last executing test programs: 7m16.738904832s ago: executing program 32 (id=147): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents(r5, &(0x7f0000000280)=""/4097, 0x1001) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x3, 0x0, 0x0, 0x9f, 0x7a, &(0x7f0000000180)="6197c5b8f7dff49c1db9a396cd7e72ce7be9d54fe01b139801488bc06800db99067208afff3dc1f466359e4bee527513479f60fae56884b8143962a2afa8d42a3b7d3045f1c2c45abaaa0c39884418cb59c9b83531415dfd38675ae2124e73bb25eb777ebc6c7f73fc132e82ecc38e491c1a296e79c9803bd955"}) 7m1.142853198s ago: executing program 33 (id=187): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x20000000, 0x2cf}, &(0x7f0000000040), &(0x7f0000000600)) 6m5.288471982s ago: executing program 34 (id=366): accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80000) r0 = semget$private(0x0, 0x4, 0x688) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000080)=0x3) r1 = semget(0x3, 0x1, 0x39) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f00000000c0)=""/225) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000001c0)=""/187) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000000280)=""/15) semop(r1, &(0x7f00000002c0)=[{0x3, 0xf, 0x1800}], 0x1) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000300)=""/19) r2 = semget$private(0x0, 0x4, 0x87454fb32b77586c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8) statx(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x100, 0x40, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000005c0)={0x0, 0xf, {0xffffffffffffffff}, {0x0}, 0x2, 0x2}) statx(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x100, 0x7ff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000740)={{0x1, r4, r5, r6, r7, 0x80, 0xe}, 0xfffffffffffffffe, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfff}) utime(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x1560}) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000840)=""/30) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000880)=[0x9e]) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r9, 0x508, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'dvmrp1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40804) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0xa0040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xe}, {0xe, 0x9}, {0xd, 0xe}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40d0) r10 = syz_open_dev$audion(&(0x7f0000000b40), 0x80000001, 0x301400) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000b80), &(0x7f0000000bc0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000c00)={@rand_addr=' \x01\x00', 0x62, r3}) sendto$inet6(r10, &(0x7f0000000c40)="a76e604a47dd0ed74e5c1b88348dff3a282d0b641017b3ac3df8c45f5a72cff25294e9c914089a8b8d74a4fc9f3f03da0c2349f4e78c0cd36df4e04ebc461297513b61fb66250480d08bbfea0537e9f2228980e118bda936ae8262d1438bf9a39841e6a840ad4e309a91904d943b56c02b8c2f2007fca4777931", 0x7a, 0x20000000, &(0x7f0000000cc0)={0xa, 0x4e23, 0x2, @empty, 0x100}, 0x1c) r11 = add_key$keyring(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000d00), &(0x7f0000000d40)={'syz', 0x3}, 0x0, 0x0, r11) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000e00), 0xd80, 0x0) 5m56.577848389s ago: executing program 35 (id=395): socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000100)) (async) fanotify_init(0x8, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) (async, rerun: 64) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) (rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async, rerun: 64) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f0000000240)) (async, rerun: 64) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x400040, 0x0) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$inet6_buf(r5, 0x29, 0x3d, &(0x7f0000000080)=""/146, &(0x7f0000000000)=0x92) (async) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) (async) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) 5m36.530133797s ago: executing program 36 (id=443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = syz_usb_connect$uac1(0x4, 0xdd, &(0x7f0000000b00)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0x5, 0xc0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x82c, 0x4}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x2d, 'o'}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x3, 0x3, [0x7, 0xa03244ea374b064f, 0xa], 0x8}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x2, 0xf8, "3587"}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0xe7, '&'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x2, 0x3, 0x80, "5dfa"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0xb, 0x3, "20ed6072ea"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xbb, 0x3, 0x6, 0x5, "6b92a95789"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x1, 0x3, 0x0, 0x7, "b2acbe", "955b40"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x9, 0x9, {0x7, 0x25, 0x1, 0x83, 0x4, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xe, 0x593b, 0xbc}, @as_header={0x7, 0x24, 0x1, 0xda, 0x4, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0x0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x92, 0x5, 0x5, {0x7, 0x25, 0x1, 0x81, 0x5, 0x3}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x0, 0x3, 0x2, 0xff, 0xd}, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="050f240000000000000000000305000b10070300060a1003020200c480ff038515c0c0cc7a6f3fa3be67b92c39fa94d10c6211fea7f1f401e52dd580fc9ce3deb2aab1799bd595eb353a0d49cd21809b17b65c0000c124997007094473702ed272289787dca6cd9cbfa705184d72097e5848c80a17ec7934429b6147e4b20e0ef465a1677af584c7737ef6a4dec2224e8e67"], 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x240a}}, {0xcd, 0x0}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x31, &(0x7f0000000480)=@string={0x31, 0x3, "bf62997a58919cbe04901ab8adf8b6b3cd1c4f7ebb8a6fcdb9d19642dbd138a31cae3219ee9452740d666be13ecfc8"}}, {0x5b, &(0x7f0000000500)=@string={0x5b, 0x3, "e4e8388598720afaff719af4bb9b3e7ec0bf86f2a376bc70f82ece41a04cb745ddf2768d45ee9e2828f46eeb2447318097039ea7b9437f126e18f1247081d595a264db2342a45e592500cbe4feb5f036d46bdd079038a03b57"}}]}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000a80), 0xfffffffffffffffc, 0x101000) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r3, 0x80184153, &(0x7f0000000ac0)={0x0, &(0x7f0000000ac0)}) syz_usb_control_io$uac1(r2, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x0, 0x29, 0x9f, {0x9f, 0x23, "51fed9d2a17d7c21d6f6b6d87630f6a326c7d127bb23b24bff74492dac8e11bfa922b3e145d2fc571ed491df6cfb38935d1d89201288634f602497a790a6e7c2865b6325df9c7ebc63fd79600e733c1714771e6ceafb77b772d3c240e4912567efe4b37120242ecf994c115f4346445cea6de0cccf63b7ba517722430c9866e6b0ead65ea05e6a1423900b52875a74ba5d0fc6faad7cdaeb4f3e2750ba"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000780)={0x20, 0x17, 0x7e, "1c27cc3432173896ae40d25e0faa5f11aa41199e597717f423dff41b7c68bfe4eaf5ac8f38cb4c78566955e6921ddfe608c93031cedae578165435d3e6a1b93cd2dfcc9010a86b5d375d51f0820b7b5f28d8f1e2ab0fa631b8eb1dde509ca837b72cb3f01153c403f7259d4b30feba9b1287369d0065cc92e3b344aff408"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x85}, &(0x7f00000008c0)={0x20, 0x81, 0x2, "7a1a"}, &(0x7f0000000040)={0x20, 0x82, 0x3, "f47e5d"}, &(0x7f0000000940)=ANY=[@ANYBLOB='Q'], &(0x7f0000000980)={0x20, 0x84, 0x4, "14195282"}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "9e7d38"}}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000dc0)='gidQS\x0e#\xf4=\xc8G\xd0\xb2,\xd6\xbc\x8ehr\xb4\xef\x04`8\x84\xc9\xa6\xa3\xe4\xb5\xd4w\x9cA\x0f\x8a\t\xa9\xe3-\xcd\xb6\x9d\x89\x85V\xea\x13*t5z\xd3=\x94D}l\xc4q\xe6)\xb4\xb1(8\xee\xd2\x13\x84\xadO\xa2\xc8\x957\\\x8c\f\x12\x84\xa7\xa8\xf7\xd7\x0e\xf5\xaa\xd6p\v^\xee\x05\xd0S\xc8\xba\xc5\xcd0\xfb\xa3(\x163nN\xf5\xb0\f\xf1\x9b\xc5\x97T\xdd\x9e{\xe6\x97Te2\n\xb2{i\xb8$\xab\x96U=\x1b@\x99c\xc0&\xeb\xc4\xd8b\x8au\x11X\x93\xa8\xf1\xff\x82\xe3\x8b\\|\xf5K\xda\xcb\xcb\xca\x06K\xc4\xcc\x970\xe93\x83\fn\xaa\xcc\x17\xf1x8\xbc\xed\xc6\v\xb9\x06\xd0\x935\x19\xa5\x01\xf9\x84\xe6\x92\x97\x98\xf9>\x04\xfc\xbd\xe0\xf9L\xc4\x82\x1e\xfe\x86~\xbbH0\t`\xa7\xabz\x9c\x96\x1d\x94S\x1a*\xbfG\x1e\x18\x8d3\xd9R\x8f\xb29\xb30\\&\x03\xfa\x18\xf8<\xc8\xb8F[\x1f\x7f\xbf\x89S\x04\xb1\x17m~\xe2\xeb*0\xa8_\xee#\xe7\x03f\xc4U\x19.\xfe\n\x8f\xd0\xef\xd9\xc9A\xf0\x0f\x11\xcc-\x12m\xa3\xddq\xe9\x0e3\xe5\xfcFG\xe3\x98+`L;e\xfb\xeb\xab\xf4\b$\x1cl\x0f\x11\x88\xf8\xd5b\xfd\x99;\x99\xfcc6\xee\x00\x00\b\x8a\x90\x90\x85>\x94\xee\xb3V\x8e\xe9\x9b\xa5)6\xc2\x14\x18r\x7f\x89vE\xac\xf16\r|\xd6{41\x96\x82`\xb7', &(0x7f0000000c00)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00\x87\x85\xa9#\x19kX\x03Q\xc3\x00\xcb\xa2:\xc0\xb2\x80\xb4x\xcbz[\x8b\f\x15\x11\x1e\xa8\x02\xac\x15\xd4\x1f\x9b\xdb\xc2+K\'q\xf5R\xb5v\xd0x\xde+\xde\xf4\x17S\xb7|^\x02a\xba\xba\x1a\xe7\xcck\xbb\x8fY\xde\xf7\xa1Sn\x95Z\xc7\xcc\xfat\xb9H\\\x95\xcdD\x90,\b;q\xbe\x1a\a`\xe0o\x171N\xc5\x94$C\xfe\x96\xb8\xc8\xc07\xcc4\xc76\xb7\xb5\x9cs\x0e\x18\xd2@\xc5\xd5u\xae\xfc\x8c\x0eq\xb4\x11\x92\xe1\xafen\xe5R]\x1dr\x87$= \x1e\xa4\x8dY\x00'/448, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000f40)=""/4083, 0x0, 0xff32, 0x1, 0x1}, 0x28) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x34}, 0x10) 5m33.39324961s ago: executing program 37 (id=457): prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpgrp(0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) set_mempolicy(0x8001, &(0x7f00000004c0)=0x4, 0xba) (fail_nth: 5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x11, 0x10, 0x0, &(0x7f0000000480)) close(0xffffffffffffffff) 5m29.737717247s ago: executing program 38 (id=466): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mbind(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2, 0x0, 0xee6, 0xf5a665ae99881e46) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) syz_open_procfs$userns(r2, &(0x7f0000000280)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x200000000000000) 4m22.252829307s ago: executing program 39 (id=672): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r1}]}}}, @IFLA_MTU={0x8, 0x3}]}, 0x40}}, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x9, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f363563030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) rmdir(0x0) r7 = socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x34, r9, 0x1, 0x70bd20, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x20, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8a}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000800) lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) 3m54.444566269s ago: executing program 40 (id=712): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0080, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x30004081) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r4, &(0x7f0000004dc0)={0x2020}, 0x2020) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) r5 = socket(0x23, 0x5, 0x0) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) socket$inet6_sctp(0xa, 0x801, 0x84) (async) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) (async) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) (async) poll(0x0, 0x0, 0x800) 3m45.428820018s ago: executing program 41 (id=782): openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = inotify_init() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) ptrace$getregset(0x4204, r5, 0x4, &(0x7f00000004c0)={&(0x7f0000000480)=""/21, 0x15}) chdir(0x0) mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x27000309) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) memfd_create(&(0x7f0000000840)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842.\x17c`\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10d\x89J\xb3zz\x83\x81\x0f\xbd\xdf\xff9**\xb7\xfa\xa9h;<\xe8\x85\v\x9e\x02\x03\xad\xa4\x11R\x14\xbc\xc8\xb5\x89\xffx\x98%O\xf8n~1G\x89\x96\x1d\xecz\xe8\x04\x86G%\xa0\xd5[\xda\xc9', 0x4) syz_open_procfs(0x0, &(0x7f0000000500)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x9dffffff}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) 57.2093444s ago: executing program 1 (id=1197): syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0xe, 0x3}, {0x10, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000000)={0x28, 0x0, r4, r4, 0x2, 0x400, 0x9}) 54.747462804s ago: executing program 1 (id=1208): getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000004000000611150000000000085000000000000004000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000010000000000000000040000006d00078018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) gettid() ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x1, 0x0, 0x1, 0xffff, 0xa, 0x89}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, 0xfffffffffffffffc) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x7fffffffffffffff, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) 54.205534156s ago: executing program 42 (id=1209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000007c0), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x8) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000380)="ca091cc2e088", 0xffe3) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x6, 0x12, r3, 0x1b83c000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="df4800000000000000000c00000004000380180001801400020064756d6d793000"/42], 0x30}}, 0x0) 53.456512s ago: executing program 1 (id=1214): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000800000000429bdd0f58e3b76fd802e4b4c8dcb57bf3c7c752337f422cb91aa478cb46a80bde397d871f8fa53a50c9beb4f", @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB], 0x40}}, 0x0) socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)) syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x3, 0x36b}, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) setns(r2, 0x8000000) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 53.120307176s ago: executing program 2 (id=1215): syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8000) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdc01, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x48804) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000008000300000000000000000000000000863dfc3924d345b03b936ec000f1386a246de7d0b5a70de20aefe8443b69b263ec9abb71213ae94c04416de0fcc6aac992d9a3f3078cb29727ee4e8880c3af68dccdb9e0b4f80206707f96776ec2d50b26aad4cdfc191d3d823f0af910e4e2cfdd33d7061fdb", @ANYRES32=0x0, @ANYBLOB="0c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="0c0006000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x8041}, 0x400484c) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="080025bd7000fbdbdf250f000000400002801c0003800800020081000000080001000500000008000200ff030000040004001c0003800800020008000000080002000101000008000100ff7f0000180007800c00040040000000000000000800020006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000818}, 0x20000810) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 53.015915321s ago: executing program 1 (id=1216): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) utimes(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000240)={0x1}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) mount$binder(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000440)=ANY=[@ANYBLOB='max=0000000-000000000002,stats=global,max=00000000000000000003,stats=global,stats=global,stats=global,stats=global,stats=global,stats=global,euid>', @ANYRESDEC=r1, @ANYBLOB=',measure,func=CREDS_CHECK,fsuuid=a23d8X64-98b8-9732-51\n5-i7053c3e,fsmagic=0x0000000000000003,uid<', @ANYRESDEC, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r4, 0x0, 0x0}, 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x800448d7, &(0x7f0000000000)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) r6 = syz_clone(0x88200280, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) chdir(&(0x7f0000000140)='./file0\x00') socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x3, &(0x7f00000002c0)) 52.819703947s ago: executing program 1 (id=1217): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x6e606a5f70bdc4f4, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',cache=loose,access=user,noextend,cache=fscache,fowner>', @ANYRESOCT=r0, @ANYBLOB=',\x00', @ANYRESDEC=0x0, @ANYBLOB="6a2c0e3c20cfdb923e445a1a0c85ba017e43fe08eb3f46f3f489e9a4cdfc558e1964b636ff95ad24a1b22595ed6d4d7d2ba7a1e9e046429d733e36b11da93d217dfe0c7bb3435a6db925013f3f9b8fc926cd78ccc98b39fdb23f13f0a3b5da71acb92fd5cb8179dd670aba165c76e883dff00342211998c005f4ae17de11b0d783b48d86a9c59683afbf706b5a9be330819e9b235874bc75a2782cdab4c95bb9d37ad1f25b46296b88206cb6e3752fc53ef5f8292d0ab17ed4ecdfd187c090b93d04cfde5521"]) write$P9_RVERSION(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="009d8f2ce2fcd6df4a18d2f0dc"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x40000000000002}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x3, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) socket$inet6(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f209b747822a71ddcfbfe3256db532d9be7c7ba14b065982dbc69cdcc21bcf5cd715a71925339e98db7cbd0e046a6891ceb602b01628c64e1f562934eae6269e"], 0x68) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) socket$packet(0x11, 0x3, 0x300) 51.231767739s ago: executing program 1 (id=1221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_CMD={0x9, 0x1, 0x3}, @NFULA_CFG_MODE={0x0, 0x2, {0x5}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 50.786646946s ago: executing program 43 (id=1221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_CMD={0x9, 0x1, 0x3}, @NFULA_CFG_MODE={0x0, 0x2, {0x5}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 49.918966208s ago: executing program 2 (id=1224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) 49.008056942s ago: executing program 2 (id=1225): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240000000000000904290202b48cbb00"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 45.888149506s ago: executing program 2 (id=1232): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) utimes(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000240)={0x1}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) mount$binder(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000440)=ANY=[@ANYBLOB='max=0000000-000000000002,stats=global,max=00000000000000000003,stats=global,stats=global,stats=global,stats=global,stats=global,stats=global,euid>', @ANYRESDEC=r1, @ANYBLOB=',measure,func=CREDS_CHECK,fsuuid=a23d8X64-98b8-9732-51\n5-i7053c3e,fsmagic=0x0000000000000003,uid<', @ANYRESDEC, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r4, 0x0, 0x0}, 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x800448d7, &(0x7f0000000000)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) r6 = syz_clone(0x88200280, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) chdir(&(0x7f0000000140)='./file0\x00') socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x3, &(0x7f00000002c0)) 45.676424903s ago: executing program 2 (id=1233): r0 = socket(0x6, 0x3, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x4000, @mcast2}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRES8, @ANYRES16=r2, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32=r2], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb256a002a7e0000964800000c0000008c00000002000000000000000000000000000000004a93fb71c7db86d0cf900d634c87c9e9bd9d2d7522ca6d58a06a325b2ad3ad992ef3d7a7fb8a02712bdfbec3c6acf035f1ab55f95f751d9ec25883ed3a7e364d9cdcdbafe0a1ab556ee94a34a2db83e21c2a2f73df004003baecd42a99da601faabbb1cf0bd823f5a4bf20a7b8b420861465dfe31a6632497d43fdaa696b7d47f395396ffe14"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r3, 0x4, 0x0, &(0x7f00000001c0)) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = epoll_create1(0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000280)='netdevsim0\x00') epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) getrlimit(0xa, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) gettid() r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r8) 45.062816161s ago: executing program 2 (id=1235): r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x2, 0x7, 0x13) pipe2$9p(&(0x7f0000000080), 0x84000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[], 0x70}, 0x1, 0x7}, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030783030302030303030303030303030306609000000444714baf80ad944d1463b62b2e4f766d580a9382b2e829b6fcedded6f817fcaf21e51bde1ceafb3750a57065c78f2aab9be3eefbc0e11392af0e4c1f892ece8d0559bab9e418ff4d67ca743c5039bc2f58786dea7a7a536174c08701227e409ac16e963ae73b59a02901484d2458882890fa10c3c5d81c1487834e48b6911449a34f8000000000000000000"]) 44.454210743s ago: executing program 44 (id=1235): r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x2, 0x7, 0x13) pipe2$9p(&(0x7f0000000080), 0x84000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[], 0x70}, 0x1, 0x7}, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030783030302030303030303030303030306609000000444714baf80ad944d1463b62b2e4f766d580a9382b2e829b6fcedded6f817fcaf21e51bde1ceafb3750a57065c78f2aab9be3eefbc0e11392af0e4c1f892ece8d0559bab9e418ff4d67ca743c5039bc2f58786dea7a7a536174c08701227e409ac16e963ae73b59a02901484d2458882890fa10c3c5d81c1487834e48b6911449a34f8000000000000000000"]) 43.318911235s ago: executing program 0 (id=1238): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 43.017365015s ago: executing program 0 (id=1240): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be2dd750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 42.487626286s ago: executing program 0 (id=1241): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 41.533585411s ago: executing program 0 (id=1242): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) utimes(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000240)={0x1}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) mount$binder(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000440)=ANY=[@ANYBLOB='max=0000000-000000000002,stats=global,max=00000000000000000003,stats=global,stats=global,stats=global,stats=global,stats=global,stats=global,euid>', @ANYRESDEC=r1, @ANYBLOB=',measure,func=CREDS_CHECK,fsuuid=a23d8X64-98b8-9732-51\n5-i7053c3e,fsmagic=0x0000000000000003,uid<', @ANYRESDEC, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r4, 0x0, 0x0}, 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x800448d7, &(0x7f0000000000)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) r6 = syz_clone(0x88200280, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) chdir(&(0x7f0000000140)='./file0\x00') socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x3, &(0x7f00000002c0)) 41.432443887s ago: executing program 0 (id=1243): r0 = mq_open(&(0x7f0000000080)='!seli\x1a\x1d!