failed to load policy [ 1110.576336][ T1103] IPVS: stopping backup sync thread 15320 ... [ 1110.858466][ T6027] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1111.031439][ T6027] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1111.041113][ T6027] usb 10-1: config 0 has no interface number 0 [ 1111.051027][ T6027] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 107, changing to 10 [ 1111.065864][ T30] audit: type=1400 audit(2000000022.602:1435): avc: denied { append } for pid=20653 comm="syz.6.3308" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1111.075329][ T6027] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 25455, setting to 1024 [ 1111.278387][ T6027] usb 10-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1111.304115][ T6027] usb 10-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1111.727926][ T6027] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.766253][ T6027] usb 10-1: config 0 descriptor?? [ 1112.257536][ T1103] hsr_slave_0: left promiscuous mode [ 1112.272931][ T1103] hsr_slave_1: left promiscuous mode [ 1112.300755][ T30] audit: type=1400 audit(2000000023.903:1436): avc: denied { execute } for pid=20668 comm="syz.3.3311" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1112.358039][T20632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.375535][ T1103] veth1_macvtap: left promiscuous mode [ 1112.390228][T20632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.401018][ T1103] veth0_macvtap: left promiscuous mode [ 1112.419031][ T1103] veth1_vlan: left promiscuous mode [ 1112.430243][ T1103] veth0_vlan: left promiscuous mode [ 1112.436755][ T6027] input: HID 28bd:0042 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:28BD:0042.0039/input/input69 [ 1112.571546][ T5911] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1112.587717][ T6027] uclogic 0003:28BD:0042.0039: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.9-1/input1 [ 1112.722295][ T6027] usb 10-1: USB disconnect, device number 5 [ 1112.753193][ T5911] usb 4-1: device descriptor read/64, error -71 [ 1113.057687][ T5911] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1113.267324][ T5911] usb 4-1: device descriptor read/64, error -71 [ 1113.978509][ T5911] usb usb4-port1: attempt power cycle [ 1114.012287][T15451] Bluetooth: hci5: command 0x0406 tx timeout [ 1114.305943][ T5911] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1114.453114][ T5911] usb 4-1: device descriptor read/8, error -71 [ 1114.797247][ T5911] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1114.916239][ T5911] usb 4-1: device descriptor read/8, error -71 [ 1115.021268][ T5911] usb usb4-port1: unable to enumerate USB device [ 1115.402914][ T2152] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1115.561610][ T2152] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1115.573582][ T2152] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1115.584970][ T2152] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1115.604808][ T2152] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.662815][T20695] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1115.685540][ T2152] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1116.027407][T20614] smc: removing ib device syz! [ 1116.475542][T11018] usb 7-1: USB disconnect, device number 77 [ 1116.679924][T20709] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3319'. [ 1117.451984][ T6027] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1117.754909][ T6027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1117.853279][ T6027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.906581][ T6027] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1117.975396][ T6027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.101832][ T6027] usb 7-1: config 0 descriptor?? [ 1118.441566][T20739] netlink: 'syz.9.3327': attribute type 10 has an invalid length. [ 1118.511602][T20739] bridge0: port 3(team0) entered disabled state [ 1118.530021][ T30] audit: type=1326 audit(2000000030.444:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20737 comm="syz.3.3329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f237658ebe9 code=0x0 [ 1118.533226][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 1118.560060][ C1] vkms_vblank_simulate: vblank timer overrun [ 1118.569647][T20743] netlink: 'syz.9.3327': attribute type 10 has an invalid length. [ 1118.577969][T20743] netlink: 2 bytes leftover after parsing attributes in process `syz.9.3327'. [ 1118.589168][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 1118.596914][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 1118.604344][ T6027] usbhid 7-1:0.0: can't add hid device: -32 [ 1118.610779][ T6027] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1118.620097][T20739] team0: left allmulticast mode [ 1118.625029][T20739] team_slave_0: left allmulticast mode [ 1118.639094][T20739] team_slave_1: left allmulticast mode [ 1118.648779][ T6027] usb 7-1: USB disconnect, device number 78 [ 1118.669583][T20739] team0: left promiscuous mode [ 1118.674491][T20739] team_slave_0: left promiscuous mode [ 1118.684653][T20739] team_slave_1: left promiscuous mode [ 1118.693527][T20739] bridge0: port 3(team0) entered disabled state [ 1118.781585][T20739] batman_adv: batadv0: Adding interface: team0 [ 1118.791799][T20739] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.817197][T20739] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1118.858734][T20743] team0: entered promiscuous mode [ 1118.870107][T20743] team_slave_0: entered promiscuous mode [ 1118.889232][T20743] team_slave_1: entered promiscuous mode [ 1118.928926][T20743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.949733][T20743] batman_adv: batadv0: Interface activated: team0 [ 1118.960118][T20743] batman_adv: batadv0: Interface deactivated: team0 [ 1118.977127][T20743] batman_adv: batadv0: Removing interface: team0 [ 1119.033065][T20743] bridge0: port 3(team0) entered blocking state [ 1119.041191][T20743] bridge0: port 3(team0) entered disabled state [ 1119.085314][T20743] team0: entered allmulticast mode [ 1119.109386][T20743] team_slave_0: entered allmulticast mode [ 1119.140364][T20743] team_slave_1: entered allmulticast mode [ 1119.319301][T20743] bridge0: port 3(team0) entered blocking state [ 1119.325687][T20743] bridge0: port 3(team0) entered forwarding state [ 1119.543215][T20759] netlink: 'syz.6.3331': attribute type 1 has an invalid length. [ 1119.561139][T20759] netlink: 'syz.6.3331': attribute type 4 has an invalid length. [ 1119.575990][T20759] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3331'. [ 1119.586544][T20759] netlink: 'syz.6.3331': attribute type 1 has an invalid length. [ 1119.594503][T20759] netlink: 'syz.6.3331': attribute type 4 has an invalid length. [ 1119.630243][T20759] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3331'. [ 1119.779368][T20765] syz_tun: entered allmulticast mode [ 1119.785708][T20765] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1119.795031][T20765] net_ratelimit: 3 callbacks suppressed [ 1119.795045][T20765] mroute: pending queue full, dropping entries [ 1119.922639][ T1103] IPVS: stop unused estimator thread 0... [ 1120.475994][T20756] syz_tun: left allmulticast mode [ 1120.675492][T20774] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3338'. [ 1120.760359][ T30] audit: type=1400 audit(2000000032.785:1438): avc: denied { connect } for pid=20778 comm="syz.9.3341" laddr=::1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1120.837784][ T30] audit: type=1400 audit(2000000032.816:1439): avc: denied { getopt } for pid=20778 comm="syz.9.3341" laddr=::1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1121.053217][T20790] netlink: 'syz.6.3343': attribute type 1 has an invalid length. [ 1121.188319][T20796] tty tty4: ldisc open failed (-12), clearing slot 3 [ 1121.373191][ T2152] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1121.624767][ T2152] usb 10-1: config 204 has too many interfaces: 137, using maximum allowed: 32 [ 1121.649412][ T30] audit: type=1326 audit(2000000033.719:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20800 comm="syz.6.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000 [ 1121.678935][ T30] audit: type=1326 audit(2000000033.719:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20800 comm="syz.6.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000 [ 1121.749735][ T2152] usb 10-1: config 204 has an invalid descriptor of length 41, skipping remainder of the config [ 1121.764545][ T30] audit: type=1326 audit(2000000033.719:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20800 comm="syz.6.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000 [ 1121.788796][ T30] audit: type=1326 audit(2000000033.719:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20800 comm="syz.6.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000 [ 1121.812950][ T30] audit: type=1326 audit(2000000033.719:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20800 comm="syz.6.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000 [ 1121.836427][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.848076][ T30] audit: type=1326 audit(2000000033.719:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20800 comm="syz.6.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000 [ 1121.871549][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.884792][ T30] audit: type=1326 audit(2000000033.719:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20800 comm="syz.6.