\xa7\x00\x00inub\x00G\xd0\xc6(X\xbe\xa8B\xb7s\x04\x8c;\xba}\xda!\x9f4\xd7qk\x8f+\xc2\xda\x98xj\x83y\xc4@\x0f3\xfe\x18\xc6\xa1\xfe\xcbf\x7f\xaa}{\xf4H\x13Z\xf2\xf0\xe6\xfd\xed\xcf\xd8t\xc4O\x8bE\xd8\xc0\xac\xa5N\xc7O\r\x88k\x81\x10W;0\xed\\m\xd2J<\x04\xef\xa9\x95\"@\x13\x89\xe6\xff\xfc\xc9\n/S\xbdl%\xf7\xe4\xf0\xc5\xbb\xe4\xfb._O\xbc\xc4\xcci\xd0\x10\xdf\xb2\x02\xea\xae\x83\x19)Rfs\xfe\x00\xc06.\x02\xb6d\x86B\x02\xb6\xcc\xf6', 0x80, 0x0, 0x0) mq_timedreceive(r0, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r5}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x2, 0x2) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="550000000a007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x48000) syz_emit_ethernet(0xfc, &(0x7f0000000000)=ANY=[], 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 40.68383213s ago: executing program 0 (id=1245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x4, 0x2, 0x7fffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0x7, 0x6, 0x3000000002, 0x1]}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x20, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="a4c54b75699d779769ceb7b27332495af21fbdd204fb4ede43ea2c6f9d06416b40e1c966684a85c82d5a2285e501a1212ba5ba9d89f5e1b4286dd12450d0363dafe1483a94eea970b8663f006861841ba4722a0b3b675ac72b283708d10edcb8231aa95c8142a414c8ee59311db9270b937556ef17a6", 0x76}, {&(0x7f0000000180)="94f70000000000000000", 0xa}], 0x2}], 0x1, 0x0) recvmsg$qrtr(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x10000005) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r6, &(0x7f0000001b40)=""/102373, 0x18fe5) r8 = gettid() r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x48}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) splice(r10, 0x0, r7, 0x0, 0x8000000000000003, 0x9) 40.487777382s ago: executing program 45 (id=1245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x4, 0x2, 0x7fffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0x7, 0x6, 0x3000000002, 0x1]}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x20, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="a4c54b75699d779769ceb7b27332495af21fbdd204fb4ede43ea2c6f9d06416b40e1c966684a85c82d5a2285e501a1212ba5ba9d89f5e1b4286dd12450d0363dafe1483a94eea970b8663f006861841ba4722a0b3b675ac72b283708d10edcb8231aa95c8142a414c8ee59311db9270b937556ef17a6", 0x76}, {&(0x7f0000000180)="94f70000000000000000", 0xa}], 0x2}], 0x1, 0x0) recvmsg$qrtr(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x10000005) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r6, &(0x7f0000001b40)=""/102373, 0x18fe5) r8 = gettid() r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x48}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) splice(r10, 0x0, r7, 0x0, 0x8000000000000003, 0x9) 40.257360757s ago: executing program 4 (id=1247): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000024c0), r1) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x5635) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000000000, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) gettid() prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYRES16=r8, @ANYBLOB, @ANYBLOB, @ANYBLOB="1ca4a1"], 0x34}, 0x1, 0x0, 0x0, 0xcacbc4add21c9368}, 0x4040000) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x80000001, 0x1}) 39.278002088s ago: executing program 4 (id=1248): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="94010000100001000000000000000000fc0000000000000000000000000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004000000000048000200656362286369706865725f6e756c6c"], 0x194}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x4040994}, 0x20000050) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}, 0x88) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 38.463407786s ago: executing program 4 (id=1249): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg2\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r6, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000940)=""/180, 0xb4, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000340)=""/151, 0x97, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r6, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x1}}, 0x48) write$vhost_msg_v2(r6, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/185, 0xfffffff0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f00000006c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x3}}, 0x48) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="24000300"/13], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcffffff0100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r4], 0x40}}, 0x0) 37.352006565s ago: executing program 4 (id=1250): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) utimes(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000240)={0x1}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) mount$binder(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000440)=ANY=[@ANYBLOB='max=0000000-000000000002,stats=global,max=00000000000000000003,stats=global,stats=global,stats=global,stats=global,stats=global,stats=global,euid>', @ANYRESDEC=r1, @ANYBLOB=',measure,func=CREDS_CHECK,fsuuid=a23d8X64-98b8-9732-51\n5-i7053c3e,fsmagic=0x0000000000000003,uid<', @ANYRESDEC, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r4, 0x0, 0x0}, 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x800448d7, &(0x7f0000000000)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) r6 = syz_clone(0x88200280, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) chdir(&(0x7f0000000140)='./file0\x00') socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x3, &(0x7f00000002c0)) 37.304727332s ago: executing program 4 (id=1251): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x21, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x7000000, 0x0, 0x80}, 0x400c004) 36.430186192s ago: executing program 4 (id=1252): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffff50, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f613f3640f350f320f300f20e00f22e064f30f2aa00900c8", 0x46}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x101000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000140)={0x2, {0xdfffc568, 0x80000000, 0x5, 0x7}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 36.204057364s ago: executing program 46 (id=1252): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffff50, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f613f3640f350f320f300f20e00f22e064f30f2aa00900c8", 0x46}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x101000000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000140)={0x2, {0xdfffc568, 0x80000000, 0x5, 0x7}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 30.523481716s ago: executing program 6 (id=1256): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000200)={@remote, @empty}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000009060102000000000000000002000000333302000100070000000900020073797a3200"/52], 0x34}, 0x1, 0x0, 0x0, 0x14048846}, 0x0) 29.876223427s ago: executing program 6 (id=1257): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x1f, "06c4ce00000000006eb5e52829e7cc839300000400"}}) r2 = open(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x2000000}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) chdir(0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) socket$kcm(0x10, 0x2, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r4, 0x0, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') socket$nl_route(0x10, 0x3, 0x0) 28.835837348s ago: executing program 6 (id=1259): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xfffffffe, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x2000, 0xa0, 0xbbba, 0xfffffffe, 0x18, 0x0, {0x3e000000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0x8}, {0x1000001, 0x9, 0x8}, 0x0, 0x3f0, 0x1, 0x100003, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}) 28.631969895s ago: executing program 6 (id=1260): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) utimes(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000240)={0x1}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) mount$binder(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000440)=ANY=[@ANYBLOB='max=0000000-000000000002,stats=global,max=00000000000000000003,stats=global,stats=global,stats=global,stats=global,stats=global,stats=global,euid>', @ANYRESDEC=r0, @ANYBLOB=',measure,func=CREDS_CHECK,fsuuid=a23d8X64-98b8-9732-51\n5-i7053c3e,fsmagic=0x0000000000000003,uid<', @ANYRESDEC, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r3, 0x0, 0x0}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x800448d7, &(0x7f0000000000)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) r5 = syz_clone(0x88200280, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) chdir(&(0x7f0000000140)='./file0\x00') socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x3, &(0x7f00000002c0)) 28.507434273s ago: executing program 6 (id=1262): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r2, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@tcp=r2}, 0x20) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x10, 0x0, 0x0}, {0x1, 0xd201, 0x0, 0x0}], 0x2}) 28.186959544s ago: executing program 6 (id=1263): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) gettid() timer_create(0x1, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x3f00, 0x0, 0x41}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f000001aa40)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x10020, 0x5201}, [@IFLA_MAP={0x24, 0xe, {0x5, 0x4, 0xb, 0x8, 0x7, 0x6}}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 27.818064452s ago: executing program 47 (id=1263): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) gettid() timer_create(0x1, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x3f00, 0x0, 0x41}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f000001aa40)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x10020, 0x5201}, [@IFLA_MAP={0x24, 0xe, {0x5, 0x4, 0xb, 0x8, 0x7, 0x6}}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 14.147028171s ago: executing program 7 (id=1289): gettid() bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) symlinkat(0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000080)={[{@name={'name', 0x3d, 'noprefix'}}]}) ioctl(r0, 0xbffff000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x825}}, './file0\x00'}) sendto$unix(r1, &(0x7f0000000080)="af71d26bbc49ea30ecc6ae93eece2f76763caf6d6d0c51b7d69cbdf79b79a6abaa0371adbbdf15a37623d01fd1ad4f17d98abc52086423cf6d40b4a4e61fca0572ea7fdb378427434373198cb7f513e64f0c91750f70d698fe6e5f6e276209d89a66688f8d59c882cd49ab89ac40128756062899929b7b48711f35e69974d1be8a73fb5d0fdde66d64342754c135901f", 0x90, 0x10, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$inet_udp(0x2, 0x2, 0x0) 13.939908091s ago: executing program 7 (id=1290): socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000100001000000000000000000ac1414aa00000000000000000000000020010000000000000000000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414130000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000a0b0000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000a000004af000000000000004c00140063727970746428637279707464286e68706f6c79313330352929000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0030000"], 0x158}}, 0x0) ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e600"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=@deltfilter={0x44, 0x2d, 0x800, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x8}, {0xd, 0x1}, {0xffe0, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0xa}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0xb7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r1, 0x0, 0x4000000) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) 12.127895276s ago: executing program 3 (id=1298): syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000000380)=[{{0x80000000}}]}) syz_open_dev$vim2m(0x0, 0x2000000003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000810) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000380)=0x200000000) r4 = dup2(r3, r3) write$vhost_msg_v2(r4, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={r1, 0x0, &(0x7f00000002c0)}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) r5 = socket(0x10, 0x80003, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 10.097406951s ago: executing program 7 (id=1302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x40000, 0x0, 0xfffffffc, 0x238}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010a35bd7000fbdbdf254400000008006bef18352c32cb06c479d4d7e537fb4bdcde337baec93feae9838dbdd091e07c28caccbcbf4a37604e87d78237bfaa50b01fced7f090f56859f1ea5c5f2fc716712ab538632f9d458cff68dc290e11cb6ecbb9b6a45d345b0cd00a8b8a5dba3dd1483d0f19abf6fc53a858a3e2b220534ab3c493001d8be456872fcd2318f0f3bb96e718d0d195442297a4494f9d1976adc14a72bcd50a946b1e63f0650bfa0ce08ee0918ef686b6538c548f02eabfa0fad41d6c8e9f7ecc021a854924d7472f749af462", @ANYRES32, @ANYBLOB="0c00238006000400d0000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x220440d0) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) mq_open(0x0, 0x42, 0x80, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r7, 0x0, 0x40000) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f0000000300)={0x2, 'syzkaller1\x00', {0x9}, 0x97b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$TUNSETSTEERINGEBPF(r12, 0x800454e0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 9.935738955s ago: executing program 3 (id=1303): sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x24041805) syz_emit_ethernet(0x82, &(0x7f0000000700)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x74, 0x65, 0x0, 0xff, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x6, 0x101f, {0x16, 0x4, 0x3, 0x14, 0x7ff, 0x68, 0xd9, 0xc9, 0x6, 0xc5c, @loopback, @dev={0xac, 0x14, 0x14, 0x16}, {[@timestamp_addr={0x44, 0x44, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@broadcast, 0x20005}, {@loopback}, {@remote, 0x326}, {@rand_addr=0x64010101, 0x4}, {@local, 0x5}, {@local, 0x10000}]}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 9.591814543s ago: executing program 7 (id=1304): r0 = open(&(0x7f0000001480)='./file0\x00', 0x96b80, 0x1ed) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x15, &(0x7f0000000780)={&(0x7f0000001480)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x8041) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000700)) ptrace$cont(0x21, r1, 0x80000001, 0x4) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_pidfd_open(r1, 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r3) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x404, &(0x7f0000002780)=ANY=[]) 9.234015744s ago: executing program 8 (id=1305): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff0}, 0x120) 9.08478s ago: executing program 8 (id=1306): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x30) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 8.113087039s ago: executing program 8 (id=1308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r1, 0x400, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x30, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x10, 0x8003, 0x400000}}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="00020006000000e62b428cc8e778000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100e7a3e7c810d804303aa65e5702030109022400010000000009040000020de67a0009050402ecffffffff08058102bc"], 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x9, 0x804, 0x7, 0xf, 0x120000, 0x10005, 0x3, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x4003, 0x1], 0xeeee8000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x28, 0x16, 0x0, 0x80000001, 0xd7, 0x6, 0x0, 0x6, 0x6, 0x6, 0x3, 0x0, 0x10, 0x7, 0x60, 0x0, 0x3, 0x4, '\x00', 0x0, 0x6}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) (async) fcntl$setlease(r1, 0x400, 0x1) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x30, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x10, 0x8003, 0x400000}}) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="00020006000000e62b428cc8e778000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100e7a3e7c810d804303aa65e5702030109022400010000000009040000020de67a0009050402ecffffffff08058102bc"], 0x0) (async) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000040)) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x9, 0x804, 0x7, 0xf, 0x120000, 0x10005, 0x3, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x4003, 0x1], 0xeeee8000, 0x141200}) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x28, 0x16, 0x0, 0x80000001, 0xd7, 0x6, 0x0, 0x6, 0x6, 0x6, 0x3, 0x0, 0x10, 0x7, 0x60, 0x0, 0x3, 0x4, '\x00', 0x0, 0x6}) (async) 7.616854183s ago: executing program 3 (id=1312): openat$sndseq(0xffffffffffffff9c, 0x0, 0x100) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r1, 0x400455c8, 0x8000000000000001) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xdb) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x1, 0x8, 0x1, &(0x7f0000000040)={0x19, "8730f898667e2f90e74abaf5a4ae8ac04565fc47fafcc446ea3eaa41474e898af4"}}) 7.188369316s ago: executing program 8 (id=1313): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r2}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000780)={0x20, 0x0, 0x2, "71d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, &(0x7f0000000040)={0x14, &(0x7f0000000200)={0x0, 0x30, 0x9f, {0x9f, 0x2, "f219bf8cffa323aee669e9c3582404c11545c6154f464d4dea1d9bb5182d6ae41a60e2dd8138c5fde356c586ea45815c03f33d769c3b429a2e0f5762c267fa685587c90f9f8390b521a91ad2a42abc38b775277a45eef4127030e38f1dd8d774565f37b307bb03a00666b4e27c35170c80ee9420d3c311f654e24187349bca515abf223ae7e7ce03040df4ad457a87746876c27b2e25cbd78378846350"}}, &(0x7f0000000300)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "bb0ed82c3494cd1b63c85bd54d47ee12555b322e86c216d71a505d8c11d4ed59bcc3fb2d75fe6517953b39e8edbd9b6a865d3f1d1a72ff222021cc7bf9312209dbbfa8cd3b0619a4b8c7f54c4a77c2d063c1c83ecd6c15b8846ea2ad3ad4f24e02a061e1d0da260651b60cf7fdad881f487b25f292772a3b06fcdc00b8c48124af5e8a9d1f7ce45d204597d2ef4b253c4920b702fcd486f53175498faaffa57009c3af8ea206da46a95be093fe2ceada80918a229abc314c9cd560ec56b2f52e45f48fa0055d5fd7fb6387d8abf49d75cf87179cdbcf"}}}, &(0x7f0000000640)={0x34, &(0x7f00000004c0)={0x20, 0xb, 0xe2, "e17e28609c6f96f2e80160713c9bf1db5d06adc07cdd6e85b0b992b80d7e572521a1faaf83bea968698d6187ea93cba8fdaf4b0a8c8b39bad26d015146da62c0f4fa5d5a5447b3e8c63118ae42dd9abc84b1eec875834a58d25bfe6be3ea02c41f9e4fbb3ce9002e02d09addcd08eb2468f127fd3f2819ef952a92dbf9c8699dd119fb5d0822bde13811adfdc3ffca134d90dffb1f96be7a1763f6fa51be20c5f4d39b70c40b5da2318e5341c830793973968915793df2fbb3fea72ad54a274eb34aa7e8c79e57e6609fa7241b92d2f07f1ca50a66aa1ab97053f146a9678035aed1"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000100)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x0, 0x50, {0x4e, "ef7afa8d1491f2bdc554805250bfdd99be26824a265b173791d815f957a8827cad38b8ff32feed5056e83b4c3a756b132856da4e819941e87007e087c3451934112a9213db8240dee3c0bf9e9b87"}}, &(0x7f0000000180)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0xc}}) 4.946389471s ago: executing program 5 (id=1317): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) dup(r4) (async) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0)) (async) r6 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x1009}}) io_uring_enter(r6, 0x29ed, 0x8a24, 0x4, 0x0, 0x0) (async) io_uring_enter(r6, 0x29ed, 0x8a24, 0x4, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r9, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000000c000780050015"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000000c000780050015"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') pread64(r10, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x1009, 0x0) (async) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x1009, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x100000000, 0x20102) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) io_uring_enter(r0, 0x7368, 0x0, 0x0, 0x0, 0x0) 4.784638212s ago: executing program 7 (id=1318): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x131001, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3200000000790dcef3cb53c726e91872d911cc69d5172a8bb252880755fef8f45eae5cac06f6f826895b4076a7d3b2589dcff8819e002c91d59e66e467ad7059b6c944f4c49f5945f5dfd11cf62dc32c0aedad1d3820a81d4e11543bc31390d12d25d0d6a277115c7e6cdceede1a1741c893f8ede0e9a03b63b9e1228d3363b02c00901a837fc7bde7cd54007d4bcb9e945add3ad9bd2783b1acda534ef06a619376d2d8706eaca0f9f50e69eb073654f2fa62c11997db5efd14ea6335239225425fa4"], 0x34}}, 0x800) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r4, r0, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000100904000000fffd682ca922a27506f5e7287aa5b48d8da8ce2b3ae7e5c36a00265631830c04da3ddfc3bfcfea2ff38747c69cf87ec25e9ff5ee83235a443dfc163ffe6766c342e18b1a5c942a0610a4472e12553a089fc6016f950644ade0fa71334e33b3f0c0d00f57d313c55add92942c89fe8a4838f2675e87bfdd1c7a0934930800002b7f63815f2be48b100618f59ae6110a0db340d824377dc41270198f"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r6, 0x708, 0x2) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000000)={0x13, "ff931852aff2a7e17d043571fb019d326e84b1fc5aaec9132196d7e3c0bb97f2c4"}}) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x2d21, &(0x7f00000006c0)={0x0, 0xf9ab, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) 4.7156671s ago: executing program 5 (id=1319): getuid() r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x901393f1) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty, 0x0, 0x3c}, @in=@loopback, {}, {}, {0x0, 0x1ec}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r5) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000001180)=ANY=[@ANYBLOB="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"/561, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x23d) setuid(0xee01) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mincore(&(0x7f0000701000/0x1000)=nil, 0x1000, &(0x7f00000004c0)=""/74) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001600)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) r7 = socket(0x11, 0x3, 0x0) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x7}, 0x4) 3.987057235s ago: executing program 9 (id=1321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000400)={{0x9, 0x1, 0x2, 0x6, 'syz1\x00', 0x54089f3b}, 0x1, [0x7, 0x2, 0xb2, 0x8000000000000000, 0x3, 0x1, 0x0, 0x43, 0x8d, 0xb97f, 0x6, 0x2, 0x6, 0xfffffffffffff000, 0x8, 0x1, 0x8, 0x6, 0x1, 0x5c8a52b9, 0xa, 0x10001, 0x7, 0xf, 0xb, 0x0, 0xf37, 0xb, 0x9, 0x6, 0x8, 0x81, 0x3, 0xfffffffffffffff7, 0x100000000, 0x5, 0x80000001, 0x1, 0x3, 0x198a, 0x3, 0x8001, 0x2, 0x9323, 0x80000000011, 0x1, 0x4, 0x6, 0xb559, 0x6, 0x8, 0xfffffffffffffff8, 0x4, 0x7, 0x7, 0x10, 0x8, 0x4, 0x800, 0x1, 0x9, 0x1, 0xfffffffffffffff9, 0x1, 0x6, 0x0, 0x7036ff71, 0x1, 0xe, 0x5, 0x5, 0xfffffffffffffff7, 0x8000000000000001, 0xffffffffffffffae, 0x4, 0x682, 0x400, 0x3, 0x10, 0x100, 0x6, 0x5, 0x7, 0xfffffffffffffffb, 0x1000, 0x1ff, 0x9, 0xa, 0x1, 0x0, 0x81, 0x200, 0x4, 0x12, 0xffffffffffff66cd, 0x9, 0x1, 0xd4, 0x10000, 0x8, 0xc, 0x10, 0x9, 0x6, 0x3ff, 0x8, 0x0, 0x6, 0x80000001, 0x5, 0x1, 0x6, 0x5, 0x33eb, 0x7, 0x7fffffff, 0x7, 0xfffffffffffffffc, 0x1, 0x9, 0x0, 0x4, 0x4, 0x1, 0x2, 0x0, 0xd, 0x3]}) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) close(0x3) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'amplc_dio200\x00', [0x4f2a, 0x2, 0x10000, 0x4, 0xe, 0x20, 0x3, 0x7, 0x786, 0x1, 0x8001, 0x4, 0xff6b, 0x801, 0xfffffffe, 0xb4c, 0x7, 0x2, 0x3, 0x40000003, 0x89, 0xcaa7, 0x201ff, 0x20001e58, 0xb, 0x20000e6b, 0x3c, 0x8, 0x65b, 0x0, 0xfffffff8]}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000006800010000000000feffffff0a000000000000000600070003000000100008800c000100000000000000000108000500", @ANYRES32=r7, @ANYBLOB="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"], 0x38}}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000000014030000000000000000f0070000000900010073797a300000000080000000090a010400000000000001000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000780090001006c61737400000000140600800c000100636f756e746572000400028008000340000001c62c4a"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20054800) 3.916844245s ago: executing program 8 (id=1322): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000040000f6aaaafc1b7d2b377212be0440c600ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd85000000710000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000007d40184b1cf8d2c80baf8ffc0000007b8af8ff0000004383835c4833d6d9cf00bfa200000000000007020000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r6, &(0x7f0000000300)={&(0x7f00000002c0)={0x1d, r5, 0x4, {0x2, 0xf0, 0x3}, 0x1}, 0x18, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2404c040}, 0x4000080) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000680)=@newtaction={0xd8, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xc4, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x6, 0x2, 0x7, 0x400}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xd8}}, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40048c4, 0x0, 0x0) fchdir(r8) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r5, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r10 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r10, 0x2007ffb) sendfile(r10, r10, 0x0, 0x1000000201005) syz_open_dev$vim2m(0x0, 0x7, 0x2) 3.738185159s ago: executing program 3 (id=1323): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2d, 0x9, 0x70bd27, 0x3fffffe, {0x4}, [@typed={0x4, 0x1d}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 3.736932641s ago: executing program 5 (id=1324): r0 = socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000300)={0x10}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shmget(0x3, 0x2000, 0x78000000, &(0x7f000030f000/0x2000)=nil) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x4008041) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) fstat(r6, &(0x7f0000006b40)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006840)={0x2020}, 0x2020) r7 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r7, &(0x7f0000ff7000/0x3000)=nil, 0x400c) shmctl$SHM_STAT(r7, 0xd, &(0x7f0000000380)=""/239) close_range(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000002d00090027bd7000fefffffa0300000004001d00"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2.891260569s ago: executing program 9 (id=1325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000240)=0x5, 0x4) fsmount(r1, 0x0, 0x0) gettid() r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) syz_emit_ethernet(0x101, &(0x7f0000000a80)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x73, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1=0xac1414aa}, {0x0, 0x0, 0xdf, 0x0, @opaque="41a53bc57d107c6ff061f03cf6bb904c78ef576fdf1a82582813d34772ce2518f6e064561bc8e7c4c3b88889ba6f28ff51a9fa5b94875a7f49e85b4bac7040c621fa1ab002461bb46e93c9f5664d16a8691bdff00d19f7d7fa1a06180e28c9c4ba89da8d2b37f8b0922eaf0298e2395e4b02c08e80b8dfbdfaf63d3c0cd02bc258452710b9ef5347ac7329042cbf02c5878b573d4abaeb9da781b320fd79d482302a8a531644f0d27c0bef42ed5444393fcb1886713b667dc79bd243ea971d9779b208dea2b767d07df0f49a807f9e23d1a8affe410311"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = socket(0x10, 0x3, 0x0) write(r6, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000030601010000000000000000030000000900020021acbf695def09580126ae2b73797a320000000006ac72715a20c0a082aa73322995101f53768fa352fc7a9b805ed6034bce96c6d68d116c784d72bab7155a8780655cae7c7af07889853e0292504df8655071e78dfe10cd55c76cbb60f7eeb915f487fa23780930c2a3352056001a53832b9bbb8b9a9e766b"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40084) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffffffffef7}, 0x40002103) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xd, 0x0, 0xffffffffffffffff, 0x1f5e0305, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2.719595521s ago: executing program 5 (id=1326): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x7fff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2080}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x3f7ff, 0x4) r6 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000040)={0x1, 0x100, 0xe, 0x1, 0x1}) 1.979372006s ago: executing program 9 (id=1327): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023893) (fail_nth: 9) 1.361319042s ago: executing program 5 (id=1328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0xdddd0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f00004e3000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f00000001c0)=0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pread64(r6, &(0x7f0000000080)=""/196, 0xc4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1804000000000000000000000000040018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 916.098329ms ago: executing program 9 (id=1329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x700000000000000, 0x0, 0x0, 0x2) 569.760672ms ago: executing program 3 (id=1330): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0xf}, r4}, 0x14) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000700)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40}}}, 0x80, 0x0}}], 0x1, 0x0) 526.525371ms ago: executing program 8 (id=1331): unshare(0x2e000500) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x47, 0x0, 0x1}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, 0x0) (async, rerun: 32) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) (async, rerun: 32) munlockall() (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1103000000000000240012800b00010067656e65768005000800ff00000005000a0001000000000000000000"], 0x44}}, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) fcntl$addseals(r5, 0x409, 0xb) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000140)}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x3, r6, 0x0, 0x42, 0x94, &(0x7f0000000240)="b9a10ecb65a45d99d3bd7fc521e678f98412872c3f342b349fceeda4a5165dcc4c893e315cdbd421356d5d49695b4d10563e1bd5c21ae63a2190314a0d08b811ca74a8b66b866c570e1c0eb500e2b31524ebbcb1aa1f75c6d98377141f682916426c124ec8ce3f81ce153d41f306a9a7e50621d273e37fa6e97b6a57c0c24ffc7e7bcb408081c7d6e71fc3627d4c476eafb4f0b8"}) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) (rerun: 32) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) ioctl$SNDCTL_SEQ_SYNC(r10, 0x5101) 436.099226ms ago: executing program 9 (id=1332): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x7, 0x0, {0x0}, {0xee00}, 0x7fffffffffffffff, 0x1}) kcmp(r1, r2, 0x6, r0, r0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@hyper, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) 324.661738ms ago: executing program 7 (id=1333): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 321.469475ms ago: executing program 9 (id=1334): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, r1, 0x0, &(0x7f0000000080), 0x0, 0xe4}) r2 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x9, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x404400, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x19, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) tee(r8, r8, 0x1000, 0x4) 69.498169ms ago: executing program 3 (id=1335): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$TCFLSH(r3, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x19) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000ff000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) r6 = syz_io_uring_setup(0x548e, &(0x7f0000000400)={0x0, 0xaf8e, 0x0, 0x3, 0x35d, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000280)) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r12, &(0x7f000000dfc0)=[{{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="7eea0e2bbaf8fece450a712ac873", 0xe}], 0x1, &(0x7f0000002ac0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xffffffffffffffff}}}], 0xc0, 0x8844}}, {{&(0x7f00000083c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008840)=[{&(0x7f00000041c0)="36248d9ec0eced23b5f014125df3c6e316400542d25764110a87c0", 0x1b}, {&(0x7f0000008440)="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", 0xfe}, {&(0x7f0000008540)="c4b2718ec364431ad74552cdac07bcb80838e4582441155aca9c426a0c15e2889dd1e44556195caae1250041fd4ccc966a1e0e0b6a83ad35205edf987d8255384dbe3cd6d22dce0ff638816aeb9fe3601b17db4cdaf99079ac7f4fd88ad8f7189183d3e0b76ed9187740fb74132570d219d4986e9114f6fef10d1792c68f125685a83b0e09b6d1f857295b460fdd6d3bee191b98587dd3bd575d32864d5385d746e045374df2e550128e900aeccc6fe205a1972aad5e98417b6c7eb39b6b8be875ede5d65da40349224c4e0ccb8a745a515af86bb6c335c5fe7f82c0f046dbbba0eacd120b8abbe0", 0xe8}, {&(0x7f0000008640)="83fce243fa28d8a41af11fd10a43d4be71662b8c8b2edca91b0fdc4a5c40979335e7e74efce46f5f1f05eeb51f12e4fc3cc6459f124c6ab9e17389d2a4bc1ab9beed64b18d3dfe11ce139ad0f1311013a09addc4e8cc8fabadcb5671d1eb1172f2f67048384e8dc37ea92991e0197ef92126ea5e414ef2e0c596a600c7ea7a1a7d49ba601c7da0e76628c597d9de024be410b318ef5b8557c6b741a75a12921fc287b6b0052335ad092597aeb86682f9d3e761760e65313523418204096fbb2c9b845c1bbb06b6dab4386ef80bcce10035c2d5f5f51bb45e9964c611fd65", 0xde}, {&(0x7f0000008740)="fbd454722acf1908f14f88c324bab171", 0x10}, {&(0x7f0000008780)="47e06cd19bdb600bd83d4ab9f0bb33e919398b97de5fc0bc2787568dd87e828955fccb3bc9656eb189588ff957faf472397bf73c59f24ce26bcb7068a5ba2aeb7289361461bf9564c2f5263539c0f2fe29893f550f5d593f8044c3231ada30f21efeca507683ea86be171854a0501d7e9b84daa102e4e043339cf56a7e61c4590cebbf1c86e3ed4469256c4ba5", 0x8d}], 0x6, &(0x7f00000088c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r10}}}], 0x40}}, {{&(0x7f0000008900)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000008d00)=[{&(0x7f0000008980)="de22bec347e0ed8001c14e88c87c61fb052918ae1e623670d10643410a2ff97fc2e5d04510ceb518617aa4ed648ef693f6e827feb02df6d64294c285dde72660cd99fdf59505b7197c34302e843dcd81a2ca24f45a634277e725809cad9f13575160991839bb", 0x66}, {&(0x7f0000008a00)="1ffc1e2a1af7a2e5429555f5ca93d589bbcbdca9ac782df6b1de2e3c83cb2f2a5165b0c03e7c4ade2175980c574e22a812eac8f6eed13313be8ed950bde51eebd38b44ba81fc", 0x46}, {&(0x7f0000008a80)="d75077a188127fde26f6c51611b8185c18bb3663d92ae4220d8d153c8c87deb5aac8d3c023ea0913cfd10d1085060615b71d99e52ca43cdd70d498f24d2641bf56baeb657197ac66c773220394207ad93055b5d7962a3f44f250144e10c87003b96d7cad62e653e923c5972dae971f46ac1db88e1e620b55635efd11e5d334fa53c950dcafb54e234f9ae28042542d5baf39fb15596be73e6917f708b73f69bfe986b9bac0698a97c0be7565a99e1c7d2a2fcd98aefb67a35869b5e72aaa35b121553fc11102fbc4a1867326e6326c4ab147de4e5a8d2c84af3e1624a4b587e9fec19a07f333d5e47b5122497591ab9db6d95b017d835b6804", 0xf9}, {&(0x7f0000008b80)="2e27427117cd5a95800838c6037e62b84b4d76b3e45e0f8eb9ddb3d0fba4914af1b3bbfc3d5cefd25844a945e6679a00fba80ec2a3ef31f92c6f8f33f771388742d00c0dc1b8e9fd1211cbce0ab3d286543363c144c733ea44b5e0dd4411f5306e25e2c53ea81d6ec9c2c68421e14ed8ae1c48a6f660126d954fcbc6b4e558bc", 0x80}, {&(0x7f0000008c00)}, {&(0x7f0000008c40)="cf424db2187ed1d80c3ceb7b64570cda389da306caaa56f8a9ab336543dbb6733d069216a7864c94f1126f956227833166a63ac12ad920883ad761afc8352c489203087f02abe46398ae66ec9006f73123f5da727d9fb1061469badd1b94496175d4249d22ef098c263d85714f84de94c7512170670513008eefcb175bd092113d9d7964a9db05b28805d77f88db8a5189ceb8c62835e42d98595b318f0c08d929a36343987eada5", 0xa8}], 0x6, &(0x7f0000008d80)=[@rights={{0x30, 0x1, 0x1, [r5, 0xffffffffffffffff, r8, r5, r12, 0xffffffffffffffff, r7, r7]}}, @rights={{0x20, 0x1, 0x1, [r3, r7, 0xffffffffffffffff, r0]}}, @rights={{0x30, 0x1, 0x1, [r3, r4, 0xffffffffffffffff, r2, r6, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @cred={{0x1c}}], 0xa0, 0x801}}, {{&(0x7f0000008e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a440)=[{&(0x7f0000008ec0)="8df7d0141a88f17d43ad44caa6229b99e90cf3553af3fc465a48a97e2add98059431fcd56170ba63e83237d2e0b66bea83bc12565534c89f16309829d1fe4f542c145a948353b5476e80ba5529683be1debd4c2700cad147036f8464ad35ea695166783ea927e06b874a10dcc6125105", 0x70}, {&(0x7f0000008f40)="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", 0x1000}, {&(0x7f0000009f40)="38bc9099eb5f488acb443951ea1f951926a52c9d7e57f553264c5d4c0d6f6891ddea2a79db967fe3c415cd212878be322cfd7e0c0f461a0a826c7a396139582d48938a6e2d0d4a6527491e6cda2adef96bdab9c18ab8575641ab508810abba5c385e00990313370c42eb1d4fc9c0ed23e8d82aafaed96eed422bfef605e4f156169cb4b009fa5386ec9a57e573ae734a7cc8a2a313eb0cbb2b357b0b6dea0016f600e4664d8f6351524b0a2b2c9612ed780545f2e6a53b0ce221b7a735893842d9dd8da5b4a0af7c01e874d5a181e7ee5385ac2b7982b98485", 0xd9}, {&(0x7f000000a040)="d0b498c0d3812587fb0947e3fa026d3412d711b94102953149dfffe4d1d0a039336fb458e54f9c8e6383c4c2519068a168a2a4617b125bcb9d5b275f2cea0e81538822277fc83386f92d9739faeeb802d8bd8f2dc4bddda8d8d18e2d1e28cce7c65e794ff5a0a04bc8c1fb55153d7268680bf7418030d9ca5b16131e9950926baa501e7378e9141cfa40c05138aeae161cb030648109fec96d932272ccdfe3bd53b7970dc36e11adfa4fe804f8243b57735601f4b90d537897925ebc9c210167208ba850184620acc44f99698e2c3933c97695e247dc327976b5ff697b125ba3e98f3ef2ed24421d35c06747805d461fa55f992b10d2a832", 0xf8}, {&(0x7f00000002c0)="d8e809eb014e7a765dd01b0f80273073e6170d03b10457b711b6a711eaec36b6eca688cb85bec02203c3780ebbc52f8cff484f19df7403", 0x37}, {&(0x7f000000a180)="edc6752480de3537a583c00ea1eff3f41e5db1aebc9588fd8dc17cdd377949f407ecf8e7a1dc3829fb3b71312c6b0835a846e4b99fa9510ebc4ca7227e1eae09968df134e1959810ceb9b5dc4ee52ffd11c9c52aa3a0df63d2a17c8b3f6a4519a4879374f093e79e96fabc8685420e4fac82da60ec76e7879a010b3612eac40a427b20f315596a71735d9d91cb834988447c8185e1f88506ba8edc91ff84142bd207aa651ca6da14deb44adf83d2cd414876368cadc142559861", 0xba}, {&(0x7f000000a240)="b327ca18d3f0f7a4adaa737e544b0397b6afc8c483b12ddf8a237240ee5fafc1c4f32573be236b34eb9f1b9218709c056ead119a0e5e7950870938b1b4f81cd0ae9b08086bf460013b6e2000f64e68ad46589048927a15d3fcdf1dac7b2441f5904379a049d63368401bc74885923075f74ccb1a8ee7022f85d63a97304d4942e6ac0bcad98fc3b9847a21aff57f17d7d703fea524f074f8a3e7287870225881b0604259dd67205103cdc97154f504ae66e90d4d2b80c10b2a8ed55698d27915b206cb2c545bacee19940f5482c76aaf62df65ab8d43", 0xd6}, {&(0x7f000000a340)="6fa8e3dbc6a8880d037a620ed797990091d59826382caf73fdfd3fee02ea266edf88c2f5d0fa10e854d74012e3c9ae208e213856b5dcfbe47695dcc6ce3fdfa8a6ceaed6c7a1058b70bd1c3d1a448b9b274574a70feb5812dd39451f8373059d7acb55c6e1e632e8b68944", 0x6b}, {&(0x7f000000a3c0)="79ba031b9454492d0045c05721bda1b5c867bb", 0x13}, {&(0x7f000000a400)="9cad02d8562b397a1e7e4cabe5e809adc99fb853615e89207107a64e5828ca", 0x1f}], 0xa}}, {{&(0x7f000000a500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000b580)=[{&(0x7f000000a580)="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", 0x1000}], 0x1, &(0x7f000000c980)=[@rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r5]}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140, 0x90}}, {{&(0x7f000000cac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000dd00)=[{&(0x7f000000cb40)="ac987f7d86394f6c3ab1b8c6279cb866e051548d0fd4dd107a1aa13f49f6ec018b10557ed4b25e1967cbd8cf4721e58701937d3b84fe5531429d60532841c62d4dd714784e7584854ac75564005d95176c517c57e32c597b2133fd015db250a5ea523d729cf81965992f0a3ec2f96082d216a83d004c3adbf4d25ef907aeb5d0d7b63cfd8ddc9ff5dea73c6461e5bdb5b6b9c522a72c38e6ae7678384d67752f4228203fa3076e80a4", 0xa9}, {&(0x7f000000cc00)="3f019b21a182adc0a52c44a76f7bcb96232ab6d04c8cb8e5b0b9662e4b2e29ef7f74a3f7a9a3360b97f569ac64d7efffed15a930341439a0602fc52ef6ffeaf4e4e374433bc9db2b3474892d798dd3149b79207640b4e530613fdd16785004df90c31f2f", 0x64}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f000000dc80)="d6da6f995b28f32188377e5ef1873d2b3cc369c52e196ea97cfe1e50d394f42d23b9f6d2447c7fb0f424655a8727bff9d0c565423f4fb3d1a28bcd8c43a35cb940a5baf64242fbfa67f27864af6df180af0d9b72bc17180ecaf493ee4e64fa2a658a51361ee36685c1f8e53bb1813a25001039e95b5e81", 0x77}], 0x4, &(0x7f000000df00)=[@rights={{0x30, 0x1, 0x1, [r5, r12, r11, 0xffffffffffffffff, r8, r4, r0, r9]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, r7, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98, 0x4000}}], 0x6, 0x0) (async) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r13 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc)=0x0) timer_settime(r14, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r15 = userfaultfd(0x801) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r15, 0xc018aa3f, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 5 (id=1336): syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8000) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="080025bd7000fbdbdf250f000000400002801c0003800800020081000000080001000500000008000200ff030000040004001c0003800800020008000000080002000101000008000100ff7f0000180007800c00040040000000000000000800020006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000818}, 0x20000810) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): =0, Product=0, SerialNumber=0 [ 420.922630][ T5893] usb 3-1: GET_CAPABILITIES returned 0 [ 420.928132][ T5893] usbtmc 3-1:16.0: can't read capabilities [ 421.313314][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 421.323066][T11349] usbtmc 3-1:16.0: Unable to send data, error -71 [ 422.482852][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 422.482869][ T30] audit: type=1326 audit(1757008301.756:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36db78ebe9 code=0x7fc00000 [ 422.512275][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.594400][ T30] audit: type=1326 audit(1757008301.756:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36db78ebe9 code=0x7fc00000 [ 422.618864][ T30] audit: type=1326 audit(1757008301.756:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36db78ebe9 code=0x7fc00000 [ 422.642183][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.650463][ T30] audit: type=1326 audit(1757008301.756:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36db78ebe9 code=0x7fc00000 [ 422.675358][ T30] audit: type=1326 audit(1757008301.766:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36db78ebe9 code=0x7fc00000 [ 422.699267][ T30] audit: type=1326 audit(1757008301.766:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36db78ebe9 code=0x7fc00000 [ 422.727127][ T48] usb 3-1: USB disconnect, device number 15 [ 422.763413][ T30] audit: type=1326 audit(1757008301.766:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36db78ebe9 code=0x7fc00000 [ 422.820133][ T5893] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 423.623832][ T30] audit: type=1326 audit(1757008301.766:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36db78ebe9 code=0x7fc00000 [ 423.860116][ T30] audit: type=1326 audit(1757008301.766:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36db78ebe9 code=0x7fc00000 [ 423.888316][ T30] audit: type=1326 audit(1757008301.766:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36db78ebe9 code=0x7fc00000 [ 423.902017][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 424.575652][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 424.730224][ T5893] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 424.740646][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'. [ 424.794820][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.795622][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1004'. [ 424.816360][ T5893] usb 2-1: config 0 descriptor?? [ 424.903652][T11357] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 425.756142][ T5893] corsair-psu 0003:1B1C:1C0C.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0c] on usb-dummy_hcd.1-1/input0 [ 425.832808][ T5893] corsair-psu 0003:1B1C:1C0C.0006: unable to initialize device (-38) [ 425.898920][ T5893] corsair-psu 0003:1B1C:1C0C.0006: probe with driver corsair-psu failed with error -38 [ 426.632636][T11375] syz.2.1001 (11375): drop_caches: 1 [ 426.834254][T11403] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.010458][ T5859] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 427.011906][ T51] Bluetooth: hci2: command 0x1003 tx timeout [ 427.336367][T11403] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.421116][ T8490] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 427.451880][T11419] geneve2: entered promiscuous mode [ 427.589740][ T5893] usb 2-1: USB disconnect, device number 26 [ 427.605037][ T8490] usb 1-1: Using ep0 maxpacket: 32 [ 427.629090][ T8490] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 427.680845][ T8490] usb 1-1: config 0 has no interface number 0 [ 427.711012][ T8490] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 427.739779][T11431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1012'. [ 427.788614][ T8490] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.817150][T11403] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.819275][ T8490] usb 1-1: config 0 interface 85 has no altsetting 0 [ 427.848391][ T8490] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 427.862592][ T8490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.943792][ T8490] usb 1-1: Product: syz [ 427.981192][ T8490] usb 1-1: Manufacturer: syz [ 427.998938][ T8490] usb 1-1: SerialNumber: syz [ 428.120084][ T8490] usb 1-1: config 0 descriptor?? [ 428.735610][T11403] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.073235][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 430.073255][ T30] audit: type=1326 audit(1757008309.406:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe392f8ebe9 code=0x7fc00000 [ 430.173562][ T30] audit: type=1326 audit(1757008309.446:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe392f8ebe9 code=0x7fc00000 [ 430.200223][ T30] audit: type=1326 audit(1757008309.446:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe392f8ebe9 code=0x7fc00000 [ 430.224548][ T30] audit: type=1326 audit(1757008309.446:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe392f8ebe9 code=0x7fc00000 [ 430.250818][ T30] audit: type=1326 audit(1757008309.446:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe392f8ebe9 code=0x7fc00000 [ 430.275451][ T30] audit: type=1326 audit(1757008309.446:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe392f8ebe9 code=0x7fc00000 [ 430.445767][ T30] audit: type=1326 audit(1757008309.446:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe392f8ebe9 code=0x7fc00000 [ 430.469505][ T30] audit: type=1326 audit(1757008309.446:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe392f8ebe9 code=0x7fc00000 [ 430.977525][ T30] audit: type=1326 audit(1757008309.446:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe392f8ebe9 code=0x7fc00000 [ 431.118426][ T30] audit: type=1326 audit(1757008309.446:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe392f8ebe9 code=0x7fc00000 [ 431.141870][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.297710][ T8490] appletouch 1-1:0.85: Failed to request geyser raw mode [ 431.350308][ T8490] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 431.363778][ T49] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.388780][ T8490] usb 1-1: USB disconnect, device number 34 [ 431.533991][ T49] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.554561][ T49] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.411630][T11484] tmpfs: Bad value for 'mpol' [ 432.471037][ T2908] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.763753][T11490] 9pnet_fd: p9_fd_create_tcp (11490): problem connecting socket to 127.0.0.1 [ 435.294205][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 435.294230][ T30] audit: type=1326 audit(1757008314.586:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11528 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bf98ebe9 code=0x7fc00000 [ 435.453553][ T30] audit: type=1326 audit(1757008314.586:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11528 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6bf98ebe9 code=0x7fc00000 [ 435.535161][ T30] audit: type=1326 audit(1757008314.586:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11528 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bf98ebe9 code=0x7fc00000 [ 435.911226][ T30] audit: type=1326 audit(1757008314.586:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11528 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bf98ebe9 code=0x7fc00000 [ 436.344176][ T30] audit: type=1326 audit(1757008314.586:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11528 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bf98ebe9 code=0x7fc00000 [ 436.390424][ T30] audit: type=1326 audit(1757008314.586:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11528 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bf98ebe9 code=0x7fc00000 [ 436.480329][ T30] audit: type=1326 audit(1757008314.586:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11528 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bf98ebe9 code=0x7fc00000 [ 436.545613][ T30] audit: type=1326 audit(1757008314.586:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11528 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bf98ebe9 code=0x7fc00000 [ 436.577514][ T30] audit: type=1326 audit(1757008314.586:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11528 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bf98ebe9 code=0x7fc00000 [ 436.601145][ T30] audit: type=1326 audit(1757008314.586:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11528 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bf98ebe9 code=0x7fc00000 [ 438.381137][T11613] atomic_op ffff888053bd1198 conn xmit_atomic 0000000000000000 [ 439.159453][ T8490] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 439.493201][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.598335][ T8490] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 439.613986][ T8490] usb 2-1: config 0 has no interface number 0 [ 439.763729][ T8490] usb 2-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 440.004632][ T8490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.009355][T11652] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1048'. [ 440.058101][ T8490] usb 2-1: config 0 descriptor?? [ 440.222343][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 440.325657][T11619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.338220][T11619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.366387][ T8490] usb 2-1: string descriptor 0 read error: -71 [ 440.403275][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 440.413185][ T8490] usb-storage 2-1:0.168: USB Mass Storage device detected [ 441.417579][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 442.379144][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 442.404152][ T5854] Bluetooth: hci5: command 0x0406 tx timeout [ 442.409840][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 442.410703][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 444.369497][ T8490] usb-storage 2-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 444.499535][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.884473][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.923944][ T8490] usb 2-1: USB disconnect, device number 27 [ 444.980226][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.091759][ T10] usb 5-1: can't set config #16, error -71 [ 445.157178][ T10] usb 5-1: USB disconnect, device number 16 [ 445.449041][T11692] FAULT_INJECTION: forcing a failure. [ 445.449041][T11692] name failslab, interval 1, probability 0, space 0, times 0 [ 445.502479][T11692] CPU: 0 UID: 0 PID: 11692 Comm: syz.5.1057 Not tainted syzkaller #0 PREEMPT(full) [ 445.502497][T11692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.502503][T11692] Call Trace: [ 445.502507][T11692] [ 445.502512][T11692] dump_stack_lvl+0x16c/0x1f0 [ 445.502529][T11692] should_fail_ex+0x512/0x640 [ 445.502543][T11692] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 445.502556][T11692] should_failslab+0xc2/0x120 [ 445.502569][T11692] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 445.502581][T11692] ? mas_alloc_nodes+0x18b/0x8b0 [ 445.502593][T11692] mas_alloc_nodes+0x18b/0x8b0 [ 445.502606][T11692] mas_node_count_gfp+0x105/0x130 [ 445.502618][T11692] mas_preallocate+0x7e0/0xde0 [ 445.502631][T11692] ? __memcg_slab_post_alloc_hook+0x4a2/0x960 [ 445.502646][T11692] ? __pfx_mas_preallocate+0x10/0x10 [ 445.502664][T11692] ? anon_vma_name+0x81/0x2f0 [ 445.502680][T11692] __split_vma+0x34a/0x1070 [ 445.502693][T11692] ? __pfx___split_vma+0x10/0x10 [ 445.502702][T11692] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 445.502721][T11692] vms_gather_munmap_vmas+0x3b1/0x1340 [ 445.502734][T11692] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 445.502748][T11692] ? __pfx_copy_vma+0x10/0x10 [ 445.502763][T11692] do_vmi_align_munmap+0x27c/0x7d0 [ 445.502776][T11692] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 445.502805][T11692] do_vmi_munmap+0x204/0x3e0 [ 445.502817][T11692] move_vma+0xb67/0x1780 [ 445.502830][T11692] ? __pfx_move_vma+0x10/0x10 [ 445.502843][T11692] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 445.502862][T11692] ? vrm_set_new_addr+0x208/0x290 [ 445.502873][T11692] mremap_to+0x1b7/0x450 [ 445.502884][T11692] do_mremap+0xd91/0x2010 [ 445.502896][T11692] ? get_pid_task+0x106/0x250 [ 445.502907][T11692] ? proc_fail_nth_write+0x9f/0x220 [ 445.502920][T11692] ? find_held_lock+0x2b/0x80 [ 445.502934][T11692] ? __pfx_do_mremap+0x10/0x10 [ 445.502946][T11692] ? find_held_lock+0x2b/0x80 [ 445.502959][T11692] ? ksys_write+0x190/0x250 [ 445.502973][T11692] __do_sys_mremap+0x119/0x170 [ 445.502984][T11692] ? __pfx___do_sys_mremap+0x10/0x10 [ 445.502994][T11692] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 445.503020][T11692] do_syscall_64+0xcd/0x4c0 [ 445.503034][T11692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.503045][T11692] RIP: 0033:0x7f36db78ebe9 [ 445.503054][T11692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.503066][T11692] RSP: 002b:00007f36dc6b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 445.503077][T11692] RAX: ffffffffffffffda RBX: 00007f36db9c6090 RCX: 00007f36db78ebe9 [ 445.503084][T11692] RDX: 0000000000800000 RSI: 0000000000001000 RDI: 0000200000a96000 [ 445.503090][T11692] RBP: 00007f36dc6b5090 R08: 0000200000130000 R09: 0000000000000000 [ 445.503097][T11692] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 445.503103][T11692] R13: 00007f36db9c6128 R14: 00007f36db9c6090 R15: 00007ffc3db19808 [ 445.503116][T11692] [ 445.660160][ T8490] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 447.274620][ T8490] usb 3-1: config 0 has no interfaces? [ 447.284631][ T8490] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 447.295433][ T8490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.544774][ T8490] usb 3-1: Product: syz [ 447.628743][ T8490] usb 3-1: Manufacturer: syz [ 447.754610][ T8490] usb 3-1: SerialNumber: syz [ 447.921594][ T8490] usb 3-1: config 0 descriptor?? [ 448.170320][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 448.950250][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 448.958007][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.968201][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 449.005637][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 449.005653][ T30] audit: type=1400 audit(1757008328.336:981): avc: denied { getopt } for pid=11736 comm="syz.1.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 449.294979][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 449.330556][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.363633][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 449.378947][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.629617][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 449.647441][ T10] usbtmc 1-1:16.0: can't read capabilities [ 449.786217][ T8490] usb 3-1: USB disconnect, device number 16 [ 449.833759][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 449.842867][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 449.851949][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 449.861033][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 449.870115][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 449.879190][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 449.888274][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 449.892662][ T6021] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 449.897355][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.050126][ T6021] usb 2-1: Using ep0 maxpacket: 8 [ 450.066986][ T6021] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 450.091836][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.105532][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.115840][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.125479][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.135002][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.144673][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.155925][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.165524][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.807275][ T8053] usb 1-1: USB disconnect, device number 35 [ 450.847754][ T6021] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 450.907029][ T6021] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 451.010441][ T30] audit: type=1326 audit(1757008330.336:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11754 comm="syz.4.1071" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc83978ebe9 code=0x0 [ 451.163820][T11768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1071'. [ 451.789462][ T6021] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.821394][ T6021] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 451.869793][ T6021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.267590][ T6021] usb 2-1: GET_CAPABILITIES returned 0 [ 452.310943][ T6021] usbtmc 2-1:16.0: can't read capabilities [ 452.757883][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 452.780166][T11791] usbtmc 2-1:16.0: Unable to send data, error -71 [ 453.009386][ T30] audit: type=1400 audit(1757008332.336:983): avc: denied { setopt } for pid=11797 comm="syz.4.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 453.061397][ T8053] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 453.274712][ T8053] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 453.284140][ T8053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.298157][ T8053] usb 3-1: Product: syz [ 453.307917][ T8053] usb 3-1: Manufacturer: syz [ 453.317934][ T8053] usb 3-1: SerialNumber: syz [ 453.480371][ T48] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 453.655330][ T48] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 453.699666][ T48] usb 1-1: config 0 has no interface number 0 [ 453.718632][ T48] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 454.234187][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.251981][ T48] usb 1-1: Product: syz [ 454.273678][ T48] usb 1-1: Manufacturer: syz [ 454.305835][ T48] usb 1-1: SerialNumber: syz [ 454.463605][T11792] netlink: 'syz.2.1076': attribute type 1 has an invalid length. [ 454.551166][ T10] usb 2-1: USB disconnect, device number 28 [ 454.568503][ T48] usb 1-1: config 0 descriptor?? [ 455.362856][T11827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.886817][ T48] usb 1-1: Firmware version (0.0) predates our first public release. [ 455.910051][ T48] usb 1-1: Please update to version 0.2 or newer [ 456.007671][ T48] usb 1-1: USB disconnect, device number 36 [ 456.070148][ T8053] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 456.112382][ T8053] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 456.293601][ T8053] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 456.771832][ T8053] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 456.829135][ T8053] usb 3-1: USB disconnect, device number 17 [ 457.450880][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 457.700064][ T48] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 457.946153][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.983279][T11863] overlayfs: missing 'lowerdir' [ 458.010970][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.050321][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 458.063253][ T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 458.066777][ T48] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 458.083746][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.106727][ T48] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 458.119439][ T10] usb 6-1: config 0 descriptor?? [ 458.192101][T11866] block nbd4: shutting down sockets [ 458.195181][ T48] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 458.207766][ T48] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.235796][ T48] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 458.245410][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.503701][ T48] usb 1-1: GET_CAPABILITIES returned 0 [ 458.516028][ T48] usbtmc 1-1:16.0: can't read capabilities [ 458.895200][T11839] 9pnet_fd: Insufficient options for proto=fd [ 458.913291][ T10] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 458.951009][ T5901] usb 1-1: USB disconnect, device number 37 [ 459.018057][ T10] cp2112 0003:10C4:EA90.0007: error requesting version [ 459.086357][ T10] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71 [ 459.128728][ T10] usb 6-1: USB disconnect, device number 18 [ 459.887212][T11893] libceph: resolve '. [ 459.887212][T11893] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 459.887212][T11893] ' (ret=-3): failed [ 459.915782][T11897] netlink: 'syz.5.1096': attribute type 1 has an invalid length. [ 459.933203][T11894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1094'. [ 459.945604][ T30] audit: type=1400 audit(1757008339.276:984): avc: denied { read } for pid=11887 comm="syz.2.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 459.974430][T11897] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1096'. [ 460.118742][T11885] fido_id[11885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 460.424032][T11910] SELinux: Context /usr/sbin/ntpd is not valid (left unmapped). [ 460.468851][ T30] audit: type=1400 audit(1757008339.776:985): avc: denied { relabelto } for pid=11905 comm="syz.0.1097" name="vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="/usr/sbin/ntpd" [ 460.611912][ T30] audit: type=1400 audit(1757008339.776:986): avc: denied { associate } for pid=11905 comm="syz.0.1097" name="vcsu" dev="devtmpfs" ino=15 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="/usr/sbin/ntpd" [ 460.637699][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.800166][ T5901] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 460.930652][ T5901] usb 1-1: device descriptor read/64, error -71 [ 460.962299][ T30] audit: type=1400 audit(1757008340.296:987): avc: denied { ioctl } for pid=11918 comm="syz.2.1102" path="socket:[37127]" dev="sockfs" ino=37127 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 460.986943][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.250255][ T5901] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 462.490137][ T5901] usb 1-1: device descriptor read/64, error -71 [ 462.880168][ T48] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 462.895490][ T30] audit: type=1400 audit(1757008342.176:988): avc: denied { listen } for pid=11944 comm="syz.2.