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d178ebe9 code=0x7ffc0000 [ 1121.933901][ T2152] usb 10-1: config 204 has 0 interfaces, different from the descriptor's value: 137 [ 1121.985930][ T2152] usb 10-1: New USB device found, idVendor=1fb4, idProduct=fffb, bcdDevice=dc.7b [ 1121.996421][ T2152] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.009180][ T2152] usb 10-1: Product: syz [ 1122.045296][ T2152] usb 10-1: Manufacturer: syz [ 1122.053188][ T2152] usb 10-1: SerialNumber: syz [ 1123.295428][T20822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3349'. [ 1123.778223][T20833] overlayfs: missing 'workdir' [ 1124.581140][ T2152] usb 10-1: USB disconnect, device number 6 [ 1125.733651][T20859] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=47140 sclass=netlink_xfrm_socket pid=20859 comm=syz.8.3361 [ 1126.053196][T20864] fuse: Unknown parameter '/dev/sequencer' [ 1127.936824][T20870] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3363'. [ 1128.190614][T12040] kernel read not supported for file /input/event1 (pid: 12040 comm: kworker/1:4) [ 1128.271543][T20878] geneve2: entered promiscuous mode [ 1128.298226][T20878] geneve2: entered allmulticast mode [ 1128.532352][T15451] Bluetooth: hci0: command 0x0406 tx timeout [ 1128.796135][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 1128.796152][ T30] audit: type=1400 audit(2000000041.225:1502): avc: denied { append } for pid=20881 comm="syz.8.3368" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1129.589912][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3370'. [ 1129.667598][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3370'. [ 1129.685127][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3370'. [ 1129.695206][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3370'. [ 1130.454676][ T30] audit: type=1804 audit(2000000042.957:1503): pid=20911 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.3374" name="/newroot/81/file0" dev="tmpfs" ino=452 res=1 errno=0 [ 1130.556348][ T30] audit: type=1800 audit(2000000043.052:1504): pid=20887 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3368" name="/" dev="9p" ino=2 res=0 errno=0 [ 1130.641141][ T6027] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1130.816259][ T6027] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.856435][ T6027] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1130.904179][ T6027] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1130.949970][ T6027] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1130.969635][ T6027] usb 10-1: SerialNumber: syz [ 1131.196881][T20913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.207153][T20913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.239979][ T6027] usb 10-1: 0:2 : does not exist [ 1131.246092][ T6027] usb 10-1: unit 5: unexpected type 0x03 [ 1131.257739][ T6027] usb 10-1: USB disconnect, device number 7 [ 1131.409189][T18580] udevd[18580]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1132.383387][T20835] syz.7.3355 (20835): drop_caches: 1 [ 1133.318411][T20958] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1133.378137][ T30] audit: type=1400 audit(2000000045.981:1505): avc: denied { relabelto } for pid=20954 comm="syz.9.3386" name="76" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1133.658388][ T30] audit: type=1400 audit(2000000045.981:1506): avc: denied { associate } for pid=20954 comm="syz.9.3386" name="76" dev="tmpfs" ino=409 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 1133.813284][ T30] audit: type=1400 audit(2000000046.485:1507): avc: denied { remove_name } for pid=19303 comm="syz-executor" name="binderfs" dev="tmpfs" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1133.870909][ T30] audit: type=1400 audit(2000000046.485:1508): avc: denied { rmdir } for pid=19303 comm="syz-executor" name="76" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1134.084272][T20964] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3388'. [ 1134.245552][T20969] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 1134.256425][T20969] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 1134.345392][T20969] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1143.002460][T19871] Bluetooth: hci4: command 0x0406 tx timeout [ 1145.904694][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1174.554964][ T31] INFO: task syz.5.2953:19133 blocked for more than 143 seconds. [ 1174.562817][ T31] Not tainted syzkaller #0 [ 1174.568132][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1182.174997][ T31] task:syz.5.2953 state:D