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 462.921331][ T5901] usb usb1-port1: attempt power cycle [ 463.101067][ T48] usb 6-1: Using ep0 maxpacket: 8 [ 463.108875][ T48] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 463.121051][ T48] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 463.167769][ T8490] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 463.186259][ T48] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.413980][ T48] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.435724][ T48] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 463.447430][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.455598][ T8490] usb 3-1: device descriptor read/64, error -71 [ 463.552749][ T5901] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 463.704960][ T5901] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 463.705223][ T48] usb 6-1: GET_CAPABILITIES returned 0 [ 463.718401][ T8490] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 463.736707][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 463.745018][ T5901] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 463.749046][ T48] usbtmc 6-1:16.0: can't read capabilities [ 463.762259][ T5901] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 463.773591][ T5901] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.786292][ T5901] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.822309][ T5901] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 463.883703][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.887598][ T8490] usb 3-1: device descriptor read/64, error -71 [ 464.031330][ T8490] usb usb3-port1: attempt power cycle [ 464.125367][ T5901] usb 1-1: GET_CAPABILITIES returned 0 [ 464.132965][ T5901] usbtmc 1-1:16.0: can't read capabilities [ 464.178031][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 464.301047][T11972] usbtmc 6-1:16.0: Unable to send data, error -71 [ 464.475111][ T8490] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 464.546902][ T8490] usb 3-1: device descriptor read/8, error -71 [ 464.621152][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 464.630715][T11976] usbtmc 6-1:16.0: Unable to send data, error -71 [ 464.646441][ T5901] usb 6-1: USB disconnect, device number 19 [ 464.682879][ T10] usb 1-1: USB disconnect, device number 41 [ 464.688826][ T30] audit: type=1400 audit(1757008344.016:989): avc: denied { bind } for pid=11977 comm="syz.1.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 464.743679][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 464.752683][ T30] audit: type=1400 audit(1757008344.076:990): avc: denied { write } for pid=11977 comm="syz.1.1114" path="socket:[36751]" dev="sockfs" ino=36751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 464.870058][ T8490] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 464.910713][ T8490] usb 3-1: device descriptor read/8, error -71 [ 465.045093][ T8490] usb usb3-port1: unable to enumerate USB device [ 466.776866][T12054] ptrace attach of "./syz-executor exec"[9437] was attempted by "./syz-executor exec"[12054] [ 467.650183][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 467.806140][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 467.818004][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 467.838717][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 467.877580][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 467.928928][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 467.979547][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 467.990118][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 468.007638][ T10] usb 5-1: Product: syz [ 468.016627][ T10] usb 5-1: Manufacturer: syz [ 468.049343][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 468.140347][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 468.181403][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 468.207669][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 468.326764][T12070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.487910][ T10] usb 5-1: USB disconnect, device number 17 [ 468.691821][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 469.988743][T12109] blk_print_req_error: 2 callbacks suppressed [ 469.988761][T12109] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.013176][T12109] vxfs: unable to read disk superblock at 1 [ 470.019596][T12109] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.036647][T12109] vxfs: unable to read disk superblock at 8 [ 470.060134][T12109] vxfs: can't find superblock. [ 471.026294][ T30] audit: type=1400 audit(1757008350.346:991): avc: denied { read } for pid=12148 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 471.303055][ T48] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 471.364474][T12159] netlink: 'syz.4.1139': attribute type 1 has an invalid length. [ 471.472137][T12159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.480070][ T48] usb 6-1: Using ep0 maxpacket: 8 [ 471.536259][ T48] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 471.640633][ T48] usb 6-1: config 0 has no interface number 0 [ 471.646763][ T48] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 471.661400][T12165] bond1: (slave wlan0): Opening slave failed [ 471.752696][ T48] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 471.907946][ T48] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 471.937972][ T48] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 471.986815][ T48] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 472.601763][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.640507][ T48] usb 6-1: config 0 descriptor?? [ 472.650171][ T48] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 472.760076][ T8490] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 472.924183][ T8490] usb 5-1: Using ep0 maxpacket: 8 [ 472.961781][ T8490] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 473.019455][ T8490] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 473.053585][T12206] 9pnet_fd: Insufficient options for proto=fd [ 473.072167][ T48] usb 6-1: USB disconnect, device number 20 [ 473.078147][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 473.113540][ T8490] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 473.148160][ T8490] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.276456][ T8490] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 473.293582][ T48] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 473.300396][T12143] ldusb: No device or device unplugged -19 [ 473.315748][ T8490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.548500][ T8490] usb 5-1: GET_CAPABILITIES returned 0 [ 473.566371][ T8490] usbtmc 5-1:16.0: can't read capabilities [ 473.831076][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.840251][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.849353][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.858452][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.867618][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.997006][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.010954][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.020111][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.029233][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.150767][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.159884][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.168929][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.177991][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.187032][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.196071][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.205124][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.716645][ T3091] usb 5-1: USB disconnect, device number 18 [ 475.640762][ T3091] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 475.824352][ T3091] usb 1-1: Using ep0 maxpacket: 8 [ 476.554996][ T3091] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 476.566188][ T3091] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 476.700289][ T3091] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 476.724828][ T3091] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.745192][ T3091] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 476.754372][ T3091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.762681][ T3091] usb 1-1: GET_CAPABILITIES returned 0 [ 477.780962][ T3091] usbtmc 1-1:16.0: can't read capabilities [ 478.030091][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 478.047026][T12263] usbtmc 1-1:16.0: Unable to send data, error -71 [ 478.179296][T12267] netlink: 'syz.4.1157': attribute type 3 has an invalid length. [ 478.190316][T12267] netlink: 'syz.4.1157': attribute type 1 has an invalid length. [ 478.207852][T12267] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1157'. [ 478.228107][T12267] NCSI netlink: No device for ifindex 33022 [ 478.468447][ T30] audit: type=1400 audit(1757008357.796:992): avc: denied { map } for pid=12271 comm="syz.2.1158" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 478.929497][T12282] netlink: 'syz.5.1162': attribute type 3 has an invalid length. [ 478.966048][T12284] fuse: Unknown parameter 'grnup_id' [ 479.094702][T12290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1163'. [ 479.234638][ T8490] usb 1-1: USB disconnect, device number 42 [ 479.312755][T12293] 9pnet_fd: Insufficient options for proto=fd [ 479.762863][T12296] sp0: Synchronizing with TNC [ 479.784773][T12297] sp0: Found TNC [ 480.208389][T12284] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 482.379012][T12318] overlayfs: failed lookup in lower (newroot/155, name='file1', err=-40): overlapping layers [ 482.660256][ T48] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 482.661313][T12325] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12325 comm=syz.4.1174 [ 482.870211][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 482.889903][ T48] usb 2-1: unable to get BOS descriptor or descriptor too short [ 482.909811][ T48] usb 2-1: config 0 has an invalid interface number: 232 but max is 0 [ 482.919083][ T48] usb 2-1: config 0 has no interface number 0 [ 482.925693][ T48] usb 2-1: config 0 interface 232 has no altsetting 0 [ 482.954269][ T48] usb 2-1: New USB device found, idVendor=06be, idProduct=0800, bcdDevice=ee.23 [ 482.973936][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.001231][ T48] usb 2-1: Product: syz [ 483.027718][ T48] usb 2-1: Manufacturer: syz [ 483.037644][ T48] usb 2-1: SerialNumber: syz [ 483.061889][ T48] usb 2-1: config 0 descriptor?? [ 483.198366][ T8053] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 483.519803][ T8053] usb 5-1: Using ep0 maxpacket: 8 [ 483.550475][ T8053] usb 5-1: config 0 has an invalid interface number: 78 but max is 0 [ 483.628269][T12341] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1179'. [ 484.097011][ T8053] usb 5-1: config 0 has no interface number 0 [ 484.147888][T12336] tipc: Started in network mode [ 484.162038][ T8053] usb 5-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice=69.1a [ 484.178611][T12336] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 484.187265][ T8053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.206321][ T8053] usb 5-1: Product: syz [ 484.368445][ T8053] usb 5-1: Manufacturer: syz [ 484.391807][ T8053] usb 5-1: SerialNumber: syz [ 484.419590][T12336] tipc: Enabled bearer , priority 0 [ 484.427545][ T8053] usb 5-1: config 0 descriptor?? [ 484.436862][ T8053] ums-datafab 5-1:0.78: USB Mass Storage device detected [ 484.760496][ T8053] usb 5-1: USB disconnect, device number 19 [ 485.374342][ T48] gspca_main: spca500-2.14.0 probing 06be:0800 [ 485.422697][ T48] usb 2-1: USB disconnect, device number 29 [ 485.540073][ T8053] tipc: Node number set to 11578026 [ 485.700492][ T92] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 485.722270][ T30] audit: type=1400 audit(1757008365.046:993): avc: denied { connect } for pid=12365 comm="syz.2.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 486.017165][ T8438] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 486.030242][ T92] usb 6-1: Using ep0 maxpacket: 8 [ 486.045813][ T92] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 486.058325][ T30] audit: type=1400 audit(1757008365.396:994): avc: denied { read } for pid=12365 comm="syz.2.1187" name="vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="/usr/sbin/ntpd" [ 486.070029][ T92] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 486.137739][ T92] usb 6-1: config 0 has no interface number 0 [ 486.169748][ T30] audit: type=1400 audit(1757008365.426:995): avc: denied { open } for pid=12365 comm="syz.2.1187" path="/dev/vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="/usr/sbin/ntpd" [ 486.176477][ T92] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.230650][ T8438] usb 1-1: Using ep0 maxpacket: 16 [ 486.237703][ T8438] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 486.249244][ T8438] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 486.258838][ T8438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.267274][ T8438] usb 1-1: Product: syz [ 486.271910][ T8438] usb 1-1: Manufacturer: syz [ 486.276778][ T8438] usb 1-1: SerialNumber: syz [ 486.284606][ T8438] usb 1-1: config 0 descriptor?? [ 486.338980][ T92] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 486.416277][ T92] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 486.447317][ T92] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 486.481511][ T92] usb 6-1: Product: syz [ 486.496543][ T92] usb 6-1: Manufacturer: syz [ 486.523299][ T92] usb 6-1: config 0 descriptor?? [ 486.536231][ T5859] Bluetooth: hci0: command 0x0405 tx timeout [ 486.722816][ T30] audit: type=1400 audit(1757008366.046:996): avc: denied { listen } for pid=12371 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 486.818899][ T92] usb 6-1: USB disconnect, device number 21 [ 486.842568][ T30] audit: type=1400 audit(1757008366.046:997): avc: denied { accept } for pid=12371 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 487.500093][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 488.269715][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 488.288137][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 488.298746][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 488.308058][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 488.319993][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 488.393770][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 488.804427][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 488.820056][ T10] usb 5-1: Product: syz [ 488.824237][ T10] usb 5-1: Manufacturer: syz [ 488.921708][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'. [ 488.949678][T12401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1198'. [ 488.990999][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 488.992981][ T92] usb 1-1: USB disconnect, device number 43 [ 488.996228][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 489.078148][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 489.156941][T12411] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 489.158578][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 489.543368][ T30] audit: type=1400 audit(1757008368.806:998): avc: denied { setopt } for pid=12417 comm="syz.2.1201" laddr=fe80::b lport=4 faddr=fe80::42 fport=20006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 489.702990][T12391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.731877][ T92] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 489.783545][ T48] usb 5-1: USB disconnect, device number 20 [ 489.804702][T12421] netlink: 'syz.0.1202': attribute type 8 has an invalid length. [ 489.898854][ T92] usb 3-1: config 9 has an invalid interface number: 88 but max is 1 [ 490.168200][ T92] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 490.187736][ T92] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 490.198204][ T92] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 490.231979][ T92] usb 3-1: config 9 has no interface number 0 [ 490.238093][ T92] usb 3-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 490.281553][ T92] usb 3-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 490.296928][ T92] usb 3-1: config 9 interface 88 altsetting 9 endpoint 0x6 has invalid wMaxPacketSize 0 [ 490.306984][ T92] usb 3-1: config 9 interface 88 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 490.323209][ T92] usb 3-1: config 9 interface 88 has no altsetting 0 [ 490.341601][ T92] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80 [ 490.351524][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.359698][ T92] usb 3-1: Product: syz [ 490.418537][ T92] usb 3-1: Manufacturer: syz [ 490.430756][ T92] usb 3-1: SerialNumber: syz [ 490.665300][T12418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.715622][T12418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.031863][ T30] audit: type=1400 audit(1757008370.366:999): avc: denied { append } for pid=12434 comm="syz.4.1207" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 491.083865][ T12] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.098238][ T92] usb 3-1: USB disconnect, device number 22 [ 491.289085][ T12] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.351159][ T12] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.515959][T12447] FAULT_INJECTION: forcing a failure. [ 491.515959][T12447] name failslab, interval 1, probability 0, space 0, times 0 [ 492.005460][ T12] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.046921][T12447] CPU: 0 UID: 0 PID: 12447 Comm: syz.2.1213 Not tainted syzkaller #0 PREEMPT(full) [ 492.046948][T12447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.046958][T12447] Call Trace: [ 492.046964][T12447] [ 492.046971][T12447] dump_stack_lvl+0x16c/0x1f0 [ 492.046996][T12447] should_fail_ex+0x512/0x640 [ 492.047015][T12447] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 492.047040][T12447] should_failslab+0xc2/0x120 [ 492.047060][T12447] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 492.047081][T12447] ? vfs_parse_fs_string+0xc3/0x150 [ 492.047104][T12447] kmemdup_nul+0x49/0xf0 [ 492.047124][T12447] vfs_parse_fs_string+0xc3/0x150 [ 492.047144][T12447] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 492.047164][T12447] ? kasan_save_track+0x14/0x30 [ 492.047184][T12447] ? legacy_init_fs_context+0x96/0xe0 [ 492.047205][T12447] ? alloc_fs_context+0x59b/0x9c0 [ 492.047230][T12447] path_mount+0x703/0x2000 [ 492.047257][T12447] ? __pfx_path_mount+0x10/0x10 [ 492.047280][T12447] ? kmem_cache_free+0x2d1/0x4d0 [ 492.047297][T12447] ? putname+0x154/0x1a0 [ 492.047323][T12447] ? putname+0x154/0x1a0 [ 492.047347][T12447] ? __x64_sys_mount+0x28d/0x310 [ 492.047366][T12447] __x64_sys_mount+0x28d/0x310 [ 492.047389][T12447] ? __pfx___x64_sys_mount+0x10/0x10 [ 492.047419][T12447] do_syscall_64+0xcd/0x4c0 [ 492.047440][T12447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.047459][T12447] RIP: 0033:0x7f541358ebe9 [ 492.047472][T12447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.047489][T12447] RSP: 002b:00007f54144e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 492.047507][T12447] RAX: ffffffffffffffda RBX: 00007f54137c5fa0 RCX: 00007f541358ebe9 [ 492.047518][T12447] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 492.047528][T12447] RBP: 00007f54144e0090 R08: 00002000000002c0 R09: 0000000000000000 [ 492.047538][T12447] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 492.047548][T12447] R13: 00007f54137c6038 R14: 00007f54137c5fa0 R15: 00007fffcf0417b8 [ 492.047571][T12447] [ 492.260090][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.266181][ T92] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 492.330457][ T30] audit: type=1400 audit(1757008371.646:1000): avc: denied { nlmsg_read } for pid=12441 comm="syz.4.