stack:27960 pid:19133 tgid:19132 ppid:12149 task_flags:0x400140 flags:0x00004004 SYZFAIL: failed to send rpc fd=3 want=296 sent=0 n=-1 (errno 32: Broken pipe) [ 1182.269555][ T31] Call Trace: [ 1182.318440][ T30] audit: type=1400 audit(2000000097.389:1509): avc: denied { recv } for pid=5835 comm="syz-executor" saddr=10.128.0.169 src=47934 daddr=10.128.1.220 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1182.331393][ T31] [ 1182.366296][ T31] __schedule+0x1190/0x5de0 [ 1182.370835][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1182.376136][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1182.384481][ T31] ? __pfx___schedule+0x10/0x10 [ 1182.389495][ T31] ? find_held_lock+0x2b/0x80 [ 1182.397575][ T31] ? schedule+0x2d7/0x3a0 [ 1182.402042][ T31] schedule+0xe7/0x3a0 [ 1182.417086][ T31] bit_wait+0x15/0xe0 [ 1182.421104][ T31] __wait_on_bit+0x65/0x180 [ 1182.435072][ T31] ? __pfx_bit_wait+0x10/0x10 [ 1182.440276][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 1182.470318][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1182.476678][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 1182.508393][ T31] __fscache_acquire_volume+0xbbf/0x1070 [ 1182.527483][ T31] v9fs_cache_session_get_cookie+0x147/0x260 [ 1182.533515][ T31] v9fs_session_init+0xfc1/0x1a80 [ 1182.565626][ T31] ? __pfx_v9fs_session_init+0x10/0x10 [ 1182.571149][ T31] v9fs_mount+0xc5/0xa90 [ 1182.584553][ T31] ? __pfx_v9fs_mount+0x10/0x10 [ 1182.589463][ T31] ? cap_capable+0xb3/0x250 [ 1182.593979][ T31] ? __pfx_v9fs_mount+0x10/0x10 [ 1182.613182][ T31] legacy_get_tree+0x10c/0x220 [ 1182.617984][ T31] vfs_get_tree+0x8b/0x340 [ 1182.622405][ T31] path_mount+0x1513/0x2000 [ 1182.633604][ T31] ? __pfx_path_mount+0x10/0x10 [ 1182.638511][ T31] ? kmem_cache_free+0x2d1/0x4d0 [ 1182.644141][ T31] ? putname+0x154/0x1a0 [ 1182.648414][ T31] ? putname+0x154/0x1a0 [ 1182.653948][ T31] ? __x64_sys_mount+0x28d/0x310 [ 1182.658905][ T31] __x64_sys_mount+0x28d/0x310 [ 1182.669503][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 1182.675499][ T31] do_syscall_64+0xcd/0x4c0 [ 1182.680777][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.686684][ T31] RIP: 0033:0x7fa365d8ebe9 [ 1182.691273][ T31] RSP: 002b:00007fa366c06038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1182.700016][ T31] RAX: ffffffffffffffda RBX: 00007fa365fc5fa0 RCX: 00007fa365d8ebe9 [ 1182.716551][ T31] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 1182.726833][ T31] RBP: 00007fa365e11e19 R08: 00002000000002c0 R09: 0000000000000000 [ 1182.766717][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1182.774729][ T31] R13: 00007fa365fc6038 R14: 00007fa365fc5fa0 R15: 00007ffe14d1dd18 [ 1182.843204][ T31] [ 1182.846338][ T31] [ 1182.846338][ T31] Showing all locks held in the system: [ 1182.889388][ T31] 1 lock held by khungtaskd/31: [ 1182.938324][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1182.980622][ T31] 3 locks held by kworker/1:2/92: [ 1183.025677][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1183.080999][ T31] #1: ffffc9000259fd10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1183.147087][ T31] #2: ffffffff8e5cc7f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1183.204277][ T31] 3 locks held by kworker/0:2/2152: [ 1183.209533][ T31] 2 locks held by getty/5613: [ 1183.251973][ T31] #0: ffff8880367d40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1183.300415][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1183.356730][ T31] 1 lock held by syz.6.2865/18694: [ 1183.361880][ T31] #0: ffffffff90384ac8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1183.424221][ T31] 1 lock held by syz-executor/19170: [ 1183.429534][ T31] #0: ffffffff90384ac8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1183.461448][ T31] 4 locks held by syz-executor/19303: [ 1183.466850][ T31] #0: ffff888079d1cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1183.496701][ T31] #1: ffff888079d1c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 1183.512269][ T31] #2: ffffffff905ed168 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 1183.524299][ T31] #3: ffff8880269a2b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 1183.533839][ T31] 3 locks held by syz.8.3390/20972: [ 1183.539628][ T31] #0: ffff888078f3cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1183.549590][ T31] #1: ffff888078f3c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 1183.559679][ T31] #2: ffffffff905ed168 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 1183.571340][ T31] 1 lock held by dhcpcd/20978: [ 1183.576742][ T31] #0: ffff88807d1d9408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1183.587736][ T31] 1 lock held by