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 492.468664][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 492.570588][ T92] usb 1-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice= 2.c9 [ 492.614211][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.630580][ T92] usb 1-1: Product: syz [ 492.634764][ T92] usb 1-1: Manufacturer: syz [ 492.635958][ T8438] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 492.639361][ T92] usb 1-1: SerialNumber: syz [ 492.673270][ T92] usb 1-1: config 0 descriptor?? [ 492.689311][ T92] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 492.709096][ T92] imon 1-1:0.0: unable to initialize intf0, err -19 [ 492.727491][ T92] imon:imon_probe: failed to initialize context! [ 492.739480][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 492.748829][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 492.756747][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 492.764357][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 492.771912][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 492.779698][ T92] imon 1-1:0.0: unable to register, err -19 [ 492.815967][ T8438] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 492.841404][ T12] bridge_slave_1: left allmulticast mode [ 492.852904][ T8438] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 492.871625][ T12] bridge_slave_1: left promiscuous mode [ 492.877377][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.885681][ T8438] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 492.932890][T12444] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1211'. [ 492.951597][ T8438] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 492.970478][ T8438] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 492.983931][ T8438] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 492.993396][ T8438] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 493.014048][ T12] bridge_slave_0: left allmulticast mode [ 493.019712][ T12] bridge_slave_0: left promiscuous mode [ 493.046435][ T8438] usb 3-1: Product: syz [ 493.046575][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.066551][ T8438] usb 3-1: Manufacturer: syz [ 493.081179][ T8438] cdc_wdm 3-1:1.0: skipping garbage [ 493.087036][ T8438] cdc_wdm 3-1:1.0: skipping garbage [ 493.098816][ T8438] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 493.105530][ T8438] cdc_wdm 3-1:1.0: Unknown control protocol [ 493.370253][T12468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.401344][ T92] usb 3-1: USB disconnect, device number 23 [ 493.834688][T12471] ptrace attach of "./syz-executor exec"[9969] was attempted by "./syz-executor exec"[12471] [ 493.986230][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.997360][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.007670][ T12] bond0 (unregistering): Released all slaves [ 494.669390][ T12] hsr_slave_0: left promiscuous mode [ 494.689902][ T12] hsr_slave_1: left promiscuous mode [ 494.704381][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.720089][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.765745][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.842096][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.895507][ T51] Bluetooth: hci0: command tx timeout [ 495.345837][ T3091] usb 1-1: USB disconnect, device number 44 [ 495.574003][ T12] veth1_macvtap: left promiscuous mode [ 495.579596][ T12] veth0_macvtap: left promiscuous mode [ 495.632778][ T12] veth1_vlan: left promiscuous mode [ 495.660371][ T12] veth0_vlan: left promiscuous mode [ 496.510419][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 496.524023][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 496.536470][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 496.549148][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 496.559403][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.840737][ T3091] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 496.970214][ T5859] Bluetooth: hci0: command tx timeout [ 497.088372][ T3091] usb 3-1: config 0 has an invalid interface number: 41 but max is -1 [ 497.113942][ T3091] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.147489][ T3091] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 497.158835][ T3091] usb 3-1: config 0 has no interface number 0 [ 497.166245][ T3091] usb 3-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 497.179678][ T3091] usb 3-1: config 0 interface 41 has no altsetting 0 [ 497.200087][ T3091] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 497.209158][ T3091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.218996][ T3091] usb 3-1: Product: syz [ 497.224352][ T3091] usb 3-1: Manufacturer: syz [ 497.228973][ T3091] usb 3-1: SerialNumber: syz [ 497.235901][ T3091] usb 3-1: config 0 descriptor?? [ 497.257342][ T3091] dm9601 3-1:0.41: probe with driver dm9601 failed with error -22 [ 497.267596][ T3091] sr9700 3-1:0.41: probe with driver sr9700 failed with error -22 [ 497.395374][ T12] team0 (unregistering): Port device team_slave_1 removed [ 497.457144][ T12] team0 (unregistering): Port device team_slave_0 removed [ 497.806489][T12505] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 497.806489][T12505] The task syz.0.1228 (12505) triggered the difference, watch for misbehavior. [ 497.946502][T12462] chnl_net:caif_netlink_parms(): no params data found [ 498.150928][T12462] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.158267][T12462] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.165975][T12462] bridge_slave_0: entered allmulticast mode [ 498.174312][T12462] bridge_slave_0: entered promiscuous mode [ 498.193804][T12462] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.201217][T12462] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.208450][T12462] bridge_slave_1: entered allmulticast mode [ 498.216310][T12462] bridge_slave_1: entered promiscuous mode [ 498.252874][T12462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.268902][T12462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.302226][T12462] team0: Port device team_slave_0 added [ 498.313700][T12462] team0: Port device team_slave_1 added [ 498.358630][T12462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.366611][T12462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.394254][T12462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.407612][T12462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.414868][T12462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.441210][T12462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.515292][T12462] hsr_slave_0: entered promiscuous mode [ 498.523220][T12462] hsr_slave_1: entered promiscuous mode [ 498.529169][T12462] debugfs: 'hsr0' already exists in 'hsr' [ 498.535899][T12462] Cannot create hsr debugfs directory [ 498.559284][T12492] chnl_net:caif_netlink_parms(): no params data found [ 498.603202][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.690319][ T5859] Bluetooth: hci1: command tx timeout [ 498.833331][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.958924][T12492] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.033231][ T5859] Bluetooth: hci0: command tx timeout [ 499.210109][T12492] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.217314][T12492] bridge_slave_0: entered allmulticast mode [ 499.234466][T12492] bridge_slave_0: entered promiscuous mode [ 499.268800][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.487380][T12492] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.509432][T12492] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.523568][T12492] bridge_slave_1: entered allmulticast mode [ 499.531965][T12492] bridge_slave_1: entered promiscuous mode [ 499.579629][ T92] usb 3-1: USB disconnect, device number 24 [ 499.695188][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.976248][T12531] random: crng reseeded on system resumption [ 500.028653][T12492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.282129][ T30] audit: type=1400 audit(1757008379.606:1001): avc: denied { read } for pid=12530 comm="syz.0.1234" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 500.508655][T12492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.770084][ T5859] Bluetooth: hci1: command tx timeout [ 500.933645][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.993211][T12492] team0: Port device team_slave_0 added [ 501.034303][T12492] team0: Port device team_slave_1 added [ 501.090074][ T5859] Bluetooth: hci0: command tx timeout [ 501.315012][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 501.326421][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 501.335008][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 501.348157][T12536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1237'. [ 501.358630][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 501.369180][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 501.473907][T12492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.486538][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.513527][T12492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.542699][T12492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.549796][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.576191][T12492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.593159][ T12] bridge_slave_1: left allmulticast mode [ 501.598911][ T12] bridge_slave_1: left promiscuous mode [ 501.605297][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.615319][ T12] bridge_slave_0: left allmulticast mode [ 501.621187][ T12] bridge_slave_0: left promiscuous mode [ 501.626938][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.968694][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.979403][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.990117][ T12] bond0 (unregistering): Released all slaves [ 502.067918][T12492] hsr_slave_0: entered promiscuous mode [ 502.089756][T12492] hsr_slave_1: entered promiscuous mode [ 502.105292][T12492] debugfs: 'hsr0' already exists in 'hsr' [ 502.114505][T12492] Cannot create hsr debugfs directory [ 502.624394][T12549] netlink: 'syz.0.1240': attribute type 1 has an invalid length. [ 502.692419][T12550] /dev/sg0: Can't lookup blockdev [ 502.729192][T12549] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1240'. [ 502.851106][ T51] Bluetooth: hci1: command tx timeout [ 502.984321][ T30] audit: type=1400 audit(1757008382.316:1002): avc: denied { write } for pid=12546 comm="syz.4.1239" path="socket:[38884]" dev="sockfs" ino=38884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 503.054014][ T30] audit: type=1400 audit(1757008382.336:1003): avc: denied { setopt } for pid=12546 comm="syz.4.1239" lport=35184 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 503.236508][ T12] hsr_slave_0: left promiscuous mode [ 503.287653][ T12] hsr_slave_1: left promiscuous mode [ 503.307388][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.314988][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.323674][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.331248][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.348930][ T12] veth1_macvtap: left promiscuous mode [ 503.354578][ T12] veth0_macvtap: left promiscuous mode [ 503.360287][ T12] veth1_vlan: left promiscuous mode [ 503.365570][ T12] veth0_vlan: left promiscuous mode [ 503.412577][ T51] Bluetooth: hci2: command tx timeout [ 503.977025][ T12] team0 (unregistering): Port device team_slave_1 removed [ 504.062818][ T12] team0 (unregistering): Port device team_slave_0 removed [ 504.848341][ T51] Bluetooth: hci5: unexpected event for opcode 0x0008 [ 504.859298][T12563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1244'. [ 504.881338][T12539] chnl_net:caif_netlink_parms(): no params data found [ 504.909781][T12462] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 504.944098][ T51] Bluetooth: hci1: command tx timeout [ 505.005588][T12462] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 505.027072][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1244'. [ 505.029852][T12462] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 505.169794][T12462] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 505.276317][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 505.288956][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 505.298771][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 505.317172][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 505.327412][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 505.467792][T12539] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.475123][T12539] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.483596][T12539] bridge_slave_0: entered allmulticast mode [ 505.493280][T12539] bridge_slave_0: entered promiscuous mode [ 505.501113][ T51] Bluetooth: hci2: command tx timeout [ 505.579766][ T30] audit: type=1400 audit(1757008384.906:1004): avc: denied { lock } for pid=12570 comm="syz.4.1247" path="socket:[39981]" dev="sockfs" ino=39981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 505.919297][T12539] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.927243][T12539] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.935026][T12539] bridge_slave_1: entered allmulticast mode [ 505.945172][T12539] bridge_slave_1: entered promiscuous mode [ 505.986791][T12539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.023142][T12539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.099124][T12539] team0: Port device team_slave_0 added [ 506.146935][T12539] team0: Port device team_slave_1 added [ 506.243162][T12539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.250350][T12539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.277309][T12539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.289662][T12539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.297110][T12539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.323526][T12539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.375291][T12568] chnl_net:caif_netlink_parms(): no params data found [ 506.394300][T12492] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 506.416517][T12539] hsr_slave_0: entered promiscuous mode [ 506.422897][T12539] hsr_slave_1: entered promiscuous mode [ 506.428723][T12539] debugfs: 'hsr0' already exists in 'hsr' [ 506.434618][T12539] Cannot create hsr debugfs directory [ 506.457293][T12492] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 506.496021][T12492] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 506.506637][T12492] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 506.520294][ T92] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 506.566725][T12568] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.574582][T12568] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.582122][T12568] bridge_slave_0: entered allmulticast mode [ 506.588781][T12568] bridge_slave_0: entered promiscuous mode [ 506.604306][T12462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.637546][T12568] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.645008][T12568] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.653143][T12568] bridge_slave_1: entered allmulticast mode [ 506.659812][T12568] bridge_slave_1: entered promiscuous mode [ 506.674107][ T92] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 506.682783][ T92] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 506.692490][ T92] usb 5-1: config 0 has no interface number 0 [ 506.698863][ T92] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 506.709252][ T92] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 506.719477][ T92] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 506.729057][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.744946][ T92] usb 5-1: config 0 descriptor?? [ 506.782701][T12568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.794918][T12568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.821387][T12462] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.878481][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.899197][T12568] team0: Port device team_slave_0 added [ 506.948520][T12568] team0: Port device team_slave_1 added [ 506.984604][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.000296][ T92] usb 5-1: USB disconnect, device number 21 [ 507.060561][T12012] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.067641][T12012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.078381][T12568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.086293][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.118892][T12568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.197431][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.217817][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.224922][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.237461][T12568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.247275][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.287014][T12568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.317698][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.412494][ T51] Bluetooth: hci3: command tx timeout [ 507.446543][T12568] hsr_slave_0: entered promiscuous mode [ 507.457399][T12568] hsr_slave_1: entered promiscuous mode [ 507.467840][T12568] debugfs: 'hsr0' already exists in 'hsr' [ 507.476461][T12568] Cannot create hsr debugfs directory [ 507.583334][ T51] Bluetooth: hci2: command tx timeout [ 507.638032][ T12] bridge_slave_1: left allmulticast mode [ 507.664329][ T12] bridge_slave_1: left promiscuous mode [ 507.683032][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.706317][ T12] bridge_slave_0: left allmulticast mode [ 507.712655][ T12] bridge_slave_0: left promiscuous mode [ 507.719731][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.761704][ T12] bridge_slave_1: left allmulticast mode [ 507.768149][ T12] bridge_slave_1: left promiscuous mode [ 507.777325][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.788614][ T12] bridge_slave_0: left allmulticast mode [ 507.794608][ T12] bridge_slave_0: left promiscuous mode [ 507.803685][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.113714][ T12] bond2 (unregistering): (slave gretap1): Releasing active interface [ 508.305291][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.314785][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.324196][ T12] bond0 (unregistering): Released all slaves [ 508.336000][ T12] bond1 (unregistering): Released all slaves [ 508.426841][ T12] bond2 (unregistering): Released all slaves [ 508.695787][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.705732][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.715347][ T12] bond0 (unregistering): Released all slaves [ 508.804379][ T12] bond1 (unregistering): Released all slaves [ 508.967684][ T12] tipc: Disabling bearer [ 508.976059][ T12] tipc: Left network mode [ 509.011623][T12462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.025394][T12492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.104167][T12492] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.214237][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.221984][ T6735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.251668][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.258789][ T6735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.466650][T12539] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 509.491682][ T51] Bluetooth: hci3: command tx timeout [ 509.541050][T12539] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 509.555167][T12539] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 509.639581][T12539] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 509.649399][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 509.660615][ T5859] Bluetooth: hci2: command tx timeout [ 509.660670][T11664] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 509.676089][T11664] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 509.684822][T11664] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 509.695701][T11664] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 509.721890][ T12] hsr_slave_0: left promiscuous mode [ 509.727789][ T12] hsr_slave_1: left promiscuous mode [ 509.736300][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.747691][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 509.755855][ T12] batman_adv: batadv0: Removing interface: team0 [ 509.769000][ T12] hsr_slave_0: left promiscuous mode [ 509.775065][ T12] hsr_slave_1: left promiscuous mode [ 509.781334][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.788692][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.796646][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.804155][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.820787][ T12] veth1_macvtap: left promiscuous mode [ 509.826276][ T12] veth0_macvtap: left promiscuous mode [ 509.831939][ T12] veth1_vlan: left promiscuous mode [ 509.837170][ T12] veth0_vlan: left promiscuous mode [ 510.135963][ T12] team0 (unregistering): Port device team_slave_1 removed [ 510.166013][ T12] team0 (unregistering): Port device team_slave_0 removed [ 510.681814][ T12] team0 (unregistering): Port device team_slave_1 removed [ 510.712527][ T12] team0 (unregistering): Port device team_slave_0 removed [ 510.909618][ T12] team0 (unregistering): Port device dummy0 removed [ 511.062355][T12492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.186978][T12462] veth0_vlan: entered promiscuous mode [ 511.310742][T12462] veth1_vlan: entered promiscuous mode [ 511.442100][T12462] veth0_macvtap: entered promiscuous mode [ 511.451342][T12462] veth1_macvtap: entered promiscuous mode [ 511.522040][T12568] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 511.570787][ T51] Bluetooth: hci3: command tx timeout [ 511.579818][T12568] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 511.602745][T12539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.609532][T12568] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 511.632357][T12568] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 511.655093][T12539] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.663371][T12620] chnl_net:caif_netlink_parms(): no params data found [ 511.678166][T12462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.687627][T12492] veth0_vlan: entered promiscuous mode [ 511.714030][ T12] IPVS: stop unused estimator thread 0... [ 511.730809][ T51] Bluetooth: hci4: command tx timeout [ 511.738746][T12018] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.745862][T12018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.766630][T12462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.802887][T12018] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.810074][T12018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.831997][T12620] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.839713][T12620] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.847468][T12620] bridge_slave_0: entered allmulticast mode [ 511.854926][T12620] bridge_slave_0: entered promiscuous mode [ 511.863577][T12492] veth1_vlan: entered promiscuous mode [ 511.869874][T12018] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.890651][T12620] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.897901][T12620] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.905537][T12620] bridge_slave_1: entered allmulticast mode [ 511.913700][T12620] bridge_slave_1: entered promiscuous mode [ 511.922607][T12018] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.931648][T12018] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.977380][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.013848][T12018] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.044353][T12620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.064067][T12620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.113328][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.183266][T12620] team0: Port device team_slave_0 added [ 512.218454][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.233811][T12620] team0: Port device team_slave_1 added [ 512.256906][T12012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.267667][T12012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.285208][T12620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.292782][T12620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.319596][T12620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.331909][T12620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.338857][T12620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.365343][T12620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.408072][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.483378][T12620] hsr_slave_0: entered promiscuous mode [ 512.489569][T12620] hsr_slave_1: entered promiscuous mode [ 512.499170][T12020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.499591][T12492] veth0_macvtap: entered promiscuous mode [ 512.510997][T12020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.518893][T12492] veth1_macvtap: entered promiscuous mode [ 512.718275][T12568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.735455][T12492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.818868][T12492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.888627][ T12] bridge_slave_1: left allmulticast mode [ 512.895885][ T12] bridge_slave_1: left promiscuous mode [ 512.902144][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.913123][ T12] bridge_slave_0: left allmulticast mode [ 512.918764][ T12] bridge_slave_0: left promiscuous mode [ 512.926582][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.053311][T12659] FAULT_INJECTION: forcing a failure. [ 513.053311][T12659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.067581][T12659] CPU: 0 UID: 0 PID: 12659 Comm: syz.6.1254 Not tainted syzkaller #0 PREEMPT(full) [ 513.067611][T12659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.067622][T12659] Call Trace: [ 513.067628][T12659] [ 513.067635][T12659] dump_stack_lvl+0x16c/0x1f0 [ 513.067662][T12659] should_fail_ex+0x512/0x640 [ 513.067686][T12659] _copy_to_iter+0x29f/0x1710 [ 513.067715][T12659] ? chacha_block_generic+0x211/0x330 [ 513.067737][T12659] ? __pfx__copy_to_iter+0x10/0x10 [ 513.067766][T12659] ? _copy_to_iter+0x15d/0x1710 [ 513.067790][T12659] get_random_bytes_user+0x17f/0x3c0 [ 513.067815][T12659] ? __pfx_get_random_bytes_user+0x10/0x10 [ 513.067836][T12659] ? lockdep_hardirqs_on+0x7c/0x110 [ 513.067861][T12659] ? write_comp_data+0x11/0x90 [ 513.067879][T12659] ? import_ubuf+0x1b6/0x220 [ 513.067901][T12659] __x64_sys_getrandom+0x183/0x290 [ 513.067923][T12659] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 513.067952][T12659] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 513.067978][T12659] do_syscall_64+0xcd/0x4c0 [ 513.068000][T12659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.068017][T12659] RIP: 0033:0x7f18ddb8ebe9 [ 513.068032][T12659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.068049][T12659] RSP: 002b:00007f18de954038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 513.068066][T12659] RAX: ffffffffffffffda RBX: 00007f18dddc6090 RCX: 00007f18ddb8ebe9 [ 513.068077][T12659] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 513.068085][T12659] RBP: 00007f18de954090 R08: 0000000000000000 R09: 0000000000000000 [ 513.068094][T12659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 513.068103][T12659] R13: 00007f18dddc6128 R14: 00007f18dddc6090 R15: 00007ffc6ec111a8 [ 513.068123][T12659] [ 513.574680][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.587385][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.603855][ T12] bond0 (unregistering): Released all slaves [ 513.661785][ T51] Bluetooth: hci3: command tx timeout [ 513.748105][ T12] bond1 (unregistering): Released all slaves [ 513.767379][T12568] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.780601][ T3570] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.810094][ T51] Bluetooth: hci4: command tx timeout [ 513.816135][ T3570] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.826737][ T3570] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.918719][ T2908] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.925836][ T2908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.968976][ T3570] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.026151][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.033287][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.078537][T12539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.237408][ T12] hsr_slave_0: left promiscuous mode [ 514.251470][ T12] hsr_slave_1: left promiscuous mode [ 514.264211][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.271756][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.280567][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.288482][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.317542][ T12] veth1_macvtap: left promiscuous mode [ 514.323420][ T12] veth0_macvtap: left promiscuous mode [ 514.329230][ T12] veth1_vlan: left promiscuous mode [ 514.334633][ T12] veth0_vlan: left promiscuous mode [ 514.859190][ T12] team0 (unregistering): Port device team_slave_1 removed [ 514.926635][ T12] team0 (unregistering): Port device team_slave_0 removed [ 514.995092][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1256'. [ 515.488258][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.519170][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.681459][ T6735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.689302][ T6735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.900649][ T51] Bluetooth: hci4: command tx timeout [ 516.674533][T12539] veth0_vlan: entered promiscuous mode [ 516.723348][T12539] veth1_vlan: entered promiscuous mode [ 516.764901][T12620] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 516.826862][T12539] veth0_macvtap: entered promiscuous mode [ 516.872589][T12620] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 516.909610][T12539] veth1_macvtap: entered promiscuous mode [ 516.938745][T12620] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 516.975416][T12620] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 517.003650][T12568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.015788][T12539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.049135][T12539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.137480][T12020] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.150279][T12699] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1261'. [ 517.166397][T12568] veth0_vlan: entered promiscuous mode [ 517.198625][T12020] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.211376][T12020] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.242530][T12020] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.364158][T12012] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.434513][T12568] veth1_vlan: entered promiscuous mode [ 517.883477][T12699] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.930859][T11664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 517.940888][T11664] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 517.951837][T11664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 517.961577][T11664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 517.972698][T11664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 517.980054][T11664] Bluetooth: hci4: command tx timeout [ 518.018408][T12620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.051231][T12012] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.086685][T12020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.122954][T12020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.173155][T12699] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.198876][T12012] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.252823][T12699] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.282273][ T6734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.291747][ T6734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.312654][T12012] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.329013][T12620] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.356927][T12699] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.379288][T12568] veth0_macvtap: entered promiscuous mode [ 518.405247][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.412370][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.425419][T12568] veth1_macvtap: entered promiscuous mode [ 518.445161][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.452295][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.540628][T12568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.902666][T12568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.974093][ T49] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.029192][ T49] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.041062][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.094053][T12012] bridge_slave_1: left allmulticast mode [ 519.110404][T12012] bridge_slave_1: left promiscuous mode [ 519.121054][T12012] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.156832][T12012] bridge_slave_0: left allmulticast mode [ 519.165828][T12012] bridge_slave_0: left promiscuous mode [ 519.178543][T12012] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.056847][ T5859] Bluetooth: hci0: command tx timeout [ 520.672972][T12012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.687030][T12012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.698380][T12012] bond0 (unregistering): Released all slaves [ 520.724012][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.819191][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.835594][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.881881][T12721] debugfs: 'ptm0' already exists in 'caif_serial' [ 520.997760][ T49] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.232928][T12018] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.380704][T12728] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1269'. [ 522.080340][ T92] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 522.130674][ T5859] Bluetooth: hci0: command tx timeout [ 522.230447][ T92] usb 8-1: Using ep0 maxpacket: 8 [ 522.251669][ T92] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 522.272762][ T92] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 522.282949][ T92] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 522.294769][ T92] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.322786][ T92] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 522.351643][ T92] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.373516][T12012] hsr_slave_0: left promiscuous mode [ 522.386026][T12012] hsr_slave_1: left promiscuous mode [ 522.404856][T12012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.414041][T12012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.428072][T12012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.435893][T12012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.445981][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1271'. [ 522.455854][T12741] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1271'. [ 522.462981][T12012] veth1_macvtap: left promiscuous mode [ 522.470463][T12012] veth0_macvtap: left promiscuous mode [ 522.476253][T12012] veth1_vlan: left promiscuous mode [ 522.481911][T12012] veth0_vlan: left promiscuous mode [ 522.585470][T12743] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.1271'. [ 522.712159][ T92] usb 8-1: GET_CAPABILITIES returned 0 [ 522.769574][ T92] usbtmc 8-1:16.0: can't read capabilities [ 522.920803][ T8438] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 523.052706][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 523.063154][T12744] usbtmc 8-1:16.0: Unable to send data, error -71 [ 523.102818][ T8438] usb 10-1: not running at top speed; connect to a high speed hub [ 523.112826][ T8438] usb 10-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 523.124030][ T8438] usb 10-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.137624][ T8438] usb 10-1: config 1 interface 0 has no altsetting 0 [ 523.147096][ T8438] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 523.156362][ T8438] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.164806][ T8438] usb 10-1: Product: й [ 523.168989][ T8438] usb 10-1: Manufacturer: ᐊ [ 523.177416][ T8438] usb 10-1: SerialNumber: syz [ 523.426253][T12012] team0 (unregistering): Port device team_slave_1 removed [ 523.475507][T12012] team0 (unregistering): Port device team_slave_0 removed [ 523.885393][T12702] chnl_net:caif_netlink_parms(): no params data found [ 523.904931][T12741] geneve2: entered promiscuous mode [ 523.911177][T12741] geneve2: entered allmulticast mode [ 523.936777][ T8438] usb 10-1: bad CDC descriptors [ 523.945963][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.954811][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.964383][ T8438] usb 10-1: USB disconnect, device number 5 [ 524.037007][T12018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.049994][T12018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.054880][T12620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.207183][T12702] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.215075][T12702] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.223314][T12702] bridge_slave_0: entered allmulticast mode [ 524.230049][T12702] bridge_slave_0: entered promiscuous mode [ 524.342202][T12702] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.349358][T12702] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.356671][T12702] bridge_slave_1: entered allmulticast mode [ 524.368738][T12702] bridge_slave_1: entered promiscuous mode [ 524.875703][T12702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.892011][T12702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.906503][ T8438] usb 8-1: USB disconnect, device number 3 [ 525.036245][T12702] team0: Port device team_slave_0 added [ 525.092243][T12702] team0: Port device team_slave_1 added [ 526.492369][T12702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.499389][T12702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.562892][T12702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.635923][T12702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.730554][T12702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.771456][T12702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.823868][T12702] hsr_slave_0: entered promiscuous mode [ 526.843521][T12702] hsr_slave_1: entered promiscuous mode [ 526.855497][T12702] debugfs: 'hsr0' already exists in 'hsr' [ 526.872119][T12702] Cannot create hsr debugfs directory [ 526.920626][T12620] veth0_vlan: entered promiscuous mode [ 526.957778][T12620] veth1_vlan: entered promiscuous mode [ 527.053259][T12620] veth0_macvtap: entered promiscuous mode [ 527.083138][T12769] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=12769 comm=syz.7.1274 [ 527.118044][T12620] veth1_macvtap: entered promiscuous mode [ 527.151829][T12620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.162327][T12620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.266974][ T6734] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.315162][ T6734] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.344531][ T6734] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.394374][ T6734] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.536374][ T6734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.553145][ T6734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.582615][T12775] fuse: Unknown parameter 'grnup_id' [ 527.722913][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.740771][T12702] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 527.752255][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.766438][T12702] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 527.843015][T12702] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 527.906710][T12702] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 528.353097][T12702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.441125][T12702] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.812084][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.819213][ T6735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.885781][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.892967][ T6735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.263483][T12798] block nbd0: server does not support multiple connections per device. [ 529.277049][T12798] block nbd0: shutting down sockets [ 530.101383][T12702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.200144][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 530.361922][ T10] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 530.393451][ T10] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 530.406956][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 530.418499][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 530.434921][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 530.455730][ T10] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 530.467516][ T10] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 530.477591][ T10] usb 10-1: Product: syz [ 530.484413][ T10] usb 10-1: Manufacturer: syz [ 530.506917][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 530.514580][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 530.534262][ T10] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 530.541167][T12702] veth0_vlan: entered promiscuous mode [ 530.557874][ T10] cdc_wdm 10-1:1.0: Unknown control protocol [ 530.561292][T12702] veth1_vlan: entered promiscuous mode [ 530.637963][T12702] veth0_macvtap: entered promiscuous mode [ 530.648100][T12702] veth1_macvtap: entered promiscuous mode [ 530.698499][T12702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.745642][T12702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.765447][T12814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.787704][ T2908] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.804440][ T2908] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.806899][ T6021] usb 10-1: USB disconnect, device number 6 [ 530.905571][ T2908] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.922000][ T2908] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.963581][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.994773][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.343261][ T6734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.373189][ T6734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.379041][T12835] cgroup: No subsys list or none specified [ 532.475277][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 532.648979][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 533.420247][ T10] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 533.429331][ T10] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 533.438273][ T10] usb 8-1: Product: syz [ 533.444851][ T10] usb 8-1: Manufacturer: syz [ 533.463833][ T10] usb 8-1: SerialNumber: syz [ 533.516362][ T10] usb 8-1: config 0 descriptor?? [ 533.710449][ T5893] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 533.820072][T12849] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1290'. [ 534.370108][ T5893] usb 9-1: Using ep0 maxpacket: 8 [ 534.434492][ T5893] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 534.450063][ T5893] usb 9-1: config 0 has no interface number 0 [ 534.466774][ T5893] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 534.481410][ T5893] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 534.493213][ T5893] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 534.504508][ T5893] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 534.517752][ T5893] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 534.526851][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.647659][ T5893] usb 9-1: config 0 descriptor?? [ 534.673296][ T5893] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 535.157895][ T48] usb 9-1: USB disconnect, device number 13 [ 535.157905][ C0] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 535.323017][ T6021] usb 8-1: USB disconnect, device number 4 [ 535.374345][ T8053] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 535.436917][ T5859] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 535.437869][ T48] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 535.446288][ T5859] Bluetooth: hci1: Injecting HCI hardware error event [ 535.454907][T12871] ldusb: No device or device unplugged -19 [ 535.461522][ T5859] Bluetooth: hci1: hardware error 0x00 [ 535.643989][T12892] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1302'. [ 535.671638][ T8053] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 535.819024][ T8053] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 535.862746][ T8053] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 535.872055][ T8053] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 535.886301][ T8053] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 535.908421][ T8053] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 535.925353][ T8053] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 535.933699][ T8053] usb 6-1: Product: syz [ 535.990901][ T8053] usb 6-1: Manufacturer: syz [ 536.096698][ T8053] cdc_wdm 6-1:1.0: skipping garbage [ 536.104308][ T8053] cdc_wdm 6-1:1.0: skipping garbage [ 536.204955][ T8053] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 536.222747][ T8053] cdc_wdm 6-1:1.0: Unknown control protocol [ 536.302261][T12882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.313171][ T8053] usb 6-1: USB disconnect, device number 22 [ 536.404809][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 537.125128][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 537.267562][ T10] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 537.430867][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 537.514520][ T10] usb 8-1: config 0 has no interface number 0 [ 537.532979][T12914] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.1308'. [ 537.730097][ T5859] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 537.757396][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 537.775533][ T10] usb 8-1: config 0 has no interface number 0 [ 537.790552][ T8053] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 537.825435][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 537.839422][ T10] usb 8-1: config 0 has no interface number 0 [ 537.876226][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 537.896832][ T10] usb 8-1: config 0 has no interface number 0 [ 537.943210][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 537.950115][ T8053] usb 6-1: Using ep0 maxpacket: 8 [ 537.973860][ T10] usb 8-1: config 0 has no interface number 0 [ 537.973955][ T8053] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 537.991774][ T48] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 538.000997][ T8053] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 538.024546][ T8053] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 538.024559][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 538.024627][ T8053] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.048900][ T10] usb 8-1: config 0 has no interface number 0 [ 538.058772][ T8053] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 538.068532][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 538.073590][ T8053] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.122360][ T10] usb 8-1: config 0 has no interface number 0 [ 538.147091][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 538.150298][ T48] usb 9-1: Using ep0 maxpacket: 16 [ 538.176816][ T48] usb 9-1: unable to get BOS descriptor or descriptor too short [ 538.187325][ T48] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 538.192236][ T10] usb 8-1: config 0 has no interface number 0 [ 538.201304][ T5901] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 538.214853][ T48] usb 9-1: can't read configurations, error -71 [ 538.273330][ T10] usb 8-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 538.306635][ T8053] usb 6-1: GET_CAPABILITIES returned 0 [ 538.309808][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.322738][ T8053] usbtmc 6-1:16.0: can't read capabilities [ 538.340584][ T10] usb 8-1: Product: syz [ 538.346946][ T10] usb 8-1: Manufacturer: syz [ 538.363899][ T10] usb 8-1: SerialNumber: syz [ 538.372750][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 538.380981][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.405182][ T10] usb 8-1: config 0 descriptor?? [ 538.418496][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.439789][ T10] etas_es58x 8-1:0.2: Starting syz syz (Serial Number syz) [ 538.458012][ T5901] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 538.467967][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.484006][ T5901] usb 4-1: config 0 descriptor?? [ 538.574461][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 538.583902][T12928] usbtmc 6-1:16.0: Unable to send data, error -71 [ 538.658999][ T10] etas_es58x 8-1:0.2: could not parse product info: '424242424242' [ 538.672606][ T48] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 538.842465][ T48] usb 9-1: Using ep0 maxpacket: 16 [ 538.872884][ T48] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 538.918161][ T48] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 538.955667][ T48] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 538.968785][ T48] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.986384][ T5901] ft260 0003:0403:6030.0008: unknown main item tag 0x7 [ 539.000170][ T48] usb 9-1: Product: syz [ 539.004430][ T48] usb 9-1: Manufacturer: syz [ 539.015055][ T48] usb 9-1: SerialNumber: syz [ 539.039701][ T48] usb 9-1: config 0 descriptor?? [ 539.051903][T12899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.068590][ T48] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 539.083773][ T48] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 539.091814][T12899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.103258][ T5901] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 539.163665][ T8053] usb 8-1: USB disconnect, device number 5 [ 539.172408][ T8053] etas_es58x 8-1:0.2: Disconnecting syz syz [ 539.317182][ T5901] ft260 0003:0403:6030.0008: failed to retrieve system status [ 539.332853][ T5901] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -32 [ 539.615993][ T6735] Bluetooth: Error in BCSP hdr checksum [ 539.714014][ T48] em28xx 9-1:0.0: chip ID is em28174 [ 539.863671][ T49] Bluetooth: Error in BCSP hdr checksum [ 540.029599][T12935] FAULT_INJECTION: forcing a failure. [ 540.029599][T12935] name failslab, interval 1, probability 0, space 0, times 0 [ 540.046806][T12935] CPU: 1 UID: 0 PID: 12935 Comm: syz.9.1315 Not tainted syzkaller #0 PREEMPT(full) [ 540.046832][T12935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.046843][T12935] Call Trace: [ 540.046849][T12935] [ 540.046856][T12935] dump_stack_lvl+0x16c/0x1f0 [ 540.046881][T12935] should_fail_ex+0x512/0x640 [ 540.046901][T12935] ? __kmalloc_noprof+0xbf/0x510 [ 540.046921][T12935] ? rfkill_alloc+0xac/0x330 [ 540.046943][T12935] should_failslab+0xc2/0x120 [ 540.046964][T12935] __kmalloc_noprof+0xd2/0x510 [ 540.046983][T12935] ? lockdep_init_map_type+0x5c/0x280 [ 540.047004][T12935] rfkill_alloc+0xac/0x330 [ 540.047030][T12935] wiphy_new_nm+0x136a/0x2190 [ 540.047051][T12935] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 540.047071][T12935] ? __pfx_mac80211_hwsim_change_chanctx+0x10/0x10 [ 540.047090][T12935] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 540.047110][T12935] ieee80211_alloc_hw_nm+0x495/0x2260 [ 540.047131][T12935] ? __local_bh_enable_ip+0xa4/0x120 [ 540.047158][T12935] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 540.047194][T12935] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 540.047218][T12935] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 540.047250][T12935] hwsim_new_radio_nl+0xb51/0x12c0 [ 540.047278][T12935] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 540.047310][T12935] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 540.047337][T12935] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 540.047367][T12935] genl_family_rcv_msg_doit+0x209/0x2f0 [ 540.047394][T12935] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 540.047427][T12935] ? bpf_lsm_capable+0x9/0x10 [ 540.047452][T12935] ? security_capable+0x7e/0x260 [ 540.047473][T12935] ? ns_capable+0xd7/0x110 [ 540.047499][T12935] genl_rcv_msg+0x55c/0x800 [ 540.047527][T12935] ? __pfx_genl_rcv_msg+0x10/0x10 [ 540.047551][T12935] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 540.047585][T12935] netlink_rcv_skb+0x158/0x420 [ 540.047606][T12935] ? __pfx_genl_rcv_msg+0x10/0x10 [ 540.047631][T12935] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 540.047662][T12935] ? netlink_deliver_tap+0x1ae/0xd30 [ 540.047686][T12935] genl_rcv+0x28/0x40 [ 540.047715][T12935] netlink_unicast+0x5a7/0x870 [ 540.047739][T12935] ? __pfx_netlink_unicast+0x10/0x10 [ 540.047760][T12935] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 540.047788][T12935] netlink_sendmsg+0x8d1/0xdd0 [ 540.047814][T12935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.047845][T12935] ____sys_sendmsg+0xa95/0xc70 [ 540.047871][T12935] ? copy_msghdr_from_user+0x10a/0x160 [ 540.047890][T12935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.047927][T12935] ___sys_sendmsg+0x134/0x1d0 [ 540.047949][T12935] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.048000][T12935] __sys_sendmsg+0x16d/0x220 [ 540.048021][T12935] ? __pfx___sys_sendmsg+0x10/0x10 [ 540.048058][T12935] do_syscall_64+0xcd/0x4c0 [ 540.048081][T12935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.048099][T12935] RIP: 0033:0x7f92a7d8ebe9 [ 540.048113][T12935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.048130][T12935] RSP: 002b:00007f92a8cb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.048148][T12935] RAX: ffffffffffffffda RBX: 00007f92a7fc5fa0 RCX: 00007f92a7d8ebe9 [ 540.048159][T12935] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 540.048169][T12935] RBP: 00007f92a8cb4090 R08: 0000000000000000 R09: 0000000000000000 [ 540.048179][T12935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.048189][T12935] R13: 00007f92a7fc6038 R14: 00007f92a7fc5fa0 R15: 00007ffc52642b58 [ 540.048214][T12935] [ 540.423413][T12018] Bluetooth: Error in BCSP hdr checksum [ 540.486674][T12938] IPVS: sed: FWM 3 0x00000003 - no destination available [ 540.487545][ T48] usb 6-1: USB disconnect, device number 23 [ 540.508220][ T10] IPVS: starting estimator thread 0... [ 540.514418][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 540.555247][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1316'. [ 540.573349][T12938] openvswitch: netlink: Missing key (keys=40, expected=100) [ 540.626767][T12938] syzkaller1: entered promiscuous mode [ 540.653317][T12938] syzkaller1: entered allmulticast mode [ 540.660221][T12939] IPVS: using max 54 ests per chain, 129600 per kthread [ 540.691386][T12018] Bluetooth: Error in BCSP hdr checksum [ 540.848749][T12949] smc: net device bond0 applied user defined pnetid SYZ2 [ 540.910561][T12950] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1318'. [ 540.977207][ T998] Bluetooth: Error in BCSP hdr checksum [ 541.347864][T11664] Bluetooth: hci5: command 0x1003 tx timeout [ 541.370131][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 541.421334][T12018] Bluetooth: Error in BCSP hdr checksum [ 541.477669][ T5893] usb 9-1: USB disconnect, device number 15 [ 541.493029][ T5893] em28xx 9-1:0.0: Disconnecting em28xx [ 541.511782][ T5893] em28xx 9-1:0.0: Freeing device [ 541.544125][ T8053] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 541.660083][ T6021] usb 4-1: USB disconnect, device number 8 [ 541.818076][ T8053] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 542.017469][ T8053] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.042205][ T8053] usb 8-1: config 0 descriptor?? [ 543.121361][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880560d4800: rx timeout, send abort [ 543.143730][ T30] audit: type=1400 audit(1757008422.476:1005): avc: denied { read } for pid=5202 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 543.286501][ T30] audit: type=1400 audit(1757008422.476:1006): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.308241][ T30] audit: type=1400 audit(1757008422.476:1007): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.352141][T12950] smc: removing net device bond0 with user defined pnetid SYZ2 [ 543.525083][ T30] audit: type=1400 audit(1757008422.476:1008): avc: denied { add_name } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.631494][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880560d4800: abort rx timeout. Force session deactivation [ 543.924269][ T30] audit: type=1400 audit(1757008422.476:1009): avc: denied { create } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 543.945124][ T30] audit: type=1400 audit(1757008422.476:1010): avc: denied { append open } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 543.975396][ T30] audit: type=1400 audit(1757008422.476:1011): avc: denied { getattr } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 543.980365][T12981] FAULT_INJECTION: forcing a failure. [ 543.980365][T12981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 544.043037][T12950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.093115][T12950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.103987][T12981] CPU: 0 UID: 0 PID: 12981 Comm: syz.9.1327 Not tainted syzkaller #0 PREEMPT(full) [ 544.104011][T12981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 544.104022][T12981] Call Trace: [ 544.104027][T12981] [ 544.104034][T12981] dump_stack_lvl+0x16c/0x1f0 [ 544.104059][T12981] should_fail_ex+0x512/0x640 [ 544.104083][T12981] should_fail_alloc_page+0xe7/0x130 [ 544.104106][T12981] prepare_alloc_pages+0x3c2/0x610 [ 544.104133][T12981] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 544.104152][T12981] ? copy_splice_read+0x1a8/0xc20 [ 544.104169][T12981] ? stack_trace_save+0x8e/0xc0 [ 544.104192][T12981] ? __pfx_stack_trace_save+0x10/0x10 [ 544.104213][T12981] ? stack_depot_save_flags+0x29/0x9c0 [ 544.104233][T12981] ? do_raw_spin_unlock+0x172/0x230 [ 544.104253][T12981] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 544.104270][T12981] ? kasan_save_stack+0x33/0x60 [ 544.104286][T12981] ? __kasan_kmalloc+0xaa/0xb0 [ 544.104300][T12981] ? copy_splice_read+0x1a8/0xc20 [ 544.104315][T12981] ? do_splice_read+0x282/0x370 [ 544.104328][T12981] ? splice_direct_to_actor+0x2a1/0xa30 [ 544.104344][T12981] ? do_splice_direct+0x174/0x240 [ 544.104359][T12981] ? do_sendfile+0xb06/0xe50 [ 544.104374][T12981] ? __x64_sys_sendfile64+0x1d8/0x220 [ 544.104393][T12981] ? do_syscall_64+0xcd/0x4c0 [ 544.104427][T12981] alloc_pages_bulk_noprof+0x71c/0x1410 [ 544.104450][T12981] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 544.104473][T12981] ? trace_kmalloc+0x2b/0xd0 [ 544.104492][T12981] ? __kmalloc_noprof+0x242/0x510 [ 544.104514][T12981] copy_splice_read+0x1e1/0xc20 [ 544.104537][T12981] ? __pfx_copy_splice_read+0x10/0x10 [ 544.104560][T12981] ? lockdep_init_map_type+0x5c/0x280 [ 544.104577][T12981] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 544.104596][T12981] ? __pfx_copy_splice_read+0x10/0x10 [ 544.104612][T12981] do_splice_read+0x282/0x370 [ 544.104636][T12981] splice_direct_to_actor+0x2a1/0xa30 [ 544.104656][T12981] ? __pfx_direct_splice_actor+0x10/0x10 [ 544.104679][T12981] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 544.104698][T12981] ? __pfx_file_has_perm+0x10/0x10 [ 544.104723][T12981] do_splice_direct+0x174/0x240 [ 544.104741][T12981] ? __pfx_do_splice_direct+0x10/0x10 [ 544.104758][T12981] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 544.104776][T12981] ? bpf_lsm_file_permission+0x9/0x10 [ 544.104797][T12981] ? security_file_permission+0x71/0x210 [ 544.104823][T12981] ? rw_verify_area+0xcf/0x6c0 [ 544.104849][T12981] do_sendfile+0xb06/0xe50 [ 544.104868][T12981] ? __pfx_do_sendfile+0x10/0x10 [ 544.104885][T12981] ? __fget_files+0x20e/0x3c0 [ 544.104909][T12981] __x64_sys_sendfile64+0x1d8/0x220 [ 544.104930][T12981] ? ksys_write+0x1ac/0x250 [ 544.104946][T12981] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 544.104975][T12981] do_syscall_64+0xcd/0x4c0 [ 544.104996][T12981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.105014][T12981] RIP: 0033:0x7f92a7d8ebe9 [ 544.105029][T12981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.105045][T12981] RSP: 002b:00007f92a8cb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 544.105062][T12981] RAX: ffffffffffffffda RBX: 00007f92a7fc5fa0 RCX: 00007f92a7d8ebe9 [ 544.105074][T12981] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 544.105084][T12981] RBP: 00007f92a8cb4090 R08: 0000000000000000 R09: 0000000000000000 [ 544.105094][T12981] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000001 [ 544.105103][T12981] R13: 00007f92a7fc6038 R14: 00007f92a7fc5fa0 R15: 00007ffc52642b58 [ 544.105126][T12981] [ 544.457300][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.578750][T12950] bond0 (unregistering): Released all slaves [ 545.017721][ T8053] usb 8-1: string descriptor 0 read error: -71 [ 545.034254][ T8053] usb 8-1: USB disconnect, device number 6 [ 545.283498][T13000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.506361][T13009] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 545.518460][T13009] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 545.526873][T13009] CPU: 0 UID: 0 PID: 13009 Comm: syz.3.1335 Not tainted syzkaller #0 PREEMPT(full) [ 545.536237][T13009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 545.546288][T13009] RIP: 0010:h5_recv+0x104/0x950 [ 545.551176][T13009] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 81 a9 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 545.570765][T13009] RSP: 0018:ffffc900035b7c00 EFLAGS: 00010293 [ 545.576812][T13009] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887ae46a [ 545.584764][T13009] RDX: ffff888074d7c880 RSI: ffffffff887ae4af RDI: 0000000000000005 [ 545.592714][T13009] RBP: ffffc900035b7d88 R08: 0000000000000005 R09: 0000000000000000 [ 545.600663][T13009] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 545.608613][T13009] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb47c20 [ 545.616563][T13009] FS: 00007f1bdc7d56c0(0000) GS:ffff8881246b8000(0000) knlGS:0000000000000000 [ 545.625477][T13009] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.632058][T13009] CR2: 00007f1bdc7d4f98 CR3: 000000005e3b7000 CR4: 00000000003526f0 [ 545.640009][T13009] Call Trace: [ 545.643270][T13009] [ 545.646180][T13009] ? __pfx_h5_recv+0x10/0x10 [ 545.650771][T13009] hci_uart_tty_receive+0x251/0x7e0 [ 545.655977][T13009] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 545.661700][T13009] tty_ioctl+0x580/0x1680 [ 545.666015][T13009] ? __pfx_tty_ioctl+0x10/0x10 [ 545.670760][T13009] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 545.677598][T13009] ? hook_file_ioctl_common+0x145/0x410 [ 545.683124][T13009] ? selinux_file_ioctl+0x180/0x270 [ 545.688308][T13009] ? selinux_file_ioctl+0xb4/0x270 [ 545.693427][T13009] ? __pfx_tty_ioctl+0x10/0x10 [ 545.698187][T13009] __x64_sys_ioctl+0x18b/0x210 [ 545.702939][T13009] do_syscall_64+0xcd/0x4c0 [ 545.707425][T13009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.713298][T13009] RIP: 0033:0x7f1bde58ebe9 [ 545.717695][T13009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.737288][T13009] RSP: 002b:00007f1bdc7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.745678][T13009] RAX: ffffffffffffffda RBX: 00007f1bde7c6180 RCX: 00007f1bde58ebe9 [ 545.753628][T13009] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000006 [ 545.761597][T13009] RBP: 00007f1bde611e19 R08: 0000000000000000 R09: 0000000000000000 [ 545.769546][T13009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.777504][T13009] R13: 00007f1bde7c6218 R14: 00007f1bde7c6180 R15: 00007fff472a33a8 [ 545.785460][T13009] [ 545.788459][T13009] Modules linked in: [ 545.792408][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.800012][T13009] ---[ end trace 0000000000000000 ]--- [ 545.940538][T13009] RIP: 0010:h5_recv+0x104/0x950 [ 545.960736][T13009] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 81 a9 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 546.079631][T13009] RSP: 0018:ffffc900035b7c00 EFLAGS: 00010293 [ 546.112079][T13009] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887ae46a [ 546.137267][T13009] RDX: ffff888074d7c880 RSI: ffffffff887ae4af RDI: 0000000000000005 [ 546.165403][T13009] RBP: ffffc900035b7d88 R08: 0000000000000005 R09: 0000000000000000 [ 546.184650][T13009] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 546.194078][T13009] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb47c20 [ 546.202441][T13009] FS: 00007f1bdc7d56c0(0000) GS:ffff8881247b8000(0000) knlGS:0000000000000000 [ 546.213341][T13009] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.220156][ T5893] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 546.228298][T13009] CR2: 0000200000017000 CR3: 000000005e3b7000 CR4: 00000000003526f0 [ 546.238323][T13009] Kernel panic - not syncing: Fatal exception [ 546.244570][T13009] Kernel Offset: disabled [ 546.248866][T13009] Rebooting in 86400 seconds..