dhcpcd/20979: [ 1183.592474][ T31] #0: ffff88807d1e5608 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1183.603870][ T31] 2 locks held by dhcpcd/20980: [ 1183.608722][ T31] #0: ffff88807d1e2608 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1183.619998][ T31] #1: ffffffff8e5cc7f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1183.630447][ T31] [ 1183.633956][ T31] ============================================= [ 1183.633956][ T31] [ 1183.667892][ T31] NMI backtrace for cpu 0 [ 1183.667910][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1183.667926][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1183.667934][ T31] Call Trace: [ 1183.667940][ T31] [ 1183.667947][ T31] dump_stack_lvl+0x116/0x1f0 [ 1183.667972][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1183.667984][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1183.668001][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1183.668023][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1183.668039][ T31] watchdog+0xf0e/0x1260 [ 1183.668060][ T31] ? __pfx_watchdog+0x10/0x10 [ 1183.668075][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1183.668093][ T31] ? __kthread_parkme+0x19e/0x250 [ 1183.668116][ T31] ? __pfx_watchdog+0x10/0x10 [ 1183.668132][ T31] kthread+0x3c2/0x780 [ 1183.668146][ T31] ? __pfx_kthread+0x10/0x10 [ 1183.668160][ T31] ? rcu_is_watching+0x12/0xc0 [ 1183.668177][ T31] ? __pfx_kthread+0x10/0x10 [ 1183.668191][ T31] ret_from_fork+0x5d4/0x6f0 [ 1183.668204][ T31] ? __pfx_kthread+0x10/0x10 [ 1183.668218][ T31] ret_from_fork_asm+0x1a/0x30 [ 1183.668245][ T31] [ 1183.668251][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1183.798293][ C1] NMI backtrace for cpu 1 [ 1183.798309][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1183.798324][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1183.798332][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1183.798352][ C1] Code: cc 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1183.798365][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 1183.798376][ C1] RAX: 000000000563c00d RBX: 0000000000000001 RCX: ffffffff8b945c29 [ 1183.798385][ C1] RDX: 0000000000000000 RSI: ffffffff8de522e8 RDI: ffffffff8c162d80 [ 1183.798393][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6655 [ 1183.798402][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 1183.798410][ C1] R13: ffff88801e2b2440 R14: ffffffff90ab6b90 R15: 0000000000000000 [ 1183.798418][ C1] FS: 0000000000000000(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 1183.798432][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1183.798441][ C1] CR2: 0000555982628660 CR3: 000000000e380000 CR4: 00000000003526f0 [ 1183.798449][ C1] Call Trace: [ 1183.798454][ C1] [ 1183.798459][ C1] default_idle+0x13/0x20 [ 1183.798477][ C1] default_idle_call+0x6d/0xb0 [ 1183.798494][ C1] do_idle+0x391/0x510 [ 1183.798512][ C1] ? __pfx_do_idle+0x10/0x10 [ 1183.798527][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1183.798543][ C1] cpu_startup_entry+0x4f/0x60 [ 1183.798558][ C1] start_secondary+0x21d/0x2b0 [ 1183.798583][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1183.798602][ C1] common_startup_64+0x13e/0x148 [ 1183.798621][ C1] [ 1183.800626][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1183.976603][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1183.985697][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1183.995731][ T31] Call Trace: [ 1183.998989][ T31] [ 1184.001899][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1184.006476][ T31] vpanic+0x6e8/0x7a0 [ 1184.010443][ T31] ? __pfx_vpanic+0x10/0x10 [ 1184.014931][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1184.020898][ T31] panic+0xca/0xd0 [ 1184.024603][ T31] ? __pfx_panic+0x10/0x10 [ 1184.029005][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1184.034362][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1184.040500][ T31] ? watchdog+0xd78/0x1260 [ 1184.044894][ T31] ? watchdog+0xd6b/0x1260 [ 1184.049291][ T31] watchdog+0xd89/0x1260 [ 1184.053518][ T31] ? __pfx_watchdog+0x10/0x10 [ 1184.058179][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1184.063360][ T31] ? __kthread_parkme+0x19e/0x250 [ 1184.068376][ T31] ? __pfx_watchdog+0x10/0x10 [ 1184.073038][ T31] kthread+0x3c2/0x780 [ 1184.077086][ T31] ? __pfx_kthread+0x10/0x10 [ 1184.081655][ T31] ? rcu_is_watching+0x12/0xc0 [ 1184.086400][ T31] ? __pfx_kthread+0x10/0x10 [ 1184.090969][ T31] ret_from_fork+0x5d4/0x6f0 [ 1184.095544][ T31] ? __pfx_kthread+0x10/0x10 [ 1184.100118][ T31] ret_from_fork_asm+0x1a/0x30 [ 1184.104872][ T31] [ 1184.108077][ T31] Kernel Offset: disabled [ 1184.112390][ T31] Rebooting in 86400 seconds..